StackRadar

CVE-2025-48060

High

Advisory

Published 21 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
221
of 17,781 indexed, latest versions
Container images
158
deployed by those charts
Fix available
2 of 2
affected packages

jq - security update

Carried by container images the latest versions of 221 of 17,781 indexed charts deploy, on 158 images.

Affected packageAffected versionsFixed inImages
jqdeb1.5+dfsg-1, 1.5+dfsg-1ubuntu0.1, 1.5+dfsg-2, 1.6-1ubuntu0.20.04.1+3 more1.5+dfsg-1ubuntu0.1+esm3, 1.5+dfsg-2ubuntu0.1~esm1, 1.6-1ubuntu0.20.04.1+esm1, 1.6-2.1+deb11u1+3 more157
jqapk1.7.1-r01.8.0-r01
OSV records
ALPINE-CVE-2025-48060DEBIAN-CVE-2025-48060UBUNTU-CVE-2025-48060DLA-4307-1
Also known as
USN-7657-1, USN-7657-2

Charts affected

221 by stars
ChartLatestAffected imagesRadar Score
mongodbkubesphere-testVerified publisher0.3.21 of 2See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.2.16ca49afbcb2b
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1

Open the chart page →

9,623
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

20,204
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1

Open the chart page →

26,356
circleci-runnermatic-insurance0.1.11 of 1See more

circleci-runner matic-insurance 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
circleci/runner:launch-agent9bdc62f02162
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

4,112
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

29,588
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

5,422
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

7,398
dexmesosphere-stable2.14.11 of 5See more

dex mesosphere-stable 2.14.1

1 of the 5 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

19,214
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

5,422
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

10,180
veleromesosphere-stable3.2.51 of 1See more

velero mesosphere-stable 3.2.5

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

1,869
folding-at-homemidokura-communityVerified publisher0.0.31 of 1See more

folding-at-home midokura-community 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
linuxserver/foldingathome:7.6.219a997426d71e
jq@1.7.1-3build1
1.7.1-3ubuntu0.24.04.1

Open the chart page →

2,899
unifimidokura-communityVerified publisher0.0.61 of 1See more

unifi midokura-community 0.0.6

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:7.3.83ab105cc50322
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

11,188
mongodbmmontesVerified publisher0.5.01 of 1See more

mongodb mmontes 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.4.1305678ae4e5e1
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

7,109
reporting-nifi-processor-svcmojaloop0.0.21 of 3See more

reporting-nifi-processor-svc mojaloop 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:6.0.271a63fc2438e
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

6,182
mongodb-admin-interfacemongo-db-admin-interfaceVerified publisher0.1.01 of 2See more

mongodb-admin-interface mongo-db-admin-interface 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

5,179
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

30,363
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

6,608
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

27,721
neo4jneo4j-helm-old4.3.2-11 of 1See more

neo4j neo4j-helm-old 4.3.2-1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/neo4j:4.3.2-enterprise56a9453c4064
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

2,640
kafka-helm-chartnotesprojectchart0.1.01 of 1See more

kafka-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

4,547
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

5,288
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
omecproject/openmme:master-latest64776cb9edb3
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

40,715
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1

Open the chart page →

36,215
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0-focal5e15a3f014ed
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

27,537
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1

Open the chart page →

19,720
external-dns-host-networkphntom0.0.121 of 1See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
phntom/external-dns-host-network:0.0.123adadbac8443
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

4,642
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

6,641
substreams-sink-nooppinaxVerified publisher0.0.31 of 1See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

6,587
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.6-focal8e70544b6c76
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

27,558
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.4-bionic3d0e6df9fd5b
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1

Open the chart page →

28,484
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

4,416
raven_profilerraven-profilerVerified publisher0.1.621 of 1See more

raven_profiler raven-profiler 0.1.62

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
public.ecr.aws/t0u0d5o5/ecr_authenticator:latest077e4e57e41c
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

1,300
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

15,520
zentaorock8sVerified publisher0.0.11 of 1See more

zentao rock8s 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
easysoft/quickon-zentao:18.5592ad5df1f8b
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

1,534
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

12,949
dgraphromholdings0.0.201 of 1See more

dgraph romholdings 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

11,909
mongodbsb-helm-charts0.4.01 of 1See more

mongodb sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:7.0.140032d2ca20db
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

4,055
satisfactoryschichtelVerified publisher0.3.31 of 1See more

satisfactory schichtel 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.9464d11e36e10
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

3,525
syncstorageschichtelVerified publisher0.1.11 of 1See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
mozilla/syncstorage-rs:0.15.893752877dced
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

1,318
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

5,582
frigatesmarthallVerified publisher1.0.61 of 1See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

2,243
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,769
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,803
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

28,470
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,769
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

24,776
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

29,220
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

24,776
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

27,477

Container images carrying it

158 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
jq@1.6-2.1
1.6-2.1+deb11u1
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
jq@1.6-2.1
1.6-2.1+deb12u1
1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
public.ecr.aws/t0u0d5o5/ecr_authenticator:latest077e4e57e41c
jq@1.6-2.1
1.6-2.1+deb11u1
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.