StackRadar

CVE-2025-48174

Critical

Advisory

Published 16 May 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
66
of 17,781 indexed, latest versions
Container images
66
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 66 of 17,781 indexed charts deploy, on 66 images.

Affected packageAffected versionsFixed inImages
libavifdeb0.9.3-3, 0.11.1-1, 1.0.4-1ubuntu3, 1.3.0-1ubuntu1+1 more0.11.1-1+deb12u166
OSV records
DEBIAN-CVE-2025-48174UBUNTU-CVE-2025-48174

Charts affected

66 by stars
ChartLatestAffected imagesRadar Score
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,676
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,706
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

8,189
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

7,084
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,790
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
libavif@0.11.1-1
0.11.1-1+deb12u1
santisbon/evworker:lateste807283f8d69
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

14,179
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
santisbon/speedtest:latest8ee3a1697227
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

12,668
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
libavif@1.3.0-1ubuntu4
no fix listed

Open the chart page →

10,348
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

9,102
super-mariotechpreta0.1.11 of 1See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
nirmalnaveen/supermario:latest8541a39162f3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

6,297
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

39,090
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

28,814
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

28,385
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

28,858
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

45,239
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

7,673

Container images carrying it

66 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
praravind1801/helmimages:3.0.0f29d637b9ce1
libavif@0.11.1-1
0.11.1-1+deb12u1
1
qonstrukt/php:8.4-v8-apache089af7925aa1
libavif@1.0.4-1ubuntu3
no fix listed
1
santisbon/evwatcher:latestc4e994ca4540
libavif@0.11.1-1
0.11.1-1+deb12u1
1
santisbon/evworker:lateste807283f8d69
libavif@0.11.1-1
0.11.1-1+deb12u1
1
santisbon/speedtest:latest8ee3a1697227
libavif@0.11.1-1
0.11.1-1+deb12u1
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libavif@0.11.1-1
0.11.1-1+deb12u1
1
shamimkuet/nginx:1.0.2b82902a76a04
libavif@0.11.1-1
0.11.1-1+deb12u1
1
sissbruecker/linkding:1.35.00c5dddf0b37c
libavif@0.11.1-1
0.11.1-1+deb12u1
1
somnathmore/custom-nginx:v2bdfc06cad4ec
libavif@0.11.1-1
0.11.1-1+deb12u1
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
libavif@0.11.1-1
0.11.1-1+deb12u1
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
libavif@0.11.1-1
0.11.1-1+deb12u1
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libavif@0.11.1-1
0.11.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libavif@0.11.1-1
0.11.1-1+deb12u1
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libavif@0.11.1-1
0.11.1-1+deb12u1
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libavif@0.11.1-1
0.11.1-1+deb12u1
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libavif@0.11.1-1
0.11.1-1+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.