StackRadar

CVE-2025-5351

Medium

Advisory

Published 25 Jun 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
57
of 17,781 indexed, latest versions
Container images
50
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 57 of 17,781 indexed charts deploy, on 50 images.

Affected packageAffected versionsFixed inImages
libsshdeb0.10.5-2, 0.10.6-0+deb12u1, 0.10.6-2build20.10.6-0+deb12u2, 0.10.6-2ubuntu0.150
OSV records
DEBIAN-CVE-2025-5351UBUNTU-CVE-2025-5351
Also known as
USN-7619-1

Charts affected

57 by stars
ChartLatestAffected imagesRadar Score
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2025-5351.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

3,018
s3-proxyradar-baseVerified publisher0.6.01 of 1See more

s3-proxy radar-base 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-5351.

Container imageDigestPackageFixed in
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

2,737
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-5351.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

3,232
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2025-5351.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

3,153
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-5351.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

8,193
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-5351.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
libssh@0.10.6-0+deb12u1
0.10.6-0+deb12u2

Open the chart page →

9,616
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-5351.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

45,239

Container images carrying it

50 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gchq/hdfs:3.3.35ec58edbb2db
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
3
guacamole/guacamole:1.6.0f344085e618b
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
3
apache/tika:2.9.2.1-fullae0b86d3c4d0
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
2
opendatacube/ows:latest668cbb41473c
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
2
1dev/server:11.9.0cd5b12fe5471
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
apache/activemq-artemis:2.37.0bae523439ee3
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
apache/rocketmq:5.3.0434d8398f996
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
atlassian/jira-software:9.7.264a75aa4ec4e
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
castlemock/castlemock:latestb7f3f1527ba9
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
castopod/castopod:1.12.101fd37280cbb2
libssh@0.10.6-0+deb12u1
0.10.6-0+deb12u2
1
consensys/teku:25.4.1bf6ecd2ea716
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
gradiant/open5gs-dbctl:0.10.3332031245fce
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
istio/install-cni:1.23.6ab34c4740f44
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
istio/pilot:1.23.69c3d6a218181
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
istio/ztunnel:1.25.005f3972d80a9
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
jaedb/iris:latest048cfbf58d57
libssh@0.10.6-0+deb12u1
0.10.6-0+deb12u2
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
langgenius/dify-api:0.6.11fca918260dd6
libssh@0.10.6-0+deb12u1
0.10.6-0+deb12u2
1
linuxserver/foldingathome:7.6.219a997426d71e
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
obolnetwork/helios:e10e753cb7e97d39d46
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
opea/speecht5:1.0249afad3d268
libssh@0.10.6-0+deb12u1
0.10.6-0+deb12u2
1
photoprism/photoprism:240711-cefc6fd632ca74
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
radarbase/radar-push-endpoint:0.4.0e1758508e033
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
stashapp/stash-box:latesta534c8afdf39
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
structurizr/onpremises:2025.11.094b5ffb5119c8
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libssh@0.10.6-0+deb12u1
0.10.6-0+deb12u2
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libssh@0.10.5-2
0.10.6-0+deb12u2
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.