StackRadar

CVE-2025-40307

High

Not in the current index: no indexed chart deploys a container image carrying CVE-2025-40307 in its latest version. The tables below are over older indexed versions and charts no longer in the index, and this page is not offered to search engines.

Advisory

Published 8 Dec 2025In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
0
of 17,781 indexed, latest versions
Container images
1
in older or deselected versions
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by no container image the latest versions of the 17,781 indexed charts deploy; current on 1 image referenced by older indexed versions or by charts no longer in the index.

Affected packageAffected versionsFixed inImages
linuxdeb6.1.180-16.1.187-11
OSV records
DEBIAN-CVE-2025-40307

Charts referencing it in older or deselected versions

1 by stars
ChartVersionAffected imagesRadar Score
drupalhelmforgeVerified publisher1.2.121 of 2See more

drupal helmforge 1.2.12

1 of the 2 container images this version deploys carry CVE-2025-40307.

Container imageDigestPackageFixed in
library/drupal:11.4.5-php8.5-apache-bookworme1972e2882fb
linux@6.1.180-1
6.1.187-1

Open the chart page →

17,854

Container images carrying it

1 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/drupal:11.4.5-php8.5-apache-bookworme1972e2882fb
linux@6.1.180-1
6.1.187-1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.