StackRadar

CVE-2025-45582

Medium

Advisory

Published 11 Jul 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
983
of 17,787 indexed, latest versions
Container images
974
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: tar security update

Carried by container images the latest versions of 983 of 17,787 indexed charts deploy, on 974 images.

Affected packageAffected versionsFixed inImages
tarrpm1.34-150000.3.34.1, 1.35-160000.2.2, 2:1.34-6.el9_1, 2:1.34-6.el9_4.1+2 more1.34-150000.3.37.1, 1.35-160000.3.1, 2:1.34-9.el9_7, 2:1.35-9.el10_140
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+19 more1.34+dfsg-1ubuntu0.1.22.04.4, 1.35+dfsg-3ubuntu0.2, 1.35+dfsg-4ubuntu0.2934
OSV records
RHSA-2026:0002RHSA-2026:0067RLSA-2026:0067UBUNTU-CVE-2025-45582SUSE-SU-2026:1177-1SUSE-SU-2026:21143-1
Also known as
RHSA-2026:0434, RHSA-2026:0435, USN-8510-1

Charts affected

983 by stars
ChartLatestAffected imagesRadar Score
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.2.0-v10e44b2b49d059
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

5,599
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

4,125
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

45,392
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

15,345
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

9,396
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,360
bugsinkvictorlane0.3.71 of 2See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mariadb:12.0-noble607835cd628b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,097
twenty-crmvictorlane0.0.12 of 3See more

twenty-crm victorlane 0.0.1

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
redis/redis-stack-server:latest798ab84d9f26
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
twentycrm/twenty-postgres-spilo:latest2f78405a78be
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

13,563
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,233
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
tar@1.29b-2ubuntu0.2
no fix listed

Open the chart page →

7,892
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

7,696
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,124
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

11,444
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,233
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
wateim/lighthouse-launch:latest2520149ee574
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

5,077
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

11,167
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

6,272
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
tar@1.29b-2ubuntu0.3
no fix listed

Open the chart page →

9,748
frank-gatewaywearefrank0.3.01 of 1See more

frank-gateway wearefrank 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

1,113
myweatherhelmwebapp11.3.502 of 8See more

myweatherhelm webapp1 1.3.50

2 of the 8 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

9,225
myweatherhelm-schedulingwebapp11.3.922 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

2 of the 9 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

9,225
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

14,420
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
library/mongo:4.44be76f674fc4
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

28,699
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

15,287
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4
openebs/node-disk-operator:2.1.06afe2123c457
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

10,568
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

9,296
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

2,229
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

6,323
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,032
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

14,172
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

2,136
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
tar@1.29b-2ubuntu0.2
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

9,250

Container images carrying it

974 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
lumenvox/cloud-deployment:2.0.0ea8110886d38
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
lumenvox/cloud-management-api:2.0.0b9a23345eabd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
maptiler/server:4.8.07e206140057b
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
mbround18/valheim:3.1.070bd4da591cd
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
mediagis/nominatim:5.3.27923a8e67197
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
mediagis/nominatim:3.7c15e941485ef
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
milvusdb/etcd:3.5.25-r1fededb2f2d63
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
milvusdb/milvus:v2.2.13a3a55e1c1497
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
mlikiowa/napcat-docker:latest1336a777f9a4
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
mshanley80/httpbin2022:latest5b189a70c0fb
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
muluder/prograncontrollermcord:0.1.843b597a93da7
tar@1.28-2.1ubuntu0.1
no fix listed
1
nelssec/qualys-agent-bootstrapper:v2.1.05e471f0cdeaa
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
netbirdio/management:0.45.10c9994b393ea
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
netbirdio/management:0.60.252682e5f48f9
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
netbirdio/management:0.46.0b0adc4ad4ec6
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
netboxcommunity/netbox:v3.2.83d652dca5351
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4
1
nethermind/nethermind:1.14.615517708c3b6
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4
1
nethermind/nethermind:1.31.893e57917371a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
nethermind/nethermind:1.31.9aeca3b55bda5
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
netrisai/bare-metal-dpu-agent:4.7.0.003c271efe749d0
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
netrisai/controller-grpc:4.6.0.00753178bf173c2
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
netrisai/controller-telescope:4.6.0.00414d82948a8b2
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
netrisai/controller-telescope-notifier:3.0.455e826ef9a5d
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
netrisai/controller-web-session-generator:0.2.0a030a31289f4
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
networkboot/dhcpd:lateste99bbfbd6fb2
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4
1
ngick8stesting/c3po-mme:mwca-mme-debug8dd6dea45be4
tar@1.28-2.1ubuntu0.1
no fix listed
1
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
nvidia/k8s-device-plugin:v0.9.0964847cc3fd8
tar@1.28-2.1ubuntu0.1
no fix listed
1
obolnetwork/helios:e10e753cb7e97d39d46
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
oled01/db-backup:0.1.06302fd2b5333
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4
1
olvid/bot-daemon:2.0.1e0e6b165d879
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
omecproject/c3po-hss:master-latest638671ef4842
tar@1.28-2.1ubuntu0.2
no fix listed
1
omecproject/c3po-hssdb:master-latest28a90cc26716
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
tar@1.29b-2ubuntu0.1
no fix listed
1
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
tar@1.29b-2ubuntu0.1
no fix listed
1
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
tar@1.29b-2ubuntu0.2
no fix listed
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
tar@1.29b-2ubuntu0.1
no fix listed
1
omecproject/ngic-cp:central-cp-multi-upfs-latest24a389a0a4fe
tar@1.29b-2ubuntu0.1
no fix listed
1
omecproject/onos-progran:1.0.05715e5648aa0
tar@1.28-2.1ubuntu0.1
no fix listed
1
omecproject/openmme:master-latest64776cb9edb3
tar@1.28-2.1ubuntu0.1
no fix listed
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
tar@1.28-2.1ubuntu0.1
no fix listed
1
onosproject/onos:2.2.144914a8d4b3f
tar@1.29b-2ubuntu0.1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.