StackRadar

CVE-2025-50182

Medium

Advisory

Published 18 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
176
of 17,781 indexed, latest versions
Container images
179
deployed by those charts
Fix available
1 of 1
affected package

urllib3 does not control redirects in browsers and Node.js

Carried by container images the latest versions of 176 of 17,781 indexed charts deploy, on 179 images.

Affected packageAffected versionsFixed inImages
urllib3pypi2.2.0, 2.2.1, 2.2.2, 2.2.3+2 more2.5.0179
OSV records
GHSA-48p4-8xcf-vxj5
Also known as
PYSEC-2026-1997

Charts affected

176 by stars
ChartLatestAffected imagesRadar Score
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
urllib3@2.4.0
2.5.0

Open the chart page →

2,534
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
urllib3@2.3.0
2.5.0

Open the chart page →

4,731
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
urllib3@2.2.1
2.5.0

Open the chart page →

13,390
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
supabase/realtime:latestd3aa0c86c7b3
urllib3@2.3.0
2.5.0

Open the chart page →

9,556
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
urllib3@2.2.3
2.5.0

Open the chart page →

5,704
asrtest-opea1.0.01 of 1See more

asr test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/asr:1.025dd26d9cd09
urllib3@2.2.3
2.5.0

Open the chart page →

4,393
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
urllib3@2.2.3
2.5.0
opea/embedding-tei:1.05c9639de61c1
urllib3@2.2.3
2.5.0
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0
opea/reranking-tei:1.0e48613afb191
urllib3@2.2.3
2.5.0
opea/retriever-redis:1.0eb746b263705
urllib3@2.2.3
2.5.0

Open the chart page →

39,090
codegentest-opea1.0.02 of 5See more

codegen test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
urllib3@2.2.3
2.5.0
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0

Open the chart page →

28,814
codetranstest-opea1.0.02 of 5See more

codetrans test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
urllib3@2.2.3
2.5.0
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0

Open the chart page →

28,385
docsumtest-opea1.0.02 of 5See more

docsum test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
urllib3@2.2.3
2.5.0
opea/llm-docsum-tgi:1.002f9e8fa5d71
urllib3@2.2.3
2.5.0

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
urllib3@2.2.3
2.5.0

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
urllib3@2.2.3
2.5.0

Open the chart page →

5,221
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0

Open the chart page →

4,720
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
urllib3@2.2.3
2.5.0

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
urllib3@2.2.3
2.5.0

Open the chart page →

5,198
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
urllib3@2.2.3
2.5.0

Open the chart page →

9,616
ttstest-opea1.0.01 of 1See more

tts test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/tts:1.0257ae94709e9
urllib3@2.2.3
2.5.0

Open the chart page →

4,377
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
urllib3@2.2.3
2.5.0

Open the chart page →

5,350
traefik-external-dns-operatortraefik-external-dns-operator1.0.11 of 1See more

traefik-external-dns-operator traefik-external-dns-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
urllib3@2.3.0
2.5.0

Open the chart page →

1,083
zookeepertwomartensVerified publisher0.2.21 of 1See more

zookeeper twomartens 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
urllib3@2.4.0
2.5.0

Open the chart page →

1,733
devportalveecode-platform-nextVerified publisher0.1.211 of 1See more

devportal veecode-platform-next 0.1.21

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinnedc443520aebf7
urllib3@2.2.2
2.5.0

Open the chart page →

1,787
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
urllib3@2.2.1
2.5.0

Open the chart page →

9,347
wallarm-node-nextwallarmVerified publisher0.5.31 of 2See more

wallarm-node-next wallarm 0.5.3

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
wallarm/node-helpers:5.0.2-1097cadc42336
urllib3@2.2.2
2.5.0

Open the chart page →

2,408
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
urllib3@2.2.1
2.5.0

Open the chart page →

10,843
xkopsxkops0.1.02 of 5See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
urllib3@2.2.3
2.5.0
hamzaarshad10/querypodpy:1.7154f38e8668e
urllib3@2.2.3
2.5.0

Open the chart page →

13,677
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
urllib3@2.4.0
2.5.0

Open the chart page →

570

Container images carrying it

179 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
devopsgoofy/k8s-platform:latestad865312099f
urllib3@2.2.3
2.5.0
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
urllib3@2.4.0
2.5.0
1
devopstales/kubedash:3.1.08bb837da5aec
urllib3@2.2.2
2.5.0
1
djjudas21/alertify:0.1.0ba22be670c37
urllib3@2.4.0
2.5.0
1
dserio83/velero-api:0.3.16b3d9115fee2
urllib3@2.3.0
2.5.0
1
dserio83/velero-watchdog:0.1.8d5deae589229
urllib3@2.3.0
2.5.0
1
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
urllib3@2.2.2
2.5.0
1
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
urllib3@2.2.0
2.5.0
1
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
urllib3@2.2.0
2.5.0
1
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
urllib3@2.2.0
2.5.0
1
esphome/esphome:2024.3.09ab8cc88b28c
urllib3@2.2.1
2.5.0
1
esphome/esphome:2024.12.2b2c6322700ac
urllib3@2.2.3
2.5.0
1
esphome/esphome:2025.3.0def8b6e4f517
urllib3@2.3.0
2.5.0
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
urllib3@2.4.0
2.5.0
1
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
urllib3@2.2.2
2.5.0
1
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
urllib3@2.2.3
2.5.0
1
hamzaarshad10/querypodpy:1.7154f38e8668e
urllib3@2.2.3
2.5.0
1
hansehe/locust:1.1.0bc8e45262bc4
urllib3@2.3.0
2.5.0
1
hayk96/alerta-web:9.0.486377705e9e3
urllib3@2.3.0
2.5.0
1
istio/examples-helloworld-v1:latest328b237e4fb1
urllib3@2.2.1
2.5.0
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
urllib3@2.2.1
2.5.0
1
jamoos/kweather:history163e2e8a6e87
urllib3@2.2.2
2.5.0
1
josh5/unmanic:0.2.64d49c4816260
urllib3@2.2.1
2.5.0
1
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
urllib3@2.2.3
2.5.0
1
kinseii/wazuh-agent:4.14.17160eb143728
urllib3@2.2.0
2.5.0
1
kiwigrid/k8s-sidecar:1.27.6db85bd553253
urllib3@2.2.2
2.5.0
1
kiwigrid/k8s-sidecar:1.26.2e271016441af
urllib3@2.2.1
2.5.0
1
knspar/phronetis-operator:0.1.60c4f0543ee58
urllib3@2.4.0
2.5.0
1
kserve/models-web-app:v0.13.073486345a602
urllib3@2.2.2
2.5.0
1
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
urllib3@2.2.3
2.5.0
1
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
urllib3@2.2.3
2.5.0
1
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
urllib3@2.2.3
2.5.0
1
langgenius/dify-api:1.0.0066035f93856
urllib3@2.3.0
2.5.0
1
langgenius/dify-api:0.6.11fca918260dd6
urllib3@2.2.1
2.5.0
1
langgenius/dify-sandbox:0.2.124e65e8a351a2
urllib3@2.4.0
2.5.0
1
library/redmine:6.1.204ac44a2595b
urllib3@2.3.0
2.5.0
1
locustio/locust:2.24.151d866285170
urllib3@2.2.1
2.5.0
1
makersquad/harp-proxy:0.8.1a40dd258c527
urllib3@2.4.0
2.5.0
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
urllib3@2.2.2
2.5.0
1
mediagis/nominatim:4.2d0eae7b51374
urllib3@2.2.1
2.5.0
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
urllib3@2.2.1
2.5.0
1
mozilla/syncstorage-rs:0.15.893752877dced
urllib3@2.2.1
2.5.0
1
muhammedgamal/fp23:latest74b4cd69b6fa
urllib3@2.2.1
2.5.0
1
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
urllib3@2.2.1
2.5.0
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
urllib3@2.2.3
2.5.0
1
opea/asr:1.025dd26d9cd09
urllib3@2.2.3
2.5.0
1
opea/chatqna:1.038c51b791efa
urllib3@2.2.3
2.5.0
1
opea/codegen:1.058f91683892d
urllib3@2.2.3
2.5.0
1
opea/codetrans:1.0e2436483b73d
urllib3@2.2.3
2.5.0
1
opea/docsum:1.03eaa91849512
urllib3@2.2.3
2.5.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.