StackRadar

CVE-2025-46394

Low

Advisory

Published 23 Apr 2025In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
867
of 17,787 indexed, latest versions
Container images
912
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 867 of 17,787 indexed charts deploy, on 912 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.36.1-r10, 1.36.1-r11, 1.36.1-r15, 1.36.1-r17+15 more1.36.1-r21, 1.36.1-r31, 1.37.0-r14, 1.37.0-r20+1 more886
busyboxdeb1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+6 moreno fix listed26
OSV records
ALPINE-CVE-2025-46394CGA-35qx-p5pw-chp7DEBIAN-CVE-2025-46394UBUNTU-CVE-2025-46394
Also known as
CGA-jgxh-j72w-f3hw

Charts affected

867 by stars
ChartLatestAffected imagesRadar Score
mosquittovicsuferVerified publisher0.1.11 of 1See more

mosquitto vicsufer 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:2.0.2021421af7b32b
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

364
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
ghcr.io/colanode/web:latestbcad696f03ee
busybox@1.37.0-r12
1.37.0-r14

Open the chart page →

2,077
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
busybox@1.37.0-r18
1.37.0-r20

Open the chart page →

6,470
vote-appvote-appVerified publisher1.0.73 of 6See more

vote-app vote-app 1.0.7

3 of the 6 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
thecloudspark/app-result:1.09a5302cb8312
busybox@1.36.1-r28
1.36.1-r31
thecloudspark/app-vote:1.0c7da7417a86a
busybox@1.36.1-r28
1.36.1-r31
thecloudspark/app-worker:1.0dbfcfe02bf36
busybox@1.36.1-r15
1.36.1-r21

Open the chart page →

3,030
waldur-site-agentwaldur-site-agentVerified publisher1.0.71 of 1See more

waldur-site-agent waldur-site-agent 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
opennode/waldur-site-agent:1.0.76d2e3b97c8d2
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

534
gateway-control-planewallarmVerified publisher0.2.01 of 2See more

gateway-control-plane wallarm 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
wallarm/gateway-control-plane:0.2.0a321bc974a19
busybox@1.36.1-r20
1.36.1-r21

Open the chart page →

1,455
wallarm-node-nextwallarmVerified publisher0.5.31 of 2See more

wallarm-node-next wallarm 0.5.3

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
wallarm/node-next:0.5.24314f3d2b918
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

2,408
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
busybox@1.37.0-r19
1.37.0-r20

Open the chart page →

4,985
hazelcastwenerme5.10.31 of 2See more

hazelcast wenerme 5.10.3

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

2,623
wexa-studiowexa-studio1.2.02 of 15See more

wexa-studio wexa-studio 1.2.0

2 of the 15 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
busybox@1.37.0-r18
1.37.0-r20
temporalio/server:1.29.1c1e3326b2ce1
busybox@1.37.0-r18
1.37.0-r20

Open the chart page →

14,618
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
dwdraju/alpine-curl-jq:latest83bd9be2b14b
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

6,323
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
busybox@1.37.0-r9
1.37.0-r14

Open the chart page →

1,286
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
busybox@1.37.0-r12
1.37.0-r14

Open the chart page →

1,187
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
busybox@1.37.0-r12
1.37.0-r14

Open the chart page →

789
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

13,197
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

9,381
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
busybox@1.36.1-r19
1.36.1-r21

Open the chart page →

569

Container images carrying it

912 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
busybox@1.37.0-r9
1.37.0-r14
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/home-operations/prowlarr:2.3.01a8a4b11972b
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/interplex-ai/interplex:v1.1.041b0dd0d55b2
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/jeboehm/fetchmailmgr:0.3.2126c4691b28a4
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/kadajett/podscope:0.2.3eeedf17112d7
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/keel-hq/keel:0.22.3315e188a07c2
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/kluster-manager/fluxcd-addon:v0.0.23acba3df8827
busybox@1.36.1-r15
1.36.1-r21
1
ghcr.io/klustrefs/klustre-csi-plugin:0.1.1bcf42ccda0f9
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/kubeservice-stack/customlimitrange-manager:v1.3.0d3ed97d142d4
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
busybox@1.36.1-r19
1.36.1-r21
1
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
busybox@1.36.1-r19
1.36.1-r21
1
ghcr.io/kuoss/lethe:v0.3.1c59f082ba8b2
busybox@1.36.1-r30
1.36.1-r31
1
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
busybox@1:1.30.1-4ubuntu6.4
no fix listed
1
ghcr.io/lbi22/trivy-webhook-elasticsearch:v0.1.4b51b824e4f19
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/linuxoid69/school-bot:v0.3.3c8872438f1e0
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/linuxoid69/webdav:1.26.2-r065bacf19caa7
busybox@1.36.1-r28
1.36.1-r31
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/liturgical-app/calendar-api:0.0.9688a685e2bde
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/liturgical-app/liturgical-app:1.2.041f25aded572
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/lldap/lldap:2025-05-193de697c3ba57
busybox@1.36.1-r19
1.36.1-r21
1
ghcr.io/lldap/lldap:2026-01-06-alpine-rootless824adeb6f765
busybox@1.36.1-r20
1.36.1-r21
1
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
busybox@1.37.0-r8
1.37.0-r14
1
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
busybox@1.36.1-r15
1.36.1-r21
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
busybox@1.36.1-r28
1.36.1-r31
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
busybox@1.36.1-r15
1.36.1-r21
1
ghcr.io/mailcow/prometheus-exporter:2.1.0cb76395b84eb
busybox@1.37.0-r13
1.37.0-r14
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/marthydavid/kafka-keda-golang-consumer:0.0.4e07644865dd1
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/marthydavid/kafka-keda-golang-producer:0.0.454b242c7bf2b
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/matanbaruch/cursor-admin-api-exporter:0.1.8ba3a29fc479a
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
busybox@1.36.1-r15
1.36.1-r21
1
ghcr.io/mgumz/mtr-exporter:0.4.0f4691c8fe8eb
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/middleware-labs/mw-lang-aggregator:0.1.0ae6e13970ec2
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/miniflux/miniflux:2.2.83a11ac10969e
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/miniflux/miniflux:2.2.5bacc9b78ec61
busybox@1.37.0-r9
1.37.0-r14
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.