CVE-2025-47950

High

Advisory

Published 6 Jun 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.012; 66th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 66; of 17,781 indexed, latest versions
Container images: 54; deployed by those charts
Fix available: 1 of 1; affected package

CoreDNS Vulnerable to DoQ Memory Exhaustion via Stream Amplification

Carried by container images the latest versions of 66 of 17,781 indexed charts deploy, on 54 images.

Affected package	Affected versions	Fixed in	Images
github.com/coredns/corednsgolang	v0.0.0-20200803163833-7d5f5b87a4fb, v0.0.0-20230206182419-055b2c31a9cf, v0.0.0-20241121192733-51e11f166ef6, v0.0.0-20251008152637-1db4568df6aa+14 more	1.12.2	54

OSV records: GHSA-cvx7-x8pj-x2gw
Also known as: GO-2025-3743

Charts affected

66 by stars

Chart

Latest

Affected images

Radar Score

cdmswebapppyalive-cdmswebapp

0.1.0

1 of 3 See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
sarwansharma/minio :v3	59d1da9385d1	github.com/coredns/coredns@v1.9.2	1.12.2

Open the chart page →

6,668

uptime-kumasarab97

0.1.5

1 of 1 See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :1.22.1	0b55bcb83a1c	github.com/coredns/coredns@v1.10.0	1.12.2

Open the chart page →

4,744

cloudflaredsectionme

2022.3.4

1 of 1 See more

cloudflared sectionme 2022.3.4

1 of the 1 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
quay.io/giantswarm/cloudflared :2022.3.4	0b20d2fe9a6b	github.com/coredns/coredns@v1.8.7	1.12.2

Open the chart page →

2,407

miniosergiotocalini

1.0.0

1 of 1 See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	github.com/coredns/coredns@v1.10.1	1.12.2

Open the chart page →

4,203

tailscalesinextra

0.18.1

1 of 2 See more

tailscale sinextra 0.18.1

1 of the 2 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
registry.k8s.io/coredns/coredns :v1.13.2	94caebb89dcf	github.com/coredns/coredns@v0.0.0-20251209114403-0233f3e7c600	1.12.2

Open the chart page →

1,047

mimirskyloud-helm-charts

5.5.1

1 of 5 See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	github.com/coredns/coredns@v1.11.1	1.12.2

Open the chart page →

10,651

spinnakerspinnaker

2.2.13

1 of 4 See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2020-01-03T19-12-21Z	f00aa6ef2b72	github.com/coredns/coredns@v1.4.0	1.12.2

Open the chart page →

6,836

servicexssl-hep

1.8.5

1 of 16 See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2022.12.12-debian-11-r9	0f7c8ac484ac	github.com/coredns/coredns@v1.9.4	1.12.2

Open the chart page →

66,266

miniouninettsigma2

1.2.0

1 of 1 See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	github.com/coredns/coredns@v1.9.4	1.12.2

Open the chart page →

4,960

corednsvks-helm-charts

1.45.0

1 of 1 See more

coredns vks-helm-charts 1.45.0

1 of the 1 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
coredns/coredns :1.13.1	9b9128672209	github.com/coredns/coredns@v0.0.0-20251008152637-1db4568df6aa	1.12.2

Open the chart page →

887

consulwarjiang

1.3.0

1 of 2 See more

consul warjiang 1.3.0

1 of the 2 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.17.0	712fe02d2f84	github.com/coredns/coredns@v1.10.1	1.12.2

Open the chart page →

4,060

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	github.com/coredns/coredns@v1.4.0	1.12.2

Open the chart page →

9,117

miniowenerme

8.0.10

1 of 1 See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2021-02-14T04-01-33Z	bd11edda91f3	github.com/coredns/coredns@v1.4.0	1.12.2

Open the chart page →

6,915

minio-standalonewenerme

1.0.2

1 of 1 See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	github.com/coredns/coredns@v1.4.0	1.12.2

Open the chart page →

6,138

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	github.com/coredns/coredns@v1.11.1	1.12.2

Open the chart page →

14,983

zahori-consulzahori

1.0.1

1 of 2 See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-47950.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	github.com/coredns/coredns@v1.6.6	1.12.2

Open the chart page →

5,033

Container images carrying it

54 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	github.com/coredns/coredns@v1.9.4	1.12.2	1
registry.k8s.io/coredns/coredns :v1.13.2	94caebb89dcf	github.com/coredns/coredns@v0.0.0-20251209114403-0233f3e7c600	1.12.2	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	github.com/coredns/coredns@v1.10.0	1.12.2	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	github.com/coredns/coredns@v1.10.0	1.12.2	1