StackRadar

CVE-2025-48945

High

Advisory

Published 16 Jun 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.005
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
12
of 17,781 indexed, latest versions
Container images
11
deployed by those charts
Fix available
1 of 2
affected packages

pycares has a Use-After-Free Vulnerability

Carried by container images the latest versions of 12 of 17,781 indexed charts deploy, on 11 images.

Affected packageAffected versionsFixed inImages
pycaresdeb4.3.0-2, 4.4.0-2+b3no fix listed2
pycarespypi3.1.1, 4.1.2, 4.3.0, 4.4.0+1 more4.9.011
OSV records
DEBIAN-CVE-2025-48945GHSA-5qpg-rh4j-qp35

Charts affected

12 by stars
ChartLatestAffected imagesRadar Score
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2025-48945.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pycares@4.1.2
4.9.0

Open the chart page →

7,705
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-48945.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
pycares@4.4.0
4.9.0

Open the chart page →

6,041
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-48945.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
pycares@4.3.0-2
pycares@4.3.0
no fix listed
4.9.0

Open the chart page →

12,170
appdaemongeek-cookbookVerified publisher8.4.21 of 1See more

appdaemon geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-48945.

Container imageDigestPackageFixed in
acockburn/appdaemon:4.0.83a93281d7e94
pycares@3.1.1
4.9.0

Open the chart page →

3,461
knot-resolverknot-resolverVerified publisher1.0.51 of 1See more

knot-resolver knot-resolver 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-48945.

Container imageDigestPackageFixed in
cznic/knot-resolver:v6.4.2fe71c5214fdc
pycares@4.4.0-2+b3
pycares@4.4.0
no fix listed
4.9.0

Open the chart page →

2,049
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-48945.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
pycares@4.4.0
4.9.0

Open the chart page →

6,179
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-48945.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
pycares@4.3.0-2
pycares@4.3.0
no fix listed
4.9.0

Open the chart page →

12,170
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-48945.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
pycares@4.5.0
4.9.0

Open the chart page →

4,647
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-48945.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
pycares@4.4.0
4.9.0

Open the chart page →

6,447
kafka-aggregatorlsst-sqre0.1.21 of 1See more

kafka-aggregator lsst-sqre 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-48945.

Container imageDigestPackageFixed in
lsstsqre/kafkaaggregator:masterbe1b21060854
pycares@3.1.1
4.9.0

Open the chart page →

3,052
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-48945.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
pycares@4.1.2
4.9.0

Open the chart page →

17,779
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-48945.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
pycares@4.1.2
4.9.0

Open the chart page →

2,233

Container images carrying it

11 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
vdiogov/glpi-conteiner:latest6945f84f0058
pycares@4.3.0-2
pycares@4.3.0
no fix listed
4.9.0
2
acockburn/appdaemon:4.0.83a93281d7e94
pycares@3.1.1
4.9.0
1
cznic/knot-resolver:v6.4.2fe71c5214fdc
pycares@4.4.0-2+b3
pycares@4.4.0
no fix listed
4.9.0
1
errbotio/errbot:6.1.900ee4e0953ab
pycares@4.1.2
4.9.0
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
pycares@4.4.0
4.9.0
1
homeassistant/home-assistant:2023.12.48d000332b09b
pycares@4.4.0
4.9.0
1
lsstsqre/kafkaaggregator:masterbe1b21060854
pycares@3.1.1
4.9.0
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
pycares@4.1.2
4.9.0
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
pycares@4.5.0
4.9.0
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pycares@4.1.2
4.9.0
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
pycares@4.4.0
4.9.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.