StackRadar

CVE-2025-48060

High

Advisory

Published 21 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
221
of 17,781 indexed, latest versions
Container images
158
deployed by those charts
Fix available
2 of 2
affected packages

jq - security update

Carried by container images the latest versions of 221 of 17,781 indexed charts deploy, on 158 images.

Affected packageAffected versionsFixed inImages
jqdeb1.5+dfsg-1, 1.5+dfsg-1ubuntu0.1, 1.5+dfsg-2, 1.6-1ubuntu0.20.04.1+3 more1.5+dfsg-1ubuntu0.1+esm3, 1.5+dfsg-2ubuntu0.1~esm1, 1.6-1ubuntu0.20.04.1+esm1, 1.6-2.1+deb11u1+3 more157
jqapk1.7.1-r01.8.0-r01
OSV records
ALPINE-CVE-2025-48060DEBIAN-CVE-2025-48060UBUNTU-CVE-2025-48060DLA-4307-1
Also known as
USN-7657-1, USN-7657-2

Charts affected

221 by stars
ChartLatestAffected imagesRadar Score
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

9,764
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1

Open the chart page →

8,041
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

6,131
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1

Open the chart page →

27,291
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

27,537
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1

Open the chart page →

27,256
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1

Open the chart page →

28,482
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

27,096
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

32,205
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

14,673
floriapp-mongodbfloriapp1.0.01 of 1See more

floriapp-mongodb floriapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1

Open the chart page →

8,041
aptlyg0dscookie0.4.01 of 2See more

aptly g0dscookie 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/g0dscookie/aptly:latestedd095d3c0ee
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

3,481
icinga2g0dscookie0.2.01 of 1See more

icinga2 g0dscookie 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

4,428
accumulogaffer2.2.11 of 4See more

accumulo gaffer 2.2.1

1 of the 4 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
jq@1.7.1-3build1
1.7.1-3ubuntu0.24.04.1

Open the chart page →

16,892
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
jq@1.7.1-3build1
1.7.1-3ubuntu0.24.04.1

Open the chart page →

9,342
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

14,659
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

9,698
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

12,076
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

19,503
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

11,807
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

10,379
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

11,861
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

4,547
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

3,969
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

6,708
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1

Open the chart page →

10,627
helm-airportshelm-airports0.1.01 of 7See more

helm-airports helm-airports 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

12,696
airports-kafkahelm-airports-dan0.1.01 of 2See more

airports-kafka helm-airports-dan 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

4,547
helm-airportshelm-airports-dan0.1.01 of 7See more

helm-airports helm-airports-dan 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

5,573
airports-kafkahelm-airports-kafka0.1.01 of 2See more

airports-kafka helm-airports-kafka 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

4,547
gophishhelmforgeVerified publisher0.1.51 of 1See more

gophish helmforge 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
gophish/gophish:0.12.18a57cd171999
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

2,819
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

32,205
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

19,295
ibm-ucv-prodibm-helm5.2.61 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

1 of the 16 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.22.13d0e426ccff33
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

12,105
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

27,721
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

11,812
frigateimprowisedVerified publisher1.1.01 of 1See more

frigate improwised 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

2,159
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1

Open the chart page →

16,212
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

5,320
proxysqlimprowisedVerified publisher1.0.01 of 1See more

proxysql improwised 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
improwised/proxysql:master-6b26e59-171765063828940522e8b7
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

3,493
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

63,461
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

6,075
beetsk8s-home-lab-repo3.1.11 of 1See more

beets k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
jq@1.7.1-r0
1.8.0-r0

Open the chart page →

2,733
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

12,062
ciliumkubeblocksVerified publisher1.15.11 of 2See more

cilium kubeblocks 1.15.1

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

5,075
spiderpoolkubeblocksVerified publisher1.2.01 of 4See more

spiderpool kubeblocks 1.2.0

1 of the 4 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

8,378

Container images carrying it

158 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
jq@1.6-2.1
1.6-2.1+deb11u1
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
jq@1.6-2.1
1.6-2.1+deb12u1
1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
public.ecr.aws/t0u0d5o5/ecr_authenticator:latest077e4e57e41c
jq@1.6-2.1
1.6-2.1+deb11u1
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.