StackRadar

CVE-2025-54798

Low

Advisory

Published 6 Aug 2025In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
2.5
base score, highest
EPSS
0.003
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
169
of 17,781 indexed, latest versions
Container images
165
deployed by those charts
Fix available
1 of 1
affected package

tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameter

Carried by container images the latest versions of 169 of 17,781 indexed charts deploy, on 165 images.

Affected packageAffected versionsFixed inImages
tmpnpm0.0.23, 0.0.28, 0.0.29, 0.0.30+4 more0.2.4165
OSV records
GHSA-52f5-9888-hmc6

Charts affected

169 by stars
ChartLatestAffected imagesRadar Score
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
tmp@0.2.3
0.2.4

Open the chart page →

11,384
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
tmp@0.0.33
0.2.4

Open the chart page →

4,431
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
tmp@0.0.33
0.2.4

Open the chart page →

5,352
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
tmp@0.0.33
0.2.4

Open the chart page →

5,639
lighthouse-cicowboysysopVerified publisher9.0.01 of 1See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
patrickhulce/lhci-server:0.8.174b4b6a3954d
tmp@0.1.0
0.2.4

Open the chart page →

2,213
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
tmp@0.0.33
0.2.4

Open the chart page →

2,828
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
tmp@0.2.1
0.2.4

Open the chart page →

6,168
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
tmp@0.2.1
0.2.4

Open the chart page →

5,251
backstagedeliveryheroVerified publisher0.1.151 of 2See more

backstage deliveryhero 0.1.15

1 of the 2 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
tmp@0.2.1
0.2.4

Open the chart page →

8,213
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
tmp@0.2.1
0.2.4

Open the chart page →

3,795
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
tmp@0.2.1
0.2.4

Open the chart page →

96,941
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
tmp@0.2.1
0.2.4

Open the chart page →

10,530
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
tmp@0.2.1
0.2.4

Open the chart page →

2,654
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
tmp@0.0.33
0.2.4

Open the chart page →

17,404
hubotdecayofmind1.0.21 of 3See more

hubot decayofmind 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
decayofmind/hubot:3.3.21e18e92fe694
tmp@0.0.33
0.2.4

Open the chart page →

2,513
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
tmp@0.0.33
0.2.4

Open the chart page →

7,579
zwavejs2mqttgeek-cookbookVerified publisher5.4.21 of 1See more

zwavejs2mqtt geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
zwavejs/zwavejs2mqtt:5.0.215a6040fb468
tmp@0.0.33
0.2.4

Open the chart page →

3,476
graphql-hivegraphql-hive1.0.01 of 17See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
ghcr.io/kamilkisiela/graphql-hive/app:59b64c36c866b3555c135c70de76a884e63f8619a4a3639899f7
tmp@0.2.1
0.2.4

Open the chart page →

10,311
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
tmp@0.0.28
0.2.4

Open the chart page →

5,209
kubeviouskubevious1.2.22 of 7See more

kubevious kubevious 1.2.2

2 of the 7 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
tmp@0.2.1
0.2.4
kubevious/parser:1.2.299ae7a5168c2
tmp@0.2.1
0.2.4

Open the chart page →

14,204
bitwarden-crd-operatorlerentisVerified publisher0.18.01 of 1See more

bitwarden-crd-operator lerentis 0.18.0

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
tmp@0.0.33
0.2.4

Open the chart page →

2,003
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
tmp@0.0.33
0.2.4

Open the chart page →

6,868
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
tmp@0.2.1
0.2.4

Open the chart page →

7,776
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
tmp@0.2.1
0.2.4

Open the chart page →

24,488
predatorzooz1.7.01 of 1See more

predator zooz 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
zooz/predator:1.6f491d1f7a865
tmp@0.0.28
0.2.4

Open the chart page →

2,851
dltbrokerassist-iot-distributed-broker0.2.01 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

1 of the 9 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
tmp@0.2.1
0.2.4

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.01 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

1 of the 9 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
tmp@0.2.1
0.2.4

Open the chart page →

77,687
opensearch-dashboardscaptnbpVerified publisher2.2.11 of 1See more

opensearch-dashboards captnbp 2.2.1

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
tmp@0.2.1
0.2.4

Open the chart page →

1,843
skoonerchristianhuthVerified publisher0.4.01 of 1See more

skooner christianhuth 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
ghcr.io/skooner-k8s/skooner:stable60c1562e4d51
tmp@0.2.1
0.2.4

Open the chart page →

1,341
data-fairdata354-helmVerified publisher1.1.26 of 12See more

data-fair data354-helm 1.1.2

6 of the 12 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
ghcr.io/data-fair/data-fair:3cc9498b64b5b
tmp@0.1.0
0.2.4
ghcr.io/data-fair/metrics:0a8d40779eeae
tmp@0.0.33
0.2.4
ghcr.io/data-fair/notify:3c739b74dabb0
tmp@0.0.33
0.2.4
ghcr.io/data-fair/portals:18b621866ceb2
tmp@0.0.33
0.2.4
ghcr.io/data-fair/processings:15a9216989707
tmp@0.0.33
0.2.4
ghcr.io/data-fair/simple-directory:438a4f32fad82
tmp@0.0.33
0.2.4

Open the chart page →

38,346
ethereumjsethereum-helm-chartsVerified publisher0.1.21 of 2See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
ethpandaops/ethereumjs:masterfb84b718500f
tmp@0.0.33
0.2.4

Open the chart page →

1,442
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
tmp@0.0.33
0.2.4

Open the chart page →

4,260
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
tmp@0.0.33
0.2.4

Open the chart page →

7,801
globalpingglobalpingVerified publisher1.0.111 of 1See more

globalping globalping 1.0.11

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
globalping/globalping-probe:latest8acbd23009fd
tmp@0.0.33
0.2.4

Open the chart page →

518
dashykrzwiatrzyk1.0.01 of 1See more

dashy krzwiatrzyk 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
tmp@0.0.33
0.2.4

Open the chart page →

3,143
open-api-discoveryopen-api-discoveryVerified publisher0.1.11 of 1See more

open-api-discovery open-api-discovery 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
lukasreining/open-api-schema-collector:0.1.050e021c42e33
tmp@0.2.1
0.2.4

Open the chart page →

2,473
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
tmp@0.2.1
0.2.4

Open the chart page →

2,449
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
tmp@0.0.33
0.2.4

Open the chart page →

7,517
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
tmp@0.0.33
0.2.4

Open the chart page →

4,010
scrapoxywiremindVerified publisher0.3.41 of 1See more

scrapoxy wiremind 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
wiremind/scrapoxy:lateste7048929a676
tmp@0.0.33
0.2.4

Open the chart page →

2,154
lhciadnoctemVerified publisher0.1.01 of 1See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
tmp@0.0.33
0.2.4

Open the chart page →

1,248
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
tmp@0.0.33
0.2.4

Open the chart page →

3,820
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
tmp@0.2.3
0.2.4

Open the chart page →

4,880
angular-chartangular-application0.1.01 of 1See more

angular-chart angular-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
ibarreche/cloud-front-ci:latestc8970ac1c8dc
tmp@0.0.30
0.2.4

Open the chart page →

3,237
dltkvassist-iot-data-integrity-verification0.2.01 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.0.0e36a8922fa0c
tmp@0.2.1
0.2.4

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.01 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
assistiot/dlt_api:2.1.0c8a170683be7
tmp@0.2.1
0.2.4

Open the chart page →

77,706
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
tmp@0.0.33
0.2.4

Open the chart page →

9,369
openapiassist-iot-open-api-management0.2.22 of 6See more

openapi assist-iot-open-api-management 0.2.2

2 of the 6 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
assistiot/open_api_frontend:1.0.1f11d82defc70
tmp@0.0.33
0.2.4
pantsel/konga:latestc8172b75607d
tmp@0.0.28
0.2.4

Open the chart page →

18,277
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
tmp@0.2.1
0.2.4
assistiot/smart-orchestrator_enabler:latest89f37e88c871
tmp@0.2.1
0.2.4
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
tmp@0.2.1
0.2.4

Open the chart page →

45,363
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2025-54798.

Container imageDigestPackageFixed in
ltdstudio/terraforming-mars:latest0e76c6f4eac0
tmp@0.0.33
0.2.4

Open the chart page →

7,152

Container images carrying it

165 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
fanzynoodle/smeejas:0.0.15f9916c1a287
tmp@0.2.1
0.2.4
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
tmp@0.0.33
0.2.4
1
getferdi/ferdi-server:1.3.26e620b85afaa
tmp@0.0.33
0.2.4
1
globalping/globalping-probe:latest8acbd23009fd
tmp@0.0.33
0.2.4
1
governify/collector-dynamic:v1.3.06d3d1a5b46a9
tmp@0.2.1
0.2.4
1
gristlabs/grist:0.7.96e71b1914a7e
tmp@0.2.1
0.2.4
1
halkeye/irslackd:latest7638bfba70b0
tmp@0.0.33
0.2.4
1
heywood8/redisinsight:2.28.00bc9ab313d37
tmp@0.0.33
0.2.4
1
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
tmp@0.0.33
0.2.4
1
hugohg34/server:0.0.2503e5d8960ff
tmp@0.2.1
0.2.4
1
ianw/quickchart:v1.7.1dc49dd460c37
tmp@0.0.33
0.2.4
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
tmp@0.0.30
0.2.4
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
tmp@0.0.33
0.2.4
1
ibmcom/microclimate-portal:latested5505e5c7ec
tmp@0.0.29
0.2.4
1
jayfong/yapi:1.10.2163e5d621910
tmp@0.0.33
0.2.4
1
konradkleine/docker-registry-frontend:v2181aad54ee64
tmp@0.0.23
0.2.4
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
tmp@0.2.1
0.2.4
1
kubebb/component-store:latestfd8ecbd73213
tmp@0.2.1
0.2.4
1
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
tmp@0.2.1
0.2.4
1
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
tmp@0.2.1
0.2.4
1
kubevious/backend:1.2.22d9ba6eb46b6
tmp@0.2.1
0.2.4
1
kubevious/parser:1.2.299ae7a5168c2
tmp@0.2.1
0.2.4
1
kyleslugg/klusterview:latestba8c36dfdfbd
tmp@0.2.1
0.2.4
1
kyso/kyso-front:lateste52595c5c16f
tmp@0.0.33
0.2.4
1
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
tmp@0.2.3
0.2.4
1
library/ghost:4.37.0767230c0f263
tmp@0.0.33
0.2.4
1
library/ghost:5.79.083f7bf209844
tmp@0.0.33
0.2.4
1
library/ghost:6.22.0-alpine3.23ac533a6988ee
tmp@0.0.33
0.2.4
1
library/kibana:8.18.004c0fc150f3a
tmp@0.0.33
0.2.4
1
linuxserver/cloud9:latest45c5fe102ff3
tmp@0.0.33
0.2.4
1
linuxserver/codimd:latestb801bbcf6386
tmp@0.0.33
0.2.4
1
lissy93/dashy:2.0.51991f7be5ed0
tmp@0.0.33
0.2.4
1
ltdstudio/terraforming-mars:latest0e76c6f4eac0
tmp@0.0.33
0.2.4
1
lukasreining/open-api-schema-collector:0.1.050e021c42e33
tmp@0.2.1
0.2.4
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
tmp@0.0.33
0.2.4
1
minddocdev/hubot:0.1.96c60b11a4fa7
tmp@0.0.33
0.2.4
1
mishtinetwork/operator:latestbb3fe67a5f7c
tmp@0.0.33
0.2.4
1
misskey/misskey:12.110.1e08b7c478093
tmp@0.2.1
0.2.4
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
tmp@0.0.33
0.2.4
1
mozilla/sentencecollector:2.0.91da6ff5c4895
tmp@0.0.33
0.2.4
1
n8nio/n8n:1.86.08b39ed5a2de9
tmp@0.2.3
0.2.4
1
n8nio/n8n:0.212.0a9195bc499a3
tmp@0.2.1
0.2.4
1
n8nio/n8n:1.33.1dd171d45102a
tmp@0.0.33
0.2.4
1
nocodb/nocodb:0.258.06779a4ddedf2
tmp@0.0.33
0.2.4
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
tmp@0.2.1
0.2.4
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
tmp@0.0.33
0.2.4
1
openbas/caldera-server:5.1.0a277796d9724
tmp@0.0.33
0.2.4
1
opensearchproject/opensearch-dashboards:2.18.00ecd8444add2
tmp@0.2.1
0.2.4
1
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
tmp@0.2.1
0.2.4
1
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
tmp@0.2.1
0.2.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.