StackRadar

CVE-2025-50182

Medium

Advisory

Published 18 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
176
of 17,781 indexed, latest versions
Container images
179
deployed by those charts
Fix available
1 of 1
affected package

urllib3 does not control redirects in browsers and Node.js

Carried by container images the latest versions of 176 of 17,781 indexed charts deploy, on 179 images.

Affected packageAffected versionsFixed inImages
urllib3pypi2.2.0, 2.2.1, 2.2.2, 2.2.3+2 more2.5.0179
OSV records
GHSA-48p4-8xcf-vxj5
Also known as
PYSEC-2026-1997

Charts affected

176 by stars
ChartLatestAffected imagesRadar Score
netio-exporterk8sonlabVerified publisher0.1.101 of 1See more

netio-exporter k8sonlab 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
tomsajan/netio-exporter:0.0.5fb61907707b8
urllib3@2.2.1
2.5.0

Open the chart page →

729
elasticsearch-cacherkfirfer0.0.21 of 1See more

elasticsearch-cacher kfirfer 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
urllib3@2.2.3
2.5.0

Open the chart page →

679
kubeflowkromanow94-kubeflow0.5.14 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

4 of the 30 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
kserve/models-web-app:v0.13.073486345a602
urllib3@2.2.2
2.5.0
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
urllib3@2.2.3
2.5.0
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
urllib3@2.2.3
2.5.0
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
urllib3@2.2.3
2.5.0

Open the chart page →

70,530
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
urllib3@2.4.0
2.5.0

Open the chart page →

8,405
kube-infokube-info0.1.01 of 1See more

kube-info kube-info 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
andreymileshin/kube-info:v0.1.0f7b300bc9e66
urllib3@2.3.0
2.5.0

Open the chart page →

519
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
urllib3@2.4.0
2.5.0

Open the chart page →

4,439
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/sdk-py:v1.20.0f108f49570cc
urllib3@2.2.3
2.5.0

Open the chart page →

20,204
lightlyticslightlytics0.1.212 of 2See more

lightlytics lightlytics 0.1.21

2 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
urllib3@2.3.0
2.5.0
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
urllib3@2.3.0
2.5.0

Open the chart page →

5,354
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
urllib3@2.2.1
2.5.0

Open the chart page →

7,510
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
urllib3@2.3.0
2.5.0

Open the chart page →

5,025
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
urllib3@2.3.0
2.5.0

Open the chart page →

21,064
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
urllib3@2.3.0
2.5.0

Open the chart page →

5,823
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
urllib3@2.3.0
2.5.0

Open the chart page →

10,180
tianjimsgbyte0.1.171 of 2See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
moonrailgun/tianji:1.11.2b528c8f8fcc4
urllib3@2.2.1
2.5.0

Open the chart page →

4,560
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
urllib3@2.2.3
2.5.0

Open the chart page →

5,826
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
urllib3@2.3.0
2.5.0

Open the chart page →

10,978
akeyless-api-gatewayopenshift1.41.21 of 1See more

akeyless-api-gateway openshift 1.41.2

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
akeyless/base-rhel:0.0.14ba8900a0061
urllib3@2.2.1
2.5.0

Open the chart page →

11,796
chatbot-ai-sampleopenshift0.1.61 of 4See more

chatbot-ai-sample openshift 0.1.6

1 of the 4 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
urllib3@2.2.1
2.5.0

Open the chart page →

18,922
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
urllib3@2.4.0
2.5.0

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
urllib3@2.4.0
2.5.0

Open the chart page →

6,583
vmot-container-kit0.0.31 of 7See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
urllib3@2.2.1
2.5.0

Open the chart page →

5,411
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
urllib3@2.3.0
2.5.0

Open the chart page →

8,189
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
urllib3@2.4.0
2.5.0

Open the chart page →

16,196
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
urllib3@2.2.2
2.5.0

Open the chart page →

11,923
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
urllib3@2.2.2
2.5.0

Open the chart page →

25,934
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
urllib3@2.2.1
2.5.0

Open the chart page →

12,912
port-agentport-labsVerified publisher0.8.161 of 1See more

port-agent port-labs 0.8.16

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/port-labs/port-agent:v0.8.12c92d1e223f5c
urllib3@2.4.0
2.5.0

Open the chart page →

727
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
urllib3@2.2.2
2.5.0

Open the chart page →

5,451
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
urllib3@2.2.3
2.5.0

Open the chart page →

4,416
kubecostradar-baseVerified publisher1.0.02 of 7See more

kubecost radar-base 1.0.0

2 of the 7 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
urllib3@2.3.0
2.5.0
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
urllib3@2.3.0
2.5.0

Open the chart page →

9,355
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
urllib3@2.2.0
2.5.0

Open the chart page →

5,269
redminerestic-pvc-backupVerified publisher0.2.61 of 1See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
urllib3@2.3.0
2.5.0

Open the chart page →

4,240
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
urllib3@2.2.1
2.5.0

Open the chart page →

7,431
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
urllib3@2.2.2
2.5.0

Open the chart page →

5,790
istio-helloworldrgnu1.0.12 of 2See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
istio/examples-helloworld-v1:latest328b237e4fb1
urllib3@2.2.1
2.5.0
istio/examples-helloworld-v2:latest0a7f02b2c7c9
urllib3@2.2.1
2.5.0

Open the chart page →

9,418
krr-enforcerrobusta0.3.51 of 2See more

krr-enforcer robusta 0.3.5

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
alpine/k8s:1.30.0bd01dae02676
urllib3@2.2.1
2.5.0

Open the chart page →

4,038
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
urllib3@2.2.2
2.5.0

Open the chart page →

9,256
imgtagrotationalVerified publisher0.2.01 of 1See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
urllib3@2.3.0
2.5.0

Open the chart page →

3,312
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
urllib3@2.3.0
2.5.0

Open the chart page →

3,512
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
urllib3@2.3.0
2.5.0

Open the chart page →

4,718
runwhen-localrunwhen-contribVerified publisher0.6.171 of 3See more

runwhen-local runwhen-contrib 0.6.17

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
urllib3@2.3.0
2.5.0

Open the chart page →

3,707
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
urllib3@2.3.0
2.5.0

Open the chart page →

2,817
syncstorageschichtelVerified publisher0.1.11 of 1See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
mozilla/syncstorage-rs:0.15.893752877dced
urllib3@2.2.1
2.5.0

Open the chart page →

1,318
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
urllib3@2.2.3
2.5.0

Open the chart page →

3,045
sibylsibyl0.2.01 of 1See more

sibyl sibyl 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
urllib3@2.3.0
2.5.0

Open the chart page →

1,020
simple-elasticsearch-cleanersimple-elasticsearch-cleanerVerified publisher1.1.11 of 1See more

simple-elasticsearch-cleaner simple-elasticsearch-cleaner 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
urllib3@2.2.3
2.5.0

Open the chart page →

644
cost-analyzersoftonic2.5.52 of 6See more

cost-analyzer softonic 2.5.5

2 of the 6 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
urllib3@2.3.0
2.5.0
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
urllib3@2.3.0
2.5.0

Open the chart page →

7,901
ambassador-manifestssqream-chartsVerified publisher0.6.31 of 1See more

ambassador-manifests sqream-charts 0.6.3

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
datawire/aes:3.11.195ec30b3c732
urllib3@2.2.1
2.5.0

Open the chart page →

2,416
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
urllib3@2.2.1
2.5.0

Open the chart page →

20,223
storageclass-routerstorageclass-routerVerified publisher0.4.11 of 1See more

storageclass-router storageclass-router 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
quay.io/maxiv/storageclass-router:0.4.160725dab588c
urllib3@2.2.1
2.5.0

Open the chart page →

1,058

Container images carrying it

179 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
urllib3@2.4.0
2.5.0
1
ghcr.io/hoverkraft-tech/ovh-snapshoter/app:0.4.1010d271f08ab3
urllib3@2.2.3
2.5.0
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
urllib3@2.4.0
2.5.0
1
ghcr.io/kubiyabot/sdk-py:v1.20.0f108f49570cc
urllib3@2.2.3
2.5.0
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
urllib3@2.4.0
2.5.0
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
urllib3@2.2.1
2.5.0
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
urllib3@2.2.1
2.5.0
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
urllib3@2.2.2
2.5.0
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
urllib3@2.3.0
2.5.0
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
urllib3@2.2.3
2.5.0
1
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
urllib3@2.4.0
2.5.0
1
ghcr.io/port-labs/port-agent:v0.8.12c92d1e223f5c
urllib3@2.4.0
2.5.0
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
urllib3@2.3.0
2.5.0
1
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
urllib3@2.3.0
2.5.0
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
urllib3@2.3.0
2.5.0
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
urllib3@2.2.1
2.5.0
1
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
urllib3@2.2.3
2.5.0
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
urllib3@2.3.0
2.5.0
1
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
urllib3@2.3.0
2.5.0
1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
urllib3@2.3.0
2.5.0
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
urllib3@2.2.3
2.5.0
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
urllib3@2.3.0
2.5.0
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
urllib3@2.4.0
2.5.0
1
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
urllib3@2.2.3
2.5.0
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
urllib3@2.3.0
2.5.0
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
urllib3@2.2.1
2.5.0
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
urllib3@2.2.1
2.5.0
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
urllib3@2.2.2
2.5.0
1
quay.io/stackgres/operator:1.19.1f241b0b20326
urllib3@2.2.3
2.5.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.