StackRadarChart IndexLive demo

CVE-2025-4947

Medium

Advisory

Published 28 May 2025In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 21st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 164; of 17,781 indexed, latest versions
Container images: 160; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 164 of 17,781 indexed charts deploy, on 160 images.

Affected package	Affected versions	Fixed in	Images
curlapk	8.8.0-r0, 8.9.0-r0, 8.9.1-r0, 8.9.1-r1+7 more	8.14.0-r0	160

OSV records: ALPINE-CVE-2025-4947

Charts affected

164 by stars

Chart

Latest

Affected images

Radar Score

cost-analyzersoftonic

1 of 6 See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
grafana/grafana :11.5.2	8b37a2f028f1	curl@8.12.1-r0	8.14.0-r0

Open the chart page →

7,901

helm-testtest-helm-artifacthub

1 of 2 See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
carlosmz87/test_helm_frontend :latest	79f4b528f42a	curl@8.11.0-r2	8.14.0-r0

Open the chart page →

11,648

chatqnatest-opea

1 of 11 See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
opea/chatqna-conversation-ui :1.0	02d5674ca863	curl@8.9.1-r1	8.14.0-r0

Open the chart page →

39,090

chatqna-uitest-opea

1 of 1 See more

chatqna-ui test-opea 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
opea/chatqna-conversation-ui :v0.9	bdb9ec215872	curl@8.9.0-r0	8.14.0-r0

Open the chart page →

921

uitest-opea

1 of 1 See more

ui test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
opea/chatqna-conversation-ui :1.0	02d5674ca863	curl@8.9.1-r1	8.14.0-r0

Open the chart page →

755

opencloudunxwares

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	curl@8.12.1-r0	8.14.0-r0

Open the chart page →

45,239

simple-prima-notavcnngr

1 of 4 See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
vcnngr/pnbackend :latest	eaf44ad0ad1f	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

4,768

ubooquityvhdirk

1 of 1 See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	curl@8.9.0-r0	8.14.0-r0

Open the chart page →

4,303

colanodevictorlane

1 of 3 See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
ghcr.io/colanode/web :latest	bcad696f03ee	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

2,076

hazelcastwenerme

1 of 2 See more

hazelcast wenerme 5.10.2

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
hazelcast/hazelcast :5.5.0	5dd5d31c7a06	curl@8.9.0-r0	8.14.0-r0

Open the chart page →

2,634

kibanawiremind

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
dwdraju/alpine-curl-jq :latest	83bd9be2b14b	curl@8.9.1-r1	8.14.0-r0

Open the chart page →

6,285

postgres-operatorwiremind

1.14.0-wiremind0

1 of 1 See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	curl@8.11.1-r0	8.14.0-r0

Open the chart page →

1,286

xkopsxkops

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
hamzaarshad10/queryfrontend :1.1.5.14	cd359d9a78c3	curl@8.10.1-r0	8.14.0-r0

Open the chart page →

13,677

ygdrassil-monitoringygdrassil

1 of 10 See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-4947.

Container image	Digest	Package	Fixed in
grafana/grafana :11.5.1	5781759b3d27	curl@8.11.1-r0	8.14.0-r0

Open the chart page →

9,381

Container images carrying it

160 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend :0.6.4	7e27863545fc	curl@8.12.1-r1	8.14.0-r0	1
ghcr.io/tandoorrecipes/recipes :1.5.31	063eb446e298	curl@8.11.1-r0	8.14.0-r0	1
ghcr.io/thoroslives/zilean :v3.10.1	bce6aca0f6ca	curl@8.12.1-r0	8.14.0-r0	1
ghcr.io/wyrihaximusnet/redirect :random	bf5983d754d7	curl@8.10.1-r0	8.14.0-r0	1
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	curl@8.11.1-r0	8.14.0-r0	1
public.ecr.aws/optimizely/webhook-broker :v0.2.3	cfc92cc2de65	curl@8.12.1-r0	8.14.0-r0	1
quay.io/ddn/exascaler-csi-file-driver :v2.2.6	fe2e2e5a2751	curl@8.9.0-r0	8.14.0-r0	1
quay.io/jupyterhub/configurable-http-proxy :5.1.0	eb10d5bf045c	curl@8.12.1-r1	8.14.0-r0	1
registry.k8s.io/ingress-nginx/controller :v1.11.3	d56f135b6462	curl@8.10.1-r0	8.14.0-r0	1
registry.k8s.io/ingress-nginx/controller :v1.12.0	e6b8de175acd	curl@8.11.1-r0	8.14.0-r0	1