StackRadar

CVE-2025-43859

Critical

Advisory

Published 24 Apr 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
133
of 17,781 indexed, latest versions
Container images
139
deployed by those charts
Fix available
1 of 1
affected package

h11 accepts some malformed Chunked-Encoding bodies

Carried by container images the latest versions of 133 of 17,781 indexed charts deploy, on 139 images.

Affected packageAffected versionsFixed inImages
h11pypi0.11.0, 0.12.0, 0.13.0, 0.14.00.16.0139
OSV records
GHSA-vqfr-h8mv-ghfj
Also known as
PYSEC-2026-348

Charts affected

133 by stars
ChartLatestAffected imagesRadar Score
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
h11@0.14.0
0.16.0

Open the chart page →

15,591
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
h11@0.14.0
0.16.0

Open the chart page →

9,607
imgtagrotationalVerified publisher0.2.01 of 1See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
h11@0.14.0
0.16.0

Open the chart page →

3,312
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
h11@0.14.0
0.16.0

Open the chart page →

3,512
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
h11@0.14.0
0.16.0

Open the chart page →

4,718
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
h11@0.14.0
0.16.0

Open the chart page →

3,887
test-helm-app2saam-helm-test0.1.01 of 1See more

test-helm-app2 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
asdkant/fastapi-hello-world:latesta23d8bf7c885
h11@0.11.0
0.16.0

Open the chart page →

2,770
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
h11@0.14.0
0.16.0

Open the chart page →

10,209
pgadminsb-helm-charts0.3.01 of 1See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.13561c1f8f99f2
h11@0.14.0
0.16.0

Open the chart page →

1,713
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
h11@0.14.0
0.16.0

Open the chart page →

3,045
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
h11@0.14.0
0.16.0

Open the chart page →

5,565
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
h11@0.14.0
0.16.0

Open the chart page →

7,901
horcruxstakewise1.0.11 of 1See more

horcrux stakewise 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
stakewiselabs/bls-horcrux:v1.0.02afd0c0b34cb
h11@0.11.0
0.16.0

Open the chart page →

1,421
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
h11@0.14.0
0.16.0

Open the chart page →

13,390
take-the-helmtake-the-helm0.1.01 of 1See more

take-the-helm take-the-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
cadmusthefounder/lnd:take-the-helm-0.1.0e596c5fbf80f
h11@0.13.0
0.16.0

Open the chart page →

805
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
h11@0.14.0
0.16.0

Open the chart page →

5,704
asrtest-opea1.0.01 of 1See more

asr test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/asr:1.025dd26d9cd09
h11@0.14.0
0.16.0

Open the chart page →

4,393
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
h11@0.14.0
0.16.0
opea/embedding-tei:1.05c9639de61c1
h11@0.14.0
0.16.0
opea/llm-tgi:1.00c25aab3f106
h11@0.14.0
0.16.0
opea/reranking-tei:1.0e48613afb191
h11@0.14.0
0.16.0
opea/retriever-redis:1.0eb746b263705
h11@0.14.0
0.16.0

Open the chart page →

39,090
codegentest-opea1.0.02 of 5See more

codegen test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
h11@0.14.0
0.16.0
opea/llm-tgi:1.00c25aab3f106
h11@0.14.0
0.16.0

Open the chart page →

28,814
codetranstest-opea1.0.02 of 5See more

codetrans test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
h11@0.14.0
0.16.0
opea/llm-tgi:1.00c25aab3f106
h11@0.14.0
0.16.0

Open the chart page →

28,385
docsumtest-opea1.0.02 of 5See more

docsum test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
h11@0.14.0
0.16.0
opea/llm-docsum-tgi:1.002f9e8fa5d71
h11@0.14.0
0.16.0

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
h11@0.14.0
0.16.0

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
h11@0.14.0
0.16.0

Open the chart page →

5,221
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
h11@0.14.0
0.16.0

Open the chart page →

4,720
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
h11@0.14.0
0.16.0

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
h11@0.14.0
0.16.0

Open the chart page →

5,198
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
h11@0.14.0
0.16.0

Open the chart page →

9,616
ttstest-opea1.0.01 of 1See more

tts test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/tts:1.0257ae94709e9
h11@0.14.0
0.16.0

Open the chart page →

4,377
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
h11@0.14.0
0.16.0

Open the chart page →

5,350
kasa-exporterth-chartsVerified publisher0.1.01 of 1See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
thelande/kasa_exporter:v0.2.3a1fdb8baa152
h11@0.14.0
0.16.0

Open the chart page →

1,515
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
h11@0.14.0
0.16.0

Open the chart page →

4,768
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
h11@0.12.0
0.16.0

Open the chart page →

3,118
grafana-matrix-forwarderzloi-space1.0.01 of 2See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-43859.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
h11@0.12.0
0.16.0

Open the chart page →

1,636

Container images carrying it

139 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
opea/llm-tgi:1.00c25aab3f106
h11@0.14.0
0.16.0
4
shashkist/flask-contacts-app:latest581de1fd6084
h11@0.14.0
0.16.0
4
quay.io/devtron/ai-agent:0.0.16545dac92173
h11@0.14.0
0.16.0
3
langgenius/dify-sandbox:0.2.009b7e8705673
h11@0.14.0
0.16.0
2
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
h11@0.12.0
0.16.0
2
opea/embedding-tei:1.05c9639de61c1
h11@0.14.0
0.16.0
2
opea/reranking-tei:1.0e48613afb191
h11@0.14.0
0.16.0
2
opea/retriever-redis:1.0eb746b263705
h11@0.14.0
0.16.0
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
h11@0.14.0
0.16.0
2
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
h11@0.14.0
0.16.0
1
apache/airflow:2.8.4-python3.964e58748b6b9
h11@0.14.0
0.16.0
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
h11@0.14.0
0.16.0
1
apache/airflow:2.8.1e5560ad0b86e
h11@0.14.0
0.16.0
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
h11@0.14.0
0.16.0
1
archish27/python-fastapi-postgres:latest6610071a2101
h11@0.13.0
0.16.0
1
asdkant/fastapi-hello-world:latesta23d8bf7c885
h11@0.11.0
0.16.0
1
assistiot/fl_local_operations_inference:latest0518b63a2e69
h11@0.14.0
0.16.0
1
assistiot/fl_repository:latest0fce3ea719a5
h11@0.12.0
0.16.0
1
assistiot/fl_training_collector:latest792715dd3084
h11@0.12.0
0.16.0
1
assistiot/open_api_backend:1.1.230812ba93555
h11@0.14.0
0.16.0
1
baserow/backend:1.31.1e0b3c8130b91
h11@0.14.0
0.16.0
1
baserow/baserow:1.30.1df0c42eb67e8
h11@0.14.0
0.16.0
1
bmeares/meerschaum:2.8.48e9c5bacaa82
h11@0.14.0
0.16.0
1
bnjbvr/kresus:0.22.137e216b182c8
h11@0.14.0
0.16.0
1
cadmusthefounder/lnd:take-the-helm-0.1.0e596c5fbf80f
h11@0.13.0
0.16.0
1
cdignam/kodiak:v0.54.05a6a55b39cee
h11@0.12.0
0.16.0
1
chaostoolkit/back:latest734f3af86125
h11@0.11.0
0.16.0
1
chaostoolkit/front:latest7f4a7eb9f7df
h11@0.11.0
0.16.0
1
chaostoolkit/middle:latestb95ba4961cfc
h11@0.11.0
0.16.0
1
ciuse99/suggestarr:v1.0.20d72768245ef5
h11@0.14.0
0.16.0
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
h11@0.14.0
0.16.0
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
h11@0.14.0
0.16.0
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
h11@0.14.0
0.16.0
1
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
h11@0.14.0
0.16.0
1
clsen2024/gwangju_2-3:service-a-151b1d45961cd
h11@0.14.0
0.16.0
1
clsen2024/gwangju_2-3:service-c-1efb1586c8299
h11@0.14.0
0.16.0
1
codecov/self-hosted-api:24.4.10475cb1c3136
h11@0.12.0
0.16.0
1
codecov/self-hosted-worker:24.4.1837f546b479b
h11@0.14.0
0.16.0
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
h11@0.14.0
0.16.0
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
h11@0.14.0
0.16.0
1
ddosify/selfhosted_backend:3.2.93c11e3182652
h11@0.14.0
0.16.0
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
h11@0.14.0
0.16.0
1
douz/helpdesk:latest4384103d0219
h11@0.12.0
0.16.0
1
dpage/pgadmin4:8.418cd5711fc9a
h11@0.14.0
0.16.0
1
dpage/pgadmin4:9.252cb72a9e3da
h11@0.14.0
0.16.0
1
dpage/pgadmin4:8.13561c1f8f99f2
h11@0.14.0
0.16.0
1
dserio83/velero-watchdog:0.1.8d5deae589229
h11@0.14.0
0.16.0
1
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
h11@0.14.0
0.16.0
1
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
h11@0.14.0
0.16.0
1
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
h11@0.14.0
0.16.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.