StackRadar

CVE-2025-3576

Medium

Advisory

Published 15 Apr 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,546
of 17,781 indexed, latest versions
Container images
1,679
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: krb5 security update

Carried by container images the latest versions of 1,546 of 17,781 indexed charts deploy, on 1,679 images.

Affected packageAffected versionsFixed inImages
krb5deb1.12+dfsg-2ubuntu5, 1.12+dfsg-2ubuntu5.1, 1.12+dfsg-2ubuntu5.3, 1.12+dfsg-2ubuntu5.4+40 more1.12+dfsg-2ubuntu5.4+esm7, 1.13.2+dfsg-5ubuntu2.2+esm7, 1.16-2ubuntu0.4+esm5, 1.17-6ubuntu4.11+4 more1,436
krb5rpm1.16.1-22.el8, 1.17-9.el8, 1.17-18.el8, 1.17-19.el8_2+25 more0:1.17-19.el8_2.3, 0:1.18.2-9.el8_4.3, 0:1.18.2-16.el8_6.4, 0:1.18.2-26.el8_8.5+5 more243
OSV records
DEBIAN-CVE-2025-3576RHSA-2025:13664RHSA-2025:13777RHSA-2025:15001RHSA-2025:15002RHSA-2025:15003RHSA-2025:15004RHSA-2025:8411RHSA-2025:9430RLSA-2025:8411RLSA-2025:9430UBUNTU-CVE-2025-3576DLA-4195-1SUSE-SU-2025:3699-1
Also known as
USN-7542-1

Charts affected

1,546 by stars
ChartLatestAffected imagesRadar Score
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

15,330
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

7,901
veleromesosphere3.2.51 of 1See more

velero mesosphere 3.2.5

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

1,869
kubecostmesosphere-stable0.37.52 of 9See more

kubecost mesosphere-stable 0.37.5

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7

Open the chart page →

17,693
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

2,635
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
krb5@1.18.2-30.el8_10
0:1.18.2-32.el8_10

Open the chart page →

3,793
keycloak-operatornewsaktuell0.1.71 of 1See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4

Open the chart page →

5,067
kobotoolboxone-acre-fundVerified publisher0.7.43 of 9See more

kobotoolbox one-acre-fund 0.7.4

3 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
kobotoolbox/kpi:2.022.24dbcacc01bccd4
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
library/nginx:1.212bcabc23b454
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

18,517
opentelemetry-ebpfopentelemetry-helmVerified publisher0.1.74 of 4See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

4 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
otel/opentelemetry-ebpf-k8s-relay:v0.10.20980d0ab28bf
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
otel/opentelemetry-ebpf-k8s-watcher:v0.10.263a0d1dd2cac
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
otel/opentelemetry-ebpf-kernel-collector:v0.10.269e19991e328
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
otel/opentelemetry-ebpf-reducer:v0.10.26c49acfbc6f1
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

2,573
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

4,045
oesopsmxVerified publisher4.0.322 of 25See more

oes opsmx 4.0.32

2 of the 25 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
krb5@1.18.2-8.3.el8_4
0:1.18.2-9.el8_4.3

Open the chart page →

107,811
ipmi-exporterpnnl-miscscripts0.1.151 of 1See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
krb5@1.18.2-26.el8
0:1.18.2-32.el8_10

Open the chart page →

2,995
proxysqlproxysql-cluster1.7.01 of 1See more

proxysql proxysql-cluster 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
proxysql/proxysql:2.3.08d710e80c77b
krb5@1.18.3-6
1.18.3-6+deb11u7

Open the chart page →

989
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

5,435
repoflowrepoflow-helm-public0.9.12 of 8See more

repoflow repoflow-helm-public 0.9.1

2 of the 8 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
krb5@1.17-6ubuntu4.6
1.17-6ubuntu4.11
library/postgres:16.24aea012537ed
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

13,521
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

24,488
soketisoketi2.0.01 of 1See more

soketi soketi 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/soketi/soketi:1.6-16-debian713223456cf1
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

1,636
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
krb5@1.17-6ubuntu4.4
1.17-6ubuntu4.11

Open the chart page →

15,477
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4

Open the chart page →

7,052
thingsboard-clusterthingsboard-cluster-bettaVerified publisher0.2.266 of 6See more

thingsboard-cluster thingsboard-cluster-betta 0.2.26

6 of the 6 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/postgresql:16.0.0-debian-11-r3b8a21df9b747
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/redis:7.2.1-debian-11-r0fa288394f402
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
thingsboard/tb-node:3.6.0f40a542832c4
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
thingsboard/tb-web-ui:3.6.0d388378062cc
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

14,566
feedbacksystemthm-mni-iiVerified publisher0.47.15 of 10See more

feedbacksystem thm-mni-ii 0.47.1

5 of the 10 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/mysql:8.0.35-debian-11-r2be03e8ea6129
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
thmmniii/fbs-core:v1.27.15438517d9fc2
krb5@1.19.2-2
1.19.2-2ubuntu0.7

Open the chart page →

28,534
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
krb5@1.19.2-2ubuntu0.2
1.19.2-2ubuntu0.7

Open the chart page →

10,315
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

18,137
roundcubevolker-raschekVerified publisher0.3.11 of 1See more

roundcube volker-raschek 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.5.3-apachea8ea6fd751dc
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

1,797
minio-operatorwenerme4.3.71 of 2See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10

Open the chart page →

6,085
keycloak-operatorwiremindVerified publisher0.0.141 of 1See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
krb5@1.18.2-14.el8
0:1.18.2-32.el8_10

Open the chart page →

4,714
wombatwombatOfficialVerified publisher4.1.281 of 1See more

wombat wombat 4.1.28

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
erlangsolutions/wombatoam:4.1.284680c990147a
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

3,697
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

4,039
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
krb5@1.21.1-6.el9
0:1.21.1-8.el9_6

Open the chart page →

1,819
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7

Open the chart page →

19,691
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

13,635
icat-k8salba-helm-chartsVerified publisher1.1.01 of 4See more

icat-k8s alba-helm-charts 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/python:3.12.9-bullseyeed4450bab88f
krb5@1.18.3-6+deb11u6
1.18.3-6+deb11u7

Open the chart page →

3,697
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5

Open the chart page →

12,046
clearml-servingallegroaiVerified publisher1.6.24 of 9See more

clearml-serving allegroai 1.6.2

4 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
bitnamilegacy/zookeeper:3.8.1-debian-11-r6dba59d740e13
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

17,877
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7

Open the chart page →

8,341
openldapalphani-helm-chartsVerified publisher2.4.571 of 2See more

openldap alphani-helm-charts 2.4.57

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
roertel/openldap:1.0.00edb2d98d276
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

3,067
whisperandrenarchyVerified publisher1.0.01 of 1See more

whisper andrenarchy 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:1.0.080b99ddeef6c
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7

Open the chart page →

687
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7
ddosify/selfhosted_backend:3.2.93c11e3182652
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4

Open the chart page →

22,202
soarv113assist-iot-cybersecurity-monitoring-soar0.1.33 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

3 of the 5 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
krb5@1.17-6ubuntu4.3
1.17-6ubuntu4.11
assistiot/cybersecurity-monitoring_ir-ctx:latestae8b3d72eb5d
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
assistiot/cybersecurity-monitoring_ir-thv:latestc8b6c7eaa0cd
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

17,896
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
krb5@1.13.2+dfsg-5ubuntu2
1.13.2+dfsg-5ubuntu2.2+esm7
hyperledger/fabric-couchdb:0.4.15f6c724592abf
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
krb5@1.13.2+dfsg-5ubuntu2
1.13.2+dfsg-5ubuntu2.2+esm7
hyperledger/fabric-couchdb:0.4.15f6c724592abf
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7

Open the chart page →

77,687
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

13,145
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7

Open the chart page →

7,190
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
krb5@1.19.2-2ubuntu0.4
1.19.2-2ubuntu0.7

Open the chart page →

7,190
block-buster-helm-appblock-buster-app7.6.01 of 1See more

block-buster-helm-app block-buster-app 7.6.0

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
siddharth67/block-buster-dev:7.6.04e1151ea5774
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7

Open the chart page →

977
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

2,042
csgobuttahtoastVerified publisher0.2.31 of 1See more

csgo buttahtoast 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
cm2network/csgo:sourcemod93df54a2e4fb
krb5@1.18.3-6+deb11u4
1.18.3-6+deb11u7

Open the chart page →

376
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11

Open the chart page →

84,444
passbolt-hachristianhuthVerified publisher6.0.13 of 4See more

passbolt-ha christianhuth 6.0.1

3 of the 4 container images this version deploys carry CVE-2025-3576.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
passbolt/passbolt:3.4.0-ce-non-root655547e17263
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7

Open the chart page →

10,817

Container images carrying it

1,679 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
79
flyway/flyway:6.4.422d97ceb0c47
krb5@1.16-2ubuntu0.1
1.16-2ubuntu0.4+esm5
79
gradiant/open5gs:2.7.575277742fc8a
krb5@1.18.3-6+deb11u6
1.18.3-6+deb11u7
16
oomk8s/readiness-check:2.0.2875814cc853d
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7
11
codeurjc/weatherservice:v1.0b9e2f7234349
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4
10
library/mongo:5.0.6-focal8e70544b6c76
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
10
library/rabbitmq:3.9-management8a279e9396a8
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
10
codeurjc/server:v1.0310bea5b1ee7
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
8
wurstmeister/kafka:latest2d4bbf9cc83d
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
7
bitnamilegacy/mongodb:6.0.10-debian-11-r842319decb591
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
6
bitnamilegacy/rabbitmq:4.1.3:4.1.3-debian-12-r19e635efba431
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
6
library/nginx:1.21:1.21.62bcabc23b454
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
6
oomk8s/readiness-check:2.0.07daa08b81954
krb5@1.13.2+dfsg-5ubuntu2
1.13.2+dfsg-5ubuntu2.2+esm7
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
6
quay.io/devtron/postgres:14.91b594392f7cb
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
6
bitnamilegacy/kubectl:1.29.2c74b703deed2
krb5@1.20.1-2+deb12u1
1.20.1-2+deb12u4
5
library/postgres:122f2a8c2a7d10
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
5
library/redis:5:5.0fc5ecd863862
krb5@1.18.3-6+deb11u2
1.18.3-6+deb11u7
5
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
4
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
4
bitnamilegacy/rabbitmq:4.1.2:4.1.2-debian-12-r1fac502149c40
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
krb5@1.13.2+dfsg-5ubuntu2
1.13.2+dfsg-5ubuntu2.2+esm7
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
krb5@1.13.2+dfsg-5ubuntu2.1
1.13.2+dfsg-5ubuntu2.2+esm7
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
4
kodekloud/examplevotingapp_result:v1e510023fdf38
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
4
library/mongo:4.2.12-bionic628741415fc9
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
4
library/mongo:4.4.66efa05203990
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
4
library/nginx:1.27.1287ff321f9e3
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
4
library/rabbitmq:3.11-managementc3f70098e01d
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
4
mastercloudapps/planner:v1.2340a950b311b2
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7
4
mastercloudapps/server:v2.23f3d24dfe2686
krb5@1.18.2-22.el8_7
0:1.18.2-32.el8_10
4
mastercloudapps/weatherservice:v1.23de859d29c116
krb5@1.18.2-14.el8
0:1.18.2-16.el8_6.4
4
ncsa/checks:1.0.1cc46a03e16ed
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
4
opea/llm-tgi:1.00c25aab3f106
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
4
oscarsotosanchez/weatherservice:v1.0911ec961d10b
krb5@1.16-2ubuntu0.2
1.16-2ubuntu0.4+esm5
4
shashkist/flask-contacts-app:latest581de1fd6084
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
4
quay.io/strimzi/operator:0.37.052f376e64b9b
krb5@1.18.2-25.el8_8
0:1.18.2-26.el8_8.5
4
bitnamilegacy/kubectl:latestcd354d5b2556
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
3
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
krb5@1.20.1-2+deb12u3
1.20.1-2+deb12u4
3
bitnamilegacy/postgresql:15.3.0-debian-11-r7cc301eef7436
krb5@1.18.3-6+deb11u3
1.18.3-6+deb11u7
3
ciscolabs/rtsp-client:latesta7b60ec88285
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
3
ciscolabs/rtsp-server:latestb59fc10bb821
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
3
codeurjc/planner:v1.0800cf520c245
krb5@1.19.2-2ubuntu0.1
1.19.2-2ubuntu0.7
3
dgraph/dgraph:v21.12.03b55ea83fffe
krb5@1.17-6ubuntu4.1
1.17-6ubuntu4.11
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
krb5@1.20.1-2+deb12u2
1.20.1-2+deb12u4
3
envoyproxy/envoy:v1.31.02bf7f042e396
krb5@1.19.2-2ubuntu0.3
1.19.2-2ubuntu0.7
3
gchq/hdfs:3.3.35ec58edbb2db
krb5@1.20.1-6ubuntu2.3
1.20.1-6ubuntu2.6
3
grafana/promtail:2.4.2626900031c4e
krb5@1.18.3-6+deb11u1
1.18.3-6+deb11u7
3

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.