StackRadar

CVE-2025-5115

High

Advisory

Published 20 Aug 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.035
88th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
46
of 17,781 indexed, latest versions
Container images
40
deployed by those charts
Fix available
2 of 2
affected packages

Eclipse Jetty affected by MadeYouReset HTTP/2 vulnerability

Carried by container images the latest versions of 46 of 17,781 indexed charts deploy, on 40 images.

Affected packageAffected versionsFixed inImages
http2-commonmaven9.4.8.v20171121, 9.4.11.v20180605, 9.4.20.v20190813, 9.4.27.v20200227+18 more9.4.58, 10.0.26, 11.0.2635
jetty-http2-commonmaven12.0.9, 12.0.16, 12.0.20, 12.0.2112.0.255
OSV records
GHSA-mmxm-8w33-wc4h

Charts affected

46 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
http2-common@9.4.43.v20210629
9.4.58

Open the chart page →

32,259
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
http2-common@9.4.54.v20240208
9.4.58

Open the chart page →

10,670
solrpreferred-aiVerified publisher3.2.01 of 3See more

solr preferred-ai 3.2.0

1 of the 3 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
library/solr:8.7.0d124efd81fbb
http2-common@9.4.27.v20200227
9.4.58

Open the chart page →

6,048
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
http2-common@9.4.34.v20201102
9.4.58

Open the chart page →

12,111
reposilitevolker-raschekVerified publisher1.0.01 of 1See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.5.264128c2d7a6ba
http2-common@11.0.25
11.0.26

Open the chart page →

2,957
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
library/couchdb:3.4.22817ad50b5c5
http2-common@11.0.23
11.0.26

Open the chart page →

17,404
activemq-artemisactivemq-artemis-helm0.3.61 of 1See more

activemq-artemis activemq-artemis-helm 0.3.6

1 of the 1 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
vromero/activemq-artemis:2.16.0408d6a46b153
http2-common@9.4.27.v20200227
9.4.58

Open the chart page →

4,419
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
http2-common@9.4.53.v20231009
9.4.58

Open the chart page →

7,740
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
http2-common@9.4.54.v20240208
9.4.58

Open the chart page →

5,398
wiremockdeliveryheroVerified publisher1.4.61 of 2See more

wiremock deliveryhero 1.4.6

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.26.03be08a386092
http2-common@9.4.20.v20190813
9.4.58

Open the chart page →

2,140
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
http2-common@10.0.20
10.0.26

Open the chart page →

7,387
kokukokuVerified publisher1.0.02 of 7See more

koku koku 1.0.0

2 of the 7 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
http2-common@9.4.34.v20201102
9.4.58
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
jetty-http2-common@12.0.16
12.0.25

Open the chart page →

12,019
metabasemetabase-helmVerified publisher2.7.11 of 1See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
metabase/metabase:v0.46.09ebdc664a6b2
http2-common@11.0.14
11.0.26

Open the chart page →

2,221
resurfaceresurfaceioVerified publisher3.9.01 of 3See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
resurfaceio/resurface:3.7.84d5cda2f64109
jetty-http2-common@12.0.16
12.0.25

Open the chart page →

7,432
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
http2-common@9.4.44.v20210927
9.4.58

Open the chart page →

24,930
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
http2-common@10.0.17
10.0.26

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
http2-common@10.0.17
10.0.26

Open the chart page →

9,102
zunivers-ninjaalexpressoVerified publisher1.31.21 of 2See more

zunivers-ninja alexpresso 1.31.2

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
library/neo4j:5.18.18f01f7bb053e
http2-common@10.0.20
10.0.26

Open the chart page →

1,165
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
jetty-http2-common@12.0.20
12.0.25

Open the chart page →

3,963
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:latest536358d7b17e
jetty-http2-common@12.0.20
12.0.25

Open the chart page →

15,573
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
http2-common@10.0.20
10.0.26

Open the chart page →

8,323
prestocloudnativeapp0.1.11 of 1See more

presto cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
bivas/presto:0.19605545994f806
http2-common@9.4.8.v20171121
9.4.58

Open the chart page →

7,226
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
http2-common@9.4.11.v20180605
9.4.58

Open the chart page →

16,860
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
http2-common@9.4.54.v20240208
9.4.58

Open the chart page →

5,398
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
http2-common@9.4.36.v20210114
9.4.58

Open the chart page →

26,944
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
jingking/geonetwork-hnap:4.2.843e74ab234e1
http2-common@9.4.53.v20231009
9.4.58

Open the chart page →

34,754
hbasehbase0.1.71 of 4See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
http2-common@9.4.34.v20201102
9.4.58

Open the chart page →

10,540
wiremockhelm-charts-nr1.4.61 of 2See more

wiremock helm-charts-nr 1.4.6

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.26.03be08a386092
http2-common@9.4.20.v20190813
9.4.58

Open the chart page →

2,140
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
http2-common@10.0.22
10.0.26

Open the chart page →

9,920
nifi-registryimprowisedVerified publisher1.0.01 of 2See more

nifi-registry improwised 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
apache/nifi-registry:1.27.063b8e3e40742
http2-common@9.4.54.v20240208
9.4.58

Open the chart page →

5,320
shinsei-managerjtektVerified publisher0.2.01 of 8See more

shinsei-manager jtekt 0.2.0

1 of the 8 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
http2-common@10.0.20
10.0.26

Open the chart page →

63,461
wiremocklebenitzaVerified publisher0.3.11 of 1See more

wiremock lebenitza 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
rodolpheche/wiremock:2.27.22328a9fce2bf
http2-common@9.4.30.v20200611
9.4.58

Open the chart page →

2,427
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
library/neo4j:5.20.052d3dec8d455
http2-common@10.0.20
10.0.26

Open the chart page →

30,363
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
http2-common@9.4.43.v20210629
9.4.58

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
http2-common@9.4.44.v20210927
9.4.58

Open the chart page →

15,675
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
http2-common@9.4.32.v20200930
9.4.58

Open the chart page →

55,726
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
http2-common@10.0.24
10.0.26

Open the chart page →

5,826
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
http2-common@9.4.51.v20230217
9.4.58

Open the chart page →

9,005
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
vespaengine/vespa:8.526.1569b160f58211
jetty-http2-common@12.0.21
12.0.25

Open the chart page →

6,338
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
trinodb/trino:45038c6f24ab1a4
jetty-http2-common@12.0.9
12.0.25

Open the chart page →

21,211
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
http2-common@9.4.53.v20231009
9.4.58

Open the chart page →

5,269
bastillion-upstreamrock8sVerified publisher0.1.01 of 1See more

bastillion-upstream rock8s 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
iamdorsah/bastillion:v0.1db83a0254d81
http2-common@9.4.45.v20220203
9.4.58

Open the chart page →

3,051
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
http2-common@9.4.44.v20210927
9.4.58

Open the chart page →

6,065
solrstatcan1.5.101 of 3See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
library/solr:8.11.18c5f7881cebb
http2-common@9.4.44.v20210927
9.4.58

Open the chart page →

8,806
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
http2-common@9.4.49.v20220914
9.4.58

Open the chart page →

13,767
hadoop-deploymenttejaswita-hadoop-helmchart1.0.01 of 1See more

hadoop-deployment tejaswita-hadoop-helmchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-5115.

Container imageDigestPackageFixed in
apache/hadoop:3af361b20bec0
http2-common@9.4.34.v20201102
9.4.58

Open the chart page →

4,240

Container images carrying it

40 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/solr:8.11.18c5f7881cebb
http2-common@9.4.44.v20210927
9.4.58
3
apache/nifi-registry:1.26.07cdfd8deec92
http2-common@9.4.54.v20240208
9.4.58
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
http2-common@10.0.17
10.0.26
2
library/neo4j:5.20.052d3dec8d455
http2-common@10.0.20
10.0.26
2
rodolpheche/wiremock:2.26.03be08a386092
http2-common@9.4.20.v20190813
9.4.58
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
jetty-http2-common@12.0.20
12.0.25
2
5200710/hadoop:3.2.3-java8092d3088a5fb
http2-common@9.4.34.v20201102
9.4.58
1
apache/hadoop:3af361b20bec0
http2-common@9.4.34.v20201102
9.4.58
1
apache/nifi-registry:1.27.063b8e3e40742
http2-common@9.4.54.v20240208
9.4.58
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
http2-common@9.4.51.v20230217
9.4.58
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
http2-common@9.4.44.v20210927
9.4.58
1
apachepulsar/pulsar:2.6.14db6ff0b4045
http2-common@9.4.11.v20180605
9.4.58
1
apachepulsar/pulsar:3.0.79c9947de139d
http2-common@9.4.54.v20240208
9.4.58
1
apachepulsar/pulsar:2.9.0d056c89b7131
http2-common@9.4.43.v20210629
9.4.58
1
apachepulsar/pulsar:2.8.2d538416d5afe
http2-common@9.4.43.v20210629
9.4.58
1
apache/ranger:2.7.076c176e8a0e4
http2-common@9.4.53.v20231009
9.4.58
1
bivas/presto:0.19605545994f806
http2-common@9.4.8.v20171121
9.4.58
1
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
http2-common@10.0.22
10.0.26
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
http2-common@9.4.53.v20231009
9.4.58
1
craigwillis/c2metadata-bd:latestae317d7e4724
http2-common@9.4.32.v20200930
9.4.58
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
http2-common@11.0.25
11.0.26
1
iamdorsah/bastillion:v0.1db83a0254d81
http2-common@9.4.45.v20220203
9.4.58
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
http2-common@10.0.20
10.0.26
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
http2-common@10.0.20
10.0.26
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
http2-common@9.4.53.v20231009
9.4.58
1
library/couchdb:3.4.22817ad50b5c5
http2-common@11.0.23
11.0.26
1
library/neo4j:5.18.18f01f7bb053e
http2-common@10.0.20
10.0.26
1
library/solr:8.7.0d124efd81fbb
http2-common@9.4.27.v20200227
9.4.58
1
metabase/metabase:v0.46.09ebdc664a6b2
http2-common@11.0.14
11.0.26
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
http2-common@10.0.24
10.0.26
1
resurfaceio/resurface:3.7.84d5cda2f64109
jetty-http2-common@12.0.16
12.0.25
1
rodolpheche/wiremock:2.27.22328a9fce2bf
http2-common@9.4.30.v20200611
9.4.58
1
sismics/docs:v1.10f4b0ef019cf1
http2-common@9.4.36.v20210114
9.4.58
1
trinodb/trino:45038c6f24ab1a4
jetty-http2-common@12.0.9
12.0.25
1
trinodb/trino:405ee80ab5eeab2
http2-common@9.4.49.v20220914
9.4.58
1
vespaengine/vespa:8.526.1569b160f58211
jetty-http2-common@12.0.21
12.0.25
1
vromero/activemq-artemis:2.16.0408d6a46b153
http2-common@9.4.27.v20200227
9.4.58
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
http2-common@9.4.34.v20201102
9.4.58
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
http2-common@9.4.34.v20201102
9.4.58
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
jetty-http2-common@12.0.16
12.0.25
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.