StackRadar

CVE-2025-3576

Medium

Advisory

Published 15 Apr 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,559
of 17,790 indexed, latest versions
Container images
1,691
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: krb5 security update

Carried by container images the latest versions of 1,559 of 17,790 indexed charts deploy, on 1,691 images.

Affected packageAffected versionsFixed inImages
krb5deb1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+40 more1.12+dfsg-2ubuntu5.4+esm7, 1.13.2+dfsg-5ubuntu2.2+esm7, 1.16-2ubuntu0.4+esm5, 1.17-6ubuntu4.11+4 more1,447
krb5rpm1.16.1-22.el8, 1.17-9.el8, 1.17-18.el8, 1.17-19.el8_2+25 more0:1.17-19.el8_2.3, 0:1.18.2-9.el8_4.3, 0:1.18.2-16.el8_6.4, 0:1.18.2-26.el8_8.5+5 more244
OSV records
DEBIAN-CVE-2025-3576RHSA-2025:13664RHSA-2025:13777RHSA-2025:15001RHSA-2025:15002RHSA-2025:15003RHSA-2025:15004RHSA-2025:8411RHSA-2025:9430RLSA-2025:8411RLSA-2025:9430UBUNTU-CVE-2025-3576DLA-4195-1SUSE-SU-2025:3699-1
Also known as
USN-7542-1

Charts affected

1,559 by stars
ChartLatestAffected imagesRadar Score
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.02 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
oscarsotosanchez/weatherservice:v1.0911ec961d10b
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

24,726
drogue-cloud-coredrogue-iotVerified publisher0.7.1120 of 22See more

drogue-cloud-core drogue-iot 0.7.11

20 of the 22 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
krb5@1.18.2-21.el8
0:1.18.2-32.el8_10
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
krb5@1.19.1-23.el9_1
0:1.21.1-8.el9_6
quay.io/keycloak/keycloak:20.0054ef67eb7da
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10

Open the chart page →

55,990
drogue-cloud-examplesdrogue-iotVerified publisher0.7.114 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

4 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
krb5@1.19.2-2
1.19.2-2ubuntu0.7
ghcr.io/ctron/kubectl:1.25e37d61b5277c
krb5@1.18.2-26.el8_9
0:1.18.2-32.el8_10
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10

Open the chart page →

30,753
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10

Open the chart page →

6,915
pgdump-to-s3duck-helm0.1.41 of 1See more

pgdump-to-s3 duck-helm 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

1,362
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

19,835
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

9,273
eav-componenteav-component1.0.01 of 3See more

eav-component eav-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/eav-component-nginx:latestd785c893096c
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

7,265
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

4,604
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4

Open the chart page →

11,483
openldap-stack-haeclipse-aeriosVerified publisher4.1.21 of 4See more

openldap-stack-ha eclipse-aerios 4.1.2

1 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
eclipseaerios/openldap:2.6.30208743f315e
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

7,534
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7

Open the chart page →

9,808
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

10,998
pagesedgwarepages1.0.02 of 3See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
flyway/flyway:6.4.422d97ceb0c47
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm5

Open the chart page →

20,242
education-componenteducation-component1.0.01 of 3See more

education-component education-component 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/education-component-nginx:latest38900bc76ee0
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

7,337
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5

Open the chart page →

4,047
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5

Open the chart page →

4,034
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5

Open the chart page →

4,034
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5

Open the chart page →

4,034
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

8,049
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

25,263
sftpemberstackVerified publisher5.1.711 of 1See more

sftp emberstack 5.1.71

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
emberstack/sftp:5.1.711d81a5df909b
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

680
reddarkemmas-chartsVerified publisher0.0.21 of 1See more

reddark emmas-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/0xemma/reddark:main2a115e991894
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

1,998
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

10,610
emptyempty1.1.01 of 1See more

empty empty 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/nginx:1.22.0f0d28f204785
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

967
kube-ecp-stackemqx-operator2.5.13 of 16See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
datalayers/datalayers:v2.2.1017b292079239
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7
emqx/ecp-ui:2.5.1e33e9816f147
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
library/telegraf:1.27507a3eecf809
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

23,813
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

6,165
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

3,963
internal-appeoc-chartsVerified publisher1.0.01 of 1See more

internal-app eoc-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/nginx:1.24.0f6daac2445b0
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

532
eolicplantseolicplantsVerified publisher0.1.02 of 7See more

eolicplants eolicplants 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
oscarsotosanchez/weatherservice:v1.0911ec961d10b
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

27,361
eoloPlanteolo-plannerVerified publisher0.1.04 of 7See more

eoloPlant eolo-planner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/rabbitmq:3.11-managementc3f70098e01d
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
mastercloudapps/planner:v1.2340a950b311b2
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7
mastercloudapps/server:v2.23f3d24dfe2686
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4

Open the chart page →

27,702
eoloplannereoloplannerVerified publisher0.1.05 of 7See more

eoloplanner eoloplanner 0.1.0

5 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7
codeurjc/server:v1.0310bea5b1ee7
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4
library/mongo:5.0.6-focal8e70544b6c76
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
library/rabbitmq:3.9-management8a279e9396a8
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

32,372
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.04 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/rabbitmq:3.11-managementc3f70098e01d
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
mastercloudapps/planner:v1.2340a950b311b2
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7
mastercloudapps/server:v2.23f3d24dfe2686
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4

Open the chart page →

27,702
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.02 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
oscarsotosanchez/weatherservice:v1.0911ec961d10b
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

27,327
eoloplannereoloplanner-molynx-gat0.1.05 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

5 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4
library/mongo:4.4.66efa05203990
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
library/rabbitmq:3.9-management8a279e9396a8
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
molynx/planner:v1441c9f52f092
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

28,549
eolo-plannereolo-planner-repo0.1.04 of 7See more

eolo-planner eolo-planner-repo 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
arturisimo/planner:v1.0fff9de644941
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
codeurjc/weatherservice:v1.0b9e2f7234349
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4
library/mongo:5.0.6-focal8e70544b6c76
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
library/rabbitmq:3.9-management8a279e9396a8
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

27,197
eoloplanteoloplant1.0.04 of 7See more

eoloplant eoloplant 1.0.0

4 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/rabbitmq:3.11-managementc3f70098e01d
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
mastercloudapps/planner:v1.2340a950b311b2
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7
mastercloudapps/server:v2.23f3d24dfe2686
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
mastercloudapps/weatherservice:v1.23de859d29c116
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4

Open the chart page →

27,702
eoloplantseoloplants-urjcVerified publisher0.1.05 of 7See more

eoloplants eoloplants-urjc 0.1.0

5 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4
library/mongo:5.0.6-focal8e70544b6c76
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
library/rabbitmq:3.9-management8a279e9396a8
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
lourdesmorente/new-planner:1.0.0608745878cdb
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

27,822
servereoloserverVerified publisher0.1.05 of 7See more

server eoloserver 0.1.0

5 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7
codeurjc/server:v1.0310bea5b1ee7
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
codeurjc/weatherservice:v1.0b9e2f7234349
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4
library/mongo:5.0.6-focal8e70544b6c76
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
library/rabbitmq:3.9-management8a279e9396a8
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

32,372
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
krb5@1.17-6ubuntu4.2
1.17-6ubuntu4.11

Open the chart page →

9,402
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

5,352
equizequiz0.0.11 of 3See more

equiz equiz 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

7,542
equizequiz-chart0.0.11 of 3See more

equiz equiz-chart 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
yzhou442/equiz:latesta3f7ca69e28d
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

7,542
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
swisscomcloud/esc-vm-scheduler-web:latestb6639d1a922e
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

4,678
doraethereum-helm-chartsVerified publisher1.0.121 of 2See more

dora ethereum-helm-charts 1.0.12

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.3.0-debian-11-r7cc301eef7436
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

3,016
faucethethereum-helm-chartsVerified publisher0.2.41 of 1See more

fauceth ethereum-helm-charts 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/komputing/fauceth:release4ab8fa4143b4
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

1,373
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4

Open the chart page →

4,479
ethexporterethersphereVerified publisher0.3.01 of 1See more

ethexporter ethersphere 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
darkobas/ethexporter:latest62e6464491ba
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

2,394
ethproxyethersphereVerified publisher0.2.01 of 1See more

ethproxy ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ethersphere/ethproxy:latest3a8a3926caa2
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

1,400
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
krb5@1.19.2-2
1.19.2-2ubuntu0.7

Open the chart page →

4,967

Container images carrying it

1,691 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
zbalogh/reservation-api-server:1.0.97c247e399a1f
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
1
zzorica/k8s-mgmt-pod:0.5.2640ca4de2922
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
krb5@1.20.1-6ubuntu2.2
1.20.1-6ubuntu2.6
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm5
1
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
krb5@1.13.2+dfsg-5ubuntu2
1.13.2+dfsg-5ubuntu2.2+esm7
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
krb5@1.13.2+dfsg-5ubuntu2
1.13.2+dfsg-5ubuntu2.2+esm7
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.6
1
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
krb5@1.21.1-4.el9_5
0:1.21.1-8.el9_6
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
1
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
krb5@1.21.1-4.el9_5
0:1.21.1-8.el9_6
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
krb5@1.21.1-4.el9_5
0:1.21.1-8.el9_6
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
krb5@1.21.1-4.el9_5
0:1.21.1-8.el9_6
1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/0xemma/reddark:main2a115e991894
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
krb5@1.21.1-6.el9
0:1.21.1-8.el9_6
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
ghcr.io/ajnart/homarr:lateste103abadfb52
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
krb5@1.20.1-6ubuntu2.2
1.20.1-6ubuntu2.6
1
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
krb5@1.18.3-6+deb11u5
1.18.3-6+deb11u7
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
1
ghcr.io/appuio/cloud-portal:v0.2.18c7e08d32d70
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
krb5@1.18.3-6+deb11u5
1.18.3-6+deb11u7
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
krb5@1.17-6ubuntu4.2
1.17-6ubuntu4.11
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
1
ghcr.io/caninehq/canine:latesta058034ca006
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.