StackRadar

CVE-2025-49112

Low

Advisory

Published 2 Jun 2025In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.1
base score, highest
EPSS
0.002
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
11
of 17,787 indexed, latest versions
Container images
10
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 11 of 17,787 indexed charts deploy, on 10 images.

Affected packageAffected versionsFixed inImages
redisdeb5:5.0.7-2ubuntu0.1, 5:7.0.15-1~deb12u1, 5:7.0.15-1~deb12u4, 5:7.0.15-1~deb12u6+1 moreno fix listed6
valkeybitnami8.1.2-0, 8.1.3-08.1.44
OSV records
BIT-valkey-2025-49112DEBIAN-CVE-2025-49112UBUNTU-CVE-2025-49112
Also known as
BIT-keydb-2025-49112, BIT-redis-2025-49112

Charts affected

11 by stars
ChartLatestAffected imagesRadar Score
giteagiteaOfficialVerified publisher12.7.01 of 4See more

gitea gitea 12.7.0

1 of the 4 container images this version deploys carry CVE-2025-49112.

Container imageDigestPackageFixed in
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
valkey@8.1.3-0
8.1.4

Open the chart page →

8,842
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-49112.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
redis@5:7.0.15-1~deb12u1
no fix listed

Open the chart page →

17,475
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2025-49112.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:latest0384ca2eec63
valkey@8.1.2-0
8.1.4

Open the chart page →

50,281
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2025-49112.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
redis@5:7.0.15-1~deb12u6
no fix listed

Open the chart page →

7,329
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-49112.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
redis@5:5.0.7-2ubuntu0.1
no fix listed

Open the chart page →

20,987
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2025-49112.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
redis@5:7.0.15-1~deb12u4
no fix listed

Open the chart page →

9,704
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-49112.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
redis@5:7.0.15-1ubuntu0.24.04.1
no fix listed

Open the chart page →

9,032
valkeymesosphere-stable3.0.221 of 1See more

valkey mesosphere-stable 3.0.22

1 of the 1 container images this version deploys carry CVE-2025-49112.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:8.1.3-debian-12-r1a185655855b3
valkey@8.1.3-0
8.1.4

Open the chart page →

2,559
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2025-49112.

Container imageDigestPackageFixed in
bitnamilegacy/valkey:8.1.3-debian-12-r34f0191fba7d3
valkey@8.1.3-0
8.1.4

Open the chart page →

25,626
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-49112.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
redis@5:5.0.7-2ubuntu0.1
no fix listed

Open the chart page →

30,759
giteawenerme12.7.01 of 4See more

gitea wenerme 12.7.0

1 of the 4 container images this version deploys carry CVE-2025-49112.

Container imageDigestPackageFixed in
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
valkey@8.1.3-0
8.1.4

Open the chart page →

8,842

Container images carrying it

10 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
valkey@8.1.3-0
8.1.4
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
redis@5:7.0.15-1~deb12u6
no fix listed
1
arunvelsriram/utils:latest655ad18fd8d6
redis@5:7.0.15-1ubuntu0.24.04.1
no fix listed
1
baserow/baserow:1.30.1df0c42eb67e8
redis@5:7.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/valkey:latest0384ca2eec63
valkey@8.1.2-0
8.1.4
1
bitnamilegacy/valkey:8.1.3-debian-12-r34f0191fba7d3
valkey@8.1.3-0
8.1.4
1
bitnamilegacy/valkey:8.1.3-debian-12-r1a185655855b3
valkey@8.1.3-0
8.1.4
1
middlewareeng/middleware:0.3.1747d880812f1
redis@5:7.0.15-1~deb12u4
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
redis@5:5.0.7-2ubuntu0.1
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
redis@5:5.0.7-2ubuntu0.1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.