StackRadar

CVE-2025-45582

Medium

Advisory

Published 11 Jul 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
983
of 17,787 indexed, latest versions
Container images
974
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: tar security update

Carried by container images the latest versions of 983 of 17,787 indexed charts deploy, on 974 images.

Affected packageAffected versionsFixed inImages
tarrpm1.34-150000.3.34.1, 1.35-160000.2.2, 2:1.34-6.el9_1, 2:1.34-6.el9_4.1+2 more1.34-150000.3.37.1, 1.35-160000.3.1, 2:1.34-9.el9_7, 2:1.35-9.el10_140
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+19 more1.34+dfsg-1ubuntu0.1.22.04.4, 1.35+dfsg-3ubuntu0.2, 1.35+dfsg-4ubuntu0.2934
OSV records
RHSA-2026:0002RHSA-2026:0067RLSA-2026:0067UBUNTU-CVE-2025-45582SUSE-SU-2026:1177-1SUSE-SU-2026:21143-1
Also known as
RHSA-2026:0434, RHSA-2026:0435, USN-8510-1

Charts affected

983 by stars
ChartLatestAffected imagesRadar Score
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.2.0-v10e44b2b49d059
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

5,599
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

4,125
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

45,392
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

15,345
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

9,396
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,360
bugsinkvictorlane0.3.71 of 2See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mariadb:12.0-noble607835cd628b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,097
twenty-crmvictorlane0.0.12 of 3See more

twenty-crm victorlane 0.0.1

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
redis/redis-stack-server:latest798ab84d9f26
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
twentycrm/twenty-postgres-spilo:latest2f78405a78be
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

13,563
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,233
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
tar@1.29b-2ubuntu0.2
no fix listed

Open the chart page →

7,892
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

7,696
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,124
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

11,444
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,233
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
wateim/lighthouse-launch:latest2520149ee574
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

5,077
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

11,167
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

6,272
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
tar@1.29b-2ubuntu0.3
no fix listed

Open the chart page →

9,748
frank-gatewaywearefrank0.3.01 of 1See more

frank-gateway wearefrank 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

1,113
myweatherhelmwebapp11.3.502 of 8See more

myweatherhelm webapp1 1.3.50

2 of the 8 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

9,225
myweatherhelm-schedulingwebapp11.3.922 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

2 of the 9 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

9,225
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

14,420
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
library/mongo:4.44be76f674fc4
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

28,699
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

15,287
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4
openebs/node-disk-operator:2.1.06afe2123c457
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

10,568
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

9,296
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

2,229
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

6,323
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,032
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

14,172
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

2,136
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
tar@1.29b-2ubuntu0.2
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

9,250

Container images carrying it

974 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
glasskube/operator:0.12.2be5133100d63
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
gopinatht/ovs-plugin-installer:latest632cb2e9c399
tar@1.28-2.1ubuntu0.1
no fix listed
1
gotson/komga:0.99.49b15ea6bfc30
tar@1.29b-2ubuntu0.1
no fix listed
1
gradiant/open5gs-dbctl:0.10.3332031245fce
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
grafana/agent:v0.44.23364714a2f64
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
grafana/alloy:v1.5.101a63f4e032c
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
grafana/alloy:v1.4.306bdcbb51fc2
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
grafana/alloy:v1.16.384b76d56c594
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
grafana/alloy:v1.11.38c7256f412fe
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
grafana/alloy:v1.14.0f50931848bd8
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
grafana/promtail:3.5.165bfae480b57
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
grafana/promtail:3.6.18dcfdf466da0
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
graylog/graylog:6.1.1019de1aff48c2
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
grpl/grapple-cli:0.2.127c00aafee6629
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
guacamole/guacamole:1.5.50f62f6d17ab3
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
tar@2:1.34-7.el9
2:1.34-9.el9_7
1
hasura/graphql-engine:v2.34.0-ce0111b0204136
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
hasura/graphql-engine:v2.48.10f6c1c4b957d2
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
haugene/transmission-openvpn:4.0059216cfae4b
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
haveagitgat/tdarr:2.00.181256348872ce
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
tar@1.30+dfsg-7
no fix listed
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
hivemq/hivemq-edge:2026.13aba306d1f089
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
hivemq/hivemq-swarm:4.54.0f9746d5d70fa
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
hiversh/gateway:0.1.45839226cc6e41
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
hmediade/printserver:latest481a552c8e1c
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
hmediade/printserver-init:latest7f005eb6c718
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
housewrecker/gaps:latestf417dd0a7547
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
tar@1.29b-2ubuntu0.2
no fix listed
1
hugohg34/toposervice:0.0.2812a03b3f274
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
hyperglance/init:wildfly467ad8491bc3
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
hyperglance/init:postgres9fd5faf1fe80
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
hyperglance/init:apacheb2f8c6d52623
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
tar@1.28-2.1ubuntu0.1
no fix listed
1
hyperledger/fabric-orderer:1.3.06ee1abcfd840
tar@1.28-2.1ubuntu0.1
no fix listed
1
hyperledger/fabric-peer:1.3.06756c7c48234
tar@1.28-2.1ubuntu0.1
no fix listed
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
tar@1.28-2.1ubuntu0.1
no fix listed
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
tar@1.28-2.1ubuntu0.1
no fix listed
1
ibmcom/microclimate-theia:lateste17bdccc5030
tar@1.28-2.1ubuntu0.1
no fix listed
1
ibmcom/skydive:0.22.0395e60cc6e3d
tar@1.29b-2ubuntu0.1
no fix listed
1
infiniflow/infinity:v0.7.0992c87a68612
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
inseefrlab/shelly:cloudshell31f04ca7436b
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
instructure/kinesalite:latest34400d82f28f
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
intel/trusted-certificate-issuer:0.5.0591a9db4a427
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.