StackRadar

CVE-2025-46653

Low

Advisory

Published 26 Apr 2025In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
3.1
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
28
of 17,781 indexed, latest versions
Container images
29
deployed by those charts
Fix available
1 of 1
affected package

Formidable relies on hexoid to prevent guessing of filenames for untrusted executable content

Carried by container images the latest versions of 28 of 17,781 indexed charts deploy, on 29 images.

Affected packageAffected versionsFixed inImages
formidablenpm2.1.1, 2.1.2, 3.5.12.1.3, 3.5.329
OSV records
GHSA-75v8-2h7p-7m2m

Charts affected

28 by stars
ChartLatestAffected imagesRadar Score
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
formidable@2.1.2
2.1.3

Open the chart page →

4,431
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
formidable@2.1.2
2.1.3

Open the chart page →

5,352
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
formidable@3.5.1
3.5.3

Open the chart page →

5,639
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
formidable@2.1.2
2.1.3

Open the chart page →

3,795
community-solid-servercommunity-solid-server3.0.01 of 1See more

community-solid-server community-solid-server 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
solidproject/community-server:6.0.2ccc4acb7e9a1
formidable@2.1.2
2.1.3

Open the chart page →

1,613
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
formidable@2.1.2
2.1.3

Open the chart page →

38,346
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
formidable@2.1.2
2.1.3

Open the chart page →

3,925
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
formidable@2.1.2
2.1.3

Open the chart page →

13,738
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
formidable@2.1.1
2.1.3
countly/frontend:25.05.42acbc11499b6
formidable@2.1.1
2.1.3

Open the chart page →

7,295
h2ph2pVerified publisher1.0.11 of 1See more

h2p h2p 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
dacinfomotion/h2p:latest68fa393b472c
formidable@2.1.2
2.1.3

Open the chart page →

1,713
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
formidable@2.1.1
2.1.3

Open the chart page →

18,813
iframelyiframelyVerified publisher2.3.51 of 1See more

iframely iframely 2.3.5

1 of the 1 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
formidable@2.1.2
2.1.3

Open the chart page →

3,154
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
formidable@3.5.1
3.5.3

Open the chart page →

5,826
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
formidable@2.1.2
2.1.3

Open the chart page →

22,589
shinsei-managerjtektVerified publisher0.2.03 of 8See more

shinsei-manager jtekt 0.2.0

3 of the 8 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
formidable@2.1.2
2.1.3
moreillon/user-manager:v5.0.2e1c9bfab5c16
formidable@2.1.1
2.1.3
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
formidable@2.1.2
2.1.3

Open the chart page →

63,461
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
formidable@2.1.2
2.1.3

Open the chart page →

16,600
visual-regression-trackerkokuwa5.1.01 of 4See more

visual-regression-tracker kokuwa 5.1.0

1 of the 4 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
visualregressiontracker/api:5.0.11941aeb8c8bf9
formidable@2.1.2
2.1.3

Open the chart page →

9,098
api-proxymoreillonVerified publisher0.1.41 of 1See more

api-proxy moreillon 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
moreillon/api-proxy:2373c1953739ef6956b5
formidable@2.1.2
2.1.3

Open the chart page →

1,712
group-managermoreillonVerified publisher0.4.41 of 3See more

group-manager moreillon 0.4.4

1 of the 3 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
formidable@2.1.2
2.1.3

Open the chart page →

9,835
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
formidable@2.1.2
2.1.3

Open the chart page →

25,704
user-manager-neo4jmoreillonVerified publisher0.9.72 of 6See more

user-manager-neo4j moreillon 0.9.7

2 of the 6 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
moreillon/group-manager:v4.9.0d5a0ec8394c0
formidable@2.1.2
2.1.3
moreillon/user-manager:v5.0.2e1c9bfab5c16
formidable@2.1.1
2.1.3

Open the chart page →

30,363
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
formidable@2.1.2
2.1.3

Open the chart page →

4,560
relfinder-reformedrelfinderreformed2.0.01 of 2See more

relfinder-reformed relfinderreformed 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
formidable@2.1.2
2.1.3

Open the chart page →

6,282
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
formidable@2.1.2
2.1.3

Open the chart page →

7,413
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
formidable@2.1.2
2.1.3

Open the chart page →

5,582
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
formidable@2.1.2
2.1.3

Open the chart page →

4,431
joplintobiassackmann0.1.71 of 2See more

joplin tobiassackmann 0.1.7

1 of the 2 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
joplin/server:latest3f7b852959aa
formidable@2.1.2
2.1.3

Open the chart page →

5,535
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2025-46653.

Container imageDigestPackageFixed in
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
formidable@2.1.1
2.1.3

Open the chart page →

16,083

Container images carrying it

29 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
moreillon/group-manager:v4.9.0d5a0ec8394c0
formidable@2.1.2
2.1.3
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
formidable@2.1.1
2.1.3
2
outlinewiki/outline:0.69.1d060dcd8f9aa
formidable@2.1.2
2.1.3
2
countly/api:25.05.4f4cc7447c4f5
formidable@2.1.1
2.1.3
1
countly/countly-server:25.05.4e3c238248f99
formidable@2.1.1
2.1.3
1
countly/frontend:25.05.42acbc11499b6
formidable@2.1.1
2.1.3
1
dacinfomotion/h2p:latest68fa393b472c
formidable@2.1.2
2.1.3
1
joplin/server:latest3f7b852959aa
formidable@2.1.2
2.1.3
1
joplin/server:3.0-beta52af57880c0e
formidable@2.1.2
2.1.3
1
joplin/server:2.14.2-betab87564ef34e9
formidable@2.1.2
2.1.3
1
kyleslugg/klusterview:latestba8c36dfdfbd
formidable@2.1.2
2.1.3
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
formidable@2.1.2
2.1.3
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
formidable@2.1.2
2.1.3
1
moreillon/api-proxy:2373c1953739ef6956b5
formidable@2.1.2
2.1.3
1
moreillon/api-proxy:latestd7d4a5463525
formidable@2.1.2
2.1.3
1
moreillon/food-manager:lateste8fd856e593d
formidable@2.1.2
2.1.3
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
formidable@2.1.2
2.1.3
1
n8nio/n8n:1.86.08b39ed5a2de9
formidable@3.5.1
3.5.3
1
n8nio/n8n:1.33.1dd171d45102a
formidable@3.5.1
3.5.3
1
outlinewiki/outline:0.82.0494dfb9249a6
formidable@2.1.2
2.1.3
1
solidproject/community-server:6.0.2ccc4acb7e9a1
formidable@2.1.2
2.1.3
1
thecodingmachine/workadventure-map-storage:v1.17.75bdab56da2fa
formidable@2.1.1
2.1.3
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
formidable@2.1.2
2.1.3
1
ghcr.io/data-fair/data-fair:3cc9498b64b5b
formidable@2.1.2
2.1.3
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
formidable@2.1.2
2.1.3
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
formidable@2.1.2
2.1.3
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
formidable@2.1.2
2.1.3
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
formidable@2.1.2
2.1.3
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
formidable@2.1.2
2.1.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.