StackRadar

CVE-2025-4947

Medium

Advisory

Published 28 May 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
164
of 17,781 indexed, latest versions
Container images
160
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 164 of 17,781 indexed charts deploy, on 160 images.

Affected packageAffected versionsFixed inImages
curlapk8.8.0-r0, 8.9.0-r0, 8.9.1-r0, 8.9.1-r1+7 more8.14.0-r0160
OSV records
ALPINE-CVE-2025-4947

Charts affected

164 by stars
ChartLatestAffected imagesRadar Score
vaultwardengabe565Verified publisher0.16.11 of 1See more

vaultwarden gabe565 0.16.1

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.33.2-alpine63cce7624f65
curl@8.12.0-r0
8.14.0-r0

Open the chart page →

451
oncallgrafana1.16.52 of 12See more

oncall grafana 1.16.5

2 of the 12 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
grafana/grafana:11.1.4886b56d5534e
curl@8.9.0-r0
8.14.0-r0
grafana/oncall:v1.16.5499851658393
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

16,251
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
gitea/gitea:1.22.376f516a1a8c2
curl@8.10.1-r0
8.14.0-r0

Open the chart page →

23,228
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
curl@8.11.1-r0
8.14.0-r0

Open the chart page →

4,531
bookstackgabe565Verified publisher0.20.01 of 1See more

bookstack gabe565 0.20.0

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
curl@8.12.1-r0
8.14.0-r0

Open the chart page →

2,811
celestia-appcelestia-labsVerified publisher0.5.01 of 3See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
curl@8.12.1-r0
8.14.0-r0

Open the chart page →

1,066
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
curl@8.12.1-r0
8.14.0-r0

Open the chart page →

2,654
radarrloeken-at-homeVerified publisher5.27.0-nightly1 of 1See more

radarr loeken-at-home 5.27.0-nightly

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
loeken/radarr:5.27.0-nightlya24409d3846d
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

586
certscertsVerified publisher2.1.31 of 1See more

certs certs 2.1.3

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
mathnao/certs:2.1.3b900e6b64684
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

695
coder-observabilitycoder-observabilityVerified publisher0.7.32 of 21See more

coder-observability coder-observability 0.7.3

2 of the 21 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
dannyben/madness:latestebdf50556c02
curl@8.9.0-r0
8.14.0-r0
grafana/grafana:10.4.19a9043254ba16
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

24,700
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
curl@8.9.1-r0
8.14.0-r0

Open the chart page →

3,451
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

2,286
hazelcasthazelcastVerified publisher5.10.21 of 2See more

hazelcast hazelcast 5.10.2

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
curl@8.9.0-r0
8.14.0-r0

Open the chart page →

2,634
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.51 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
curl@8.9.0-r0
8.14.0-r0

Open the chart page →

2,160
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

5,218
lldapself-hosters-by-nightVerified publisher0.5.21 of 2See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/lldap/lldap:2025-05-193de697c3ba57
curl@8.12.1-r0
8.14.0-r0

Open the chart page →

3,400
agentareaagentareaVerified publisher0.0.181 of 16See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
temporalio/ui:2.39.0b768f87f18b5
curl@8.12.1-r0
8.14.0-r0

Open the chart page →

14,914
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
curl@8.10.1-r0
8.14.0-r0

Open the chart page →

2,388
celestia-nodecelestia-node0.1.71 of 1See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
curl@8.9.1-r1
8.14.0-r0

Open the chart page →

1,799
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
grafana/grafana:11.1.3b23b588cf7cb
curl@8.9.0-r0
8.14.0-r0

Open the chart page →

12,562
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/data-fair/notify:3c739b74dabb0
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

38,346
openssh-serverdjjudas21Verified publisher0.1.141 of 1See more

openssh-server djjudas21 0.1.14

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
linuxserver/openssh-server:9.7_p1-r4-ls17153ea39d2485c
curl@8.9.1-r2
8.14.0-r0

Open the chart page →

565
eoapieoapiOfficialVerified publisher0.16.21 of 7See more

eoapi eoapi 0.16.2

1 of the 7 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

6,250
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
leantime/leantime:3.3.3ad4bfb0699d3
curl@8.11.0-r2
8.14.0-r0

Open the chart page →

6,416
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
curl@8.9.1-r1
8.14.0-r0

Open the chart page →

4,679
app-blueprinthelm-app-blueprintVerified publisher0.2.11 of 1See more

app-blueprint helm-app-blueprint 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

840
webhook-broker-chartimytech0.2.41 of 1See more

webhook-broker-chart imytech 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
public.ecr.aws/optimizely/webhook-broker:v0.2.3cfc92cc2de65
curl@8.12.1-r0
8.14.0-r0

Open the chart page →

1,246
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

4,095
mesherykubesphere-stable0.5.01 of 13See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

24,690
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

2,113
mimir-syncmimir-sync3.1.01 of 1See more

mimir-sync mimir-sync 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/antnsn/mal-sync:v1.0.52f06e72cef36
curl@8.12.1-r0
8.14.0-r0

Open the chart page →

1,293
miniapiminiapi1.3.21 of 1See more

miniapi miniapi 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
udhos/miniapi:1.3.28a7042db82ce
curl@8.10.1-r0
8.14.0-r0

Open the chart page →

854
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

2,278
phpipamphpipam-helmVerified publisher1.0.122 of 3See more

phpipam phpipam-helm 1.0.12

2 of the 3 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:v1.7.354468713454e
curl@8.11.0-r2
8.14.0-r0
phpipam/phpipam-www:v1.7.3ace0efd24830
curl@8.11.0-r2
8.14.0-r0

Open the chart page →

3,778
prometheus-sql-exporterprometheus-communityVerified publisher0.5.01 of 1See more

prometheus-sql-exporter prometheus-community 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

1,199
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
getmeili/meilisearch:v1.11.0b9be3d2d4251
curl@8.10.1-r0
8.14.0-r0

Open the chart page →

30,234
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
curl@8.9.0-r0
8.14.0-r0

Open the chart page →

4,460
redirectwyrihaximusnetVerified publisher1.1.01 of 1See more

redirect wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
curl@8.10.1-r0
8.14.0-r0

Open the chart page →

1,581
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
temporalio/auto-setup:1.27.2b44cbfeb43db
curl@8.12.1-r0
8.14.0-r0

Open the chart page →

12,473
wmbusmetersandrenarchyVerified publisher1.2.01 of 1See more

wmbusmeters andrenarchy 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
wmbusmeters/wmbusmeters:release-1.18.0d82715d9ae22
curl@8.11.0-r2
8.14.0-r0

Open the chart page →

516
deploy-uiappscodeVerified publisher2026.9.111 of 1See more

deploy-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/appscode/deploy-ui:0.3.6f3e07eff3997
curl@8.11.0-r2
8.14.0-r0

Open the chart page →

720
inbox-uiappscodeVerified publisher2026.9.111 of 1See more

inbox-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-ui:0.0.5ae3b0e29daaa
curl@8.12.1-r1
8.14.0-r0

Open the chart page →

840
marketplace-uiappscodeVerified publisher2026.9.111 of 1See more

marketplace-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/appscode/marketplace-ui:0.3.1d52177072013
curl@8.11.0-r2
8.14.0-r0

Open the chart page →

720
appwriteappwrite-helmVerified publisher1.3.22 of 8See more

appwrite appwrite-helm 1.3.2

2 of the 8 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
appwrite/console:7.5.7aaa11ceab999
curl@8.12.1-r0
8.14.0-r0
openruntimes/executor:0.11.42228f186dcbb
curl@8.9.1-r0
8.14.0-r0

Open the chart page →

9,847
celestia-localastria9.0.01 of 2See more

celestia-local astria 9.0.0

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
curl@8.12.1-r0
8.14.0-r0

Open the chart page →

3,281
celestia-nodeastria0.7.11 of 1See more

celestia-node astria 0.7.1

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/celestiaorg/celestia-node:v0.27.5-mocha4768ea1c5fd2
curl@8.12.1-r0
8.14.0-r0

Open the chart page →

1,502
sequencerastria4.0.01 of 3See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
cometbft/cometbft:v0.38.1722c2ac018f40
curl@8.11.1-r0
8.14.0-r0

Open the chart page →

6,298
grafanabook-k8sinfra-v28.8.21 of 1See more

grafana book-k8sinfra-v2 8.8.2

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
curl@8.11.0-r2
8.14.0-r0

Open the chart page →

1,800
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
grafana/grafana:11.2.2-security-01464eac539793
curl@8.10.1-r0
8.14.0-r0

Open the chart page →

6,036
bitmagnetbrandan-schmitz-helm-chartsVerified publisher1.0.61 of 2See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container imageDigestPackageFixed in
ghcr.io/bitmagnet-io/bitmagnet:v0.10.0cf2c16fac5b5
curl@8.12.1-r0
8.14.0-r0

Open the chart page →

1,720

Container images carrying it

160 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
curl@8.12.1-r1
8.14.0-r0
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
curl@8.11.1-r0
8.14.0-r0
1
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
curl@8.12.1-r0
8.14.0-r0
1
ghcr.io/wyrihaximusnet/redirect:randombf5983d754d7
curl@8.10.1-r0
8.14.0-r0
1
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
curl@8.11.1-r0
8.14.0-r0
1
public.ecr.aws/optimizely/webhook-broker:v0.2.3cfc92cc2de65
curl@8.12.1-r0
8.14.0-r0
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
curl@8.9.0-r0
8.14.0-r0
1
quay.io/jupyterhub/configurable-http-proxy:5.1.0eb10d5bf045c
curl@8.12.1-r1
8.14.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
curl@8.10.1-r0
8.14.0-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
curl@8.11.1-r0
8.14.0-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.