StackRadar

CVE-2025-45582

Medium

Advisory

Published 11 Jul 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.6
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
983
of 17,787 indexed, latest versions
Container images
974
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: tar security update

Carried by container images the latest versions of 983 of 17,787 indexed charts deploy, on 974 images.

Affected packageAffected versionsFixed inImages
tarrpm1.34-150000.3.34.1, 1.35-160000.2.2, 2:1.34-6.el9_1, 2:1.34-6.el9_4.1+2 more1.34-150000.3.37.1, 1.35-160000.3.1, 2:1.34-9.el9_7, 2:1.35-9.el10_140
tardeb1.27.1-1, 1.27.1-1ubuntu0.1, 1.28-2.1ubuntu0.1, 1.28-2.1ubuntu0.2+19 more1.34+dfsg-1ubuntu0.1.22.04.4, 1.35+dfsg-3ubuntu0.2, 1.35+dfsg-4ubuntu0.2934
OSV records
RHSA-2026:0002RHSA-2026:0067RLSA-2026:0067UBUNTU-CVE-2025-45582SUSE-SU-2026:1177-1SUSE-SU-2026:21143-1
Also known as
RHSA-2026:0434, RHSA-2026:0435, USN-8510-1

Charts affected

983 by stars
ChartLatestAffected imagesRadar Score
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.2.0-v10e44b2b49d059
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

5,599
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

4,125
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

45,392
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
tar@1.28-2.1ubuntu0.1
no fix listed

Open the chart page →

15,345
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

9,396
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,360
bugsinkvictorlane0.3.71 of 2See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mariadb:12.0-noble607835cd628b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,097
twenty-crmvictorlane0.0.12 of 3See more

twenty-crm victorlane 0.0.1

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
redis/redis-stack-server:latest798ab84d9f26
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
twentycrm/twenty-postgres-spilo:latest2f78405a78be
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

13,563
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,233
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
tar@1.29b-2ubuntu0.2
no fix listed

Open the chart page →

7,892
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

7,696
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,124
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

11,444
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

20,233
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
wateim/lighthouse-launch:latest2520149ee574
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

5,077
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

11,167
istio-service-meshwbstack0.0.11 of 1See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
istio/pilot:1.17.1ce9d87606701
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

6,272
wbaas-backupwbstack0.1.01 of 1See more

wbaas-backup wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
tar@1.29b-2ubuntu0.3
no fix listed

Open the chart page →

9,748
frank-gatewaywearefrank0.3.01 of 1See more

frank-gateway wearefrank 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

1,113
myweatherhelmwebapp11.3.502 of 8See more

myweatherhelm webapp1 1.3.50

2 of the 8 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

9,225
myweatherhelm-schedulingwebapp11.3.922 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

2 of the 9 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed

Open the chart page →

9,225
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

14,420
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
library/mongo:4.44be76f674fc4
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

28,699
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
tar@1.29b-2ubuntu0.1
no fix listed

Open the chart page →

10,857
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

15,287
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4
openebs/node-disk-operator:2.1.06afe2123c457
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

10,568
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

9,296
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

2,229
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed

Open the chart page →

6,323
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

4,032
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4

Open the chart page →

14,172
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2

Open the chart page →

2,136
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-45582.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
tar@1.29b-2ubuntu0.2
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed

Open the chart page →

9,250

Container images carrying it

974 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kafkakraft/kafkakraft:3.7.02e4b593b878b
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
kayrosuno/kping:latestf3bd44b29b0d
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
kennethreitz/httpbin:latest599fe5e50731
tar@1.29b-2
no fix listed
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
knspar/phronetis:0.1.4609499d2dc91a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
kong/httpbin:latesta6ac46531193
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
kong/kong:3.9.16addf50e6bd8
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
krontechnology/aapm-agent:1.8.41cc7d5be6529
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
krontechnology/aapm-service:1.1.39dd602db8baa
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
tar@1.29b-2ubuntu0.1
no fix listed
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
tar@1.28-2.1ubuntu0.1
no fix listed
1
kudobuilder/controller:v0.9.069072d979708
tar@1.29b-2ubuntu0.1
no fix listed
1
kusionstack/ctrlmesh-manager:v0.2.065e3c32b64d7
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
kusionstack/kusion:v0.14.0126c8f0b0976
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
library/cassandra:3.11.10b095ff3248c6
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
library/elasticsearch:8.17.32cc40b15dff8
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/elasticsearch:8.15.0310b9fc03b06
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/elasticsearch:7.17.0332c6d416808
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
library/elasticsearch:7.17.1588c2ec10c7f2
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/elasticsearch:7.17.8fdc73b3249c1
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/flink:1.14.6-scala_2.122461f02672b3
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4
1
library/kibana:7.17.150172f1c538e7
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/kibana:8.18.004c0fc150f3a
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/kibana:7.17.8c5781ba340ef
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/kibana:7.17.3e2e2031c15be
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/logstash:7.17.817a4f64e9cf5
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/logstash:9.1.233eae14f0867
tar@2:1.34-7.el9
2:1.34-9.el9_7
1
library/mariadb:10.7.307e06f2e7ae9
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/mariadb:10.11.21c33370a599c
tar@1.34+dfsg-1ubuntu0.1.22.04.1
1.34+dfsg-1ubuntu0.1.22.04.4
1
library/mariadb:10.422edfe1c7834
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/mariadb:10.8.2-focal490f01279be1
tar@1.30+dfsg-7ubuntu0.20.04.1
no fix listed
1
library/mariadb:12.0.25b6a1eac15b8
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
library/mariadb:12.3.2628f228f0fd5
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
library/mariadb:10.6.218a16204dc96c
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/mariadb:10.79a48ac9f196f
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
library/mariadb:12.2.2b1cb255a9939
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
library/mariadb:10.10.2bfc25a68e113
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4
1
library/mariadb:10.6.15e22328f4d714
tar@1.30+dfsg-7ubuntu0.20.04.3
no fix listed
1
library/mariadb:10.9.4fbb8456ebdb1
tar@1.34+dfsg-1build3
1.34+dfsg-1ubuntu0.1.22.04.4
1
library/mariadb:11.7.2fcc7fcd7114a
tar@1.35+dfsg-3build1
1.35+dfsg-3ubuntu0.2
1
library/mongo:7.0.140032d2ca20db
tar@1.34+dfsg-1ubuntu0.1.22.04.2
1.34+dfsg-1ubuntu0.1.22.04.4
1
library/mongo:4.4.1305678ae4e5e1
tar@1.30+dfsg-7ubuntu0.20.04.2
no fix listed
1
library/mongo:3.6146c1fd999a6
tar@1.28-2.1ubuntu0.2
no fix listed
1
library/mongo:5.0.32-focal3b6c281e1c08
tar@1.30+dfsg-7ubuntu0.20.04.4
no fix listed
1
library/mongo:4.4-bionic3d0e6df9fd5b
tar@1.29b-2ubuntu0.2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.