StackRadar

CVE-2025-3576

Medium

Advisory

Published 15 Apr 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,559
of 17,790 indexed, latest versions
Container images
1,691
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: krb5 security update

Carried by container images the latest versions of 1,559 of 17,790 indexed charts deploy, on 1,691 images.

Affected packageAffected versionsFixed inImages
krb5deb1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+40 more1.12+dfsg-2ubuntu5.4+esm7, 1.13.2+dfsg-5ubuntu2.2+esm7, 1.16-2ubuntu0.4+esm5, 1.17-6ubuntu4.11+4 more1,447
krb5rpm1.16.1-22.el8, 1.17-9.el8, 1.17-18.el8, 1.17-19.el8_2+25 more0:1.17-19.el8_2.3, 0:1.18.2-9.el8_4.3, 0:1.18.2-16.el8_6.4, 0:1.18.2-26.el8_8.5+5 more244
OSV records
DEBIAN-CVE-2025-3576RHSA-2025:13664RHSA-2025:13777RHSA-2025:15001RHSA-2025:15002RHSA-2025:15003RHSA-2025:15004RHSA-2025:8411RHSA-2025:9430RLSA-2025:8411RLSA-2025:9430UBUNTU-CVE-2025-3576DLA-4195-1SUSE-SU-2025:3699-1
Also known as
USN-7542-1

Charts affected

1,559 by stars
ChartLatestAffected imagesRadar Score
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm5

Open the chart page →

15,986
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
krb5@1.12+dfsg-2ubuntu5
1.12+dfsg-2ubuntu5.4+esm7

Open the chart page →

41,444
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
krb5@1.17-6ubuntu4.9
1.17-6ubuntu4.11

Open the chart page →

7,903
wraftwraft0.1.122 of 9See more

wraft wraft 0.1.12

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
typesense/typesense:28.0.rc35dea1b62b7b6e
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5

Open the chart page →

10,156
youtubedl-materialyoutubedl-materialVerified publisher0.0.11 of 1See more

youtubedl-material youtubedl-material 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:latest2f943d584711
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7

Open the chart page →

9,835
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/postgres:17.4304ab8135187
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

10,432
abstract-nodeabstract-nodeVerified publisher0.1.491 of 2See more

abstract-node abstract-node 0.1.49

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

4,577
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10

Open the chart page →

7,713
open5gsadaptivenetlabVerified publisher1.0.32 of 3See more

open5gs adaptivenetlab 1.0.3

2 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
free5gmano/nextepc-mongodb:latest36f806935519
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

25,531
bootaerokube1.0.12 of 4See more

boot aerokube 1.0.1

2 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/aerokube/jumphost:1.0.170fd7c00418d
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
quay.io/aerokube/keygen:1.0.1578934444f04
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

7,922
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

4,956
airports-kafkaairports-kafka0.1.01 of 2See more

airports-kafka airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

4,558
aktoakto0.2.02 of 7See more

akto akto 0.2.0

2 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5

Open the chart page →

13,712
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.4.0-v172035434f455
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7

Open the chart page →

9,505
akto-mini-testing-kafkaakto1.42.12 of 5See more

akto-mini-testing-kafka akto 1.42.1

2 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
krb5@1.18.2-30.el8_10
0:1.18.2-32.el8_10
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
krb5@1.18.2-30.el8_10
0:1.18.2-32.el8_10

Open the chart page →

6,404
akto-protectionakto0.1.02 of 4See more

akto-protection akto 0.1.0

2 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5

Open the chart page →

11,296
akto-regional-setupakto1.3.11 of 9See more

akto-regional-setup akto 1.3.1

1 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.4.072035434f455
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7

Open the chart page →

7,828
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
hotavneesh/eclipse-jdtls:latesta4579b163414
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

4,886
mautrix-signalalexanderbadel0.1.11 of 2See more

mautrix-signal alexanderbadel 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
signald/signald:0.18.20ffad7ccc2eb
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

2,099
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

6,352
zunivers-ninjaalexpressoVerified publisher1.31.21 of 2See more

zunivers-ninja alexpresso 1.31.2

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/neo4j:5.18.18f01f7bb053e
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

1,165
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
krb5@1.18.3-6+deb11u5
1.18.3-6+deb11u7

Open the chart page →

4,533
pagesalstom-pages-app1.0.02 of 3See more

pages alstom-pages-app 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
flyway/flyway:6.4.422d97ceb0c47
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm5

Open the chart page →

20,242
amorphieamorphie0.1.23 of 18See more

amorphie amorphie 0.1.2

3 of the 18 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
hazelcast/management-center:5.3.2f9d34300d330
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

28,289
anchore-admission-controlleranchore-charts0.8.51 of 2See more

anchore-admission-controller anchore-charts 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

7,605
pagesandrei-pages1.0.02 of 3See more

pages andrei-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
flyway/flyway:6.4.422d97ceb0c47
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm5

Open the chart page →

20,242
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
krb5@1.16-2ubuntu0.4
1.16-2ubuntu0.4+esm5

Open the chart page →

11,582
games-on-whalesangelnu2.0.03 of 7See more

games-on-whales angelnu 2.0.0

3 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

42,325
ddosifyanteonVerified publisher1.7.53 of 13See more

ddosify anteon 1.7.5

3 of the 13 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

25,816
monitoringantmediaVerified publisher1.0.01 of 6See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
krb5@1.18.2-31.el8_10
0:1.18.2-32.el8_10

Open the chart page →

2,461
apimap-apiapimapOfficialVerified publisher1.8.111 of 1See more

apimap-api apimap 1.8.11

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
apimap/api:v1.8.11ae2b3ab00177
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

2,233
apimap-developerapimapOfficialVerified publisher1.4.11 of 1See more

apimap-developer apimap 1.4.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
apimap/developer:v1.3.1406d3858e20c
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

2,353
apimap-portalapimapOfficialVerified publisher2.4.01 of 1See more

apimap-portal apimap 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
apimap/portal:v2.4.0041a4790c65c
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

2,396
apishiftapishiftVerified publisher0.3.01 of 4See more

apishift apishift 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
krb5@1.21.1-4.el9_5
0:1.21.1-8.el9_6

Open the chart page →

2,961
apispringbootHelmapispringboot0.1.01 of 1See more

apispringbootHelm apispringboot 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
rabeh/apibootspring:1.0941007b6946e
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

6,256
d.vazquezm.2021_helmapphelmVerified publisher1.0.02 of 6See more

d.vazquezm.2021_helm apphelm 1.0.0

2 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
davidvmar/urjc-davidvmar-worker:1.0.10d221e834a21
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
library/mongo:5.0.6-focal8e70544b6c76
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

19,788
app-mobilityappmo0.1.02 of 5See more

app-mobility appmo 0.1.0

2 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4
dellemc/csm-application-mobility-velero-plugin:v0.1.0660cabd6d929
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4

Open the chart page →

12,541
app-movies-seriesapp-movies-seriesVerified publisher0.1.01 of 2See more

app-movies-series app-movies-series 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/postgres:14.32d1e636f0778
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

3,167
inbox-server-distributedappscodeVerified publisher2025.12.252 of 4See more

inbox-server-distributed appscode 2025.12.25

2 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
library/rabbitmq:3.12.1-managementf020c06da226
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.7

Open the chart page →

15,718
james-komposeappscodeVerified publisher0.1.03 of 4See more

james-kompose appscode 0.1.0

3 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/cassandra:4.1.37cbcec0086ac
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
library/rabbitmq:3.12.1-managementf020c06da226
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.7
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

17,122
managed-serviceaccountappscodeVerified publisher2024.2.251 of 1See more

managed-serviceaccount appscode 2024.2.25

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
krb5@1.18.2-26.el8_9
0:1.18.2-32.el8_10

Open the chart page →

2,404
minioappscodeVerified publisher2026.9.111 of 1See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10

Open the chart page →

4,050
multicluster-controlplaneappscodeVerified publisher2025.4.301 of 1See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
krb5@1.18.2-26.el8_9
0:1.18.2-32.el8_10

Open the chart page →

2,575
s3proxyappscodeVerified publisher2026.9.111 of 1See more

s3proxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

3,313
cloud-portalappuio0.4.11 of 1See more

cloud-portal appuio 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/appuio/cloud-portal:v0.2.18c7e08d32d70
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

1,287
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
krb5@1.20.1-2
1.20.1-2+deb12u4

Open the chart page →

5,680
maxscaleappuio2.0.11 of 1See more

maxscale appuio 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10

Open the chart page →

2,902
appwriteappwrite-helmVerified publisher1.3.23 of 8See more

appwrite appwrite-helm 1.3.2

3 of the 8 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:10.6.12-debian-11-r1315edb5643b73
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/redis:7.0.10-debian-11-r059293f5206b7
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
kubegems/bitnami-shell:12-debian-12-r24e42e3aaacdd3
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

9,855
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
krb5@1.20.1-6ubuntu2.5
1.20.1-6ubuntu2.6

Open the chart page →

7,359
arlas-aiasarlas-stackVerified publisher28.8.07 of 22See more

arlas-aias arlas-stack 28.8.0

7 of the 22 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4

Open the chart page →

40,580

Container images carrying it

1,691 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
krb5@1.19.2-2
1.19.2-2ubuntu0.7
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
ghcr.io/k8s-at-home/theme-park:v1.7.3f8a5ec8f4669
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.11
1
ghcr.io/k8snetworkplumbingwg/multus-dynamic-networks-controller:v0.3.72a2bb32c0ea8
krb5@1.18.2-31.el8_10
0:1.18.2-32.el8_10
1
ghcr.io/kiaedev/kiae:latestebd03028ff6a
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
ghcr.io/kluster-manager/managed-serviceaccount:latest365183f83ac9
krb5@1.18.2-26.el8_9
0:1.18.2-32.el8_10
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
krb5@1.18.2-26.el8_9
0:1.18.2-32.el8_10
1
ghcr.io/komputing/fauceth:release4ab8fa4143b4
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
krb5@1.17-6ubuntu4.9
1.17-6ubuntu4.11
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
krb5@1.18.3-6
1.18.3-6+deb11u7
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
krb5@1.20.1-2
1.20.1-2+deb12u4
1
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.6
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/libretime/libretime-legacy:latest35b4531189c2
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7
1
ghcr.io/linuxforhealth/fhir-schematool:5.1.1f62cefee6ef6
krb5@1.18.2-30.el8_10
0:1.18.2-32.el8_10
1
ghcr.io/linuxoid69/motion:4.7.0-0.1.0f0f000c3fc47
krb5@1.18.3-6+deb11u5
1.18.3-6+deb11u7
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
krb5@1.19.2-2
1.19.2-2ubuntu0.7
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
krb5@1.20.1-6ubuntu2.5
1.20.1-6ubuntu2.6
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
1
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
krb5@1.21.1-6.el9
0:1.21.1-8.el9_6
1
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
krb5@1.20.1-6ubuntu2.5
1.20.1-6ubuntu2.6
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
1
ghcr.io/melodyyangaws/hive-metastore:3.0.0e949b0f733f0
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
1
ghcr.io/mroxso/pollstr:latest0b4f97faa3d0
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.6
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
krb5@1.18.3-6+deb11u6
1.18.3-6+deb11u7
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.