StackRadar

CVE-2025-48174

Critical

Advisory

Published 16 May 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
66
of 17,781 indexed, latest versions
Container images
66
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 66 of 17,781 indexed charts deploy, on 66 images.

Affected packageAffected versionsFixed inImages
libavifdeb0.9.3-3, 0.11.1-1, 1.0.4-1ubuntu3, 1.3.0-1ubuntu1+1 more0.11.1-1+deb12u166
OSV records
DEBIAN-CVE-2025-48174UBUNTU-CVE-2025-48174

Charts affected

66 by stars
ChartLatestAffected imagesRadar Score
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,676
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,706
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

8,189
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

7,084
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,790
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
libavif@0.11.1-1
0.11.1-1+deb12u1
santisbon/evworker:lateste807283f8d69
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

14,179
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
santisbon/speedtest:latest8ee3a1697227
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

12,668
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
libavif@1.3.0-1ubuntu4
no fix listed

Open the chart page →

10,348
nagvissvtech-public-helm-charts1.0.01 of 1See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

9,102
super-mariotechpreta0.1.11 of 1See more

super-mario techpreta 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
nirmalnaveen/supermario:latest8541a39162f3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

6,297
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

39,090
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

28,814
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

28,385
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

28,858
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

45,239
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-48174.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

7,673

Container images carrying it

66 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/nginx:1.27.1287ff321f9e3
libavif@0.11.1-1
0.11.1-1+deb12u1
4
library/nginx:1.25:1.25.5a484819eb602
libavif@0.11.1-1
0.11.1-1+deb12u1
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libavif@0.11.1-1
0.11.1-1+deb12u1
3
library/nginx:1.27.098f8ec75657d
libavif@0.11.1-1
0.11.1-1+deb12u1
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
libavif@0.11.1-1
0.11.1-1+deb12u1
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
libavif@0.11.1-1
0.11.1-1+deb12u1
2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libavif@0.11.1-1
0.11.1-1+deb12u1
2
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libavif@0.11.1-1
0.11.1-1+deb12u1
2
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libavif@0.11.1-1
0.11.1-1+deb12u1
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libavif@0.11.1-1
0.11.1-1+deb12u1
2
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libavif@0.11.1-1
0.11.1-1+deb12u1
2
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libavif@0.11.1-1
0.11.1-1+deb12u1
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
libavif@0.9.3-3
no fix listed
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
libavif@0.11.1-1
0.11.1-1+deb12u1
2
allegroai/clearml:2.0.0-613713ae38f7daf
libavif@0.11.1-1
0.11.1-1+deb12u1
1
apache/tika:latest-full80072bb73dd3
libavif@1.3.0-1ubuntu4
no fix listed
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
libavif@0.11.1-1
0.11.1-1+deb12u1
1
avzini/web-app:latestf40b30210ed0
libavif@0.11.1-1
0.11.1-1+deb12u1
1
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libavif@0.11.1-1
0.11.1-1+deb12u1
1
dannielkil/book-frontend:latest937993927694
libavif@0.11.1-1
0.11.1-1+deb12u1
1
dragonflyoss/client:v0.1.82edf3e921f4e0
libavif@0.11.1-1
0.11.1-1+deb12u1
1
emqx/ecp-ui:2.5.1e33e9816f147
libavif@0.11.1-1
0.11.1-1+deb12u1
1
felipecs8/app-db-connection-test:v129e06c9c6385
libavif@0.11.1-1
0.11.1-1+deb12u1
1
firefart/requesttracker:5.0.40d6249906d8c
libavif@0.11.1-1
0.11.1-1+deb12u1
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
libavif@0.11.1-1
0.11.1-1+deb12u1
1
hazegoodlife/haaze:milksite8d4c63169e14
libavif@0.11.1-1
0.11.1-1+deb12u1
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
libavif@0.11.1-1
0.11.1-1+deb12u1
1
jaedb/iris:latest048cfbf58d57
libavif@0.11.1-1
0.11.1-1+deb12u1
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
libavif@0.11.1-1
0.11.1-1+deb12u1
1
kuzwolka/aws9:main1ad759b961b1
libavif@0.11.1-1
0.11.1-1+deb12u1
1
kuzwolka/aws9:news3e8880fbbb96
libavif@0.11.1-1
0.11.1-1+deb12u1
1
kuzwolka/aws9:blog4a7707410bf1
libavif@0.11.1-1
0.11.1-1+deb12u1
1
kuzwolka/aws9:shop84a9d9766345
libavif@0.11.1-1
0.11.1-1+deb12u1
1
library/nginx:1.27.409369da6b103
libavif@0.11.1-1
0.11.1-1+deb12u1
1
library/nginx:1.25.167f9a4f10d14
libavif@0.11.1-1
0.11.1-1+deb12u1
1
library/nginx:1.25.49ff236ed47fe
libavif@0.11.1-1
0.11.1-1+deb12u1
1
library/nginx:1.27.3fb197595ebe7
libavif@0.11.1-1
0.11.1-1+deb12u1
1
logiqai/flash:v3.10.265b996bc7bdc
libavif@0.11.1-1
0.11.1-1+deb12u1
1
makersquad/harp-proxy:0.8.1a40dd258c527
libavif@0.11.1-1
0.11.1-1+deb12u1
1
moreillon/user-manager-front:v5.1.06597e6b98d21
libavif@0.11.1-1
0.11.1-1+deb12u1
1
nirmalnaveen/supermario:latest8541a39162f3
libavif@0.11.1-1
0.11.1-1+deb12u1
1
openbas/caldera-server:5.1.0a277796d9724
libavif@0.11.1-1
0.11.1-1+deb12u1
1
owncloud/server:10.16.274c53d341076
libavif@0.9.3-3
no fix listed
1
owncloud/server:10.16.3b3f9efdcd7f7
libavif@0.9.3-3
no fix listed
1
phan2410/dummy-service:0.0.89c6ed6de26ca
libavif@0.11.1-1
0.11.1-1+deb12u1
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
libavif@0.11.1-1
0.11.1-1+deb12u1
1
photoprism/photoprism:260601650c6ad5a651
libavif@1.3.0-1ubuntu4
no fix listed
1
photoprism/photoprism:260728958642220223
libavif@1.3.0-1ubuntu4
no fix listed
1
photoprism/photoprism:251130db16ee6b1ba3
libavif@1.3.0-1ubuntu1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
libavif@1.0.4-1ubuntu3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.