StackRadar

CVE-2025-48386

Medium

Advisory

Published 8 Jul 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
163
of 17,781 indexed, latest versions
Container images
143
deployed by those charts
Fix available
3 of 3
affected packages

Git allows a buffer overflow in 'wincred' credential helper

Carried by container images the latest versions of 163 of 17,781 indexed charts deploy, on 143 images.

Affected packageAffected versionsFixed inImages
gitdeb1:2.7.4-0ubuntu1.3, 1:2.7.4-0ubuntu1.4, 1:2.7.4-0ubuntu1.6, 1:2.7.4-0ubuntu1.7+26 more1:2.7.4-0ubuntu1.10+esm9, 1:2.17.1-1ubuntu0.18+esm2, 1:2.25.1-1ubuntu3.14+esm1, 1:2.34.1-1ubuntu1.13+1 more106
gitapk2.40.4-r0, 2.43.0-r0, 2.43.4-r0, 2.43.5-r0+6 more2.43.7-r0, 2.45.4-r0, 2.47.3-r0, 2.49.1-r0+1 more36
gitbitnami2.50.0-12.50.11
OSV records
ALPINE-CVE-2025-48386BIT-git-2025-48386UBUNTU-CVE-2025-48386
Also known as
GHSA-4v56-3xvj-xvfr, USN-7626-1

Charts affected

163 by stars
ChartLatestAffected imagesRadar Score
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
git@1:2.7.4-0ubuntu1.6
1:2.7.4-0ubuntu1.10+esm9

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
git@1:2.7.4-0ubuntu1.6
1:2.7.4-0ubuntu1.10+esm9

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
git@1:2.7.4-0ubuntu1.6
1:2.7.4-0ubuntu1.10+esm9

Open the chart page →

25,769
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
git@1:2.25.1-1ubuntu3.4
1:2.25.1-1ubuntu3.14+esm1

Open the chart page →

30,687
convert-datasvtechVerified publisher0.13.21 of 3See more

convert-data svtech 0.13.2

1 of the 3 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
git@1:2.34.1-1ubuntu1.11
1:2.34.1-1ubuntu1.13

Open the chart page →

7,588
elasticsearchsvtech-public-helm-charts1.0.01 of 1See more

elasticsearch svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
git@1:2.34.1-1ubuntu1.2
1:2.34.1-1ubuntu1.13

Open the chart page →

12,048
preparationsvtech-public-helm-charts1.0.01 of 1See more

preparation svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
git@1:2.34.1-1ubuntu1.2
1:2.34.1-1ubuntu1.13

Open the chart page →

12,048
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
git@1:2.25.1-1ubuntu3.11
1:2.25.1-1ubuntu3.14+esm1

Open the chart page →

18,756
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
git@1:2.34.1-1ubuntu1.10
1:2.34.1-1ubuntu1.13

Open the chart page →

20,270
node-redthl-chartsVerified publisher0.1.01 of 1See more

node-red thl-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
nodered/node-red:3.0.2-18e2632a7a35dd
git@2.43.0-r0
2.43.7-r0

Open the chart page →

2,806
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
git@2.43.4-r0
2.43.7-r0

Open the chart page →

2,477
kongwallarmVerified publisher4.6.31 of 7See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
git@1:2.25.1-1ubuntu3.10
1:2.25.1-1ubuntu3.14+esm1

Open the chart page →

11,405
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-48386.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
git@1:2.34.1-1ubuntu1.11
1:2.34.1-1ubuntu1.13

Open the chart page →

14,100

Container images carrying it

143 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
git@1:2.7.4-0ubuntu1.6
1:2.7.4-0ubuntu1.10+esm9
11
library/kong:3.6a42d2b4503e7
git@1:2.34.1-1ubuntu1.12
1:2.34.1-1ubuntu1.13
7
oomk8s/readiness-check:2.0.07daa08b81954
git@1:2.7.4-0ubuntu1.3
1:2.7.4-0ubuntu1.10+esm9
6
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
git@1:2.7.4-0ubuntu1.4
1:2.7.4-0ubuntu1.10+esm9
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
git@1:2.7.4-0ubuntu1.6
1:2.7.4-0ubuntu1.10+esm9
4
cloudve/cloudlaunch-server:latest4a3d7fae90bb
git@1:2.25.1-1ubuntu3.2
1:2.25.1-1ubuntu3.14+esm1
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
git@1:2.34.1-1ubuntu1.6
1:2.34.1-1ubuntu1.13
3
alpine/git:2.47.2062a01ad7a0e
git@2.47.2-r0
2.47.3-r0
2
dtzar/helm-kubectl:3.14.455429449408e
git@2.43.0-r0
2.43.7-r0
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
git@1:2.25.1-1ubuntu3
1:2.25.1-1ubuntu3.14+esm1
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
git@1:2.34.1-1ubuntu1.2
1:2.34.1-1ubuntu1.13
2
uselagoon/docker-host:v3.6.12c89ed939b8b
git@2.47.2-r0
2.47.3-r0
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
git@1:2.43.0-1ubuntu7.2
1:2.43.0-1ubuntu7.3
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
git@1:2.34.1-1ubuntu1.5
1:2.34.1-1ubuntu1.13
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
git@1:2.43.0-1ubuntu7.2
1:2.43.0-1ubuntu7.3
2
1dev/server:11.9.0cd5b12fe5471
git@1:2.43.0-1ubuntu7.2
1:2.43.0-1ubuntu7.3
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
git@1:2.25.1-1ubuntu3
1:2.25.1-1ubuntu3.14+esm1
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
git@1:2.17.1-1ubuntu0.11
1:2.17.1-1ubuntu0.18+esm2
1
alpine/helm105741fa6621
git@2.45.2-r0
2.45.4-r0
1
alpine/k8s:1.31.106dbe6f391eda
git@2.49.0-r0
2.49.1-r0
1
alpine/k8s:1.32.47e1e7d5b7a96
git@2.47.2-r0
2.47.3-r0
1
alpine/k8s:1.31.49c4976d47656
git@2.47.1-r0
2.47.3-r0
1
alpine/k8s:1.30.0bd01dae02676
git@2.43.0-r0
2.43.7-r0
1
alpine/k8s:1.30.2cd560fce90f7
git@2.45.2-r0
2.45.4-r0
1
alpine/k8s:1.28.13e5c0b053fed7
git@2.45.2-r0
2.45.4-r0
1
alpine/k8s:1.32.3eec354133193
git@2.47.2-r0
2.47.3-r0
1
aquasec/harbor-scanner-trivy:0.31.26e790e233872
git@2.43.4-r0
2.43.7-r0
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
git@1:2.25.1-1ubuntu3.11
1:2.25.1-1ubuntu3.14+esm1
1
bitnamilegacy/git:latest4b08d0c5af8d
git@2.50.0-1
2.50.1
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
git@1:2.25.1-1ubuntu3.1
1:2.25.1-1ubuntu3.14+esm1
1
buddyspencer/gickup:0.10.386b656f19b0c1
git@2.45.3-r0
2.45.4-r0
1
chetangautamm/repo:sipp.v3e7f7049e1544
git@1:2.25.1-1ubuntu3
1:2.25.1-1ubuntu3.14+esm1
1
cheveo/azp-agent:1.0.282240f890884
git@1:2.34.1-1ubuntu1.12
1:2.34.1-1ubuntu1.13
1
cheyang/distributed-tf:1.6.046cc34755493
git@1:2.7.4-0ubuntu1.3
1:2.7.4-0ubuntu1.10+esm9
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
git@2.49.0-r0
2.49.1-r0
1
cloudve/ttyd:latestd79c1c5881c0
git@1:2.17.1-1ubuntu0.7
1:2.17.1-1ubuntu0.18+esm2
1
countly/countly-server:25.05.4e3c238248f99
git@1:2.25.1-1ubuntu3.13
1:2.25.1-1ubuntu3.14+esm1
1
cribl/cribl:3.0.2762747cb6796
git@1:2.17.1-1ubuntu0.8
1:2.17.1-1ubuntu0.18+esm2
1
cryptexlabs/authf:0.12.11189c07411d7c
git@2.43.5-r0
2.43.7-r0
1
daskdev/dask-notebook:1.1.0052630f5ca04
git@1:2.17.1-1ubuntu0.4
1:2.17.1-1ubuntu0.18+esm2
1
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
git@1:2.34.1-1ubuntu1.10
1:2.34.1-1ubuntu1.13
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
git@1:2.25.1-1ubuntu3.14
1:2.25.1-1ubuntu3.14+esm1
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
git@1:2.7.4-0ubuntu1.3
1:2.7.4-0ubuntu1.10+esm9
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
git@1:2.25.1-1ubuntu3.14
1:2.25.1-1ubuntu3.14+esm1
1
galaxy/cloudman-server:lateste5c265fe9fcd
git@1:2.25.1-1ubuntu3.5
1:2.25.1-1ubuntu3.14+esm1
1
gethue/hue:4.11.011b649636e68
git@1:2.25.1-1ubuntu3.6
1:2.25.1-1ubuntu3.14+esm1
1
gethue/hue:4.10.05702b2c37ff9
git@1:2.17.1-1ubuntu0.8
1:2.17.1-1ubuntu0.18+esm2
1
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
git@2.45.2-r0
2.45.4-r0
1
gitea/act_runner:0.2.11c57233403eff
git@2.45.2-r0
2.45.4-r0
1
gitea/gitea:1.22.376f516a1a8c2
git@2.45.2-r0
2.45.4-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.