StackRadar

CVE-2025-3576

Medium

Advisory

Published 15 Apr 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,559
of 17,787 indexed, latest versions
Container images
1,691
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: krb5 security update

Carried by container images the latest versions of 1,559 of 17,787 indexed charts deploy, on 1,691 images.

Affected packageAffected versionsFixed inImages
krb5deb1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+40 more1.12+dfsg-2ubuntu5.4+esm7, 1.13.2+dfsg-5ubuntu2.2+esm7, 1.16-2ubuntu0.4+esm5, 1.17-6ubuntu4.11+4 more1,447
krb5rpm1.16.1-22.el8, 1.17-9.el8, 1.17-18.el8, 1.17-19.el8_2+25 more0:1.17-19.el8_2.3, 0:1.18.2-9.el8_4.3, 0:1.18.2-16.el8_6.4, 0:1.18.2-26.el8_8.5+5 more244
OSV records
DEBIAN-CVE-2025-3576RHSA-2025:13664RHSA-2025:13777RHSA-2025:15001RHSA-2025:15002RHSA-2025:15003RHSA-2025:15004RHSA-2025:8411RHSA-2025:9430RLSA-2025:8411RLSA-2025:9430UBUNTU-CVE-2025-3576DLA-4195-1SUSE-SU-2025:3699-1
Also known as
USN-7542-1

Charts affected

1,559 by stars
ChartLatestAffected imagesRadar Score
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

15,345
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

7,940
veleromesosphere3.2.51 of 1See more

velero mesosphere 3.2.5

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

1,871
kubecostmesosphere-stable0.37.52 of 9See more

kubecost mesosphere-stable 0.37.5

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

17,755
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

2,635
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
krb5@1.18.2-30.el8_10
0:1.18.2-32.el8_10

Open the chart page →

3,794
keycloak-operatornewsaktuell0.1.71 of 1See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4

Open the chart page →

5,066
kobotoolboxone-acre-fundVerified publisher0.7.43 of 9See more

kobotoolbox one-acre-fund 0.7.4

3 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
kobotoolbox/kpi:2.022.24dbcacc01bccd4
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
library/nginx:1.212bcabc23b454
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

18,518
opentelemetry-ebpfopentelemetry-helmVerified publisher0.1.74 of 4See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

4 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
otel/opentelemetry-ebpf-k8s-relay:v0.10.20980d0ab28bf
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
otel/opentelemetry-ebpf-k8s-watcher:v0.10.263a0d1dd2cac
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
otel/opentelemetry-ebpf-kernel-collector:v0.10.269e19991e328
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
otel/opentelemetry-ebpf-reducer:v0.10.26c49acfbc6f1
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

2,573
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

4,045
oesopsmxVerified publisher4.0.322 of 25See more

oes opsmx 4.0.32

2 of the 25 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
krb5@1.18.2-8.3.el8_4
0:1.18.2-9.el8_4.3

Open the chart page →

107,899
ipmi-exporterpnnl-miscscripts0.1.151 of 1See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
krb5@1.18.2-26.el8
0:1.18.2-32.el8_10

Open the chart page →

2,994
proxysqlproxysql-cluster1.7.01 of 1See more

proxysql proxysql-cluster 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
proxysql/proxysql:2.3.08d710e80c77b
krb5@1.18.3-6
1.18.3-6+deb11u7

Open the chart page →

989
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

5,079
repoflowrepoflow-helm-public0.9.12 of 8See more

repoflow repoflow-helm-public 0.9.1

2 of the 8 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
krb5@1.17-6ubuntu4.6
1.17-6ubuntu4.11
library/postgres:16.24aea012537ed
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

13,615
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

24,549
soketisoketi2.0.01 of 1See more

soketi soketi 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/soketi/soketi:1.6-16-debian713223456cf1
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

1,636
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
krb5@1.17-6ubuntu4.4
1.17-6ubuntu4.11

Open the chart page →

15,525
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

7,064
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.266 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

6 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/postgresql:16.0.0-debian-11-r3b8a21df9b747
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/redis:7.2.1-debian-11-r0fa288394f402
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
thingsboard/tb-node:3.6.0f40a542832c4
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
thingsboard/tb-web-ui:3.6.0d388378062cc
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

14,568
feedbacksystemthm-mni-iiVerified publisher0.47.15 of 10See more

feedbacksystem thm-mni-ii 0.47.1

5 of the 10 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/mysql:8.0.35-debian-11-r2be03e8ea6129
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
thmmniii/fbs-core:v1.27.15438517d9fc2
krb5@1.19.2-2
1.19.2-2ubuntu0.7

Open the chart page →

28,579
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.7

Open the chart page →

10,355
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

18,149
roundcubevolker-raschekVerified publisher0.3.11 of 1See more

roundcube volker-raschek 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.5.3-apachea8ea6fd751dc
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

1,797
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10

Open the chart page →

6,085
keycloak-operatorwiremindVerified publisher0.0.141 of 1See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10

Open the chart page →

4,713
wombatwombatOfficialVerified publisher4.1.281 of 1See more

wombat wombat 4.1.28

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
erlangsolutions/wombatoam:4.1.284680c990147a
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

3,697
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

4,041
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
krb5@1.21.1-6.el9
0:1.21.1-8.el9_6

Open the chart page →

1,836
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7

Open the chart page →

19,769
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

13,683
icat-k8salba-helm-chartsVerified publisher1.1.01 of 4See more

icat-k8s alba-helm-charts 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/python:3.12.9-bullseyeed4450bab88f
krb5@1.18.3-6+deb11u6
1.18.3-6+deb11u7

Open the chart page →

3,744
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

12,061
clearml-servingallegroaiVerified publisher1.6.24 of 9See more

clearml-serving allegroai 1.6.2

4 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

17,879
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7

Open the chart page →

8,384
openldapalphani-helm-chartsVerified publisher2.4.571 of 2See more

openldap alphani-helm-charts 2.4.57

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
roertel/openldap:1.0.00edb2d98d276
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

3,067
whisperandrenarchyVerified publisher1.0.01 of 1See more

whisper andrenarchy 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:1.0.080b99ddeef6c
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

687
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
ddosify/selfhosted_backend:3.2.93c11e3182652
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

22,233
soarv113assist-iot-cybersecurity-monitoring-soar0.1.33 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

3 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.11
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

17,946
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
krb5@1.13.2+dfsg-5ubuntu2
1.13.2+dfsg-5ubuntu2.2+esm7
hyperledger/fabric-couchdb:0.4.15f6c724592abf
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

77,821
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
krb5@1.13.2+dfsg-5ubuntu2
1.13.2+dfsg-5ubuntu2.2+esm7
hyperledger/fabric-couchdb:0.4.15f6c724592abf
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

77,802
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

13,199
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7

Open the chart page →

7,239
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7

Open the chart page →

7,239
block-buster-helm-appblock-buster-app7.6.01 of 1See more

block-buster-helm-app block-buster-app 7.6.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
siddharth67/block-buster-dev:7.6.04e1151ea5774
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

977
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

2,042
csgobuttahtoastVerified publisher0.2.31 of 1See more

csgo buttahtoast 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
cm2network/csgo:sourcemod93df54a2e4fb
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

376
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

84,678
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

84,678
passbolt-hachristianhuthVerified publisher6.0.13 of 4See more

passbolt-ha christianhuth 6.0.1

3 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
passbolt/passbolt:3.4.0-ce-non-root655547e17263
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

10,873

Container images carrying it

1,691 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
lumenvox/cloud-deployment:2.0.0ea8110886d38
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
lumenvox/cloud-management-api:2.0.0b9a23345eabd
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
macropower/twitch_predictions_recorder:v0.21e9c4fb89787
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
mailserver/docker-mailserver:11.0.0e0809756dc96
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
maissacrement/pock8snodejs:0.0.16da0db1159da
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
makersquad/harp-proxy:0.8.1a40dd258c527
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
manojchaulagain/go-k8s:0.1.0f237b5f637ae
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
mariadb/maxscale:23.02.256c5e0908148
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
matrixconduit/matrix-conduit:v0.6.06b395e80cc02
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
matrixdotorg/synapse:v1.78.0def97fd537d8
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
matterlabs/external-node:v24.0.06cbfea4c694a
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
1
mautic/mautic:v4-apache94ea4acf4049
krb5@1.18.3-6+deb11u6
1.18.3-6+deb11u7
1
mbround18/valheim:3.1.070bd4da591cd
krb5@1.19.2-2ubuntu0.5
1.19.2-2ubuntu0.7
1
mediagis/nominatim:3.7c15e941485ef
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
mediagis/nominatim:4.2d0eae7b51374
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
1
merlos/zookeeper:3.9.3a38fc7e09ed7
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
mezmohq/vector:1.17.3ad5794b112af
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
michaelepitech/sample-app:latestaf51d61c19f5
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7
1
middlewareeng/middleware:0.3.1747d880812f1
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
1
mide/minecraft-overviewer:latest4eee0dcb715f
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
milvusdb/etcd:3.5.5-r2102aac62827b
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
milvusdb/milvus:v2.2.13a3a55e1c1497
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
minio/kes:v0.22.255f3aef5803e
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
krb5@1.18.2-5.el8
0:1.18.2-32.el8_10
1
minio/mc:RELEASE.2022-05-09T04-08-26Z4b415310d8d0
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10
1
minio/mc:RELEASE.2023-02-28T00-12-59Zc631532a394e
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
1
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10
1
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
1
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4
1
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
1
minio/operator:v5.0.9170b154d2c61
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5
1
minio/operator:v4.1.02adc5be088f5
krb5@1.18.2-8.el8
0:1.18.2-9.el8_4.3
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
mishtinetwork/operator:latestbb3fe67a5f7c
krb5@1.18.3-6+deb11u5
1.18.3-6+deb11u7
1
mlikiowa/napcat-docker:latest1336a777f9a4
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7
1
mnaggar3396/python-app:latest371d8ed84b15
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
molynx/planner:v1441c9f52f092
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
moreillon/api-proxy:latestd7d4a5463525
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.