StackRadar

CVE-2025-49600

Medium

Advisory

Published 4 Jul 2025In the index since 8 Sept 2026
Severity
Medium
worst across findings
CVSS
4.9
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
9
of 17,781 indexed, latest versions
Container images
9
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 9 of 17,781 indexed charts deploy, on 9 images.

Affected packageAffected versionsFixed inImages
mbedtlsapk3.6.2-r0, 3.6.3.1-r03.6.4-r06
mbedtlsdeb3.6.2-3ubuntu1, 3.6.5-0.1ubuntu2no fix listed3
OSV records
ALPINE-CVE-2025-49600UBUNTU-CVE-2025-49600

Charts affected

9 by stars
ChartLatestAffected imagesRadar Score
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2025-49600.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
mbedtls@3.6.5-0.1ubuntu2
no fix listed

Open the chart page →

8,825
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-49600.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
mbedtls@3.6.3.1-r0
3.6.4-r0

Open the chart page →

5,654
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-49600.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
mbedtls@3.6.2-3ubuntu1
no fix listed

Open the chart page →

11,103
piwigocronce0.0.61 of 1See more

piwigo cronce 0.0.6

1 of the 1 container images this version deploys carry CVE-2025-49600.

Container imageDigestPackageFixed in
mathieuruellan/piwigo:latest04572c8a1b04
mbedtls@3.6.2-r0
3.6.4-r0

Open the chart page →

1,084
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-49600.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
mbedtls@3.6.2-r0
3.6.4-r0

Open the chart page →

4,647
beetsk8s-home-lab-repo3.1.11 of 1See more

beets k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2025-49600.

Container imageDigestPackageFixed in
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
mbedtls@3.6.3.1-r0
3.6.4-r0

Open the chart page →

2,733
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-49600.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
mbedtls@3.6.3.1-r0
3.6.4-r0

Open the chart page →

5,338
recipyartomik-helm-chartsVerified publisher0.0.21 of 2See more

recipya rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-49600.

Container imageDigestPackageFixed in
reaper99/recipya:v1.2.27f7ec3aeb88c
mbedtls@3.6.2-r0
3.6.4-r0

Open the chart page →

2,066
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2025-49600.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
mbedtls@3.6.5-0.1ubuntu2
no fix listed

Open the chart page →

10,348

Container images carrying it

9 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
chibisafe/chibisafe-server:latest3da4fcbc1a18
mbedtls@3.6.3.1-r0
3.6.4-r0
1
mathieuruellan/piwigo:latest04572c8a1b04
mbedtls@3.6.2-r0
3.6.4-r0
1
photoprism/photoprism:260601650c6ad5a651
mbedtls@3.6.5-0.1ubuntu2
no fix listed
1
photoprism/photoprism:260728958642220223
mbedtls@3.6.5-0.1ubuntu2
no fix listed
1
photoprism/photoprism:251130db16ee6b1ba3
mbedtls@3.6.2-3ubuntu1
no fix listed
1
reaper99/recipya:v1.2.27f7ec3aeb88c
mbedtls@3.6.2-r0
3.6.4-r0
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
mbedtls@3.6.2-r0
3.6.4-r0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
mbedtls@3.6.3.1-r0
3.6.4-r0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
mbedtls@3.6.3.1-r0
3.6.4-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.