StackRadar

CVE-2025-50182

Medium

Advisory

Published 18 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
176
of 17,781 indexed, latest versions
Container images
179
deployed by those charts
Fix available
1 of 1
affected package

urllib3 does not control redirects in browsers and Node.js

Carried by container images the latest versions of 176 of 17,781 indexed charts deploy, on 179 images.

Affected packageAffected versionsFixed inImages
urllib3pypi2.2.0, 2.2.1, 2.2.2, 2.2.3+2 more2.5.0179
OSV records
GHSA-48p4-8xcf-vxj5
Also known as
PYSEC-2026-1997

Charts affected

176 by stars
ChartLatestAffected imagesRadar Score
artifactory-cleanupsubshellVerified publisher1.0.11 of 1See more

artifactory-cleanup subshell 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
devopshq/artifactory-cleanup:1.0.1830e093bffa91
urllib3@2.4.0
2.5.0

Open the chart page →

2,534
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
urllib3@2.3.0
2.5.0

Open the chart page →

4,731
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
urllib3@2.2.1
2.5.0

Open the chart page →

13,390
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
supabase/realtime:latestd3aa0c86c7b3
urllib3@2.3.0
2.5.0

Open the chart page →

9,556
flask-contactstest-configmap1.0.11 of 3See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
urllib3@2.2.3
2.5.0

Open the chart page →

5,704
asrtest-opea1.0.01 of 1See more

asr test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/asr:1.025dd26d9cd09
urllib3@2.2.3
2.5.0

Open the chart page →

4,393
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
urllib3@2.2.3
2.5.0
opea/embedding-tei:1.05c9639de61c1
urllib3@2.2.3
2.5.0
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0
opea/reranking-tei:1.0e48613afb191
urllib3@2.2.3
2.5.0
opea/retriever-redis:1.0eb746b263705
urllib3@2.2.3
2.5.0

Open the chart page →

39,090
codegentest-opea1.0.02 of 5See more

codegen test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
urllib3@2.2.3
2.5.0
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0

Open the chart page →

28,814
codetranstest-opea1.0.02 of 5See more

codetrans test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
urllib3@2.2.3
2.5.0
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0

Open the chart page →

28,385
docsumtest-opea1.0.02 of 5See more

docsum test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
urllib3@2.2.3
2.5.0
opea/llm-docsum-tgi:1.002f9e8fa5d71
urllib3@2.2.3
2.5.0

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
urllib3@2.2.3
2.5.0

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
urllib3@2.2.3
2.5.0

Open the chart page →

5,221
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0

Open the chart page →

4,720
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
urllib3@2.2.3
2.5.0

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
urllib3@2.2.3
2.5.0

Open the chart page →

5,198
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
urllib3@2.2.3
2.5.0

Open the chart page →

9,616
ttstest-opea1.0.01 of 1See more

tts test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/tts:1.0257ae94709e9
urllib3@2.2.3
2.5.0

Open the chart page →

4,377
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
urllib3@2.2.3
2.5.0

Open the chart page →

5,350
traefik-external-dns-operatortraefik-external-dns-operator1.0.11 of 1See more

traefik-external-dns-operator traefik-external-dns-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
urllib3@2.3.0
2.5.0

Open the chart page →

1,083
zookeepertwomartensVerified publisher0.2.21 of 1See more

zookeeper twomartens 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
confluentinc/cp-zookeeper:latest7610a50b13e7
urllib3@2.4.0
2.5.0

Open the chart page →

1,733
devportalveecode-platform-nextVerified publisher0.1.211 of 1See more

devportal veecode-platform-next 0.1.21

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinnedc443520aebf7
urllib3@2.2.2
2.5.0

Open the chart page →

1,787
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
urllib3@2.2.1
2.5.0

Open the chart page →

9,347
wallarm-node-nextwallarmVerified publisher0.5.31 of 2See more

wallarm-node-next wallarm 0.5.3

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
wallarm/node-helpers:5.0.2-1097cadc42336
urllib3@2.2.2
2.5.0

Open the chart page →

2,408
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
urllib3@2.2.1
2.5.0

Open the chart page →

10,843
xkopsxkops0.1.02 of 5See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
urllib3@2.2.3
2.5.0
hamzaarshad10/querypodpy:1.7154f38e8668e
urllib3@2.2.3
2.5.0

Open the chart page →

13,677
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-50182.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
urllib3@2.4.0
2.5.0

Open the chart page →

570

Container images carrying it

179 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
opea/llm-tgi:1.00c25aab3f106
urllib3@2.2.3
2.5.0
4
shashkist/flask-contacts-app:latest581de1fd6084
urllib3@2.2.3
2.5.0
4
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
urllib3@2.2.3
2.5.0
3
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
urllib3@2.3.0
2.5.0
3
confluentinc/cp-zookeeper:latest7610a50b13e7
urllib3@2.4.0
2.5.0
2
langgenius/dify-sandbox:0.2.009b7e8705673
urllib3@2.2.1
2.5.0
2
library/redmine:6.1.3-trixief474a901faec
urllib3@2.3.0
2.5.0
2
locustio/locust:2.32.2a0d4b88e42c1
urllib3@2.2.3
2.5.0
2
opea/embedding-tei:1.05c9639de61c1
urllib3@2.2.3
2.5.0
2
opea/reranking-tei:1.0e48613afb191
urllib3@2.2.3
2.5.0
2
opea/retriever-redis:1.0eb746b263705
urllib3@2.2.3
2.5.0
2
opendatacube/ows:latest668cbb41473c
urllib3@2.3.0
2.5.0
2
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
urllib3@2.3.0
2.5.0
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
urllib3@2.3.0
2.5.0
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
urllib3@2.4.0
2.5.0
2
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
urllib3@2.2.1
2.5.0
2
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
urllib3@2.2.3
2.5.0
1
airbyte/manifest-server:7.23.73b3a670af168
urllib3@2.3.0
2.5.0
1
akeyless/base-rhel:0.0.14ba8900a0061
urllib3@2.2.1
2.5.0
1
alpine/k8s:1.32.47e1e7d5b7a96
urllib3@2.4.0
2.5.0
1
alpine/k8s:1.31.49c4976d47656
urllib3@2.2.3
2.5.0
1
alpine/k8s:1.30.0bd01dae02676
urllib3@2.2.1
2.5.0
1
alpine/k8s:1.30.2cd560fce90f7
urllib3@2.2.2
2.5.0
1
alpine/k8s:1.28.13e5c0b053fed7
urllib3@2.2.2
2.5.0
1
alpine/k8s:1.32.3eec354133193
urllib3@2.3.0
2.5.0
1
andreymileshin/kube-info:v0.1.0f7b300bc9e66
urllib3@2.3.0
2.5.0
1
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
urllib3@2.4.0
2.5.0
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
urllib3@2.4.0
2.5.0
1
aristidetm/basic-notebook:3.6.5469dbc951224
urllib3@2.2.2
2.5.0
1
aristidetm/k8s-hub:3.3.7ccb516cb8474
urllib3@2.2.1
2.5.0
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
urllib3@2.2.2
2.5.0
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
urllib3@2.2.1
2.5.0
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
urllib3@2.2.1
2.5.0
1
bmeares/meerschaum:2.8.48e9c5bacaa82
urllib3@2.3.0
2.5.0
1
ciuse99/suggestarr:v1.0.20d72768245ef5
urllib3@2.2.3
2.5.0
1
confluentinc/cp-kafka:7.6.683dbca3efd2a
urllib3@2.4.0
2.5.0
1
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
urllib3@2.2.3
2.5.0
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
urllib3@2.2.0
2.5.0
1
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
urllib3@2.2.3
2.5.0
1
cr0hn/ja-shortener:v0.1.414482d0bc4a1
urllib3@2.4.0
2.5.0
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
urllib3@2.3.0
2.5.0
1
datamate/seafile-professional:11.0.202dd66b722464
urllib3@2.2.3
2.5.0
1
datawire/aes:3.11.195ec30b3c732
urllib3@2.2.1
2.5.0
1
datawire/emissary:3.12.21f67a1292d2a
urllib3@2.2.1
2.5.0
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
urllib3@2.2.1
2.5.0
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
urllib3@2.2.2
2.5.0
1
ddosify/selfhosted_backend:3.2.93c11e3182652
urllib3@2.2.1
2.5.0
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
urllib3@2.2.1
2.5.0
1
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
urllib3@2.2.1
2.5.0
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
urllib3@2.2.2
2.5.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.