StackRadar

CVE-2025-46394

Low

Advisory

Published 23 Apr 2025In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
857
of 17,787 indexed, latest versions
Container images
902
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 857 of 17,787 indexed charts deploy, on 902 images.

Affected packageAffected versionsFixed inImages
busyboxapk1.36.1-r10, 1.36.1-r11, 1.36.1-r15, 1.36.1-r17+15 more1.36.1-r21, 1.36.1-r31, 1.37.0-r14, 1.37.0-r20+1 more877
busyboxdeb1:1.21.0-1ubuntu1, 1:1.21.0-1ubuntu1.4, 1:1.30.1-4ubuntu6.4, 1:1.30.1-7ubuntu3+6 moreno fix listed25
OSV records
ALPINE-CVE-2025-46394CGA-35qx-p5pw-chp7DEBIAN-CVE-2025-46394UBUNTU-CVE-2025-46394
Also known as
CGA-jgxh-j72w-f3hw

Charts affected

857 by stars
ChartLatestAffected imagesRadar Score
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
dwdraju/alpine-curl-jq:latest83bd9be2b14b
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

6,285
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
busybox@1.37.0-r9
1.37.0-r14

Open the chart page →

1,286
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
busybox@1.37.0-r12
1.37.0-r14

Open the chart page →

1,187
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
busybox@1.37.0-r12
1.37.0-r14

Open the chart page →

789
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

13,677
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
busybox@1.36.1-r29
1.36.1-r31

Open the chart page →

9,381
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-46394.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
busybox@1.36.1-r19
1.36.1-r21

Open the chart page →

570

Container images carrying it

902 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ethersphere/bee-localchain:latest0558799ca992
busybox@1.36.1-r15
1.36.1-r21
2
excalidraw/excalidraw:latestf7ee194addd6
busybox@1.37.0-r12
1.37.0-r14
2
grafana/grafana:11.1.0079600c9517b
busybox@1.36.1-r15
1.36.1-r21
2
grafana/grafana:11.1.4886b56d5534e
busybox@1.36.1-r15
1.36.1-r21
2
grafana/grafana:11.4.0d8ea37798ccc
busybox@1.36.1-r29
1.36.1-r31
2
grafana/tempo:2.5.0f0200a9bff6d
busybox@1.36.1-r28
1.36.1-r31
2
hanchuanchuan/goinception:latestb3c0dd26fb50
busybox@1.36.1-r29
1.36.1-r31
2
hazelcast/hazelcast:5.5.05dd5d31c7a06
busybox@1.36.1-r29
1.36.1-r31
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
busybox@1.36.1-r19
1.36.1-r21
2
inaccel/driver:latest07271a5c2fe7
busybox@1.36.1-r15
1.36.1-r21
2
inaccel/monitor:2.134bb93de386f
busybox@1.36.1-r15
1.36.1-r21
2
kiwigrid/k8s-sidecar:1.30.98c06e1ba643a
busybox@1.37.0-r18
1.37.0-r20
2
library/memcached:1.6.23-alpine41d19476c100
busybox@1.36.1-r15
1.36.1-r21
2
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
busybox@1:1.37.0-6+b8
no fix listed
2
library/postgres:11-alpineea50b9fd617b
busybox@1.36.1-r15
1.36.1-r21
2
library/postgres:13-alpinefb9065b6e3e2
busybox@1.37.0-r19
1.37.0-r20
2
library/rabbitmq:3.13.6-management-alpine611107e29cce
busybox@1.36.1-r29
1.36.1-r31
2
library/redis148bb5411c18
busybox@1.37.0-r12
1.37.0-r14
2
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
busybox@1.36.1-r29
1.36.1-r31
2
linuxserver/ubooquity:2.1.2-ls369932d6759112
busybox@1.36.1-r29
1.36.1-r31
2
lncm/bitcoind:v27.0324fec72192e
busybox@1.36.1-r15
1.36.1-r21
2
mesosphere/kubectl:v1.35.0-alpineea01a9387771
busybox@1.37.0-r19
1.37.0-r20
2
mojaloop/reporting:v12.1.0d480a62103d6
busybox@1.37.0-r12
1.37.0-r14
2
mojaloop/reporting-aggregator-svc:v0.0.92635baf23298
busybox@1.37.0-r12
1.37.0-r14
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
busybox@1.37.0-r18
1.37.0-r20
2
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
busybox@1.37.0-r12
1.37.0-r14
2
mojaloop/role-assignment-service:v2.1.0def4bf273721
busybox@1.36.1-r15
1.36.1-r21
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
busybox@1.37.0-r19
1.37.0-r20
2
natsio/nats-server-config-reloader:0.21.110ff229eaf52
busybox@1.37.0-r19
1.37.0-r20
2
natsio/prometheus-nats-exporter:0.17.326c826662ac8
busybox@1.37.0-r12
1.37.0-r14
2
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
busybox@1.37.0-r12
1.37.0-r14
2
opea/chatqna-conversation-ui:1.002d5674ca863
busybox@1.36.1-r29
1.36.1-r31
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
busybox@1.36.1-r29
1.36.1-r31
2
openkruise/kruise-helm-hook:v0.1.0edc7cf9428fd
busybox@1.36.1-r19
1.36.1-r21
2
oryd/kratos:v1.3.1fe2428f103a6
busybox@1.36.1-r29
1.36.1-r31
2
percona/everest-helmtools:0.0.1904458d04a18
busybox@1.36.1-r29
1.36.1-r31
2
rancher/local-path-provisioner:v0.0.299bebefa0b908
busybox@1.36.1-r29
1.36.1-r31
2
rclone/rclone:1.6874c51b8817e5
busybox@1.36.1-r29
1.36.1-r31
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
busybox@1.37.0-r12
1.37.0-r14
2
timberio/vector:0.51.1-alpine2d16ae87ec39
busybox@1.37.0-r19
1.37.0-r20
2
uselagoon/docker-host:v3.6.12c89ed939b8b
busybox@1.37.0-r12
1.37.0-r14
2
wurstmeister/zookeeper:latest7a7fd44a7210
busybox@1:1.21.0-1ubuntu1
no fix listed
2
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
busybox@1.36.1-r15
1.36.1-r21
2
ghcr.io/airflow-helm/postgresql-bitnami:11.22-patch.0df576862b7c0
busybox@1.36.1-r15
1.36.1-r21
2
ghcr.io/astriaorg/astria-geth:latest4249e403225a
busybox@1.37.0-r18
1.37.0-r20
2
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
busybox@1.36.1-r29
1.36.1-r31
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
busybox@1.37.0-r18
1.37.0-r20
2
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
busybox@1.37.0-r18
1.37.0-r20
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
busybox@1:1.30.1-7ubuntu3
no fix listed
2
ghcr.io/eosc-lot-1/curl-jq:8156beafae7ca
busybox@1.36.1-r15
1.36.1-r21
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.