StackRadarChart IndexLive demo

CVE-2025-47278

Low

Advisory

Published 13 May 2025In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 1.8; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 18; of 17,957 indexed, latest versions
Container images: 17; deployed by those charts
Fix available: 1 of 1; affected package

Flask uses fallback key instead of current signing key

Carried by container images the latest versions of 18 of 17,957 indexed charts deploy, on 17 images.

Affected package	Affected versions	Fixed in	Images
flaskpypi	3.1.0	3.1.1	17

OSV records: GHSA-4grg-w6v8-c28g
Also known as: PYSEC-2026-1377

Charts affected

18 by stars

Chart

Latest

Affected images

Radar Score

clearmlallegroai

1 of 4 See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
allegroai/clearml :2.0.0-613	713ae38f7daf	flask@3.1.0	3.1.1

Open the chart page →

11,045

alerta-webalerta-web

1 of 2 See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
hayk96/alerta-web :9.0.4	86377705e9e3	flask@3.1.0	3.1.1

Open the chart page →

3,696

oesopsmx

1 of 25 See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
quay.io/opsmxpublic/ubi8-oes-datascience :isd-spin-2025.10.01-af26a30d4-202511261054	d8f66f4117fe	flask@3.1.0	3.1.1

Open the chart page →

103,437

hasher-matcher-actionerhasher-matcher-actioner

1 of 1 See more

hasher-matcher-actioner hasher-matcher-actioner 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
ghcr.io/facebook/threatexchange/hma :1.0.17	84d09c6b75a7	flask@3.1.0	3.1.1

Open the chart page →

1,070

locustlocust

1 of 1 See more

2,958

opikopik

1 of 13 See more

opik opik 2.2.85

1 of the 13 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
ghcr.io/comet-ml/opik/opik-python-backend :2.2.85	bd3cc22d1bdb	flask@3.1.0	3.1.1

Open the chart page →

14,244

snappasssnappass

1 of 3 See more

snappass snappass 0.4.3

1 of the 3 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
lmacka/snappass :2.1.2	93f5c048b7d4	flask@3.1.0	3.1.1

Open the chart page →

3,443

tetragon-policy-buildercamptocamp3

1 of 1 See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	flask@3.1.0	3.1.1

Open the chart page →

11,543

datacube-indexdatacube-charts

1 of 2 See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
opendatacube/ows :latest	668cbb41473c	flask@3.1.0	3.1.1

Open the chart page →

6,368

datacube-owsdatacube-charts

1 of 1 See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
opendatacube/ows :latest	668cbb41473c	flask@3.1.0	3.1.1

Open the chart page →

6,368

datacube-wpsdatacube-charts

1 of 1 See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
opendatacube/wps :latest	80df355a660b	flask@3.1.0	3.1.1

Open the chart page →

6,662

difydify

1 of 4 See more

56,519

hawk-envoy-pluginhawk

1 of 4 See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
kong/httpbin :latest	a6ac46531193	flask@3.1.0	3.1.1

Open the chart page →

71,218

home-assistanthelm-chart-roei

1 of 1 See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	flask@3.1.0	3.1.1

Open the chart page →

5,113

kubecostradar-base

1 of 7 See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
gcr.io/kubecost1/kubecost-modeling :v0.1.22	a461dc5cb96a	flask@3.1.0	3.1.1

Open the chart page →

9,791

cost-analyzersoftonic

1 of 6 See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
gcr.io/kubecost1/kubecost-modeling :v0.1.24	a2259b098b13	flask@3.1.0	3.1.1

Open the chart page →

8,290

simple-prima-notavcnngr

1 of 4 See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :9.2	52cb72a9e3da	flask@3.1.0	3.1.1

Open the chart page →

5,256

zerossl-cert-managerzerossl-cert-manager

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-47278.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	flask@3.1.0	3.1.1

Open the chart page →

597

Container images carrying it

17 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
opendatacube/ows :latest	668cbb41473c	flask@3.1.0	3.1.1	2
allegroai/clearml :2.0.0-613	713ae38f7daf	flask@3.1.0	3.1.1	1
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	flask@3.1.0	3.1.1	1
dpage/pgadmin4 :9.2	52cb72a9e3da	flask@3.1.0	3.1.1	1
hansehe/locust :1.1.0	bc8e45262bc4	flask@3.1.0	3.1.1	1
hayk96/alerta-web :9.0.4	86377705e9e3	flask@3.1.0	3.1.1	1
kong/httpbin :latest	a6ac46531193	flask@3.1.0	3.1.1	1
langgenius/dify-api :1.0.0	066035f93856	flask@3.1.0	3.1.1	1
lmacka/snappass :2.1.2	93f5c048b7d4	flask@3.1.0	3.1.1	1
opendatacube/wps :latest	80df355a660b	flask@3.1.0	3.1.1	1
gcr.io/kubecost1/kubecost-modeling :v0.1.24	a2259b098b13	flask@3.1.0	3.1.1	1
gcr.io/kubecost1/kubecost-modeling :v0.1.22	a461dc5cb96a	flask@3.1.0	3.1.1	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	flask@3.1.0	3.1.1	1
ghcr.io/comet-ml/opik/opik-python-backend :2.2.85	bd3cc22d1bdb	flask@3.1.0	3.1.1	1
ghcr.io/facebook/threatexchange/hma :1.0.17	84d09c6b75a7	flask@3.1.0	3.1.1	1
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	flask@3.1.0	3.1.1	1
quay.io/opsmxpublic/ubi8-oes-datascience :isd-spin-2025.10.01-af26a30d4-202511261054	d8f66f4117fe	flask@3.1.0	3.1.1	1