StackRadar

CVE-2025-50182

Medium

Advisory

Published 18 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
176
of 17,781 indexed, latest versions
Container images
179
deployed by those charts
Fix available
1 of 1
affected package

urllib3 does not control redirects in browsers and Node.js

Carried by container images the latest versions of 176 of 17,781 indexed charts deploy, on 179 images.

Affected packageAffected versionsFixed inImages
urllib3pypi2.2.0, 2.2.1, 2.2.2, 2.2.3+2 more2.5.0179
OSV records
GHSA-48p4-8xcf-vxj5
Also known as
PYSEC-2026-1997

Charts affected

176 by stars
ChartLatestAffected imagesRadar Score
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
urllib3@2.4.0
2.5.0

Open the chart page →

2,534
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
urllib3@2.3.0
2.5.0

Open the chart page →

4,731
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
urllib3@2.2.1
2.5.0

Open the chart page →

13,390
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
supabase/realtime:latestd3aa0c86c7b3
urllib3@2.3.0
2.5.0

Open the chart page →

9,556
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
urllib3@2.2.3
2.5.0

Open the chart page →

5,704
asrtest-opea1.0.01 of 1See more

asr test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/asr:1.025dd26d9cd09
urllib3@2.2.3
2.5.0

Open the chart page →

4,393
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
urllib3@2.2.3
2.5.0
opea/embedding-tei:1.05c9639de61c1
urllib3@2.2.3
2.5.0
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0
opea/reranking-tei:1.0e48613afb191
urllib3@2.2.3
2.5.0
opea/retriever-redis:1.0eb746b263705
urllib3@2.2.3
2.5.0

Open the chart page →

39,090
codegentest-opea1.0.02 of 5See more

codegen test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
urllib3@2.2.3
2.5.0
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0

Open the chart page →

28,814
codetranstest-opea1.0.02 of 5See more

codetrans test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
urllib3@2.2.3
2.5.0
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0

Open the chart page →

28,385
docsumtest-opea1.0.02 of 5See more

docsum test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
urllib3@2.2.3
2.5.0
opea/llm-docsum-tgi:1.002f9e8fa5d71
urllib3@2.2.3
2.5.0

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
urllib3@2.2.3
2.5.0

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
urllib3@2.2.3
2.5.0

Open the chart page →

5,221
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0

Open the chart page →

4,720
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
urllib3@2.2.3
2.5.0

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
urllib3@2.2.3
2.5.0

Open the chart page →

5,198
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
urllib3@2.2.3
2.5.0

Open the chart page →

9,616
ttstest-opea1.0.01 of 1See more

tts test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/tts:1.0257ae94709e9
urllib3@2.2.3
2.5.0

Open the chart page →

4,377
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
urllib3@2.2.3
2.5.0

Open the chart page →

5,350
traefik-external-dns-operatortraefik-external-dns-operator1.0.11 of 1See more

traefik-external-dns-operator traefik-external-dns-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
urllib3@2.3.0
2.5.0

Open the chart page →

1,083
zookeepertwomartensVerified publisher0.2.21 of 1See more

zookeeper twomartens 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
urllib3@2.4.0
2.5.0

Open the chart page →

1,733
devportalveecode-platform-nextVerified publisher0.1.211 of 1See more

devportal veecode-platform-next 0.1.21

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinnedc443520aebf7
urllib3@2.2.2
2.5.0

Open the chart page →

1,787
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
urllib3@2.2.1
2.5.0

Open the chart page →

9,347
wallarm-node-nextwallarmVerified publisher0.5.31 of 2See more

wallarm-node-next wallarm 0.5.3

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
wallarm/node-helpers:5.0.2-1097cadc42336
urllib3@2.2.2
2.5.0

Open the chart page →

2,408
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
urllib3@2.2.1
2.5.0

Open the chart page →

10,843
xkopsxkops0.1.02 of 5See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
urllib3@2.2.3
2.5.0
hamzaarshad10/querypodpy:1.7154f38e8668e
urllib3@2.2.3
2.5.0

Open the chart page →

13,677
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
urllib3@2.4.0
2.5.0

Open the chart page →

570

Container images carrying it

179 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
urllib3@2.4.0
2.5.0
1
ghcr.io/hoverkraft-tech/ovh-snapshoter/app:0.4.1010d271f08ab3
urllib3@2.2.3
2.5.0
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
urllib3@2.4.0
2.5.0
1
ghcr.io/kubiyabot/sdk-py:v1.20.0f108f49570cc
urllib3@2.2.3
2.5.0
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
urllib3@2.4.0
2.5.0
1
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
urllib3@2.2.1
2.5.0
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
urllib3@2.2.1
2.5.0
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
urllib3@2.2.2
2.5.0
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
urllib3@2.3.0
2.5.0
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
urllib3@2.2.3
2.5.0
1
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
urllib3@2.4.0
2.5.0
1
ghcr.io/port-labs/port-agent:v0.8.12c92d1e223f5c
urllib3@2.4.0
2.5.0
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
urllib3@2.3.0
2.5.0
1
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
urllib3@2.3.0
2.5.0
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
urllib3@2.3.0
2.5.0
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
urllib3@2.2.1
2.5.0
1
ghcr.io/wasi-master/13ft:0.3.4563ce7794a71
urllib3@2.2.3
2.5.0
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
urllib3@2.3.0
2.5.0
1
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
urllib3@2.3.0
2.5.0
1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
urllib3@2.3.0
2.5.0
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
urllib3@2.2.3
2.5.0
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
urllib3@2.3.0
2.5.0
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
urllib3@2.4.0
2.5.0
1
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
urllib3@2.2.3
2.5.0
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
urllib3@2.3.0
2.5.0
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
urllib3@2.2.1
2.5.0
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
urllib3@2.2.1
2.5.0
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
urllib3@2.2.2
2.5.0
1
quay.io/stackgres/operator:1.19.1f241b0b20326
urllib3@2.2.3
2.5.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.