StackRadar

CVE-2025-50182

Medium

Advisory

Published 18 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
176
of 17,781 indexed, latest versions
Container images
179
deployed by those charts
Fix available
1 of 1
affected package

urllib3 does not control redirects in browsers and Node.js

Carried by container images the latest versions of 176 of 17,781 indexed charts deploy, on 179 images.

Affected packageAffected versionsFixed inImages
urllib3pypi2.2.0, 2.2.1, 2.2.2, 2.2.3+2 more2.5.0179
OSV records
GHSA-48p4-8xcf-vxj5
Also known as
PYSEC-2026-1997

Charts affected

176 by stars
ChartLatestAffected imagesRadar Score
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
urllib3@2.3.0
2.5.0

Open the chart page →

23,894
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
urllib3@2.2.3
2.5.0

Open the chart page →

2,800
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
langgenius/dify-sandbox:0.2.124e65e8a351a2
urllib3@2.4.0
2.5.0

Open the chart page →

19,391
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.11 of 2See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
quay.io/stackgres/operator:1.19.1f241b0b20326
urllib3@2.2.3
2.5.0

Open the chart page →

2,119
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
urllib3@2.2.0
2.5.0

Open the chart page →

11,384
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
urllib3@2.2.2
2.5.0

Open the chart page →

6,543
servarrkubitodevVerified publisher1.5.21 of 10See more

servarr kubitodev 1.5.2

1 of the 10 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.3.21f104ee51e512
urllib3@2.2.2
2.5.0

Open the chart page →

3,004
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
urllib3@2.2.2
2.5.0

Open the chart page →

3,004
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
urllib3@2.3.0
2.5.0

Open the chart page →

17,245
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
urllib3@2.2.0
2.5.0

Open the chart page →

6,457
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
urllib3@2.3.0
2.5.0

Open the chart page →

3,033
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
urllib3@2.2.3
2.5.0

Open the chart page →

4,531
backstagerhdh-chartVerified publisher4.0.11 of 2See more

backstage rhdh-chart 4.0.1

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
urllib3@2.2.2
2.5.0

Open the chart page →

1,339
servarrservarr1.0.21 of 10See more

servarr servarr 1.0.2

1 of the 10 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.3.16088412db1051
urllib3@2.2.1
2.5.0

Open the chart page →

14,238
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
urllib3@2.2.2
2.5.0

Open the chart page →

6,168
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
urllib3@2.2.3
2.5.0

Open the chart page →

27,267
netboxstartechnicaVerified publisher5.1.01 of 4See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
urllib3@2.2.1
2.5.0

Open the chart page →

1,650
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
hayk96/alerta-web:9.0.486377705e9e3
urllib3@2.3.0
2.5.0

Open the chart page →

3,569
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
urllib3@2.2.3
2.5.0

Open the chart page →

4,147
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
urllib3@2.4.0
2.5.0

Open the chart page →

2,286
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
urllib3@2.2.1
2.5.0

Open the chart page →

2,452
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
urllib3@2.2.3
2.5.0

Open the chart page →

17,693
kea-dhcpmglants0.7.11 of 1See more

kea-dhcp mglants 0.7.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
urllib3@2.2.1
2.5.0

Open the chart page →

1,133
anteonanteonVerified publisher2.6.43 of 13See more

anteon anteon 2.6.4

3 of the 13 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
urllib3@2.2.2
2.5.0
ddosify/selfhosted_backend:3.2.93c11e3182652
urllib3@2.2.1
2.5.0
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
urllib3@2.2.2
2.5.0

Open the chart page →

22,202
finops-stackcert-managerVerified publisher0.0.51 of 12See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
urllib3@2.2.1
2.5.0

Open the chart page →

12,562
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
urllib3@2.4.0
2.5.0

Open the chart page →

9,971
syncstorage-rschristianhuthVerified publisher6.1.11 of 2See more

syncstorage-rs christianhuth 6.1.1

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
urllib3@2.4.0
2.5.0

Open the chart page →

693
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
urllib3@2.2.3
2.5.0

Open the chart page →

13,761
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
urllib3@2.2.2
2.5.0

Open the chart page →

9,205
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
urllib3@2.2.1
2.5.0

Open the chart page →

8,823
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
urllib3@2.2.2
2.5.0

Open the chart page →

10,858
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
urllib3@2.3.0
2.5.0

Open the chart page →

1,965
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
urllib3@2.4.0
2.5.0

Open the chart page →

6,374
hasher-matcher-actionerhasher-matcher-actioner1.0.01 of 1See more

hasher-matcher-actioner hasher-matcher-actioner 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
urllib3@2.4.0
2.5.0

Open the chart page →

910
helmuphelmupVerified publisher0.1.01 of 3See more

helmup helmup 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
sirrend/helmup-notifications-service:0.1.3997866417011
urllib3@2.2.2
2.5.0

Open the chart page →

16,514
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.41 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

1 of the 7 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
urllib3@2.2.3
2.5.0

Open the chart page →

6,095
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.27.6db85bd553253
urllib3@2.2.2
2.5.0

Open the chart page →

7,387
difykubeblocksVerified publisher0.5.12 of 5See more

dify kubeblocks 0.5.1

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
urllib3@2.2.1
2.5.0
langgenius/dify-sandbox:0.2.009b7e8705673
urllib3@2.2.1
2.5.0

Open the chart page →

20,403
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
urllib3@2.4.0
2.5.0

Open the chart page →

4,095
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
urllib3@2.3.0
2.5.0

Open the chart page →

2,662
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
urllib3@2.3.0
2.5.0

Open the chart page →

2,757
redminemt1905027.3.41 of 3See more

redmine mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
library/redmine:6.1.204ac44a2595b
urllib3@2.3.0
2.5.0

Open the chart page →

7,527
ovh-snapshoterovh-snapshoterOfficialVerified publisher0.4.101 of 1See more

ovh-snapshoter ovh-snapshoter 0.4.10

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/hoverkraft-tech/ovh-snapshoter/app:0.4.1010d271f08ab3
urllib3@2.2.3
2.5.0

Open the chart page →

761
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
urllib3@2.3.0
2.5.0

Open the chart page →

4,240
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
urllib3@2.3.0
2.5.0

Open the chart page →

30,234
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.6.683dbca3efd2a
urllib3@2.4.0
2.5.0

Open the chart page →

16,449
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
urllib3@2.3.0
2.5.0
dserio83/velero-watchdog:0.1.8d5deae589229
urllib3@2.3.0
2.5.0

Open the chart page →

11,532
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
urllib3@2.2.3
2.5.0

Open the chart page →

2,928
streamlit-appstreamlit-appVerified publisher0.2.01 of 1See more

streamlit-app streamlit-app 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
sruthitanneru/pi-sample:ui-lateste565ea454ffd
urllib3@2.2.3
2.5.0

Open the chart page →

1,696
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
urllib3@2.2.2
2.5.0

Open the chart page →

4,460

Container images carrying it

179 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
urllib3@2.4.0
2.5.0
1
ghcr.io/hoverkraft-tech/ovh-snapshoter/app:0.4.1010d271f08ab3
urllib3@2.2.3
2.5.0
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
urllib3@2.4.0
2.5.0
1
ghcr.io/kubiyabot/sdk-py:v1.20.0f108f49570cc
urllib3@2.2.3
2.5.0
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
urllib3@2.4.0
2.5.0
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
urllib3@2.2.1
2.5.0
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
urllib3@2.2.1
2.5.0
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
urllib3@2.2.2
2.5.0
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
urllib3@2.3.0
2.5.0
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
urllib3@2.2.3
2.5.0
1
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
urllib3@2.4.0
2.5.0
1
ghcr.io/port-labs/port-agent:v0.8.12c92d1e223f5c
urllib3@2.4.0
2.5.0
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
urllib3@2.3.0
2.5.0
1
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
urllib3@2.3.0
2.5.0
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
urllib3@2.3.0
2.5.0
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
urllib3@2.2.1
2.5.0
1
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
urllib3@2.2.3
2.5.0
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
urllib3@2.3.0
2.5.0
1
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
urllib3@2.3.0
2.5.0
1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
urllib3@2.3.0
2.5.0
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
urllib3@2.2.3
2.5.0
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
urllib3@2.3.0
2.5.0
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
urllib3@2.4.0
2.5.0
1
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
urllib3@2.2.3
2.5.0
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
urllib3@2.3.0
2.5.0
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
urllib3@2.2.1
2.5.0
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
urllib3@2.2.1
2.5.0
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
urllib3@2.2.2
2.5.0
1
quay.io/stackgres/operator:1.19.1f241b0b20326
urllib3@2.2.3
2.5.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.