StackRadar

CVE-2025-48175

Medium

Advisory

Published 16 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
66
of 17,781 indexed, latest versions
Container images
66
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 66 of 17,781 indexed charts deploy, on 66 images.

Affected packageAffected versionsFixed inImages
libavifdeb0.9.3-3, 0.11.1-1, 1.0.4-1ubuntu3, 1.3.0-1ubuntu1+1 more0.11.1-1+deb12u166
OSV records
DEBIAN-CVE-2025-48175UBUNTU-CVE-2025-48175

Charts affected

66 by stars
ChartLatestAffected imagesRadar Score
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

10,622
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
libavif@1.3.0-1ubuntu4
no fix listed

Open the chart page →

8,825
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,435
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

7,052
commonground-gatewaycommonground-gateway1.5.41 of 7See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

9,724
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

18,376
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

6,374
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
owncloud/server:10.16.274c53d341076
libavif@0.9.3-3
no fix listed

Open the chart page →

9,858
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
libavif@1.3.0-1ubuntu1
no fix listed

Open the chart page →

11,103
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,039
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libavif@0.11.1-1
0.11.1-1+deb12u1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

14,838
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
libavif@1.0.4-1ubuntu3
no fix listed

Open the chart page →

23,964
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,676
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

6,297
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
libavif@0.11.1-1
0.11.1-1+deb12u1
kuzwolka/aws9:news3e8880fbbb96
libavif@0.11.1-1
0.11.1-1+deb12u1
kuzwolka/aws9:blog4a7707410bf1
libavif@0.11.1-1
0.11.1-1+deb12u1
kuzwolka/aws9:shop84a9d9766345
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

18,344
basic-auth-s3-nginxbasic-auth-s3-nginxVerified publisher1.0.01 of 1See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

6,297
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,039
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

8,009
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
libavif@1.3.0-1ubuntu4
no fix listed

Open the chart page →

3,773
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

15,380
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

7,503
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

10,090
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

6,075
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libavif@0.9.3-3
no fix listed

Open the chart page →

30,031
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
libavif@0.9.3-3
no fix listed

Open the chart page →

29,033
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
owncloud/server:10.16.3b3f9efdcd7f7
libavif@0.9.3-3
no fix listed

Open the chart page →

10,035
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
libavif@1.0.4-1ubuntu3
no fix listed

Open the chart page →

16,954
kube-ecp-stackemqx-operator2.5.11 of 16See more

kube-ecp-stack emqx-operator 2.5.1

1 of the 16 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
emqx/ecp-ui:2.5.1e33e9816f147
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

23,685
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

13,241
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

12,958
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

49,025
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,839
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

9,122
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

25,017
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,973
opencloudjacobcolvinVerified publisher0.2.36 of 13See more

opencloud jacobcolvin 0.2.3

6 of the 13 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
libavif@0.11.1-1
0.11.1-1+deb12u1
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

45,239
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

22,589
shinsei-managerjtektVerified publisher0.2.02 of 8See more

shinsei-manager jtekt 0.2.0

2 of the 8 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
moreillon/user-manager-front:v5.0.3b067dbbbb6af
libavif@0.11.1-1
0.11.1-1+deb12u1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

63,461
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

8,860
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

23,613
group-managermoreillonVerified publisher0.4.41 of 3See more

group-manager moreillon 0.4.4

1 of the 3 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
moreillon/group-manager-front:v3.3.1c9f85db3baa5
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

9,835
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
moreillon/user-manager-front:v5.0.3b067dbbbb6af
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

25,704
user-manager-neo4jmoreillonVerified publisher0.9.72 of 6See more

user-manager-neo4j moreillon 0.9.7

2 of the 6 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
moreillon/group-manager-front:v3.3.1c9f85db3baa5
libavif@0.11.1-1
0.11.1-1+deb12u1
moreillon/user-manager-front:v5.1.06597e6b98d21
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

30,363
genericmorremeyer8.0.01 of 1See more

generic morremeyer 8.0.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
library/nginx:1.25.167f9a4f10d14
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

6,853
my-helm-chartmy-helm-charts-2024Verified publisher0.1.01 of 1See more

my-helm-chart my-helm-charts-2024 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
shamimkuet/nginx:1.0.2b82902a76a04
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,371
mystoremystore-chart0.1.02 of 3See more

mystore mystore-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
hazegoodlife/haaze:veggiesite50f02d2d5d4d
libavif@0.11.1-1
0.11.1-1+deb12u1
hazegoodlife/haaze:milksite8d4c63169e14
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

9,510
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
hecrom/myweatherangularclient:1.3.11bb0372939c19
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

17,929
nginx-samplenginx-sample0.5.01 of 1See more

nginx-sample nginx-sample 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,321
nginx-sample-dependentnginx-sample-dependent0.2.01 of 1See more

nginx-sample-dependent nginx-sample-dependent 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

5,321
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2025-48175.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
libavif@0.11.1-1
0.11.1-1+deb12u1

Open the chart page →

9,724

Container images carrying it

66 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
praravind1801/helmimages:3.0.0f29d637b9ce1
libavif@0.11.1-1
0.11.1-1+deb12u1
1
qonstrukt/php:8.4-v8-apache089af7925aa1
libavif@1.0.4-1ubuntu3
no fix listed
1
santisbon/evwatcher:latestc4e994ca4540
libavif@0.11.1-1
0.11.1-1+deb12u1
1
santisbon/evworker:lateste807283f8d69
libavif@0.11.1-1
0.11.1-1+deb12u1
1
santisbon/speedtest:latest8ee3a1697227
libavif@0.11.1-1
0.11.1-1+deb12u1
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
libavif@0.11.1-1
0.11.1-1+deb12u1
1
shamimkuet/nginx:1.0.2b82902a76a04
libavif@0.11.1-1
0.11.1-1+deb12u1
1
sissbruecker/linkding:1.35.00c5dddf0b37c
libavif@0.11.1-1
0.11.1-1+deb12u1
1
somnathmore/custom-nginx:v2bdfc06cad4ec
libavif@0.11.1-1
0.11.1-1+deb12u1
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
libavif@0.11.1-1
0.11.1-1+deb12u1
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
libavif@0.11.1-1
0.11.1-1+deb12u1
1
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
libavif@0.11.1-1
0.11.1-1+deb12u1
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libavif@0.11.1-1
0.11.1-1+deb12u1
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
libavif@0.11.1-1
0.11.1-1+deb12u1
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
libavif@0.11.1-1
0.11.1-1+deb12u1
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
libavif@0.11.1-1
0.11.1-1+deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.