StackRadar

CVE-2025-48068

Low

Advisory

Published 28 May 2025In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
2.3
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
27
of 17,781 indexed, latest versions
Container images
27
deployed by those charts
Fix available
1 of 1
affected package

Information exposure in Next.js dev server due to lack of origin verification

Carried by container images the latest versions of 27 of 17,781 indexed charts deploy, on 27 images.

Affected packageAffected versionsFixed inImages
nextnpm13.0.7, 13.2.4, 13.4.12, 13.5.2+16 more14.2.3027
OSV records
GHSA-3h52-269p-cp9r

Charts affected

27 by stars
ChartLatestAffected imagesRadar Score
supabasetokens-studioVerified publisher1.0.01 of 14See more

supabase tokens-studio 1.0.0

1 of the 14 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
supabase/studio:20241021-9f9b08326d8070c55e9
next@14.2.13
14.2.30

Open the chart page →

23,123
homarroben01Verified publisher1.4.01 of 1See more

homarr oben01 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
next@13.4.12
14.2.30

Open the chart page →

2,581
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
langgenius/dify-web:0.6.11a2a294743634
next@14.1.0
14.2.30

Open the chart page →

20,403
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
next@14.1.3
14.2.30

Open the chart page →

31,844
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
next@14.2.25
14.2.30

Open the chart page →

2,823
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
next@14.2.5
14.2.30

Open the chart page →

30,234
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
next@14.2.26
14.2.30

Open the chart page →

5,225
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
next@14.1.4
14.2.30

Open the chart page →

4,497
chatgpt-next-webchatgpt-next-web0.1.11 of 1See more

chatgpt-next-web chatgpt-next-web 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
next@14.1.1
14.2.30

Open the chart page →

1,977
homarrdelerVerified publisher1.0.11 of 1See more

homarr deler 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
next@13.4.12
14.2.30

Open the chart page →

1,924
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
langgenius/dify-web:1.0.0d64914ff0d6d
next@14.2.15
14.2.30

Open the chart page →

19,224
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
next@14.2.6
14.2.30

Open the chart page →

2,862
dashboardedu1.0.01 of 1See more

dashboard edu 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
next@14.2.3
14.2.30

Open the chart page →

1,344
mandefactlyVerified publisher0.5.161 of 3See more

mande factly 0.5.16

1 of the 3 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
factly/mande-web:0.34.1742355964b0e
next@13.5.3
14.2.30

Open the chart page →

4,777
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
next@14.2.2
14.2.30

Open the chart page →

4,650
opentelemetry-demogpg-dev0.33.82 of 27See more

opentelemetry-demo gpg-dev 0.33.8

2 of the 27 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
next@14.2.5
14.2.30
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
next@14.2.5
14.2.30

Open the chart page →

49,025
kyso-frontkyso1.0.01 of 1See more

kyso-front kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
kyso/kyso-front:lateste52595c5c16f
next@13.5.2
14.2.30

Open the chart page →

2,685
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
next@14.2.25
14.2.30

Open the chart page →

3,555
dashboardleechistest1.0.01 of 1See more

dashboard leechistest 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
next@14.2.3
14.2.30

Open the chart page →

1,344
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
next@13.5.6
14.2.30

Open the chart page →

4,647
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit:1.24.02434560e8f0e
next@14.2.4
14.2.30

Open the chart page →

5,017
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
next@13.5.3
14.2.30

Open the chart page →

2,969
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
next@14.2.25
14.2.30

Open the chart page →

5,338
counter-dhlsikademo0.3.01 of 3See more

counter-dhl sikademo 0.3.0

1 of the 3 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
next@13.0.7
14.2.30

Open the chart page →

4,820
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
next@13.5.11
14.2.30

Open the chart page →

2,789
websitewaldo-visionVerified publisher0.33.01 of 2See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
next@13.2.4
14.2.30

Open the chart page →

3,474
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-48068.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
next@14.2.25
14.2.30

Open the chart page →

5,984

Container images carrying it

27 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
sysnet4admin/dashboard:bluec5bd3bb1b5a6
next@14.2.3
14.2.30
2
documenso/documenso:v1.8.17f16a9449f18
next@14.2.6
14.2.30
1
factly/mande-web:0.34.1742355964b0e
next@13.5.3
14.2.30
1
fallenbagel/jellyseerr:latest4538137bc5af
next@14.2.25
14.2.30
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
next@14.2.2
14.2.30
1
kyso/kyso-front:lateste52595c5c16f
next@13.5.2
14.2.30
1
langgenius/dify-web:0.6.11a2a294743634
next@14.1.0
14.2.30
1
langgenius/dify-web:1.0.0d64914ff0d6d
next@14.2.15
14.2.30
1
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
next@13.5.3
14.2.30
1
sigp/siren:v3.0.42c219b04758e
next@14.2.25
14.2.30
1
supabase/studio:20241021-9f9b08326d8070c55e9
next@14.2.13
14.2.30
1
treskon/portrait-ui:DEV-lateste7970783bc8d
next@14.1.3
14.2.30
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
next@14.2.26
14.2.30
1
yidadaa/chatgpt-next-web:latesteaaa469ddeeb
next@14.1.1
14.2.30
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
next@13.4.12
14.2.30
1
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
next@13.4.12
14.2.30
1
ghcr.io/ajnart/homarr:lateste103abadfb52
next@13.5.11
14.2.30
1
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
next@14.1.4
14.2.30
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
next@14.2.25
14.2.30
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
next@14.2.25
14.2.30
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
next@13.5.6
14.2.30
1
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
next@13.0.7
14.2.30
1
ghcr.io/openlit/openlit:1.24.02434560e8f0e
next@14.2.4
14.2.30
1
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
next@14.2.5
14.2.30
1
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
next@14.2.5
14.2.30
1
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
next@13.2.4
14.2.30
1
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
next@14.2.5
14.2.30
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.