StackRadarChart IndexLive demo

CVE-2025-53643

High

Advisory

Published 14 Jul 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 24th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 110; of 17,781 indexed, latest versions
Container images: 113; deployed by those charts
Fix available: 1 of 2; affected packages

AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections

Carried by container images the latest versions of 110 of 17,781 indexed charts deploy, on 113 images.

Affected package	Affected versions	Fixed in	Images
python-aiohttpdeb	3.8.4-1, 3.11.16-1+deb13u1	no fix listed	2
aiohttppypi	3.4.4, 3.5.4, 3.6.2, 3.7.1+26 more	3.12.14	113

OSV records: DEBIAN-CVE-2025-53643 GHSA-9548-qrrj-x5pj
Also known as: PYSEC-2026-1104

Charts affected

110 by stars

Chart

Latest

Affected images

Radar Score

retriever-usvctest-opea

1 of 1 See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-53643.

Container image	Digest	Package	Fixed in
opea/retriever-redis :1.0	eb746b263705	aiohttp@3.10.5	3.12.14

Open the chart page →

5,198

speecht5test-opea

1 of 1 See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-53643.

Container image	Digest	Package	Fixed in
opea/speecht5 :1.0	249afad3d268	aiohttp@3.10.5	3.12.14

Open the chart page →

9,616

ttstest-opea

1 of 1 See more

4,377

web-retrievertest-opea

1 of 1 See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-53643.

Container image	Digest	Package	Fixed in
opea/web-retriever-chroma :1.0	fe08165d7770	aiohttp@3.10.5	3.12.14

Open the chart page →

5,350

kasa-exporterth-charts

1 of 1 See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-53643.

Container image	Digest	Package	Fixed in
thelande/kasa_exporter :v0.2.3	a1fdb8baa152	aiohttp@3.9.5	3.12.14

Open the chart page →

1,515

traefik-external-dns-operatortraefik-external-dns-operator

1 of 1 See more

traefik-external-dns-operator traefik-external-dns-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-53643.

Container image	Digest	Package	Fixed in
ybucci/traefik-external-dns-operator :1.0.0	f1fcc7c8d9fd	aiohttp@3.11.14	3.12.14

Open the chart page →

1,083

jupyterhubuninettsigma2

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-53643.

Container image	Digest	Package	Fixed in
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	aiohttp@3.8.1	3.12.14

Open the chart page →

8,607

wazuh-manager-filebeatwazuh-manager-filebeat

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2025-53643.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	aiohttp@3.7.4	3.12.14

Open the chart page →

11,119

alertmanager-matrix-forwarderzloi-space

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-53643.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	aiohttp@3.8.1	3.12.14

Open the chart page →

3,118

grafana-matrix-forwarderzloi-space

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-53643.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	aiohttp@3.8.1	3.12.14

Open the chart page →

1,636

Container images carrying it

113 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/qubiva/qubiva :v0.3.2	cdf1e3329bfe	aiohttp@3.12.13	3.12.14	1
ghcr.io/serenita-org/vero :v0.8.3	e5a7ec714acc	aiohttp@3.10.10	3.12.14	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	aiohttp@3.8.3	3.12.14	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	aiohttp@3.8.3	3.12.14	1
ghcr.io/tandoorrecipes/recipes :1.5.31	063eb446e298	aiohttp@3.10.11	3.12.14	1
ghcr.io/tauffer-consulting/domino-rest :latest	8bf880fe8c73	aiohttp@3.8.3	3.12.14	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	aiohttp@3.11.11	3.12.14	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	aiohttp@3.10.10	3.12.14	1
quay.io/clustersecret/clustersecret :0.0.14	a9f835d1b241	aiohttp@3.11.11	3.12.14	1
quay.io/evl.ms/argocd-exporter :0.0.1	36ea8f34aa6b	aiohttp@3.7.4.post0	3.12.14	1
quay.io/jupyterhub/k8s-hub :3.2.1	2528c6e57587	aiohttp@3.9.1	3.12.14	1
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	aiohttp@3.8.1	3.12.14	1
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	aiohttp@3.9.5	3.12.14	1