StackRadar

CVE-2025-46394

Low

Advisory

Published 23 Apr 2025In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
867
of 17,790 indexed, latest versions
Container images
914
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 867 of 17,790 indexed charts deploy, on 914 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.36.1-r10, 1.36.1-r11, 1.36.1-r15, 1.36.1-r17+15 more1.36.1-r21, 1.36.1-r31, 1.37.0-r14, 1.37.0-r20+1 more886
busyboxdeb1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+7 moreno fix listed28
OSV records
ALPINE-CVE-2025-46394CGA-35qx-p5pw-chp7DEBIAN-CVE-2025-46394UBUNTU-CVE-2025-46394
Also known as
CGA-jgxh-j72w-f3hw

Charts affected

867 by stars
ChartLatestAffected imagesRadar Score
mosquittovicsuferVerified publisher0.1.11 of 1See more

mosquitto vicsufer 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:2.0.2021421af7b32b
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

365
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
ghcr.io/colanode/web:latestbcad696f03ee
busybox@1.37.0-r12
1.37.0-r14

Open the chart page →

2,077
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
busybox@1.37.0-r18
1.37.0-r20

Open the chart page →

6,470
vote-appvote-appVerified publisher1.0.73 of 6See more

vote-app vote-app 1.0.7

3 of the 6 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
thecloudspark/app-result:1.09a5302cb8312
busybox@1.36.1-r28
1.36.1-r31
thecloudspark/app-vote:1.0c7da7417a86a
busybox@1.36.1-r28
1.36.1-r31
thecloudspark/app-worker:1.0dbfcfe02bf36
busybox@1.36.1-r15
1.36.1-r21

Open the chart page →

3,031
waldur-site-agentwaldur-site-agentVerified publisher1.0.71 of 1See more

waldur-site-agent waldur-site-agent 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
opennode/waldur-site-agent:1.0.76d2e3b97c8d2
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

534
gateway-control-planewallarmVerified publisher0.2.01 of 2See more

gateway-control-plane wallarm 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
wallarm/gateway-control-plane:0.2.0a321bc974a19
busybox@1.36.1-r20
1.36.1-r21

Open the chart page →

1,455
wallarm-node-nextwallarmVerified publisher0.5.31 of 2See more

wallarm-node-next wallarm 0.5.3

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
wallarm/node-next:0.5.24314f3d2b918
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

2,408
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
busybox@1.37.0-r19
1.37.0-r20

Open the chart page →

4,999
hazelcastwenerme5.10.31 of 2See more

hazelcast wenerme 5.10.3

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

2,624
wexa-studiowexa-studio1.2.02 of 15See more

wexa-studio wexa-studio 1.2.0

2 of the 15 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
busybox@1.37.0-r18
1.37.0-r20
temporalio/server:1.29.1c1e3326b2ce1
busybox@1.37.0-r18
1.37.0-r20

Open the chart page →

15,044
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
dwdraju/alpine-curl-jq:latest83bd9be2b14b
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

6,326
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
busybox@1.37.0-r9
1.37.0-r14

Open the chart page →

1,287
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
busybox@1.37.0-r12
1.37.0-r14

Open the chart page →

1,195
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
busybox@1.37.0-r12
1.37.0-r14

Open the chart page →

790
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

13,783
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

9,395
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
busybox@1.36.1-r19
1.36.1-r21

Open the chart page →

569

Container images carrying it

914 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/solucteam/outscale-s3-explorer:v1.0.09665c3e71889
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/streamingfast/blockmeta-service:2f971e04f0a86e490b6
busybox@1.36.1-r17
1.36.1-r31
1
ghcr.io/substra/orchestrator-server:1.0.0647e45284a80
busybox@1.36.1-r19
1.36.1-r21
1
ghcr.io/substratusai/lingo:v0.2.12c807cd41ed4
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/szpadel/languagetool-server:6.568fdab22b2a9
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/tale/headplane:0.5.50dbc52cffc19
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
busybox@1.36.1-r19
1.36.1-r21
1
ghcr.io/techno-tim/littlelink-server:latest735a1fcd078b
busybox@1.36.1-r15
1.36.1-r21
1
ghcr.io/techwolf12/pocketbase:0.29.3106099641679
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
busybox@1.36.1-r15
1.36.1-r21
1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/usememos/memos:0.24.04723d86e6797
busybox@1.37.0-r9
1.37.0-r14
1
ghcr.io/voyagermesh/gateway-converter:v0.0.1b92123805584
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/wasilak/kube-ingress-dash:0.3.1ff55992f905c
busybox@1.37.0-r19
1.37.0-r20
1
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
busybox@1.36.1-r15
1.36.1-r21
1
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
busybox@1.37.0-r18
1.37.0-r20
1
ghcr.io/wjentner/k8s-db-backup-retention:v1.1.08027bb46d1f4
busybox@1.37.0-r9
1.37.0-r14
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/wundergraph/cosmo/studio:0.111.0454f4384713a
busybox@1.37.0-r12
1.37.0-r14
1
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
busybox@1.37.0-r9
1.37.0-r14
1
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
busybox@1.36.1-r28
1.36.1-r31
1
ghcr.io/zazuko/blueprint:v0.1.092ac2f97978e
busybox@1.36.1-r19
1.36.1-r21
1
ghcr.io/zazukoians/qlever-ui:v0.10.151a7ec1c2de4
busybox@1.36.1-r29
1.36.1-r31
1
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
busybox@1.37.0-r8
1.37.0-r14
1
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
busybox@1.37.0-r18
1.37.0-r20
1
public.ecr.aws/aktosecurity/akto-agent-guard-service:latest5c6ff17c5849
busybox@1.36.1-r20
1.36.1-r21
1
public.ecr.aws/aktosecurity/keelhq-keel:akto_v1.0.01eb61443d68e
busybox@1.36.1-r29
1.36.1-r31
1
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
busybox@1.37.0-r18
1.37.0-r20
1
public.ecr.aws/cloudnatix/llmariner/envsubst:1.17.0af66e52f852a
busybox@1.36.1-r15
1.36.1-r21
1
public.ecr.aws/cloudnatix/llmariner/envsubst:1.19.1ffc29318c5e9
busybox@1.36.1-r15
1.36.1-r21
1
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
busybox@1.36.1-r30
1.36.1-r31
1
public.ecr.aws/optimizely/webhook-broker:v0.2.3cfc92cc2de65
busybox@1.36.1-r29
1.36.1-r31
1
public.ecr.aws/truefoundrycloud/timberio/vector:v0.50.05833723de9e4
busybox@1.37.0-r19
1.37.0-r20
1
quay.io/cilium/hubble-ui:v0.13.3661d5de70501
busybox@1.37.0-r19
1.37.0-r20
1
quay.io/cilium/tetragon:v1.1.096fac2482898
busybox@1.36.1-r15
1.36.1-r21
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
busybox@1.36.1-r19
1.36.1-r21
1
quay.io/jupyterhub/configurable-http-proxy:5.1.0eb10d5bf045c
busybox@1.37.0-r13
1.37.0-r14
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
busybox@1.37.0-r12
1.37.0-r14
1
quay.io/kiwigrid/k8s-sidecar:1.30.10835d79d8fbae
busybox@1.37.0-r18
1.37.0-r20
1
quay.io/kubevirt/aaq-operator:v1.7.0d28a2daa5b15
busybox@1.37.0-r18
1.37.0-r20
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
busybox@1.36.1-r15
1.36.1-r21
1
quay.io/metallb/controller:v0.14.4bbef1ee3e7d3
busybox@1.36.1-r15
1.36.1-r21
1
quay.io/metallb/speaker:v0.14.437611bde45a2
busybox@1.36.1-r15
1.36.1-r21
1
quay.io/opsmxpublic/opa:opa-sidecar-v1.03dcbf3caa454
busybox@1.37.0-r19
1.37.0-r20
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.