StackRadar

CVE-2025-43343

Critical

Advisory

Published 15 Sept 2025In the index since 8 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3
of 17,781 indexed, latest versions
Container images
3
deployed by those charts
Fix available
1 of 3
affected packages

Red Hat Security Advisory: webkit2gtk3 security update

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 3 images.

Affected packageAffected versionsFixed inImages
qtwebkit-opensource-srcdeb5.212.0~alpha4-1ubuntu2.1, 5.212.0~alpha4-36no fix listed2
webkit2gtkdeb2.38.6-0ubuntu0.20.04.1no fix listed1
webkit2gtk3rpm2.42.5-1.el90:2.50.1-1.el9_41
OSV records
UBUNTU-CVE-2025-43343RHSA-2025:19914

Charts affected

3 by stars
ChartLatestAffected imagesRadar Score
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2025-43343.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
webkit2gtk3@2.42.5-1.el9
0:2.50.1-1.el9_4

Open the chart page →

7,450
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-43343.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
qtwebkit-opensource-src@5.212.0~alpha4-36
no fix listed

Open the chart page →

23,964
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-43343.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1
webkit2gtk@2.38.6-0ubuntu0.20.04.1
no fix listed
no fix listed

Open the chart page →

64,489

Container images carrying it

3 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
codetogether/codetogether:latest4348c8a38752
webkit2gtk3@2.42.5-1.el9
0:2.50.1-1.el9_4
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1
webkit2gtk@2.38.6-0ubuntu0.20.04.1
no fix listed
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
qtwebkit-opensource-src@5.212.0~alpha4-36
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.