StackRadar

CVE-2025-3576

Medium

Advisory

Published 15 Apr 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,546
of 17,781 indexed, latest versions
Container images
1,679
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: krb5 security update

Carried by container images the latest versions of 1,546 of 17,781 indexed charts deploy, on 1,679 images.

Affected packageAffected versionsFixed inImages
krb5deb1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+40 more1.12+dfsg-2ubuntu5.4+esm7, 1.13.2+dfsg-5ubuntu2.2+esm7, 1.16-2ubuntu0.4+esm5, 1.17-6ubuntu4.11+4 more1,436
krb5rpm1.16.1-22.el8, 1.17-9.el8, 1.17-18.el8, 1.17-19.el8_2+25 more0:1.17-19.el8_2.3, 0:1.18.2-9.el8_4.3, 0:1.18.2-16.el8_6.4, 0:1.18.2-26.el8_8.5+5 more243
OSV records
DEBIAN-CVE-2025-3576RHSA-2025:13664RHSA-2025:13777RHSA-2025:15001RHSA-2025:15002RHSA-2025:15003RHSA-2025:15004RHSA-2025:8411RHSA-2025:9430RLSA-2025:8411RLSA-2025:9430UBUNTU-CVE-2025-3576DLA-4195-1SUSE-SU-2025:3699-1
Also known as
USN-7542-1

Charts affected

1,546 by stars
ChartLatestAffected imagesRadar Score
neo4jneo4j-helm4.3.2-11 of 1See more

neo4j neo4j-helm 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

2,640
mauticone-acre-fundVerified publisher0.1.71 of 3See more

mautic one-acre-fund 0.1.7

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
mautic/mautic:v4-apache94ea4acf4049
krb5@1.18.3-6+deb11u6
1.18.3-6+deb11u7

Open the chart page →

2,667
purelbpurelb0.0.0-106-ipv6-lbip-052cedab1 of 2See more

purelb purelb 0.0.0-106-ipv6-lbip-052cedab

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10

Open the chart page →

4,413
quickwitquickwit0.8.161 of 1See more

quickwit quickwit 0.8.16

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

3,480
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

11,405
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

4,244
devtron-operatordevtron0.23.32 of 11See more

devtron-operator devtron 0.23.3

2 of the 11 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
quay.io/devtron/postgres:14.91b594392f7cb
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

32,902
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
krb5@1.20.1-6ubuntu2.3
1.20.1-6ubuntu2.6

Open the chart page →

5,357
ilumilumOfficialVerified publisher6.7.34 of 19See more

ilum ilum 6.7.3

4 of the 19 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
bitnamilegacy/os-shell:11-debian-11-r722cb5982dcbf4
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/postgresql:16.1.0-debian-11-r2504f3b0dfdb15
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
ilum/mongodb:6.0.542b6d774c37d
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

23,228
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
krb5@1.20.1-6ubuntu2.1
1.20.1-6ubuntu2.6

Open the chart page →

3,395
litmuslitmuschaos3.30.02 of 6See more

litmus litmuschaos 3.30.0

2 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4

Open the chart page →

7,007
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
netrisai/mariadb:10.11.4-debian-11-r460aa742a0b906
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

30,326
homarroben01Verified publisher1.4.01 of 1See more

homarr oben01 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

2,581
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

17,245
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

6,048
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

14,184
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

11,782
plexutkuozdemirVerified publisher2.1.11 of 1See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
linuxserver/plex:1.25.24a13ced2326c
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

6,348
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.7

Open the chart page →

5,630
barmanadfinisVerified publisher0.10.01 of 1See more

barman adfinis 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ubcctlt/barman:v2.19cbbbbc8ae16b
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

1,552
zabbix-serveraekondratievVerified publisher1.0.63 of 4See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

30,668
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4

Open the chart page →

6,457
awx-operatorawx-operator-helm3.2.11 of 2See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
krb5@1.18.2-26.el8_9
0:1.18.2-32.el8_10

Open the chart page →

9,868
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
krb5@1.17-6ubuntu4.4
1.17-6ubuntu4.11

Open the chart page →

12,111
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

3,033
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

3,543
codercoderOfficialVerified publisher1.44.62 of 2See more

coder coder 1.44.6

2 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
krb5@1.18.2-26.el8_9
0:1.18.2-32.el8_10
coderenvs/timescale:1.44.676fd37fe6830
krb5@1.18.2-26.el8_9
0:1.18.2-32.el8_10

Open the chart page →

6,849
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.7

Open the chart page →

4,903
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

2,828
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
krb5@1.20.1-6ubuntu2.5
1.20.1-6ubuntu2.6

Open the chart page →

8,636
servarrservarr1.0.22 of 10See more

servarr servarr 1.0.2

2 of the 10 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.8.1305a9734d7e83
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
ghcr.io/flaresolverr/flaresolverr:v3.3.16088412db1051
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

14,238
rekorsigstoreVerified publisher1.8.51 of 9See more

rekor sigstore 1.8.5

1 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

5,415
thehivestrangebee-helmOfficialVerified publisher1.0.63 of 7See more

thehive strangebee-helm 1.0.6

3 of the 7 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4

Open the chart page →

16,210
uffizzi-controlleruffizzi-controller2.4.61 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

14,240
aad-pod-identityaad-pod-identity4.1.181 of 2See more

aad-pod-identity aad-pod-identity 4.1.18

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.1777788bf38938
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

2,858
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
mide/minecraft-overviewer:latest4eee0dcb715f
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

3,380
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

17,263
fadicetic0.3.13 of 25See more

fadi cetic 0.3.1

3 of the 25 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
library/adminer:4.8.1-standalone34d37131366c
krb5@1.18.3-6+deb11u5
1.18.3-6+deb11u7

Open the chart page →

52,919
daskhubdask2024.1.13 of 9See more

daskhub dask 2024.1.1

3 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

14,094
seafiledatamateVerified publisher0.6.05 of 6See more

seafile datamate 0.6.0

5 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
bitnamilegacy/os-shell:11-debian-11-r968643af4facff
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

27,267
plexgabe565Verified publisher0.5.11 of 1See more

plex gabe565 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
krb5@1.20.1-6ubuntu2.5
1.20.1-6ubuntu2.6

Open the chart page →

2,539
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

12,170
openctihelm-openctiVerified publisher3.0.91 of 8See more

opencti helm-opencti 3.0.9

1 of the 8 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4

Open the chart page →

3,383
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4

Open the chart page →

10,428
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10

Open the chart page →

4,652
percona-xtradb-clusterkfirfer1.5.101 of 3See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster:8.0.32-24.21f978ab8912e
krb5@1.18.2-22.0.1.el8_7
0:1.18.2-32.el8_10

Open the chart page →

4,957
kubeflowkubeflow1.6.25 of 45See more

kubeflow kubeflow 1.6.2

5 of the 45 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
istio/proxyv2:1.14.1df69c1a7af7c
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
library/python:3.7eedf63967cdb
krb5@1.20.1-2
1.20.1-2+deb12u4
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

96,941
kubernetes-loggingkubernetes-logging4.8.02 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

2 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
fluent/fluent-bit:2.1.96a1d0c693dfa
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.11

Open the chart page →

10,530
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4

Open the chart page →

7,949
open5gsopen5gsVerified publisher2.3.43 of 5See more

open5gs open5gs 2.3.4

3 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
gradiant/open5gs:2.7.575277742fc8a
krb5@1.18.3-6+deb11u6
1.18.3-6+deb11u7
gradiant/open5gs-dbctl:0.10.3332031245fce
krb5@1.20.1-6ubuntu2.5
1.20.1-6ubuntu2.6
gradiant/open5gs-webui:2.7.5fbd10c017541
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

9,261

Container images carrying it

1,679 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
krb5@1.19.2-2
1.19.2-2ubuntu0.7
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.11
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
krb5@1.20.1-6ubuntu2.5
1.20.1-6ubuntu2.6
2
quay.io/coreos/etcd:v3.5.628cb0630cb85
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
2
quay.io/flomesh/curl-ubi8:7.84.0bef31fa5f5f3
krb5@1.18.2-27.el8_10
0:1.18.2-32.el8_10
2
quay.io/hedgedoc/hedgedoc:1.9.4e09967519a1d
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10
2
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5
2
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5
2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
2
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
krb5@1.18.2-31.el8_10
0:1.18.2-32.el8_10
2
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
krb5@1.18.2-8.el8
0:1.18.2-9.el8_4.3
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
krb5@1.18.2-9.el8_4
0:1.18.2-9.el8_4.3
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
krb5@1.18.2-9.el8_4
0:1.18.2-9.el8_4.3
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
krb5@1.18.2-26.el8_9
0:1.18.2-32.el8_10
2
quay.io/strimzi/operator:0.46.0ac434a48ac2b
krb5@1.21.1-4.el9_5
0:1.21.1-8.el9_6
2
1dev/server:11.9.0cd5b12fe5471
krb5@1.20.1-6ubuntu2.5
1.20.1-6ubuntu2.6
1
5200710/hadoop:3.2.3-java8092d3088a5fb
krb5@1.17-6ubuntu4.4
1.17-6ubuntu4.11
1
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
1
aboogie/login_test_backend:new9c41a4483ac8
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
activepieces/activepieces:0.23.0c26188b44e62
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
1
adagber/planner:v1.0e5c1ed097752
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
adityaprasadpathak/myapp:3.07e3b9777362c
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
adolfintel/speedtest:latest1f828fe83374
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
krb5@1.20.1-6ubuntu2.2
1.20.1-6ubuntu2.6
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
krb5@1.20.1-6ubuntu2
1.20.1-6ubuntu2.6
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
aeron/ikev2-strongswan-vpn:23.0b48f25541f79
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
aibrix/metadata-service:v0.7.063fb81a64377
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
aidasi/swpgateway:v1-1-net6-k8s-test-beta5ce8dbff7fdc
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
1
aidasi/swpspa:v1-1-net6-k8s-test-betadee4ec566312
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
airbyte/pod-sweeper:1.5.198d2c39d512e
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
1
akaunting/akaunting:3.0.1552811b36ec3a
krb5@1.20.1-2
1.20.1-2+deb12u4
1
akeyless/base-rhel:0.0.14ba8900a0061
krb5@1.18.2-26.el8_9
0:1.18.2-32.el8_10
1
allegroai/clearml:2.0.0-613713ae38f7daf
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
1
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.