Container image	Digest	Package	Fixed in
ghcr.io/onedr0p/prowlarr-develop :1.14.0.4286	c77d84ebf7a6	curl@8.5.0-r0	8.14.0-r0
ghcr.io/onedr0p/qbittorrent :4.6.3	a4ad890e8c4a	curl@8.5.0-r0	8.14.0-r0
ghcr.io/onedr0p/radarr :5.3.6.8612	8d299e59fce7	curl@8.5.0-r0	8.14.0-r0
ghcr.io/onedr0p/sonarr :4.0.2.1183	27ffdcc8a937	curl@8.5.0-r0	8.14.0-r0

Open the chart page →

14,238

uffizzi-controlleruffizzi-controller

2.4.6

1 of 11 See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.10.1	e24f39d3eed6	curl@8.5.0-r0	8.14.0-r0

Open the chart page →

14,240

celestia-appcelestia-labs

0.5.0

1 of 3 See more

celestia-app celestia-labs 0.5.0

1 of the 3 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-app :v3.7.0-arabica	23a9ec9b1879	curl@8.12.1-r0	8.14.0-r0

Open the chart page →

1,066

geonode-k8sgeonode-k8s

2.0.0

1 of 10 See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
alpine/curl :8.5.0	513c4f0d7123	curl@8.5.0-r0	8.14.0-r0

Open the chart page →

13,953

librechatlibrechat

1.8.10

1 of 3 See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
ghcr.io/danny-avila/librechat :v0.7.7	8c68abbe1cff	curl@8.12.1-r0	8.14.0-r0

Open the chart page →

2,654

radarrloeken-at-home

5.27.0-nightly

1 of 1 See more

radarr loeken-at-home 5.27.0-nightly

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
loeken/radarr :5.27.0-nightly	a24409d3846d	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

586

certscerts

2.1.3

1 of 1 See more

695

coder-observabilitycoder-observability

0.7.3

2 of 21 See more

coder-observability coder-observability 0.7.3

2 of the 21 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
dannyben/madness :latest	ebdf50556c02	curl@8.9.0-r0	8.14.0-r0
grafana/grafana :10.4.19	a9043254ba16	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

24,700

hoppscotchdeliveryhero

0.3.2

1 of 1 See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	curl@8.9.1-r0	8.14.0-r0

Open the chart page →

3,451

healthchecksgabe565

0.17.0

1 of 1 See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/healthchecks :version-v3.9	b5c6bfb00b03	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

2,286

hazelcasthazelcast

5.10.2

1 of 2 See more

hazelcast hazelcast 5.10.2

1 of the 2 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
hazelcast/hazelcast :5.5.0	5dd5d31c7a06	curl@8.9.0-r0	8.14.0-r0

Open the chart page →

2,634

helm-ai-kernelmindburn-labs

0.8.5

1 of 2 See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
alpine/helmdigest-pinned	105741fa6621	curl@8.9.0-r0	8.14.0-r0

Open the chart page →

2,160

openclaw-with-brainopenclaw-with-brain

0.1.67

1 of 3 See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
alpine/git :2.47.2	062a01ad7a0e	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

5,218

lldapself-hosters-by-night

0.5.2

1 of 2 See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
ghcr.io/lldap/lldap :2025-05-19	3de697c3ba57	curl@8.12.1-r0	8.14.0-r0

Open the chart page →

3,400

agentareaagentarea

0.0.18

1 of 16 See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
temporalio/ui :2.39.0	b768f87f18b5	curl@8.12.1-r0	8.14.0-r0

Open the chart page →

14,914

psonoankra-charts

1.2.0

1 of 2 See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
psono/psono-server :5.0.0	3b974b43ea03	curl@8.10.1-r0	8.14.0-r0

Open the chart page →

2,388

anteonanteon

2.6.4

1 of 13 See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
library/nginx :1.25.5-alpine	516475cc129d	curl@8.5.0-r0	8.14.0-r0

Open the chart page →

22,202

celestia-nodecelestia-node

0.1.7

1 of 1 See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-node :v0.16.0	41177982c584	curl@8.9.1-r1	8.14.0-r0

Open the chart page →

1,799

finops-stackcert-manager

0.0.5

1 of 12 See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
grafana/grafana :11.1.3	b23b588cf7cb	curl@8.9.0-r0	8.14.0-r0

Open the chart page →

12,562

data-fairdata354-helm

1.1.2

1 of 12 See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
ghcr.io/data-fair/notify :3	c739b74dabb0	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

38,346

jumpdjjudas21

0.1.7

1 of 1 See more

jump djjudas21 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
daledavies/jump :v1.4.1	0a0c8ad93902	curl@8.5.0-r0	8.14.0-r0

Open the chart page →

728

openssh-serverdjjudas21

0.1.14

1 of 1 See more

openssh-server djjudas21 0.1.14

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
linuxserver/openssh-server :9.7_p1-r4-ls171	53ea39d2485c	curl@8.9.1-r2	8.14.0-r0

Open the chart page →

565

eoapieoapi

0.16.2

1 of 7 See more

eoapi eoapi 0.16.2

1 of the 7 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
nginxinc/nginx-unprivileged :1.27.4-alpine	62a904036bfc	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

6,250

atlas-cmmsf3k-tech

0.151.5

1 of 4 See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
intelloop/atlas-cmms-frontend :v1.5.1	2409c2a00ab6	curl@8.5.0-r0	8.14.0-r0

Open the chart page →

5,291

leantimegissilabs

1.3.0

1 of 2 See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
leantime/leantime :3.3.3	ad4bfb0699d3	curl@8.11.0-r2	8.14.0-r0

Open the chart page →

6,416

temporalglasskube

0.45.2-gk.1

4 of 14 See more

temporal glasskube 0.45.2-gk.1

4 of the 14 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	curl@8.5.0-r0	8.14.0-r0
temporalio/admin-tools :1.25.0-tctl-1.18.1-cli-1.0.0	cda4901bab53	curl@8.5.0-r0	8.14.0-r0
temporalio/server :1.25.0	8a5798191dea	curl@8.5.0-r0	8.14.0-r0
temporalio/ui :2.30.2	5c2a3645d09c	curl@8.5.0-r0	8.14.0-r0

Open the chart page →

16,346

gridgaingridgain

1.0.6

1 of 1 See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
gridgain/community :8.9.11	d32d182a0e6a	curl@8.9.1-r1	8.14.0-r0

Open the chart page →

4,679

app-blueprinthelm-app-blueprint

0.2.1

1 of 1 See more

app-blueprint helm-app-blueprint 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
nginxinc/nginx-unprivileged :1.27-alpine	65e3e85dbaed	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

840

webhook-broker-chartimytech

0.2.4

1 of 1 See more

webhook-broker-chart imytech 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
public.ecr.aws/optimizely/webhook-broker :v0.2.3	cfc92cc2de65	curl@8.12.1-r0	8.14.0-r0

Open the chart page →

1,246

mysql-checkkfirfer

0.3.0

1 of 1 See more

mysql-check kfirfer 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
kfirfer/mysql-client :0.0.4	d23d173f333f	curl@8.5.0-r0	8.14.0-r0

Open the chart page →

785

kubeseal-webguikubeseal-webgui

6.0.4

1 of 2 See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
ghcr.io/jaydee94/kubeseal-webgui/ui :4.5.3	4447636e8102	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

4,095

mesherykubesphere-stable

0.5.0

1 of 13 See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
layer5/meshery :stable-latest	78a8be21bef3	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

24,690

lagoon-remotelagoon-charts

0.106.0

1 of 1 See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
uselagoon/docker-host :v3.6.1	2c89ed939b8b	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

2,113

mimir-syncmimir-sync

3.1.0

1 of 1 See more

mimir-sync mimir-sync 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
ghcr.io/antnsn/mal-sync :v1.0.5	2f06e72cef36	curl@8.12.1-r0	8.14.0-r0

Open the chart page →

1,293

miniapiminiapi

1.3.2

1 of 1 See more

miniapi miniapi 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
udhos/miniapi :1.3.2	8a7042db82ce	curl@8.10.1-r0	8.14.0-r0

Open the chart page →

854

orbitalregorbitalreg

0.3.0

1 of 4 See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
orbitalreg/orbitalreg-frontend :0.1.0	4fd449582a3c	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

2,278

phpipamphpipam-helm

1.0.12

2 of 3 See more

phpipam phpipam-helm 1.0.12

2 of the 3 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
phpipam/phpipam-cron :v1.7.3	54468713454e	curl@8.11.0-r2	8.14.0-r0
phpipam/phpipam-www :v1.7.3	ace0efd24830	curl@8.11.0-r2	8.14.0-r0

Open the chart page →

3,778

prometheus-sql-exporterprometheus-community

0.5.0

1 of 1 See more

prometheus-sql-exporter prometheus-community 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
ghcr.io/justwatchcom/sql_exporter :v0.8	c4b1d3d0f052	curl@8.12.1-r1	8.14.0-r0

Open the chart page →

1,199

kyoorubxkube

0.1.10

1 of 9 See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
getmeili/meilisearch :v1.11.0	b9be3d2d4251	curl@8.10.1-r0	8.14.0-r0

Open the chart page →

30,234

smallest-self-hostsmallest-self-host

0.2.2

1 of 12 See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
grafana/grafana :11.0.0	0dc5a246ab16	curl@8.5.0-r0	8.14.0-r0

Open the chart page →

7,685

upbot-operatorupbot-operator

0.0.20

1 of 2 See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
alpine/k8s :1.28.13	e5c0b053fed7	curl@8.9.0-r0	8.14.0-r0

Open the chart page →

4,460

redirectwyrihaximusnet

1.1.0

1 of 1 See more

redirect wyrihaximusnet 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
ghcr.io/wyrihaximusnet/redirect :random	bf5983d754d7	curl@8.10.1-r0	8.14.0-r0

Open the chart page →

1,581

blueprintzazuko

0.0.2

1 of 1 See more

blueprint zazuko 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
ghcr.io/zazuko/blueprint :v0.1.0	92ac2f97978e	curl@8.5.0-r0	8.14.0-r0

Open the chart page →

581

acuteacute

1.2.0

1 of 1 See more

acute acute 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-5025.

Container image	Digest	Package	Fixed in
library/nginx :1.25-alpine	516475cc129d	curl@8.5.0-r0	8.14.0-r0

Open the chart page →

686

Container images carrying it

208 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
pnnlmiscscripts/anaconda9 :1714885940.021839-nginx-1	cfbc9b70cbf8	curl@8.11.0-r2	8.14.0-r0	6
grafana/grafana :11.0.0	0dc5a246ab16	curl@8.5.0-r0	8.14.0-r0	3
grafana/grafana :11.3.0	a0f881232a6f	curl@8.10.1-r0	8.14.0-r0	3
library/nginx :1.25.5-alpine :1.25-alpine	516475cc129d	curl@8.5.0-r0	8.14.0-r0	3
alpine/curl :8.7.1	f0c1b7ca12f6	curl@8.7.1-r0	8.14.0-r0	2
alpine/git :2.47.2	062a01ad7a0e	curl@8.12.1-r1	8.14.0-r0	2
dtzar/helm-kubectl :3.14.4	55429449408e	curl@8.5.0-r0	8.14.0-r0	2
ethersphere/bee-localchain :latest	0558799ca992	curl@8.5.0-r0	8.14.0-r0	2
excalidraw/excalidraw :latest	f7ee194addd6	curl@8.12.1-r1	8.14.0-r0	2
grafana/grafana :11.1.0	079600c9517b	curl@8.5.0-r0	8.14.0-r0	2
grafana/grafana :11.1.4	886b56d5534e	curl@8.9.0-r0	8.14.0-r0	2
grafana/grafana :11.4.0	d8ea37798ccc	curl@8.11.0-r2	8.14.0-r0	2
hazelcast/hazelcast :5.5.0	5dd5d31c7a06	curl@8.9.0-r0	8.14.0-r0	2
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	curl@8.9.1-r0	8.14.0-r0	2
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	curl@8.9.1-r1	8.14.0-r0	2
linuxserver/ubooquity :2.1.2-ls36	9932d6759112	curl@8.9.0-r0	8.14.0-r0	2
nginxinc/nginx-unprivileged :1.27-alpine	65e3e85dbaed	curl@8.12.1-r1	8.14.0-r0	2
opea/chatqna-conversation-ui :1.0	02d5674ca863	curl@8.9.1-r1	8.14.0-r0	2
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	curl@8.12.1-r0	8.14.0-r0	2
uselagoon/docker-host :v3.6.1	2c89ed939b8b	curl@8.12.1-r1	8.14.0-r0	2
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	curl@8.12.1-r0	8.14.0-r0	2
ghcr.io/smarter-project/home-orchestrator :main	d44135b02d77	curl@8.12.1-r0	8.14.0-r0	2
registry.k8s.io/ingress-nginx/controller :v1.9.5	b3aba22b1da8	curl@8.5.0-r0	8.14.0-r0	2
registry.k8s.io/ingress-nginx/controller :v1.12.1	d2fbc4ec70d8	curl@8.12.1-r1	8.14.0-r0	2
alpine/curl :8.5.0	513c4f0d7123	curl@8.5.0-r0	8.14.0-r0	1
alpine/curl :8.12.0	8943e8c7e8e4	curl@8.12.0-r0	8.14.0-r0	1
alpine/helm	105741fa6621	curl@8.9.0-r0	8.14.0-r0	1
alpine/k8s :1.32.4	7e1e7d5b7a96	curl@8.12.1-r1	8.14.0-r0	1
alpine/k8s :1.31.4	9c4976d47656	curl@8.11.1-r0	8.14.0-r0	1
alpine/k8s :1.30.0	bd01dae02676	curl@8.5.0-r0	8.14.0-r0	1
alpine/k8s :1.30.2	cd560fce90f7	curl@8.8.0-r0	8.14.0-r0	1
alpine/k8s :1.28.13	e5c0b053fed7	curl@8.9.0-r0	8.14.0-r0	1
alpine/k8s :1.32.3	eec354133193	curl@8.12.1-r0	8.14.0-r0	1
appwrite/console :7.5.7	aaa11ceab999	curl@8.12.1-r0	8.14.0-r0	1
aquasec/harbor-scanner-trivy :0.31.2	6e790e233872	curl@8.5.0-r0	8.14.0-r0	1
buddyspencer/gickup :0.10.38	6b656f19b0c1	curl@8.12.1-r0	8.14.0-r0	1
carlosmz87/test_helm_frontend :latest	79f4b528f42a	curl@8.11.0-r2	8.14.0-r0	1
casbin/casdoor :v1.753.0	770ad9ec3190	curl@8.11.0-r2	8.14.0-r0	1
chandanteekinavar/findery-market-frontend :1.0	6de5bd44a325	curl@8.12.1-r0	8.14.0-r0	1
clsen2024/daejeon_2-3 :latest	1156cd87c8fb	curl@8.9.0-r0	8.14.0-r0	1
clsen2024/gwangju_2-3 :service-b-1	0ba9eff852c5	curl@8.9.0-r0	8.14.0-r0	1
clsen2024/gwangju_2-3 :service-a-1	51b1d45961cd	curl@8.9.0-r0	8.14.0-r0	1
clsen2024/gwangju_2-3 :service-c-1	efb1586c8299	curl@8.9.0-r0	8.14.0-r0	1
cometbft/cometbft :v0.38.17	22c2ac018f40	curl@8.11.1-r0	8.14.0-r0	1
cryptexlabs/authf :0.12.11	189c07411d7c	curl@8.9.1-r1	8.14.0-r0	1
daledavies/jump :v1.4.1	0a0c8ad93902	curl@8.5.0-r0	8.14.0-r0	1
dannyben/madness :latest	ebdf50556c02	curl@8.9.0-r0	8.14.0-r0	1
davidy/giphy-app :1.0.2-arm	41b2355cc23a	curl@8.11.0-r2	8.14.0-r0	1
defactops/defactops-ui :1.0.16	825cdf9ba706	curl@8.5.0-r0	8.14.0-r0	1
djjudas21/bearhugmugs :0.1.1	4fa898a52d97	curl@8.11.0-r2	8.14.0-r0	1