CVE-2025-4435

High

Advisory

Published 3 Jun 2025In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 20; of 17,781 indexed, latest versions
Container images: 16; deployed by those charts
Fix available: 2 of 2; affected packages

Tarfile extracts filtered members when errorlevel=0

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 16 images.

Affected package	Affected versions	Fixed in	Images
python3.12deb	3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+1 more	3.12.3-1ubuntu0.7	14
pythonbitnami	3.11.11-0, 3.12.8-0	3.9.23	2

OSV records: BIT-python-2025-4435 UBUNTU-CVE-2025-4435
Also known as: BIT-libpython-2025-4435, BIT-python-min-2025-4435, PSF-2025-8, USN-7583-1

Charts affected

20 by stars

Chart

Latest

Affected images

Radar Score

jira-softwaremox

2.7.1

1 of 3 See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
atlassian/jira-software :9.7.2	64a75aa4ec4e	python3.12@3.12.3-1ubuntu0.5	3.12.3-1ubuntu0.7

Open the chart page →

8,636

thehivestrangebee-helm

1.0.6

1 of 7 See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	python@3.11.11-0	3.9.23

Open the chart page →

16,210

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	python3.12@3.12.3-1ubuntu0.3	3.12.3-1ubuntu0.7

Open the chart page →

4,147

dayz-dedicated-serverjespernohr

0.1.2

1 of 3 See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
ghcr.io/jespernohr/dayz-dedicated-server :0.1.1	ec01d3ac7887	python3.12@3.12.3-1ubuntu0.2	3.12.3-1ubuntu0.7

Open the chart page →

4,309

rstudiodsri-helm-charts

0.1.28

1 of 1 See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	python3.12@3.12.3-1ubuntu0.5	3.12.3-1ubuntu0.7

Open the chart page →

5,670

zabbix-server-mysqlfermosit

3.0.2

1 of 4 See more

zabbix-server-mysql fermosit 3.0.2

1 of the 4 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	python3.12@3.12.3-1ubuntu0.4	3.12.3-1ubuntu0.7

Open the chart page →

12,840

magentomagento

3.2.3

1 of 12 See more

magento magento 3.2.3

1 of the 12 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.1.0-management	935b3f84c1e4	python3.12@3.12.3-1ubuntu0.5	3.12.3-1ubuntu0.7

Open the chart page →

13,479

mw-kube-agent-v2middleware-labs

2.8.6

1 of 1 See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	python3.12@3.12.3-1ubuntu0.3	3.12.3-1ubuntu0.7

Open the chart page →

4,137

rabbitmqrabbitmq-magefleet

1.2.0

1 of 1 See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.1.0-management	935b3f84c1e4	python3.12@3.12.3-1ubuntu0.5	3.12.3-1ubuntu0.7

Open the chart page →

2,762

arlas-aiasarlas-stack

28.8.0

1 of 22 See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
ghcr.io/developmentseed/titiler :0.22.4	8ac53eb38393	python@3.12.8-0	3.9.23

Open the chart page →

40,238

node-appbryopsida

0.5.1

1 of 2 See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	python3.12@3.12.3-1ubuntu0.5	3.12.3-1ubuntu0.7

Open the chart page →

14,352

datacube-indexdatacube-charts

0.4.4

1 of 2 See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
opendatacube/ows :latest	668cbb41473c	python3.12@3.12.3-1ubuntu0.3	3.12.3-1ubuntu0.7

Open the chart page →

6,123

datacube-owsdatacube-charts

0.20.1

1 of 1 See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
opendatacube/ows :latest	668cbb41473c	python3.12@3.12.3-1ubuntu0.3	3.12.3-1ubuntu0.7

Open the chart page →

5,974

photoprismdjjudas21

99.99.99

1 of 1 See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
photoprism/photoprism :240711-ce	fc6fd632ca74	python3.12@3.12.3-1	3.12.3-1ubuntu0.7

Open the chart page →

16,954

opencloudjacobcolvin

0.2.3

1 of 13 See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	python3.12@3.12.3-1	3.12.3-1ubuntu0.7

Open the chart page →

45,239

steamcmd-managerjfwenisch

0.4.5

1 of 1 See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
ghcr.io/jfwenisch/steamcmd-manager :v0.4.5	dab685e668d9	python3.12@3.12.3-1ubuntu0.3	3.12.3-1ubuntu0.7

Open the chart page →

6,586

webtoolsjfwenisch

0.1.4

1 of 1 See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
ghcr.io/jfwenisch/webtools :v0.1.4	4569cae83c70	python3.12@3.12.3-1ubuntu0.3	3.12.3-1ubuntu0.7

Open the chart page →

6,568

k8s-dev-podk8s-dev-pod

0.3.1

1 of 1 See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	python3.12@3.12.3-1ubuntu0.5	3.12.3-1ubuntu0.7

Open the chart page →

8,811

phronetisphronetis

0.1.27

1 of 2 See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
knspar/phronetis :0.1.46	09499d2dc91a	python3.12@3.12.3-1ubuntu0.5	3.12.3-1ubuntu0.7

Open the chart page →

16,196

opencloudunxwares

0.2.3

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-4435.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	python3.12@3.12.3-1	3.12.3-1ubuntu0.7

Open the chart page →

45,239

Container images carrying it

16 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
apache/tika :2.9.2.1-full	ae0b86d3c4d0	python3.12@3.12.3-1	3.12.3-1ubuntu0.7	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	python3.12@3.12.3-1ubuntu0.5	3.12.3-1ubuntu0.7	2
opendatacube/ows :latest	668cbb41473c	python3.12@3.12.3-1ubuntu0.3	3.12.3-1ubuntu0.7	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	python3.12@3.12.3-1ubuntu0.5	3.12.3-1ubuntu0.7	2
atlassian/jira-software :9.7.2	64a75aa4ec4e	python3.12@3.12.3-1ubuntu0.5	3.12.3-1ubuntu0.7	1
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	python@3.11.11-0	3.9.23	1
knspar/phronetis :0.1.46	09499d2dc91a	python3.12@3.12.3-1ubuntu0.5	3.12.3-1ubuntu0.7	1
photoprism/photoprism :240711-ce	fc6fd632ca74	python3.12@3.12.3-1	3.12.3-1ubuntu0.7	1
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	python3.12@3.12.3-1ubuntu0.4	3.12.3-1ubuntu0.7	1
ghcr.io/developmentseed/titiler :0.22.4	8ac53eb38393	python@3.12.8-0	3.9.23	1
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	python3.12@3.12.3-1ubuntu0.3	3.12.3-1ubuntu0.7	1
ghcr.io/jespernohr/dayz-dedicated-server :0.1.1	ec01d3ac7887	python3.12@3.12.3-1ubuntu0.2	3.12.3-1ubuntu0.7	1
ghcr.io/jfwenisch/steamcmd-manager :v0.4.5	dab685e668d9	python3.12@3.12.3-1ubuntu0.3	3.12.3-1ubuntu0.7	1
ghcr.io/jfwenisch/webtools :v0.1.4	4569cae83c70	python3.12@3.12.3-1ubuntu0.3	3.12.3-1ubuntu0.7	1
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	python3.12@3.12.3-1ubuntu0.5	3.12.3-1ubuntu0.7	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	python3.12@3.12.3-1ubuntu0.3	3.12.3-1ubuntu0.7	1