StackRadar

CVE-2025-48060

High

Advisory

Published 21 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
221
of 17,781 indexed, latest versions
Container images
158
deployed by those charts
Fix available
2 of 2
affected packages

jq - security update

Carried by container images the latest versions of 221 of 17,781 indexed charts deploy, on 158 images.

Affected packageAffected versionsFixed inImages
jqdeb1.5+dfsg-1, 1.5+dfsg-1ubuntu0.1, 1.5+dfsg-2, 1.6-1ubuntu0.20.04.1+3 more1.5+dfsg-1ubuntu0.1+esm3, 1.5+dfsg-2ubuntu0.1~esm1, 1.6-1ubuntu0.20.04.1+esm1, 1.6-2.1+deb11u1+3 more157
jqapk1.7.1-r01.8.0-r01
OSV records
ALPINE-CVE-2025-48060DEBIAN-CVE-2025-48060UBUNTU-CVE-2025-48060DLA-4307-1
Also known as
USN-7657-1, USN-7657-2

Charts affected

221 by stars
ChartLatestAffected imagesRadar Score
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,769
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

30,687
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

66,266
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

13,646
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

18,756
stateful-data-generatortalhajuikar-helm-charts0.1.21 of 2See more

stateful-data-generator talhajuikar-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

4,860
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

20,270
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

10,006
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

4,087
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

8,607
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

9,347
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

13,459
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

28,605

Container images carrying it

158 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
opendatacube/wms:latest1b90cdf68831
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
owncloud/server:10.15.051d9b74fc2a8
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
phntom/external-dns-host-network:0.0.123adadbac8443
jq@1.6-2.1
1.6-2.1+deb11u1
1
photoprism/photoprism:220629-jammy2954334adbda
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
photoprism/photoprism:240711-cefc6fd632ca74
jq@1.7.1-3build1
1.7.1-3ubuntu0.24.04.1
1
pihole/pihole:2023.05.0b83258064f54
jq@1.6-2.1
1.6-2.1+deb11u1
1
project2team4/react:latest3ff031a08887
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
rezachalak/bzen-mongo:1.0.034f694325191
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
robotshop/rs-mongodb:latest119b545823cd
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
jq@1.6-2.1
1.6-2.1+deb12u1
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
wolveix/satisfactory-server:v1.9.1199be1064b18
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
jq@1.6-2.1
1.6-2.1+deb12u1
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
jq@1.6-2.1
1.6-2.1+deb12u1
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
jq@1.6-2.1
1.6-2.1+deb11u1
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
jq@1.6-2.1
1.6-2.1+deb11u1
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
jq@1.6-2.1
1.6-2.1+deb11u1
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
jq@1.6-2.1
1.6-2.1+deb12u1
1
ghcr.io/g0dscookie/aptly:latestedd095d3c0ee
jq@1.6-2.1
1.6-2.1+deb11u1
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
jq@1.6-2.1
1.6-2.1+deb11u1
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
jq@1.7.1-r0
1.8.0-r0
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
jq@1.6-2.1
1.6-2.1+deb12u1
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
jq@1.7.1-3build1
1.7.1-3ubuntu0.24.04.1
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
jq@1.6-2.1
1.6-2.1+deb12u1
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.