StackRadar

CVE-2025-3576

Medium

Advisory

Published 15 Apr 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,546
of 17,781 indexed, latest versions
Container images
1,679
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: krb5 security update

Carried by container images the latest versions of 1,546 of 17,781 indexed charts deploy, on 1,679 images.

Affected packageAffected versionsFixed inImages
krb5deb1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+40 more1.12+dfsg-2ubuntu5.4+esm7, 1.13.2+dfsg-5ubuntu2.2+esm7, 1.16-2ubuntu0.4+esm5, 1.17-6ubuntu4.11+4 more1,436
krb5rpm1.16.1-22.el8, 1.17-9.el8, 1.17-18.el8, 1.17-19.el8_2+25 more0:1.17-19.el8_2.3, 0:1.18.2-9.el8_4.3, 0:1.18.2-16.el8_6.4, 0:1.18.2-26.el8_8.5+5 more243
OSV records
DEBIAN-CVE-2025-3576RHSA-2025:13664RHSA-2025:13777RHSA-2025:15001RHSA-2025:15002RHSA-2025:15003RHSA-2025:15004RHSA-2025:8411RHSA-2025:9430RLSA-2025:8411RLSA-2025:9430UBUNTU-CVE-2025-3576DLA-4195-1SUSE-SU-2025:3699-1
Also known as
USN-7542-1

Charts affected

1,546 by stars
ChartLatestAffected imagesRadar Score
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

15,330
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

7,901
veleromesosphere3.2.51 of 1See more

velero mesosphere 3.2.5

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

1,869
kubecostmesosphere-stable0.37.52 of 9See more

kubecost mesosphere-stable 0.37.5

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

17,693
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

2,635
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
krb5@1.18.2-30.el8_10
0:1.18.2-32.el8_10

Open the chart page →

3,793
keycloak-operatornewsaktuell0.1.71 of 1See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4

Open the chart page →

5,067
kobotoolboxone-acre-fundVerified publisher0.7.43 of 9See more

kobotoolbox one-acre-fund 0.7.4

3 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
kobotoolbox/kpi:2.022.24dbcacc01bccd4
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
library/nginx:1.212bcabc23b454
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

18,517
opentelemetry-ebpfopentelemetry-helmVerified publisher0.1.74 of 4See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

4 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
otel/opentelemetry-ebpf-k8s-relay:v0.10.20980d0ab28bf
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
otel/opentelemetry-ebpf-k8s-watcher:v0.10.263a0d1dd2cac
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
otel/opentelemetry-ebpf-kernel-collector:v0.10.269e19991e328
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
otel/opentelemetry-ebpf-reducer:v0.10.26c49acfbc6f1
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

2,573
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

4,045
oesopsmxVerified publisher4.0.322 of 25See more

oes opsmx 4.0.32

2 of the 25 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
krb5@1.18.2-8.3.el8_4
0:1.18.2-9.el8_4.3

Open the chart page →

107,811
ipmi-exporterpnnl-miscscripts0.1.151 of 1See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
krb5@1.18.2-26.el8
0:1.18.2-32.el8_10

Open the chart page →

2,995
proxysqlproxysql-cluster1.7.01 of 1See more

proxysql proxysql-cluster 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
proxysql/proxysql:2.3.08d710e80c77b
krb5@1.18.3-6
1.18.3-6+deb11u7

Open the chart page →

989
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

5,435
repoflowrepoflow-helm-public0.9.12 of 8See more

repoflow repoflow-helm-public 0.9.1

2 of the 8 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
krb5@1.17-6ubuntu4.6
1.17-6ubuntu4.11
library/postgres:16.24aea012537ed
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

13,521
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

24,488
soketisoketi2.0.01 of 1See more

soketi soketi 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/soketi/soketi:1.6-16-debian713223456cf1
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

1,636
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
krb5@1.17-6ubuntu4.4
1.17-6ubuntu4.11

Open the chart page →

15,477
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

7,052
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.266 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

6 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/postgresql:16.0.0-debian-11-r3b8a21df9b747
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/redis:7.2.1-debian-11-r0fa288394f402
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
thingsboard/tb-node:3.6.0f40a542832c4
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
thingsboard/tb-web-ui:3.6.0d388378062cc
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

14,566
feedbacksystemthm-mni-iiVerified publisher0.47.15 of 10See more

feedbacksystem thm-mni-ii 0.47.1

5 of the 10 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/mysql:8.0.35-debian-11-r2be03e8ea6129
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
thmmniii/fbs-core:v1.27.15438517d9fc2
krb5@1.19.2-2
1.19.2-2ubuntu0.7

Open the chart page →

28,534
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.7

Open the chart page →

10,315
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

18,137
roundcubevolker-raschekVerified publisher0.3.11 of 1See more

roundcube volker-raschek 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.5.3-apachea8ea6fd751dc
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

1,797
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10

Open the chart page →

6,085
keycloak-operatorwiremindVerified publisher0.0.141 of 1See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10

Open the chart page →

4,714
wombatwombatOfficialVerified publisher4.1.281 of 1See more

wombat wombat 4.1.28

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
erlangsolutions/wombatoam:4.1.284680c990147a
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

3,697
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

4,039
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
krb5@1.21.1-6.el9
0:1.21.1-8.el9_6

Open the chart page →

1,819
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7

Open the chart page →

19,691
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

13,635
icat-k8salba-helm-chartsVerified publisher1.1.01 of 4See more

icat-k8s alba-helm-charts 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/python:3.12.9-bullseyeed4450bab88f
krb5@1.18.3-6+deb11u6
1.18.3-6+deb11u7

Open the chart page →

3,697
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

12,046
clearml-servingallegroaiVerified publisher1.6.24 of 9See more

clearml-serving allegroai 1.6.2

4 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

17,877
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7

Open the chart page →

8,341
openldapalphani-helm-chartsVerified publisher2.4.571 of 2See more

openldap alphani-helm-charts 2.4.57

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
roertel/openldap:1.0.00edb2d98d276
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

3,067
whisperandrenarchyVerified publisher1.0.01 of 1See more

whisper andrenarchy 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:1.0.080b99ddeef6c
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

687
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
ddosify/selfhosted_backend:3.2.93c11e3182652
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

22,202
soarv113assist-iot-cybersecurity-monitoring-soar0.1.33 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

3 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.11
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

17,896
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
krb5@1.13.2+dfsg-5ubuntu2
1.13.2+dfsg-5ubuntu2.2+esm7
hyperledger/fabric-couchdb:0.4.15f6c724592abf
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
krb5@1.13.2+dfsg-5ubuntu2
1.13.2+dfsg-5ubuntu2.2+esm7
hyperledger/fabric-couchdb:0.4.15f6c724592abf
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

77,687
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

13,145
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7

Open the chart page →

7,190
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7

Open the chart page →

7,190
block-buster-helm-appblock-buster-app7.6.01 of 1See more

block-buster-helm-app block-buster-app 7.6.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
siddharth67/block-buster-dev:7.6.04e1151ea5774
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

977
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

2,042
csgobuttahtoastVerified publisher0.2.31 of 1See more

csgo buttahtoast 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
cm2network/csgo:sourcemod93df54a2e4fb
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

376
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

84,444
passbolt-hachristianhuthVerified publisher6.0.13 of 4See more

passbolt-ha christianhuth 6.0.1

3 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
passbolt/passbolt:3.4.0-ce-non-root655547e17263
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

10,817

Container images carrying it

1,679 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
krb5@1.20.1-2
1.20.1-2+deb12u4
2
gradiant/open5gs-webui:2.7.5fbd10c017541
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
2
gradiant/ueransim:3.2.6015b30d5fa0f
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7
2
grafana/agent-operator:v0.25.1a136c6208aa3
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
krb5@1.20.1-2
1.20.1-2+deb12u4
2
hookiesolutions/webhookie:latest0629694246ba
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
2
ilum/mongodb:6.0.542b6d774c37d
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
2
istio/kubectl:1.5.10dbb7726d1bf0
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm5
2
istio/proxyv2:1.18.0757d28c24100
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.7
2
istio/proxyv2:1.10.3a78b7a165744
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
2
kodekloud/examplevotingapp_vote:v13a856afb02a3
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
2
langgenius/dify-sandbox:0.2.009b7e8705673
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
2
ldapaccountmanager/lam:8.0.1d46cf25d1dda
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
2
library/adminer:4.8.1-standalone34d37131366c
krb5@1.18.3-6+deb11u5
1.18.3-6+deb11u7
2
library/cassandra:3.11.65aa8400b4b3b
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm5
2
library/cassandra:4.1.37cbcec0086ac
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
2
library/elasticsearch:7.17.35e6ac15bf6a5
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
2
library/mariadb:10.8.30abf60f81588
krb5@1.19.2-2
1.19.2-2ubuntu0.7
2
library/mariadb:10.10334b315c10e5
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
2
library/mariadb:11.3.2e101f9db3191
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
2
library/mongo:4.2.358b25d51baa1
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm5
2
library/neo4j:5.20.052d3dec8d455
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
2
library/neo4j:4.3.2-enterprise56a9453c4064
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
2
library/nginx:1.27.098f8ec75657d
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
2
library/nginx:1.24.0f6daac2445b0
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
2
library/phpmyadmin:5.2.16e75aa8f767c
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
2
library/postgres:16.109f23e02d766
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
2
library/postgres:16.24aea012537ed
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
2
library/postgres:16.4e62fbf9d3e2b
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
2
library/python:3.7eedf63967cdb
krb5@1.20.1-2
1.20.1-2+deb12u4
2
library/rabbitmq:3.12.1-managementf020c06da226
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.7
2
library/redis:7.2.3a7cee7c8178f
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7
2
locustio/locust:2.32.2a0d4b88e42c1
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
2
mbentley/omada-controller:4.3f4e682274bed
krb5@1.16-2ubuntu0.4
1.16-2ubuntu0.4+esm5
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
krb5@1.17-6ubuntu4
1.17-6ubuntu4.11
2
minio/operator:v4.3.754393e03f3b2
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
2
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
krb5@1.16-2build1
1.16-2ubuntu0.4+esm5
2
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7
2
opea/embedding-tei:1.05c9639de61c1
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
2
opea/reranking-tei:1.0e48613afb191
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
2
opea/retriever-redis:1.0eb746b263705
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.