StackRadar

CVE-2025-50181

Medium

Advisory

Published 18 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
757
of 17,787 indexed, latest versions
Container images
806
deployed by those charts
Fix available
4 of 4
affected packages

urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

Carried by container images the latest versions of 757 of 17,787 indexed charts deploy, on 806 images.

Affected packageAffected versionsFixed inImages
python-urllib3deb1.13.1-2ubuntu0.16.04.1, 1.13.1-2ubuntu0.16.04.2, 1.22-1ubuntu0.18.04.1, 1.22-1ubuntu0.18.04.2+9 more1.13.1-2ubuntu0.16.04.4+esm3, 1.22-1ubuntu0.18.04.2+esm3, 1.25.8-2ubuntu0.4+esm1, 1.26.5-1~exp1ubuntu0.3+1 more52
urllib3pypi1.7.1, 1.10.2, 1.13.1, 1.19.1+48 more2.5.0797
python-pipdeb22.0.2+dfsg-1, 22.0.2+dfsg-1ubuntu0.2, 22.0.2+dfsg-1ubuntu0.3, 22.0.2+dfsg-1ubuntu0.4+2 more22.0.2+dfsg-1ubuntu0.6, 24.0+dfsg-1ubuntu1.214
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r126.1.1-r03
OSV records
CGA-4hfw-26xr-4q65CGA-p24r-46cw-ghmgDEBIAN-CVE-2025-50181GHSA-pq67-6m6q-mj2vUBUNTU-CVE-2025-50181
Also known as
CGA-8wpc-jwj7-w5v8, CGA-qw3g-vj75-jcvc, PYSEC-2026-1999, USN-7599-1, USN-7599-2

Charts affected

757 by stars
ChartLatestAffected imagesRadar Score
cnpg-sandboxcloudnative-pgVerified publisher0.6.11 of 6See more

cnpg-sandbox cloudnative-pg 0.6.1

1 of the 6 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.15.1a25886092fa4
urllib3@1.26.8
2.5.0

Open the chart page →

7,583
pgbenchcloudnative-pgVerified publisher0.1.01 of 1See more

pgbench cloudnative-pg 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
urllib3@1.26.12
2.5.0

Open the chart page →

2,713
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
urllib3@1.26.18
2.5.0

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
urllib3@2.2.3
2.5.0

Open the chart page →

13,761
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
urllib3@2.0.7
2.5.0

Open the chart page →

1,944
cubefscubefs3.2.02 of 10See more

cubefs cubefs 3.2.0

2 of the 10 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
chubaofs/cfs-client:3.2.015ff74209ce7
urllib3@1.26.8
2.5.0
chubaofs/cfs-server:3.2.0205030e045f2
urllib3@1.26.8
2.5.0

Open the chart page →

15,891
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
apsl/thumbor:6.7.051e2de5c2c70
urllib3@1.25.7
2.5.0

Open the chart page →

38,346
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
urllib3@1.25.10
2.5.0

Open the chart page →

4,568
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
urllib3@1.25.10
2.5.0

Open the chart page →

7,984
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
urllib3@2.2.2
2.5.0

Open the chart page →

9,205
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
urllib3@1.26.14
2.5.0

Open the chart page →

5,598
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
urllib3@2.2.1
2.5.0

Open the chart page →

8,823
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
urllib3@1.26.12
2.5.0

Open the chart page →

5,853
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
python-pip@22.0.2+dfsg-1ubuntu0.4
urllib3@2.2.2
22.0.2+dfsg-1ubuntu0.6
2.5.0

Open the chart page →

10,858
spinnakerdwardu-helm-charts2.2.61 of 2See more

spinnaker dwardu-helm-charts 2.2.6

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
urllib3@1.25.8
2.5.0

Open the chart page →

8,752
jenkinsedu2.7.11 of 2See more

jenkins edu 2.7.1

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
urllib3@1.25.10
2.5.0

Open the chart page →

4,423
elastalert2elastalert22.31.01 of 1See more

elastalert2 elastalert2 2.31.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
jertel/elastalert2:2.31.03cbf63f9b7dc
urllib3@1.26.20
2.5.0

Open the chart page →

1,801
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
urllib3@1.24.2
2.5.0

Open the chart page →

31,510
genesis-generatorethereum-helm-chartsVerified publisher0.2.31 of 2See more

genesis-generator ethereum-helm-charts 0.2.3

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
skylenet/ethereum-genesis-generator:latest210353ce7c89
urllib3@1.26.12
2.5.0

Open the chart page →

3,135
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
urllib3@2.3.0
2.5.0

Open the chart page →

1,965
appdaemongeek-cookbookVerified publisher8.4.21 of 1See more

appdaemon geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
acockburn/appdaemon:4.0.83a93281d7e94
urllib3@1.26.4
2.5.0

Open the chart page →

3,461
deepstackgeek-cookbookVerified publisher1.5.21 of 2See more

deepstack geek-cookbook 1.5.2

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
robmarkcole/deepstack-ui:latest410275726459
urllib3@1.26.6
2.5.0

Open the chart page →

5,305
healthchecksgeek-cookbookVerified publisher4.4.21 of 1See more

healthchecks geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
linuxserver/healthchecks:version-v1.20.050792a72fc71
urllib3@1.26.6
2.5.0

Open the chart page →

1,667
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
urllib3@1.22
2.5.0

Open the chart page →

1,848
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
urllib3@1.26.5
2.5.0

Open the chart page →

11,662
octoprintgeek-cookbookVerified publisher6.4.21 of 1See more

octoprint geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
octoprint/octoprint:1.6.1ea3bffae2470
urllib3@1.26.5
2.5.0

Open the chart page →

3,153
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
urllib3@1.26.10
2.5.0

Open the chart page →

3,924
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
urllib3@1.26.8
2.5.0

Open the chart page →

7,801
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
urllib3@1.26.5
2.5.0

Open the chart page →

10,231
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
1.25.8-2ubuntu0.4+esm1
2.5.0

Open the chart page →

15,856
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
1.25.8-2ubuntu0.4+esm1
2.5.0
haveagitgat/tdarr_node:2.00.101e3f9328327d
python-urllib3@1.25.8-2ubuntu0.1
urllib3@1.25.8
1.25.8-2ubuntu0.4+esm1
2.5.0

Open the chart page →

31,000
tvheadendgeek-cookbookVerified publisher5.4.21 of 1See more

tvheadend geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/tvheadend:version-eb59284b66c4c9e18e40
urllib3@1.25.9
2.5.0

Open the chart page →

308
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
urllib3@1.24.1
2.5.0

Open the chart page →

5,079
uptimerobot-prometheusgeek-cookbookVerified publisher6.4.21 of 1See more

uptimerobot-prometheus geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
billimek/prometheus-uptimerobot-exporter:0.0.1f14ccd7aad0e
urllib3@1.25.9
2.5.0

Open the chart page →

2,265
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.31 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

1 of the 9 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.4.4c0224a1adf7a
urllib3@2.1.0
2.5.0

Open the chart page →

15,562
octoprinthalkeye0.1.11 of 1See more

octoprint halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
octoprint/octoprint:1.4.0106c26efcd8a
urllib3@1.26.2
2.5.0

Open the chart page →

3,608
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
urllib3@1.25.9
2.5.0

Open the chart page →

3,345
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
python-urllib3@1.26.12-1+deb12u1
urllib3@2.4.0
1.26.12-1+deb12u2
2.5.0

Open the chart page →

6,374
hasher-matcher-actionerhasher-matcher-actioner1.0.01 of 1See more

hasher-matcher-actioner hasher-matcher-actioner 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
urllib3@2.4.0
2.5.0

Open the chart page →

910
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
urllib3@1.24.1
2.5.0

Open the chart page →

4,196
helmuphelmupVerified publisher0.1.03 of 3See more

helmup helmup 0.1.0

3 of the 3 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
urllib3@1.26.19
2.5.0
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
urllib3@1.26.19
2.5.0
sirrend/helmup-notifications-service:0.1.3997866417011
urllib3@2.2.2
2.5.0

Open the chart page →

16,514
mongo-pod-labelerhmdmph1.0.21 of 1See more

mongo-pod-labeler hmdmph 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
hmdmph/mongo-pod-labeler:1.0.1-alpine79e4a170f3dc
urllib3@1.25.9
2.5.0

Open the chart page →

1,205
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.41 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

1 of the 7 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
urllib3@2.2.3
2.5.0

Open the chart page →

6,095
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
urllib3@2.1.0
2.5.0

Open the chart page →

15,712
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
urllib3@1.26.6
2.5.0

Open the chart page →

7,129
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
urllib3@1.26.18
2.5.0

Open the chart page →

11,764
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.27.6db85bd553253
urllib3@2.2.2
2.5.0

Open the chart page →

7,387
alertmanager-gchat-integrationjulb-meVerified publisher1.0.51 of 1See more

alertmanager-gchat-integration julb-me 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
julb/alertmanager-gchat-integration:1.0.5837c4038a0dd
urllib3@1.26.4
2.5.0

Open the chart page →

2,110
git-configmap-syncjulb-meVerified publisher1.0.11 of 2See more

git-configmap-sync julb-me 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
julb/kubernetes-configmap-sync:1.1.0d7d8836366ad
urllib3@1.26.2
2.5.0

Open the chart page →

2,618
kokukokuVerified publisher1.0.01 of 7See more

koku koku 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-50181.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
urllib3@1.26.5
2.5.0

Open the chart page →

12,019

Container images carrying it

806 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
urllib3@2.1.0
2.5.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
urllib3@1.26.19
2.5.0
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
urllib3@1.26.5
2.5.0
1
registry.gitlab.com/xrow-public/helm-mssql/mssql:1.10.3f923d842bc47
urllib3@1.26.19
2.5.0
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.91.3ed44d81a65de
urllib3@1.26.19
2.5.0
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
urllib3@1.26.19
2.5.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.