StackRadar

CVE-2025-5187

Medium

Advisory

Published 27 Aug 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.7
base score, highest
EPSS
0.005
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
235
of 17,781 indexed, latest versions
Container images
212
deployed by those charts
Fix available
1 of 1
affected package

Kubernetes Nodes can delete themselves by adding an OwnerReference

Carried by container images the latest versions of 235 of 17,781 indexed charts deploy, on 212 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+107 more1.31.12, 1.32.8, 1.33.4212
OSV records
GHSA-4x4m-3c2p-qppc
Also known as
GO-2025-3915

Charts affected

235 by stars
ChartLatestAffected imagesRadar Score
kubeflowkromanow94-kubeflow0.5.14 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

4 of the 30 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
k8s.io/kubernetes@v1.11.1
1.31.12
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
k8s.io/kubernetes@v1.11.1
1.31.12
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
k8s.io/kubernetes@v1.11.1
1.31.12
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
k8s.io/kubernetes@v1.11.1
1.31.12

Open the chart page →

70,530
calicokubeblocksVerified publisher3.28.01 of 3See more

calico kubeblocks 3.28.0

1 of the 3 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
calico/node:v3.28.0385bf6391fea
k8s.io/kubernetes@v1.28.9
1.31.12

Open the chart page →

3,288
gemini-schedulerkubeblocksVerified publisher0.1.11 of 1See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
apecloud/gemini-scheduler:0.1.15832d1a9097a
k8s.io/kubernetes@v1.29.7
1.31.12

Open the chart page →

1,412
kubeblocks-csi-driverkubeblocksVerified publisher0.1.31 of 6See more

kubeblocks-csi-driver kubeblocks 0.1.3

1 of the 6 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
apecloud/kubeblocks-csi-driver:0.1.3c93655ccb2d7
k8s.io/kubernetes@v1.22.11
1.31.12

Open the chart page →

2,082
spiderpoolkubeblocksVerified publisher1.2.02 of 4See more

spiderpool kubeblocks 1.2.0

2 of the 4 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
k8s.io/kubernetes@v1.29.0
1.31.12
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
k8s.io/kubernetes@v1.29.0
1.31.12

Open the chart page →

8,378
listener-operatorkubedoopVerified publisher0.4.01 of 6See more

listener-operator kubedoop 0.4.0

1 of the 6 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072
1.31.12

Open the chart page →

4,373
secret-operatorkubedoopVerified publisher0.4.01 of 5See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072
1.31.12

Open the chart page →

4,341
kubeintellectkubeintellectVerified publisher2.5.01 of 2See more

kubeintellect kubeintellect 2.5.0

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674
1.31.12

Open the chart page →

1,859
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
k8s.io/kubernetes@v1.32.6
1.32.8

Open the chart page →

4,940
cranekubesphere-stable0.5.23 of 3See more

crane kubesphere-stable 0.5.2

3 of the 3 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
gocrane/crane-scheduler:0.0.239ba6d11b2079
k8s.io/kubernetes@v1.23.3
1.31.12
gocrane/crane-scheduler-controller:0.1.23a2d7e60576f9
k8s.io/kubernetes@v1.23.3
1.31.12
gocrane/craned:v0.5.1a1400909118c
k8s.io/kubernetes@v1.22.3
1.31.12

Open the chart page →

8,883
csi-qingcloudkubesphere-stable1.4.01 of 6See more

csi-qingcloud kubesphere-stable 1.4.0

1 of the 6 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
1.31.12

Open the chart page →

12,402
curvefs-csikubesphere-stable0.1.01 of 3See more

curvefs-csi kubesphere-stable 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.31.12

Open the chart page →

2,822
edgemeshkubesphere-stable0.1.01 of 2See more

edgemesh kubesphere-stable 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
kubeedge/edgemesh-agent:latest460c6061b608
k8s.io/kubernetes@v1.23.0
1.31.12

Open the chart page →

4,096
iomeshkubesphere-stable1.1.01 of 25See more

iomesh kubesphere-stable 1.1.0

1 of the 25 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
iomesh/localpv-manager:v0.2.0f13deacac3f4
k8s.io/kubernetes@v1.24.4
1.31.12

Open the chart page →

48,665
IOMeshkubesphere-stable1.2.01 of 25See more

IOMesh kubesphere-stable 1.2.0

1 of the 25 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
iomesh/localpv-manager:v0.2.0f13deacac3f4
k8s.io/kubernetes@v1.24.4
1.31.12

Open the chart page →

46,341
csi-neonsankubesphere-testVerified publisher1.3.01 of 6See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
k8s.io/kubernetes@v1.18.6
1.31.12

Open the chart page →

18,475
csi-qingcloudkubesphere-testVerified publisher1.4.01 of 6See more

csi-qingcloud kubesphere-test 1.4.0

1 of the 6 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
1.31.12

Open the chart page →

12,402
curvefs-csikubesphere-testVerified publisher0.1.01 of 3See more

curvefs-csi kubesphere-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.31.12

Open the chart page →

2,822
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674
1.31.12

Open the chart page →

4,439
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.42 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

2 of the 9 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8
1.31.12
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
k8s.io/kubernetes@v1.29.0
1.31.12

Open the chart page →

20,204
kuperatorkusionstackVerified publisher0.7.41 of 1See more

kuperator kusionstack 0.7.4

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
kusionstack/kuperator:v0.7.4d2f72ae1d2f2
k8s.io/kubernetes@v1.22.6
1.31.12

Open the chart page →

978
operatingkusionstackVerified publisher0.5.11 of 1See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
kusionstack/operating:v0.5.0c28bd96b986b
k8s.io/kubernetes@v1.22.6
1.31.12

Open the chart page →

1,879
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
k8s.io/kubernetes@v1.16.15
1.31.12

Open the chart page →

16,520
kltlifecycle-toolkitOfficialVerified publisher0.2.61 of 4See more

klt lifecycle-toolkit 0.2.6

1 of the 4 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
k8s.io/kubernetes@v1.25.13
1.31.12

Open the chart page →

4,658
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
k8s.io/kubernetes@v1.29.2
1.31.12

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
k8s.io/kubernetes@v1.29.2
1.31.12

Open the chart page →

3,225
vcluster-pro-k0sloftVerified publisher0.0.0-ci-run.101 of 2See more

vcluster-pro-k0s loft 0.0.0-ci-run.10

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
k8s.io/kubernetes@v1.26.0
1.31.12

Open the chart page →

5,768
vcluster-pro-k8sloftVerified publisher0.0.0-ci-run.102 of 4See more

vcluster-pro-k8s loft 0.0.0-ci-run.10

2 of the 4 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
registry.k8s.io/kube-apiserver:v1.26.199e1ed9fbc8a
k8s.io/kubernetes@v1.26.1
1.31.12
registry.k8s.io/kube-controller-manager:v1.26.140adecbe3a40
k8s.io/kubernetes@v1.26.1
1.31.12

Open the chart page →

8,202
kruisematrixone-operatorVerified publisher1.8.31 of 2See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
openkruise/kruise-manager:v1.8.30482722b4e56
k8s.io/kubernetes@v1.30.10
1.31.12

Open the chart page →

1,767
mediawiki-backupmediawiki-backupVerified publisher0.2.11 of 1See more

mediawiki-backup mediawiki-backup 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/fernferret/mediawiki-backup:v0.2.2bbef381294ed
k8s.io/kubernetes@v1.25.6
1.31.12

Open the chart page →

1,917
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
k8s.io/kubernetes@v1.29.2
1.31.12

Open the chart page →

5,422
kube-prometheus-stackmesosphere87.16.01 of 7See more

kube-prometheus-stack mesosphere 87.16.0

1 of the 7 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
k8s.io/kubernetes@v1.29.2
1.31.12

Open the chart page →

7,398
azuredisk-csi-drivermesosphere-stable0.8.11 of 6See more

azuredisk-csi-driver mesosphere-stable 0.8.1

1 of the 6 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
mcr.microsoft.com/k8s/csi/azuredisk-csi:v1.1.1ec1803037ed9
k8s.io/kubernetes@v1.21.0-alpha.0.0.20201210005053-f58c4d8cd725
1.31.12

Open the chart page →

14,065
dexmesosphere-stable2.14.11 of 5See more

dex mesosphere-stable 2.14.1

1 of the 5 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
k8s.io/kubernetes@v1.29.2
1.31.12

Open the chart page →

19,214
gcpdisk-csi-drivermesosphere-stable0.7.31 of 7See more

gcpdisk-csi-driver mesosphere-stable 0.7.3

1 of the 7 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.31.12

Open the chart page →

3,603
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
k8s.io/kubernetes@v1.29.2
1.31.12

Open the chart page →

5,422
kommandermesosphere-stable0.39.24 of 29See more

kommander mesosphere-stable 0.39.2

4 of the 29 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
mesosphere/kommander-federation-authorizedlister:v0.21.263bc411b930b
k8s.io/kubernetes@v1.19.5
1.31.12
mesosphere/kommander-federation-controller-manager:v0.21.2b036785a8862
k8s.io/kubernetes@v1.19.5
1.31.12
mesosphere/kommander-federation-webhook:v0.21.294af41b6dd9a
k8s.io/kubernetes@v1.19.5
1.31.12
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
k8s.io/kubernetes@v1.14.1
1.31.12

Open the chart page →

68,284
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
k8s.io/kubernetes@v1.29.2
1.31.12

Open the chart page →

10,180
veleromesosphere-stable3.2.51 of 1See more

velero mesosphere-stable 3.2.5

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
k8s.io/kubernetes@v1.26.4
1.31.12

Open the chart page →

1,869
argocd-extra-app-info-exportermikejohVerified publisher0.1.121 of 1See more

argocd-extra-app-info-exporter mikejoh 0.1.12

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
mikejoh/argocd-extra-app-info-exporter:0.2.05c5a3b734271
k8s.io/kubernetes@v1.31.0
1.31.12

Open the chart page →

1,334
jupyterhubmizzoukube0.0.1-set.by.chartpress1 of 7See more

jupyterhub mizzoukube 0.0.1-set.by.chartpress

1 of the 7 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
k8s.io/kubernetes@v1.28.7
1.31.12

Open the chart page →

1,883
replacermosquitto-helm-chart0.2.01 of 3See more

replacer mosquitto-helm-chart 0.2.0

1 of the 3 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/replacer:v1.1.00b2a41c2a43e
k8s.io/kubernetes@v1.16.10
1.31.12

Open the chart page →

3,929
nats-operatornatsVerified publisher0.8.31 of 1See more

nats-operator nats 0.8.3

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
natsio/nats-operator:0.8.31261dae38389
k8s.io/kubernetes@v1.22.2
1.31.12

Open the chart page →

2,352
agent-control-cdnewrelic1.0.01 of 3See more

agent-control-cd newrelic 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
k8s.io/kubernetes@v0.0.0-20250212211946-67a30c0adcf5
1.31.12

Open the chart page →

5,034
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f
1.31.12

Open the chart page →

17,070
cluster-proxyocm-helm-chartsVerified publisher0.12.01 of 1See more

cluster-proxy ocm-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
quay.io/open-cluster-management/cluster-proxy:v0.12.035f9c3ad644a
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.31.12

Open the chart page →

1,189
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
k8s.io/kubernetes@v1.33.0
1.33.4

Open the chart page →

6,037
kb-cloud-installeropenshift2.1.351 of 1See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
apecloud/kb-cloud-installer:v2.1.42-certified98abc64aa985
k8s.io/kubernetes@v1.28.4
1.31.12

Open the chart page →

4,127
external-dns-host-networkphntom0.0.121 of 1See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
phntom/external-dns-host-network:0.0.123adadbac8443
k8s.io/kubernetes@v1.25.3
1.31.12

Open the chart page →

4,642
planectlplanectlVerified publisher0.7.02 of 10See more

planectl planectl 0.7.0

2 of the 10 container images this version deploys carry CVE-2025-5187.

Container imageDigestPackageFixed in
alpine/k8s:1.30.2cd560fce90f7
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.31.12
quay.io/argoproj/argocd:v2.14.115fc69e31c755
k8s.io/kubernetes@v1.31.0
1.31.12

Open the chart page →

25,934

Container images carrying it

212 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/kubectl:v1.32.73c5268158974
k8s.io/kubernetes@v0.0.0-20250715180032-158eee9fac88
1.31.12
1
registry.k8s.io/kubectl:v1.32.08ccae74fc039
k8s.io/kubernetes@v0.0.0-20241211175915-70d3cc986aa8
1.31.12
1
registry.k8s.io/kubectl:v1.31.10e0b2d217d1d2
k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f
1.31.12
1
registry.k8s.io/kube-scheduler:v1.26.110684e23172d9
k8s.io/kubernetes@v1.26.11
1.31.12
1
registry.k8s.io/kube-scheduler:v1.28.73ae5620a33bb
k8s.io/kubernetes@v1.28.7
1.31.12
1
registry.k8s.io/kube-scheduler:v1.28.1146cf7475c8da
k8s.io/kubernetes@v0.0.0-20240611201126-f25b321b9ae4
1.31.12
1
registry.k8s.io/kube-scheduler:v1.25.09330c53feca7
k8s.io/kubernetes@v1.25.0
1.31.12
1
registry.k8s.io/nfd/node-feature-discovery:v0.16.619ebca8b3804
k8s.io/kubernetes@v1.30.3
1.31.12
1
registry.k8s.io/sig-storage/hostpathplugin:v1.9.092257881c1d6
k8s.io/kubernetes@v1.20.0
1.31.12
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
k8s.io/kubernetes@v1.29.14
1.31.12
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
k8s.io/kubernetes@v1.31.6
1.31.12
1
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.03ce0fdba4d8e
k8s.io/kubernetes@v1.18.0
1.31.12
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.