StackRadar

CVE-2025-38553

Medium

Advisory

Published 19 Aug 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
31
of 17,844 indexed, latest versions
Container images
29
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 31 of 17,844 indexed charts deploy, on 29 images.

Affected packageAffected versionsFixed inImages
linuxdeb3.13.0-46.77, 3.13.0-126.175, 3.13.0-149.199, 3.13.0-170.220+22 more5.15.0-163.173, 6.8.0-100.10029
OSV records
UBUNTU-CVE-2025-38553
Also known as
USN-7909-1, USN-8028-1

Charts affected

31 by stars
ChartLatestAffected imagesRadar Score
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
linux@6.8.0-88.89
6.8.0-100.100

Open the chart page →

74,247
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
linux@5.15.0-153.163
5.15.0-163.173

Open the chart page →

76,537
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
linux@5.15.0-118.128
5.15.0-163.173

Open the chart page →

71,954
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
linux@6.8.0-57.59
6.8.0-100.100

Open the chart page →

68,842
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
linux@5.15.0-143.153
5.15.0-163.173

Open the chart page →

62,399
opsopsVerified publisher1.2.01 of 2See more

ops ops 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
shaowenchen/ops-server:latest6bac5cebd125
linux@5.15.0-153.163
5.15.0-163.173

Open the chart page →

91,263
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest2cc70b45244a
linux@5.15.0-124.134
5.15.0-163.173

Open the chart page →

66,339
data-ingestion-serviceakto0.1.61 of 1See more

data-ingestion-service akto 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-servicedigest-pinned213aded7adc5
linux@6.8.0-94.96
6.8.0-100.100

Open the chart page →

57,559
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
linux@5.15.0-91.101
5.15.0-163.173

Open the chart page →

86,718
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
linux@6.8.0-60.63
6.8.0-100.100

Open the chart page →

72,445
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
linux@3.13.0-170.220
no fix listed

Open the chart page →

75,622
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
linux@3.13.0-46.77
no fix listed

Open the chart page →

88,742
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
linux@3.13.0-149.199
no fix listed
galaxy/galaxy-stable:v18.018e577a626dfd
linux@3.13.0-149.199
no fix listed

Open the chart page →

165,256
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
linux@6.8.0-90.91
6.8.0-100.100

Open the chart page →

57,252
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
linux@5.15.0-52.58
5.15.0-163.173

Open the chart page →

114,986
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
linux@5.15.0-52.58
5.15.0-163.173

Open the chart page →

113,985
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
linux@6.8.0-38.38
6.8.0-100.100

Open the chart page →

92,210
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
linux@5.15.0-53.59
5.15.0-163.173

Open the chart page →

87,434
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
linux@6.8.0-39.39
6.8.0-100.100

Open the chart page →

82,937
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
linux@5.15.0-130.140
5.15.0-163.173

Open the chart page →

64,803
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
linux@5.15.0-133.144
5.15.0-163.173

Open the chart page →

60,401
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
linux@6.8.0-60.63
6.8.0-100.100

Open the chart page →

67,012
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
linux@5.15.0-130.140
5.15.0-163.173

Open the chart page →

62,200
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
linux@5.15.0-46.49
5.15.0-163.173

Open the chart page →

100,581
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
linux@5.15.0-46.49
5.15.0-163.173

Open the chart page →

100,581
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
voltha/voltha-envoy:1.6.059ab2a00f712
linux@3.13.0-126.175
no fix listed

Open the chart page →

362,306
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
linux@6.8.0-79.79
6.8.0-100.100

Open the chart page →

62,291
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
linux@5.15.0-92.102
5.15.0-163.173

Open the chart page →

74,190
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
5.15.0-163.173

Open the chart page →

108,244
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
linux@5.15.0-100.110
5.15.0-163.173

Open the chart page →

75,617
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-38553.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
linux@5.15.0-134.145
5.15.0-163.173

Open the chart page →

67,937

Container images carrying it

29 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
linux@6.8.0-60.63
6.8.0-100.100
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
linux@5.15.0-52.58
5.15.0-163.173
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
linux@5.15.0-46.49
5.15.0-163.173
2
aktosecurity/data-ingestion-service213aded7adc5
linux@6.8.0-94.96
6.8.0-100.100
1
assistiot/open_api_backend:1.1.230812ba93555
linux@5.15.0-91.101
5.15.0-163.173
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
linux@3.13.0-170.220
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
linux@5.15.0-153.163
5.15.0-163.173
1
galaxy/galaxy-init:v18.010267bad550e6
linux@3.13.0-149.199
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
linux@3.13.0-149.199
no fix listed
1
gethue/hue:latest7d5c1b9f8a79
linux@5.15.0-143.153
5.15.0-163.173
1
grpl/grapple-cli:0.2.127c00aafee6629
linux@6.8.0-39.39
6.8.0-100.100
1
josh5/unmanic:0.2.64d49c4816260
linux@5.15.0-100.110
5.15.0-163.173
1
kong/httpbin:latesta6ac46531193
linux@5.15.0-130.140
5.15.0-163.173
1
kusionstack/kusion:v0.14.0126c8f0b0976
linux@5.15.0-130.140
5.15.0-163.173
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
linux@6.8.0-88.89
6.8.0-100.100
1
mbround18/valheim:3.1.070bd4da591cd
linux@5.15.0-133.144
5.15.0-163.173
1
mlikiowa/napcat-docker:latest2cc70b45244a
linux@5.15.0-124.134
5.15.0-163.173
1
nethermind/nethermind:1.14.615517708c3b6
linux@5.15.0-53.59
5.15.0-163.173
1
photoprism/photoprism:240711-cefc6fd632ca74
linux@6.8.0-38.38
6.8.0-100.100
1
resouer/redis-slave:v2e2f198b49ba7
linux@3.13.0-46.77
no fix listed
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
linux@5.15.0-118.128
5.15.0-163.173
1
shaowenchen/ops-server:latest6bac5cebd125
linux@5.15.0-153.163
5.15.0-163.173
1
snipe/snipe-it:v8.3.1141ebf2386fe
linux@6.8.0-79.79
6.8.0-100.100
1
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
linux@5.15.0-92.102
5.15.0-163.173
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
linux@5.15.0-134.145
5.15.0-163.173
1
voltha/voltha-envoy:1.6.059ab2a00f712
linux@3.13.0-126.175
no fix listed
1
xeladock/mysql_dns:latest4baf531453f1
linux@5.15.0-25.25
5.15.0-163.173
1
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
linux@6.8.0-90.91
6.8.0-100.100
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
linux@6.8.0-57.59
6.8.0-100.100
1

syft 1.42.1 · advisories as of 24 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.