StackRadar

CVE-2025-45582

Medium

Advisory

Published 11 Jul 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
983
of 17,787 indexed, latest versions
Container images
974
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: tar security update

Carried by container images the latest versions of 983 of 17,787 indexed charts deploy, on 974 images.

Affected packageAffected versionsFixed inImages
tarrpm1.34-150000.3.34.1, 1.35-160000.2.2, 2:1.34-6.el9_1, 2:1.34-6.el9_4.1+2 more1.34-150000.3.37.1, 1.35-160000.3.1, 2:1.34-9.el9_7, 2:1.35-9.el10_140
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+19 more1.34+dfsg-1ubuntu0.1.22.04.4, 1.35+dfsg-3ubuntu0.2, 1.35+dfsg-4ubuntu0.2934
OSV records
RHSA-2026:0002RHSA-2026:0067RLSA-2026:0067UBUNTU-CVE-2025-45582SUSE-SU-2026:1177-1SUSE-SU-2026:21143-1
Also known as
RHSA-2026:0434, RHSA-2026:0435, USN-8510-1

Charts affected

983 by stars
ChartLatestAffected imagesRadar Score
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.2.0-v10e44b2b49d059
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

5,599
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

4,125
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

45,392
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

15,345
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

9,396
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,360
bugsinkvictorlane0.3.71 of 2See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mariadb:12.0-noble607835cd628b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,097
twenty-crmvictorlane0.0.12 of 3See more

twenty-crm victorlane 0.0.1

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
redis/redis-stack-server:latest798ab84d9f26
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
twentycrm/twenty-postgres-spilo:latest2f78405a78be
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

13,563
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,233
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
tar@1.29b-2ubuntu0.2
no fix listed

Open the chart page →

7,892
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

7,696
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,124
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

11,444
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,233
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
wateim/lighthouse-launch:latest2520149ee574
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

5,077
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

11,167
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

6,272
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
tar@1.29b-2ubuntu0.3
no fix listed

Open the chart page →

9,748
frank-gatewaywearefrank0.3.01 of 1See more

frank-gateway wearefrank 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

1,113
myweatherhelmwebapp11.3.502 of 8See more

myweatherhelm webapp1 1.3.50

2 of the 8 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

9,225
myweatherhelm-schedulingwebapp11.3.922 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

2 of the 9 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

9,225
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

14,420
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
library/mongo:4.44be76f674fc4
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

28,699
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

15,287
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4
openebs/node-disk-operator:2.1.06afe2123c457
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

10,568
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

9,296
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

2,229
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

6,323
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,032
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

14,172
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

2,136
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
tar@1.29b-2ubuntu0.2
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

9,250

Container images carrying it

974 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
circleci/runner:launch-agent9bdc62f02162
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
ciscolabs/msm-nc:0710202336d02faad958
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
citizenstig/httpbin:latestb81c818ccb86
tar@1.28-2.1ubuntu0.1
no fix listed
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
clickhouse/clickhouse-server:24.81ffa82edee00
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
clickhouse/clickhouse-server:24.4.12e6587b81a26
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
clickhouse/clickhouse-server:23.8512bb8a21483
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
clickhouse/clickhouse-server:25.3.2.398745843b17f9
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
clickhouse/clickhouse-server:26.3.1092098d3b31dd
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
clickhouse/clickhouse-server:25.3.14.14b627d7a9bc0e
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
cloudve/janis-terminal:latestaf56e77ca587
tar@1.29b-2ubuntu0.1
no fix listed
1
cloudve/ttyd:latestd79c1c5881c0
tar@1.29b-2ubuntu0.1
no fix listed
1
codetogether/codetogether:latest4348c8a38752
tar@2:1.34-6.el9_1
2:1.34-9.el9_7
1
consensys/teku:25.4.1bf6ecd2ea716
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
cortezaproject/corteza:2024.9.60bcdcbcd3c63
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
cortezaproject/corteza:2024.9.08eb7a26605c9
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
countly/countly-server:25.05.4e3c238248f99
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
cradlepoint/pgbouncer:1.0.18f5720b0cd03
tar@1.29b-2
no fix listed
1
cribl/cribl:3.0.2762747cb6796
tar@1.29b-2ubuntu0.2
no fix listed
1
csiplugin/csi-neonsan:v1.2.21fa83d45417f
tar@1.28-2.1ubuntu0.2
no fix listed
1
daedalusproject/base_kubectl:latest6f72b5119eda
tar@1.30+dfsg-7
no fix listed
1
darthsim/imgproxy:v3.30.13b709e4a0e5e
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
darthsim/imgproxy:v3.26476cb08c816a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
daskdev/dask-notebook:1.1.0052630f5ca04
tar@1.29b-2
no fix listed
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
tar@1.29b-2ubuntu0.3
no fix listed
1
datadog/agent:6aad9994de6a7
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
datalayers/datalayers:v2.2.1017b292079239
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
datalust/seq:5.0.832-pre9c731bb207a6
tar@1.28-2.1ubuntu0.1
no fix listed
1
datalust/seq-input-gelf:3.0.441-x643de34aed5642
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
tar@1.35+dfsg-3ubuntu0.1
1.35+dfsg-3ubuntu0.2
1
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
dellcloud/category:distributed02fc234353a9
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
dellcloud/pages:1.04d2eb25b9225
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
dniel/api-posts:master45a667852f2a
tar@1.29b-2ubuntu0.1
no fix listed
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
dremio/dremio-oss:24.1.080ed2e3b7c43
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
drpcorg/dshackle:0.54.08858fae1859d
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
duck1123/cert-downloader:latest0e29f19fa67c
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
duck1123/lnd-fileserver:latest9d6fb247b714
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.