StackRadar

CVE-2025-48060

High

Advisory

Published 21 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
221
of 17,781 indexed, latest versions
Container images
158
deployed by those charts
Fix available
2 of 2
affected packages

jq - security update

Carried by container images the latest versions of 221 of 17,781 indexed charts deploy, on 158 images.

Affected packageAffected versionsFixed inImages
jqdeb1.5+dfsg-1, 1.5+dfsg-1ubuntu0.1, 1.5+dfsg-2, 1.6-1ubuntu0.20.04.1+3 more1.5+dfsg-1ubuntu0.1+esm3, 1.5+dfsg-2ubuntu0.1~esm1, 1.6-1ubuntu0.20.04.1+esm1, 1.6-2.1+deb11u1+3 more157
jqapk1.7.1-r01.8.0-r01
OSV records
ALPINE-CVE-2025-48060DEBIAN-CVE-2025-48060UBUNTU-CVE-2025-48060DLA-4307-1
Also known as
USN-7657-1, USN-7657-2

Charts affected

221 by stars
ChartLatestAffected imagesRadar Score
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,769
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

30,687
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

66,266
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

13,646
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

18,756
stateful-data-generatortalhajuikar-helm-charts0.1.21 of 2See more

stateful-data-generator talhajuikar-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

4,860
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

20,270
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

10,006
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

4,087
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

8,607
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

9,347
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

13,459
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

28,605

Container images carrying it

158 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
chubaofs/cfs-server:3.2.0205030e045f2
jq@1.6-2.1
1.6-2.1+deb11u1
1
circleci/runner:launch-agent9bdc62f02162
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
cribl/cribl:3.0.2762747cb6796
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
dobtc/bitcoin:25.1a870f7cb1105
jq@1.6-2.1
1.6-2.1+deb12u1
1
easysoft/quickon-zentao:18.5592ad5df1f8b
jq@1.6-2.1
1.6-2.1+deb11u1
1
free5gmano/nextepc-mongodb:latest36f806935519
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
1
gophish/gophish:0.12.18a57cd171999
jq@1.6-2.1
1.6-2.1+deb11u1
1
gradiant/open5gs-dbctl:0.10.3332031245fce
jq@1.7.1-3build1
1.7.1-3ubuntu0.24.04.1
1
haugene/transmission-openvpn:4.0059216cfae4b
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
1
improwised/proxysql:master-6b26e59-171765063828940522e8b7
jq@1.6-2.1
1.6-2.1+deb12u1
1
jmferrer/azure-devops-agent:latest030f68ec6998
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
1
josh5/unmanic:0.2.64d49c4816260
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
library/mongo:7.0.140032d2ca20db
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
library/mongo:4.4.1305678ae4e5e1
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
library/mongo:3.6146c1fd999a6
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
1
library/mongo:5.0.32-focal3b6c281e1c08
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
library/mongo:4.4-bionic3d0e6df9fd5b
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
library/mongo:5.0.14-focal50cae5081ab4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
library/mongo:6.0.12646902910d6a
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
library/mongo:4.2699d652ed674
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
library/mongo:4.2.16ca49afbcb2b
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
library/mongo:6.0.271a63fc2438e
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
library/mongo:5.0.217c81758cb295
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
library/mongo:4.2.21-bionic9cb28f7291d9
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
library/mongo:7.0.12ae1cf99fa7bf
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
library/mongo:4.4.18d23ec07162ca
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
library/mongo:8.0.11dca8d11fe467
jq@1.7.1-3build1
1.7.1-3ubuntu0.24.04.1
1
library/neo4j:4.2.4348e3f56faa2
jq@1.6-2.1
1.6-2.1+deb11u1
1
library/neo4j:5.18.18f01f7bb053e
jq@1.6-2.1
1.6-2.1+deb11u1
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
linuxserver/code-server:4.10.1a5e43a05ae79
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
linuxserver/foldingathome:7.6.219a997426d71e
jq@1.7.1-3build1
1.7.1-3ubuntu0.24.04.1
1
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
linuxserver/plex:1.25.24a13ced2326c
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
linuxserver/unifi-controller:8.0.240ae315a3a456
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
linuxserver/unifi-controller:7.3.83ab105cc50322
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
litmuschaos/mongo:4.2.899961210d467
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
jq@1.6-2.1
1.6-2.1+deb11u1
1
mbround18/valheim:3.1.070bd4da591cd
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
mide/minecraft-overviewer:latest4eee0dcb715f
jq@1.6-2.1
1.6-2.1+deb11u1
1
mlikiowa/napcat-docker:latest1336a777f9a4
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
mozilla/syncstorage-rs:0.15.893752877dced
jq@1.6-2.1
1.6-2.1+deb11u1
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
jq@1.6-2.1
1.6-2.1+deb12u1
1
oled01/automx2:2025.1.105d3e398e675
jq@1.6-2.1
1.6-2.1+deb12u1
1
omecproject/openmme:master-latest64776cb9edb3
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
1
opencsghq/kubectl:latestb6d87e1048c2
jq@1.6-2.1
1.6-2.1+deb12u1
1
opendatacube/restcube:latest91870111837c
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.