CVE-2025-55173

Medium

Advisory

Published 29 Aug 2025In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.3; base score, highest
EPSS: 0.005; 44th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 55; of 17,781 indexed, latest versions
Container images: 53; deployed by those charts
Fix available: 1 of 1; affected package

Next.js Content Injection Vulnerability for Image Optimization

Carried by container images the latest versions of 55 of 17,781 indexed charts deploy, on 53 images.

Affected package	Affected versions	Fixed in	Images
nextnpm	3.2.3, 9.3.2, 11.0.1, 12.1.0+29 more	14.2.31, 15.4.5	53

OSV records: GHSA-xv57-4mr9-wg8v

Charts affected

55 by stars

Chart

Latest

Affected images

Radar Score

parkingsikalabs

0.1.0

1 of 1 See more

parking sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-55173.

Container image	Digest	Package	Fixed in
ondrejsika/parking :latest	b1fd497416c8	next@9.3.2	14.2.31

Open the chart page →

3,696

saleor-appstrieb-work

0.6.0

3 of 5 See more

saleor-apps trieb-work 0.6.0

3 of the 5 container images this version deploys carry CVE-2025-55173.

Container image	Digest	Package	Fixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed :1.23.1	1d435b4ab372	next@15.2.4	15.4.5
ghcr.io/trieb-work/saleor-apps/saleor-app-search :1.24.3	28edefb6c92d	next@15.2.4	15.4.5
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp :1.4.3	57a06bfba327	next@15.2.4	15.4.5

Open the chart page →

6,994

homarrvhdirk

0.1.5

1 of 1 See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-55173.

Container image	Digest	Package	Fixed in
ghcr.io/ajnart/homarr :latest	e103abadfb52	next@13.5.11	14.2.31

Open the chart page →

2,789

websitewaldo-vision

0.33.0

1 of 2 See more

website waldo-vision 0.33.0

1 of the 2 container images this version deploys carry CVE-2025-55173.

Container image	Digest	Package	Fixed in
ghcr.io/waldo-vision/web :v0.3.6	5bbc7647df07	next@13.2.4	14.2.31

Open the chart page →

3,474

sirenwateim

1.0.2

1 of 1 See more

5,984

Container images carrying it

53 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/wundergraph/cosmo/studio :0.111.0	454f4384713a	next@15.2.4	15.4.5	1
ghcr.io/zoriya/kyoo_front :4.7.1	d7f76c9c65d9	next@14.2.5	14.2.31	1
registry.gitlab.com/infinitydon/registry/open5gs-webui :v2.2.2	fda21b0a0344	next@3.2.3	14.2.31	1