StackRadar

CVE-2025-49014

Medium

Advisory

Published 19 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
19
of 17,781 indexed, latest versions
Container images
13
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 19 of 17,781 indexed charts deploy, on 13 images.

Affected packageAffected versionsFixed inImages
jqapk1.7.1-r0, 1.8.0-r01.8.1-r013
OSV records
ALPINE-CVE-2025-49014

Charts affected

19 by stars
ChartLatestAffected imagesRadar Score
rocketchatrocketchat-server7.0.21 of 12See more

rocketchat rocketchat-server 7.0.2

1 of the 12 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.28031d190c7ee
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

12,279
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

14,917
cloudttycloudtty0.8.91 of 2See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

3,951
readarrk8s-home-lab-repo7.2.11 of 1See more

readarr k8s-home-lab-repo 7.2.1

1 of the 1 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.188f7551205fbd
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

1,099
octopuso7studios-octopus-helm-chartsOfficialVerified publisher1.2.31 of 5See more

octopus o7studios-octopus-helm-charts 1.2.3

1 of the 5 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
natsio/nats-box:0.18.0abdc9f9f0120
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

6,091
readarrpree-helm-chartsVerified publisher1.17.11 of 1See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.18.28058f7551205fbd
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

1,099
celestia-localastria9.0.01 of 2See more

celestia-local astria 9.0.0

1 of the 2 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

3,281
evm-rollupastria4.1.01 of 2See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

3,980
evm-stackastria5.0.31 of 2See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

3,980
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.28031d190c7ee
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

12,056
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

4,637
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

8,188
monitoring-stackict-platformVerified publisher0.4.01 of 13See more

monitoring-stack ict-platform 0.4.0

1 of the 13 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.2c7adcc4db378
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

9,573
beetsk8s-home-lab-repo3.1.11 of 1See more

beets k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
jq@1.7.1-r0
1.8.1-r0

Open the chart page →

2,733
cosmoshub-rpcnodeifyVerified publisher1.0.71 of 2See more

cosmoshub-rpc nodeify 1.0.7

1 of the 2 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

2,006
cosmos-nodenodeifyVerified publisher2.6.01 of 2See more

cosmos-node nodeify 2.6.0

1 of the 2 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

2,006
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

17,070
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.28031d190c7ee
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

7,157
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-49014.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
jq@1.8.0-r0
1.8.1-r0

Open the chart page →

14,983

Container images carrying it

13 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
natsio/nats-box:0.19.28031d190c7ee
jq@1.8.0-r0
1.8.1-r0
3
ghcr.io/astriaorg/astria-geth:latest4249e403225a
jq@1.8.0-r0
1.8.1-r0
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
jq@1.8.0-r0
1.8.1-r0
2
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
jq@1.8.0-r0
1.8.1-r0
2
ghcr.io/home-operations/readarr:0.4.18:0.4.18.28058f7551205fbd
jq@1.8.0-r0
1.8.1-r0
2
alpine/k8s:1.31.106dbe6f391eda
jq@1.8.0-r0
1.8.1-r0
1
alpine/k8s:1.31.137a319b15cfc9
jq@1.8.0-r0
1.8.1-r0
1
natsio/nats-box:0.18.0abdc9f9f0120
jq@1.8.0-r0
1.8.1-r0
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
jq@1.8.0-r0
1.8.1-r0
1
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
jq@1.8.0-r0
1.8.1-r0
1
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
jq@1.8.0-r0
1.8.1-r0
1
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.2c7adcc4db378
jq@1.8.0-r0
1.8.1-r0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
jq@1.7.1-r0
1.8.1-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.