StackRadar

CVE-2025-40775

High

Advisory

Published 21 May 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.152
97th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
15
of 17,781 indexed, latest versions
Container images
18
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 15 of 17,781 indexed charts deploy, on 18 images.

Affected packageAffected versionsFixed inImages
bindapk9.18.13-r2, 9.18.16-r0, 9.18.19-r0, 9.18.19-r1+5 more9.18.37-r018
OSV records
ALPINE-CVE-2025-40775

Charts affected

15 by stars
ChartLatestAffected imagesRadar Score
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
bind@9.18.19-r0
9.18.37-r0

Open the chart page →

6,041
servarrservarr1.0.24 of 10See more

servarr servarr 1.0.2

4 of the 10 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
bind@9.18.19-r1
9.18.37-r0
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
bind@9.18.19-r1
9.18.37-r0
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
bind@9.18.19-r1
9.18.37-r0
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
bind@9.18.19-r1
9.18.37-r0

Open the chart page →

14,238
pod-gatewayangelnu7.1.11 of 2See more

pod-gateway angelnu 7.1.1

1 of the 2 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
ghcr.io/angelnu/pod-gateway:v1.13.0a5b032e15f75
bind@9.18.35-r0
9.18.37-r0

Open the chart page →

1,133
dnsbl-exporterchristianhuthVerified publisher1.4.01 of 2See more

dnsbl-exporter christianhuth 1.4.0

1 of the 2 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
bind@9.18.24-r1
9.18.37-r0

Open the chart page →

1,459
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
bind@9.18.19-r0
9.18.37-r0

Open the chart page →

6,179
ejabberdejabberdVerified publisher0.1.01 of 1See more

ejabberd ejabberd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
indevlab/ejabberd:24.12-k8s8bc689d093a7
bind@9.18.33-r0
9.18.37-r0

Open the chart page →

903
sunflare-toolsglenndehaanVerified publisher1.1.01 of 1See more

sunflare-tools glenndehaan 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
glenndehaan/sunflare-tools:latesta5b3f1dd865d
bind@9.18.16-r0
9.18.37-r0

Open the chart page →

1,502
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
bind@9.18.33-r0
9.18.37-r0

Open the chart page →

4,647
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
bind@9.18.19-r0
9.18.37-r0

Open the chart page →

6,447
qbittorrentlib42Verified publisher1.0.01 of 1See more

qbittorrent lib42 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
bind@9.18.13-r2
9.18.37-r0

Open the chart page →

2,167
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
bind@9.18.31-r0
9.18.37-r0

Open the chart page →

2,293
seashellpuckpuck1.2.01 of 1See more

seashell puckpuck 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
ghcr.io/puckpuck/seashell:1.2ef5e31333821
bind@9.18.19-r0
9.18.37-r0

Open the chart page →

4,215
chainrss30.1.281 of 8See more

chain rss3 0.1.28

1 of the 8 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
rss3/proxyd:d2c5ced00901227473fc196fda838191f0cb4e028d9a44c650fa
bind@9.18.24-r0
9.18.37-r0

Open the chart page →

8,528
proxydrss30.1.01 of 1See more

proxyd rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
rss3/proxyd:6edce9ddfeee0b00a2d98f24c3ce67885653651b865a0a6bdf4c
bind@9.18.24-r0
9.18.37-r0

Open the chart page →

2,110
syncthingsvtech-public-helm-charts1.0.01 of 2See more

syncthing svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-40775.

Container imageDigestPackageFixed in
svtechnmaa/svtech_syncthing:v1.0.41a75d88031fe
bind@9.18.19-r1
9.18.37-r0

Open the chart page →

2,336

Container images carrying it

18 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
glenndehaan/sunflare-tools:latesta5b3f1dd865d
bind@9.18.16-r0
9.18.37-r0
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
bind@9.18.19-r0
9.18.37-r0
1
homeassistant/home-assistant:2023.12.48d000332b09b
bind@9.18.19-r0
9.18.37-r0
1
indevlab/ejabberd:24.12-k8s8bc689d093a7
bind@9.18.33-r0
9.18.37-r0
1
librenms/librenms:24.11.00920bc9117a8
bind@9.18.31-r0
9.18.37-r0
1
rss3/proxyd:6edce9ddfeee0b00a2d98f24c3ce67885653651b865a0a6bdf4c
bind@9.18.24-r0
9.18.37-r0
1
rss3/proxyd:d2c5ced00901227473fc196fda838191f0cb4e028d9a44c650fa
bind@9.18.24-r0
9.18.37-r0
1
svtechnmaa/svtech_syncthing:v1.0.41a75d88031fe
bind@9.18.19-r1
9.18.37-r0
1
ghcr.io/angelnu/pod-gateway:v1.13.0a5b032e15f75
bind@9.18.35-r0
9.18.37-r0
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
bind@9.18.33-r0
9.18.37-r0
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
bind@9.18.19-r0
9.18.37-r0
1
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
bind@9.18.24-r1
9.18.37-r0
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
bind@9.18.19-r1
9.18.37-r0
1
ghcr.io/onedr0p/qbittorrent:4.5.20efdd8d3ef39
bind@9.18.13-r2
9.18.37-r0
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
bind@9.18.19-r1
9.18.37-r0
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
bind@9.18.19-r1
9.18.37-r0
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
bind@9.18.19-r1
9.18.37-r0
1
ghcr.io/puckpuck/seashell:1.2ef5e31333821
bind@9.18.19-r0
9.18.37-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.