StackRadar

CVE-2025-5187

Medium

Advisory

Published 27 Aug 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.7
base score, highest
EPSS
0.005
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
235
of 17,781 indexed, latest versions
Container images
212
deployed by those charts
Fix available
1 of 1
affected package

Kubernetes Nodes can delete themselves by adding an OwnerReference

Carried by container images the latest versions of 235 of 17,781 indexed charts deploy, on 212 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+107 more1.31.12, 1.32.8, 1.33.4212
OSV records
GHSA-4x4m-3c2p-qppc
Also known as
GO-2025-3915

Charts affected

235 by stars
ChartLatestAffected imagesRadar Score
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
k8s.io/kubernetes@v1.16.2
1.31.12

Open the chart page →

4,568
calicodevtron0.1.11 of 4See more

calico devtron 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
k8s.io/kubernetes@v1.21.0-rc.0
1.31.12

Open the chart page →

10,071
ipfs-clusterethereum-helm-chartsVerified publisher0.1.141 of 3See more

ipfs-cluster ethereum-helm-charts 0.1.14

1 of the 3 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
k8s.io/kubernetes@v1.25.4
1.31.12

Open the chart page →

4,614
fsmfsmOfficialVerified publisher0.2.112 of 5See more

fsm fsm 0.2.11

2 of the 5 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
flomesh/fsm-ingress-pipy:0.2.11cc39c96711c4
k8s.io/kubernetes@v1.26.5
1.31.12
flomesh/fsm-manager:0.2.1122f849c70b25
k8s.io/kubernetes@v1.26.5
1.31.12

Open the chart page →

4,215
interlinkinterlink0.6.11 of 2See more

interlink interlink 0.6.1

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
k8s.io/kubernetes@v1.33.3
1.33.4

Open the chart page →

2,416
kdiff-snapshotskdiff-snapshotsVerified publisher0.0.551 of 1See more

kdiff-snapshots kdiff-snapshots 0.0.55

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
k8s.io/kubernetes@v1.33.3
1.33.4

Open the chart page →

5,789
ks-corekubeblocksVerified publisher1.1.31 of 5See more

ks-core kubeblocks 1.1.3

1 of the 5 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
kubesphere/kubectl:v1.27.1649b445b1b732
k8s.io/kubernetes@v0.0.0-20240717014424-cbb86e0d7f4a
1.31.12

Open the chart page →

4,721
kubernetes-stateless-chartkubernetes-stateless-chart1.0.31 of 1See more

kubernetes-stateless-chart kubernetes-stateless-chart 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
k8s.io/kubernetes@v1.26.3
1.31.12

Open the chart page →

3,274
aws-efs-csi-driverkubesphere-testVerified publisher0.1.01 of 3See more

aws-efs-csi-driver kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
k8s.io/kubernetes@v1.16.1
1.31.12

Open the chart page →

2,603
kubeservice-cpupools-controllerkubservice-chartsVerified publisher0.1.12 of 2See more

kubeservice-cpupools-controller kubservice-charts 0.1.1

2 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
dongjiang1989/cpusets-controller:v1.1.1dc5bd483874c
k8s.io/kubernetes@v1.26.6
1.31.12
dongjiang1989/cpusets-device-plugin:v1.1.1923085c65123
k8s.io/kubernetes@v1.26.6
1.31.12

Open the chart page →

3,118
kubeservice-scheduler-pluskubservice-chartsVerified publisher0.2.11 of 2See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
dongjiang1989/crane-scheduler-controller:mainf0055c05dbee
k8s.io/kubernetes@v1.25.7
1.31.12

Open the chart page →

1,801
kube-fencingkvaps2.4.11 of 2See more

kube-fencing kvaps 2.4.1

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kube-fencing-controller:v2.4.0313edfec2fca
k8s.io/kubernetes@v1.25.3
1.31.12

Open the chart page →

2,536
linstorkvaps1.14.02 of 11See more

linstor kvaps 1.14.0

2 of the 11 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/kvaps/linstor-csi:v1.14.0087618d16b83
k8s.io/kubernetes@v1.14.10
1.31.12
ghcr.io/kvaps/linstor-stork:v1.14.05e409a6332b4
k8s.io/kubernetes@v1.20.4
1.31.12

Open the chart page →

15,547
vcluster-k0sloftVerified publisher0.0.0-ci.31 of 2See more

vcluster-k0s loft 0.0.0-ci.3

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
k8s.io/kubernetes@v1.26.0
1.31.12

Open the chart page →

3,136
oadaoadaVerified publisher5.0.51 of 11See more

oada oada 5.0.5

1 of the 11 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
groundnuty/k8s-wait-for:no-root-v2.0a26d3d3f6e1c
k8s.io/kubernetes@v1.25.4
1.31.12

Open the chart page →

13,317
rke2-canalrke2-charts3.13.31 of 2See more

rke2-canal rke2-charts 3.13.3

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
rancher/hardened-calico:v3.13.36d2cd61a338b
k8s.io/kubernetes@v1.16.2
1.31.12

Open the chart page →

6,996
vuiseriohub1.0.61 of 3See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.31.12

Open the chart page →

11,532
k8s-appliershlomibendavidOfficialVerified publisher1.0.11 of 1See more

k8s-applier shlomibendavid 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
shlomibendavid/k8s-applier:0311240529a22ffbe0f04e
k8s.io/kubernetes@v1.29.2
1.31.12

Open the chart page →

1,206
smallest-self-hostsmallest-self-hostVerified publisher0.2.21 of 12See more

smallest-self-host smallest-self-host 0.2.2

1 of the 12 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
k8s.io/kubernetes@v1.30.3
1.31.12

Open the chart page →

7,685
guardrails-agent-kubernetesturbotVerified publisher0.3.01 of 1See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
k8s.io/kubernetes@v0.0.0-20241119134819-c83cbee114dd
1.31.12

Open the chart page →

4,020
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
k8s.io/kubernetes@v0.0.0-20240814194418-024ab2a13ff7
1.31.12

Open the chart page →

4,460
vault-gcp-secretsvault-gcp-secrets1.19.51 of 1See more

vault-gcp-secrets vault-gcp-secrets 1.19.5

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.31.12

Open the chart page →

2,289
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
k8s.io/kubernetes@v0.0.0-20240814185733-a51b3b711150
1.31.12

Open the chart page →

5,225
bootaerokube1.0.11 of 4See more

boot aerokube 1.0.1

1 of the 4 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
quay.io/aerokube/keygen:1.0.1578934444f04
k8s.io/kubernetes@v1.27.3
1.31.12

Open the chart page →

7,834
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8
1.31.12

Open the chart page →

4,922
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
burganbank/vault-initializer:v19259c34e4037
k8s.io/kubernetes@v0.0.0-20240514104202-6911225c3f74
1.31.12

Open the chart page →

28,131
cluster-proxy-managerappscodeVerified publisher2026.6.261 of 1See more

cluster-proxy-manager appscode 2026.6.26

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.31.12

Open the chart page →

1,463
multicluster-controlplaneappscodeVerified publisher2025.4.301 of 1See more

multicluster-controlplane appscode 2025.4.30

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
k8s.io/kubernetes@v1.29.2
1.31.12

Open the chart page →

2,569
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
k8s.io/kubernetes@v1.31.0
1.31.12

Open the chart page →

7,300
cluster-autoscalerarzu9.19.11 of 1See more

cluster-autoscaler arzu 9.19.1

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
breton/cool:dev41b1bb483aa2
k8s.io/kubernetes@v1.26.0-alpha.0
1.31.12

Open the chart page →

1,773
hcloud-csi-driveratem181.5.12 of 6See more

hcloud-csi-driver atem18 1.5.1

2 of the 6 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
hetznercloud/hcloud-csi-driver:1.5.141dce5b33644
k8s.io/kubernetes@v1.17.12
1.31.12
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.31.12

Open the chart page →

6,491
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
k8s.io/kubernetes@v1.31.6
1.31.12

Open the chart page →

6,220
metallbbook-k8sinfra-v20.13.102 of 3See more

metallb book-k8sinfra-v2 0.13.10

2 of the 3 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
quay.io/metallb/controller:v0.13.101b33357b3595
k8s.io/kubernetes@v1.26.0
1.31.12
quay.io/metallb/speaker:v0.13.1000406ccb1fa0
k8s.io/kubernetes@v1.26.0
1.31.12

Open the chart page →

3,853
nfs-subdir-external-provisionerbook-k8sinfra-v24.0.181 of 1See more

nfs-subdir-external-provisioner book-k8sinfra-v2 4.0.18

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
k8s.io/kubernetes@v1.18.0
1.31.12

Open the chart page →

2,743
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
k8s.io/kubernetes@v0.0.0-20250515091041-8f3800390d48
1.31.12

Open the chart page →

14,352
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
k8s.io/kubernetes@v1.27.4
1.31.12

Open the chart page →

2,770
kubevirt-managerbuttahtoastVerified publisher0.1.31 of 1See more

kubevirt-manager buttahtoast 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.3.3df3ea27d4a9e
k8s.io/kubernetes@v1.29.2
1.31.12

Open the chart page →

1,497
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.31.12

Open the chart page →

14,130
capsule-argo-addoncapsule-argo-addonVerified publisher0.7.52 of 2See more

capsule-argo-addon capsule-argo-addon 0.7.5

2 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
clastix/kubectl:v1.3122918a06c253
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.31.12
ghcr.io/peak-scale/capsule-argo-addon:0.7.5087a80163971
k8s.io/kubernetes@v1.33.1
1.33.4

Open the chart page →

2,038
castware-componentscastaiVerified publisher0.4.01 of 1See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
k8s.io/kubernetes@v1.25.4
1.31.12

Open the chart page →

3,449
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
k8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa
1.31.12

Open the chart page →

15,027
aws-ecr-tokencheveo-charts0.1.01 of 1See more

aws-ecr-token cheveo-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
huzafach/aws-cli-k8:1.0.06e271d43ea48
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.31.12

Open the chart page →

1,108
calico-cniclastixVerified publisher3.28.11 of 3See more

calico-cni clastix 3.28.1

1 of the 3 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
calico/node:v3.28.1d8c644a8a3ee
k8s.io/kubernetes@v1.28.12
1.31.12

Open the chart page →

3,050
capi-kamaji-vsphere-fullclastixVerified publisher1.0.13 of 9See more

capi-kamaji-vsphere-full clastix 1.0.1

3 of the 9 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
registry.k8s.io/autoscaling/cluster-autoscaler:v1.33.06ef10d108e0e
k8s.io/kubernetes@v1.33.1
1.33.4
registry.k8s.io/csi-vsphere/driver:v3.4.0f5349a8ae3f3
k8s.io/kubernetes@v1.31.2
1.31.12
registry.k8s.io/csi-vsphere/syncer:v3.4.0179ebf195595
k8s.io/kubernetes@v1.31.2
1.31.12

Open the chart page →

5,933
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
k8s.io/kubernetes@v0.0.0-20240514104202-6911225c3f74
1.31.12

Open the chart page →

2,759
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
k8s.io/kubernetes@v1.33.3
1.33.4

Open the chart page →

10,531
cluster-octopuscluster-octopus1.0.01 of 1See more

cluster-octopus cluster-octopus 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
cgtysylr/cluster-octopus:1.0.0aec0f8a38a77
k8s.io/kubernetes@v1.28.2
1.31.12

Open the chart page →

1,038
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
k8s.io/kubernetes@v0.0.0-20240716234811-6fc0a69044f1
1.31.12

Open the chart page →

14,559
external-service-operatorcrowdfox0.1.01 of 1See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
crowdfox/external-service-operator:v1.1.06fa7e8063d27
k8s.io/kubernetes@v1.13.4
1.31.12

Open the chart page →

4,624
iam-zencryptexlabsVerified publisher0.12.231 of 4See more

iam-zen cryptexlabs 0.12.23

1 of the 4 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
k8s.io/kubernetes@v1.33.3
1.33.4

Open the chart page →

3,860

Container images carrying it

212 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/kubectl:v1.32.73c5268158974
k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88
1.31.12
1
registry.k8s.io/kubectl:v1.32.08ccae74fc039
k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8
1.31.12
1
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f
1.31.12
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
k8s.io/kubernetes@v1.26.11
1.31.12
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
k8s.io/kubernetes@v1.28.7
1.31.12
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
k8s.io/kubernetes@v0.0.0-20240611201126-f25b321b9ae4
1.31.12
1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
k8s.io/kubernetes@v1.25.0
1.31.12
1
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
k8s.io/kubernetes@v1.30.3
1.31.12
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
k8s.io/kubernetes@v1.20.0
1.31.12
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
k8s.io/kubernetes@v1.29.14
1.31.12
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
k8s.io/kubernetes@v1.31.6
1.31.12
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
k8s.io/kubernetes@v1.18.0
1.31.12
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.