StackRadar

CVE-2025-45582

Medium

Advisory

Published 11 Jul 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
983
of 17,787 indexed, latest versions
Container images
974
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: tar security update

Carried by container images the latest versions of 983 of 17,787 indexed charts deploy, on 974 images.

Affected packageAffected versionsFixed inImages
tarrpm1.34-150000.3.34.1, 1.35-160000.2.2, 2:1.34-6.el9_1, 2:1.34-6.el9_4.1+2 more1.34-150000.3.37.1, 1.35-160000.3.1, 2:1.34-9.el9_7, 2:1.35-9.el10_140
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+19 more1.34+dfsg-1ubuntu0.1.22.04.4, 1.35+dfsg-3ubuntu0.2, 1.35+dfsg-4ubuntu0.2934
OSV records
RHSA-2026:0002RHSA-2026:0067RLSA-2026:0067UBUNTU-CVE-2025-45582SUSE-SU-2026:1177-1SUSE-SU-2026:21143-1
Also known as
RHSA-2026:0434, RHSA-2026:0435, USN-8510-1

Charts affected

983 by stars
ChartLatestAffected imagesRadar Score
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.2.0-v10e44b2b49d059
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

5,599
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

4,125
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

45,392
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

15,345
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

9,396
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,360
bugsinkvictorlane0.3.71 of 2See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mariadb:12.0-noble607835cd628b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,097
twenty-crmvictorlane0.0.12 of 3See more

twenty-crm victorlane 0.0.1

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
redis/redis-stack-server:latest798ab84d9f26
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
twentycrm/twenty-postgres-spilo:latest2f78405a78be
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

13,563
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,233
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
tar@1.29b-2ubuntu0.2
no fix listed

Open the chart page →

7,892
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

7,696
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,124
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

11,444
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,233
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
wateim/lighthouse-launch:latest2520149ee574
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

5,077
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

11,167
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

6,272
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
tar@1.29b-2ubuntu0.3
no fix listed

Open the chart page →

9,748
frank-gatewaywearefrank0.3.01 of 1See more

frank-gateway wearefrank 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

1,113
myweatherhelmwebapp11.3.502 of 8See more

myweatherhelm webapp1 1.3.50

2 of the 8 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

9,225
myweatherhelm-schedulingwebapp11.3.922 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

2 of the 9 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

9,225
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

14,420
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
library/mongo:4.44be76f674fc4
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

28,699
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

15,287
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4
openebs/node-disk-operator:2.1.06afe2123c457
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

10,568
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

9,296
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

2,229
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

6,323
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,032
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

14,172
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

2,136
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
tar@1.29b-2ubuntu0.2
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

9,250

Container images carrying it

974 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
radondb/clickhouse-server:v21.1.3.32-stable4732df471073
tar@1.29b-2ubuntu0.2
no fix listed
1
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
tar@1.28-2.1ubuntu0.1
no fix listed
1
rancher/nginx-ingress-controller:v1.14.5-hardened26cbc1e932b5b
tar@1.35-160000.2.2
1.35-160000.3.1
1
razorbladex401/dayz:latest6a4d79248e7d
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
razzy10/product-service:latest702e411956db
tar@2:1.34-7.el9
2:1.34-9.el9_7
1
readysettech/sqp:latest588f3507280e
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
readysettech/sqp-duckdb:latest67a83203ce60
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
redis/redis-stack-server:6.2.6-v251a58f32d412
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
redis/redis-stack-server:latest798ab84d9f26
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
redis/redis-stack-server:7.4.0-v0887cf87cc744
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
resouer/redis-slave:v2e2f198b49ba7
tar@1.27.1-1
no fix listed
1
resurfaceio/resurface:3.7.84d5cda2f64109
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
rezachalak/bzen-mongo:1.0.034f694325191
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
rm3l/dev-feed-api:latest9a7f732245a3
tar@2:1.34-6.el9_1
2:1.34-9.el9_7
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
robotshop/rs-mongodb:latest119b545823cd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
rraahul/test:latestbfe2c1183bc0
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
rrobetti/ojp:0.1.0-beta1141bd88232b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
rtuszik/photon-docker:2.4.021549c60f9e6
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
rundeck/rundeck:3.2.74d64fe56f767
tar@1.28-2.1ubuntu0.1
no fix listed
1
rundeck/rundeck:3.0.16b13e8059ad72
tar@1.28-2.1ubuntu0.1
no fix listed
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3ce9ce8293e4e
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9bb64bf14467d
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525799c35f9f306
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
schemahero/schemahero-manager:0.22.11609e1a05cd3
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
tar@1.35+dfsg-4ubuntu0.1
1.35+dfsg-4ubuntu0.2
1
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
tar@1.35+dfsg-4ubuntu0.1
1.35+dfsg-4ubuntu0.2
1
scrapinghub/splash:3.4.1a5f89bc84606
tar@1.29b-2ubuntu0.1
no fix listed
1
seafileltd/seafile-mc:9.0.106693911bcc40
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
seafileltd/seafile-mc:10.0.170628f29c663
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
seafileltd/seafile-mc:9.0.97ac833196f60
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
seldonio/locust-core:0.81d0da98a2d76
tar@1.28-2.1ubuntu0.1
no fix listed
1
shaowenchen/ops-controller-manager:latest26da43bb5b66
tar@1.34+dfsg-1ubuntu0.1.22.04.3
1.34+dfsg-1ubuntu0.1.22.04.4
1
shaowenchen/ops-server:latest315444f703f4
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
tar@1.29b-2ubuntu0.2
no fix listed
1
sigp/lighthouse:v7.0.12cae720e9a35
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
sigp/lighthouse:v7.1.0870934e38931
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
sigp/lighthouse:v2.1.2ad501f02cfef
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
sismics/docs:v1.10f4b0ef019cf1
tar@1.29b-2
no fix listed
1
slagattollas/weatherservice-practica:latest68e7f56393fc
tar@1.29b-2ubuntu0.2
no fix listed
1
snipe/snipe-it:v8.3.1141ebf2386fe
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.