StackRadar

CVE-2025-48060

High

Advisory

Published 21 May 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
222
of 17,787 indexed, latest versions
Container images
159
deployed by those charts
Fix available
2 of 2
affected packages

jq - security update

Carried by container images the latest versions of 222 of 17,787 indexed charts deploy, on 159 images.

Affected packageAffected versionsFixed inImages
jqdeb1.5+dfsg-1, 1.5+dfsg-1ubuntu0.1, 1.5+dfsg-2, 1.6-1ubuntu0.20.04.1+3 more1.5+dfsg-1ubuntu0.1+esm3, 1.5+dfsg-2ubuntu0.1~esm1, 1.6-1ubuntu0.20.04.1+esm1, 1.6-2.1+deb11u1+3 more158
jqapk1.7.1-r01.8.0-r01
OSV records
ALPINE-CVE-2025-48060DEBIAN-CVE-2025-48060UBUNTU-CVE-2025-48060DLA-4307-1
Also known as
USN-7657-1, USN-7657-2

Charts affected

222 by stars
ChartLatestAffected imagesRadar Score
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

27,501
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

27,501
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

29,244
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

27,501
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,793
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,793
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,793
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

24,800
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

24,800
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3

Open the chart page →

25,793
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

30,759
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
jq@1.6-2.1
1.6-2.1+deb11u1

Open the chart page →

65,130
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

13,684
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

18,828
stateful-data-generatortalhajuikar-helm-charts0.1.21 of 2See more

stateful-data-generator talhajuikar-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

4,898
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

20,362
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

10,065
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

4,125
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
jq@1.6-2.1
1.6-2.1+deb12u1

Open the chart page →

8,370
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

9,396
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1

Open the chart page →

13,563
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-48060.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1

Open the chart page →

28,699

Container images carrying it

159 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
11
library/mongo:5.0.6-focal8e70544b6c76
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
10
wurstmeister/kafka:latest2d4bbf9cc83d
jq@1.6-2.1
1.6-2.1+deb11u1
7
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
1.5+dfsg-1ubuntu0.1+esm3
6
bitnamilegacy/kubectl:1.29.2c74b703deed2
jq@1.6-2.1
1.6-2.1+deb12u1
5
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
5
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
jq@1.5+dfsg-1ubuntu0.1
1.5+dfsg-1ubuntu0.1+esm3
4
library/mongo:5.0-focal5e15a3f014ed
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
4
library/mongo:4.2.12-bionic628741415fc9
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
4
library/mongo:4.4.66efa05203990
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
4
bitnamilegacy/kubectl:latestcd354d5b2556
jq@1.6-2.1
1.6-2.1+deb12u1
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
jq@1.6-2.1
1.6-2.1+deb12u1
3
dgraph/dgraph:v21.12.03b55ea83fffe
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
3
gchq/hdfs:3.3.35ec58edbb2db
jq@1.7.1-3build1
1.7.1-3ubuntu0.24.04.1
3
selenium/hub:3.141.5902f251d48d5f
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
3
apache/nifi-registry:1.26.07cdfd8deec92
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
2
bitnamilegacy/kubectl:1.26.4a0a972324d93
jq@1.6-2.1
1.6-2.1+deb11u1
2
library/mongo:5.041108d183e97
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
2
library/mongo:4.2.358b25d51baa1
jq@1.5+dfsg-2
1.5+dfsg-2ubuntu0.1~esm1
2
library/neo4j:5.20.052d3dec8d455
jq@1.6-2.1
1.6-2.1+deb11u1
2
library/neo4j:4.3.2-enterprise56a9453c4064
jq@1.6-2.1
1.6-2.1+deb11u1
2
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
airbyte/pod-sweeper:1.5.198d2c39d512e
jq@1.6-2.1
1.6-2.1+deb12u1
1
apache/nifi-registry:1.27.063b8e3e40742
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
aristidetm/basic-notebook:3.6.5469dbc951224
jq@1.6-2.1
1.6-2.1+deb12u1
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
jq@1.6-1ubuntu0.20.04.1
1.6-1ubuntu0.20.04.1+esm1
1
bitnamilegacy/kubectl:1.301249fc292e84
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/kubectl:1.3164614ef8290f
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/kubectl:1.22.13d0e426ccff33
jq@1.6-2.1
1.6-2.1+deb11u1
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/minio:2023.12.230b60b6565ab2
jq@1.6-2.1
1.6-2.1+deb11u1
1
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
jq@1.6-2.1
1.6-2.1+deb11u1
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
jq@1.6-2.1
1.6-2.1+deb11u1
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/os-shell:11-debian-11-r968643af4facff
jq@1.6-2.1
1.6-2.1+deb11u1
1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
jq@1.6-2.1
1.6-2.1+deb12u1
1
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
jq@1.6-2.1
1.6-2.1+deb12u1
1
cheveo/azp-agent:1.0.282240f890884
jq@1.6-2.1ubuntu3
1.6-2.1ubuntu3.1
1
chubaofs/cfs-client:3.2.015ff74209ce7
jq@1.6-2.1
1.6-2.1+deb11u1
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.