StackRadar

CVE-2025-46394

Low

Advisory

Published 23 Apr 2025In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
861
of 17,790 indexed, latest versions
Container images
907
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 861 of 17,790 indexed charts deploy, on 907 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.36.1-r10, 1.36.1-r11, 1.36.1-r15, 1.36.1-r17+15 more1.36.1-r21, 1.36.1-r31, 1.37.0-r14, 1.37.0-r20+1 more882
busyboxdeb1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+6 moreno fix listed25
OSV records
ALPINE-CVE-2025-46394CGA-35qx-p5pw-chp7DEBIAN-CVE-2025-46394UBUNTU-CVE-2025-46394
Also known as
CGA-jgxh-j72w-f3hw

Charts affected

861 by stars
ChartLatestAffected imagesRadar Score
wallarm-node-nextwallarmVerified publisher0.5.31 of 2See more

wallarm-node-next wallarm 0.5.3

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
wallarm/node-next:0.5.24314f3d2b918
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

2,408
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
busybox@1.37.0-r19
1.37.0-r20

Open the chart page →

4,985
hazelcastwenerme5.10.31 of 2See more

hazelcast wenerme 5.10.3

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

2,623
wexa-studiowexa-studio1.2.02 of 15See more

wexa-studio wexa-studio 1.2.0

2 of the 15 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
busybox@1.37.0-r18
1.37.0-r20
temporalio/server:1.29.1c1e3326b2ce1
busybox@1.37.0-r18
1.37.0-r20

Open the chart page →

14,618
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
dwdraju/alpine-curl-jq:latest83bd9be2b14b
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

6,323
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
busybox@1.37.0-r9
1.37.0-r14

Open the chart page →

1,286
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
busybox@1.37.0-r12
1.37.0-r14

Open the chart page →

1,187
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
busybox@1.37.0-r12
1.37.0-r14

Open the chart page →

789
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

13,197
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

9,381
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
busybox@1.36.1-r19
1.36.1-r21

Open the chart page →

569

Container images carrying it

907 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4b1557553a2b3
busybox@1.36.1-r15
1.36.1-r21
1
ghcr.io/appscode/capi-ops-manager:v0.0.57465f35b684c
busybox@1.37.0-r9
1.37.0-r14
1
ghcr.io/appscode/deploy-ui:0.3.6f3e07eff3997
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/appscode/inbox-ui:0.0.5ae3b0e29daaa
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/appscode/license-proxyserver:v0.0.8d6c2532ea386
busybox@1.36.1-r15
1.36.1-r21
1
ghcr.io/appscode/marketplace-ui:0.3.1d52177072013
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/argelbargel/vault-raft-snapshot-agent:v0.12.5345174727a2b
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/astriaorg/flame:0.1.0c8af1c5aae40
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/astriaorg/seq-faucet:0.9.0bf3cb9b505b6
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/bastienwirtz/homer:v25.11.15c3a0fb561e0
busybox@1.37.0-r13
1.37.0-r14
1
ghcr.io/bastienwirtz/homer:v25.02.1cf4ae752adbb
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/behappy-project/behappy-tencentcloud-exporter:0.1.3a0ba56e1501b
busybox@1.36.1-r20
1.36.1-r21
1
ghcr.io/beluga-cloud/actual/actualserver:23.12.1c8a0d5ec5a12
busybox@1.36.1-r15
1.36.1-r21
1
ghcr.io/bensoer/external-secrets-reloader:v0.1.38e31b5a81853
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
busybox@1.37.0-r48
1.37.0-r50
1
ghcr.io/bitmagnet-io/bitmagnet:v0.10.0cf2c16fac5b5
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/bnb-chain/bsc:1.6.2fd0e3ec7d960
busybox@1.37.0-r13
1.37.0-r14
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/bryopsida/openmct:main38b6a50a62b2
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/bryopsida/patchwork:mainc01e018bced4
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
busybox@1.36.1-r19
1.36.1-r21
1
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/chronicleprotocol/challenger-go:0.1.2c8d5a3c0e966
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/chronicleprotocol/oracles-updates-exporter:0.0.4992d0e793af6
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/cloudscript-technology/k8s-monitoring-app:v0.0.25cab66a6b3574
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
busybox@1.37.0-r8
1.37.0-r14
1
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
busybox@1.37.0-r8
1.37.0-r14
1
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
busybox@1.37.0-r8
1.37.0-r14
1
ghcr.io/cncf/clowarden/dbmigrator:v0.2.3c022fd42de45
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/cncf/clowarden/server:v0.2.3f9379427b917
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/cncf/gitvote/dbmigrator:v1.5.0f1e7efe440da
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/cncf/gitvote/server:v1.5.026167f01c898
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/cndoit18/lxcfs-manager:latest6bb61ded2625
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/colanode/web:latestbcad696f03ee
busybox@1.37.0-r12
1.37.0-r14
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.