StackRadar

CVE-2025-55315

Critical

Advisory

Published 14 Oct 2025In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.9
base score, highest
EPSS
0.658
99th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
21
of 17,781 indexed, latest versions
Container images
20
deployed by those charts
Fix available
2 of 3
affected packages

Microsoft Security Advisory CVE-2025-55315: .NET Security Feature Bypass Vulnerability

Carried by container images the latest versions of 21 of 17,781 indexed charts deploy, on 20 images.

Affected packageAffected versionsFixed inImages
Microsoft.AspNetCore.App.Runtime.linux-x64nuget8.0.3, 8.0.4, 8.0.10, 8.0.11+3 more8.0.21, 9.0.1014
Microsoft.AspNetCore.Server.Kestrel.Corenuget2.0.0, 2.0.0.17205, 2.0.1, 2.2.02.3.66
dotnet6deb6.0.136-0ubuntu1~22.04.1no fix listed1
OSV records
GHSA-5rrx-jjjq-q2r5UBUNTU-CVE-2025-55315
Also known as
BIT-aspnet-core-2025-55315

Charts affected

21 by stars
ChartLatestAffected imagesRadar Score
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
Microsoft.AspNetCore.Server.Kestrel.Core@2.2.0
2.3.6

Open the chart page →

7,880
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.21

Open the chart page →

7,190
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.21

Open the chart page →

7,190
nethermindchronicleVerified publisher0.0.131 of 1See more

nethermind chronicle 0.0.13

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.9aeca3b55bda5
Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.4
9.0.10

Open the chart page →

2,031
kyoorubxkubeVerified publisher0.1.101 of 9See more

kyoo rubxkube 0.1.10

1 of the 9 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.21

Open the chart page →

30,234
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.21

Open the chart page →

7,190
ombibryanalves0.4.01 of 1See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
Microsoft.AspNetCore.Server.Kestrel.Core@2.2.0
2.3.6

Open the chart page →

10,776
seqcloudnativeapp1.0.01 of 1See more

seq cloudnativeapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
datalust/seq:5.0.832-pre9c731bb207a6
Microsoft.AspNetCore.Server.Kestrel.Core@2.0.1
2.3.6

Open the chart page →

10,541
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.21

Open the chart page →

49,025
smtp4devimioVerified publisher0.1.11 of 1See more

smtp4dev imio 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
rnwood/smtp4dev:3.6.1912304153668
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.4
8.0.21

Open the chart page →

3,192
session-scalermiqm0.1.01 of 1See more

session-scaler miqm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
miqm/session-scaler:0.1.0c5c211717d9b
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.3
8.0.21

Open the chart page →

3,179
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
craigwillis/c2metadata-bd:latestae317d7e4724
Microsoft.AspNetCore.Server.Kestrel.Core@2.0.0
2.3.6

Open the chart page →

55,726
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
dotnet6@6.0.136-0ubuntu1~22.04.1
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.13
no fix listed
8.0.21

Open the chart page →

8,619
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.4
9.0.10

Open the chart page →

2,031
bobby-apitumogroup1.0.11 of 1See more

bobby-api tumogroup 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
sondresjo/bobby-api:latestfe534731909a
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.17
8.0.21

Open the chart page →

2,293
umbrella-chartumbrella-chartVerified publisher0.1.13 of 5See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
hassroutyyoussef/accountservice:latest1f01edf1ee0c
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.21
hassroutyyoussef/orderservice:latest2fc3d1617928
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.21
hassroutyyoussef/userservice:lateste0392e2b4a90
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.21

Open the chart page →

7,440
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Server.Kestrel.Core@2.0.0.17205
2.3.6

Open the chart page →

8,262
workerappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Server.Kestrel.Core@2.0.0.17205
2.3.6

Open the chart page →

3,329
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Server.Kestrel.Core@2.0.0.17205
2.3.6

Open the chart page →

8,262
workerappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

workerapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Server.Kestrel.Core@2.0.0.17205
2.3.6

Open the chart page →

3,329
webencryptorwebencryptor1.1.01 of 1See more

webencryptor webencryptor 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-55315.

Container imageDigestPackageFixed in
beubi/webencryptor:latesta02c2e200920
Microsoft.AspNetCore.Server.Kestrel.Core@2.2.0
2.3.6

Open the chart page →

1,968

Container images carrying it

20 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
kodekloud/examplevotingapp_worker:v1741e3aaaa812
Microsoft.AspNetCore.Server.Kestrel.Core@2.0.0.17205
2.3.6
4
beubi/webencryptor:latesta02c2e200920
Microsoft.AspNetCore.Server.Kestrel.Core@2.2.0
2.3.6
1
craigwillis/c2metadata-bd:latestae317d7e4724
Microsoft.AspNetCore.Server.Kestrel.Core@2.0.0
2.3.6
1
datalust/seq:5.0.832-pre9c731bb207a6
Microsoft.AspNetCore.Server.Kestrel.Core@2.0.1
2.3.6
1
hassroutyyoussef/accountservice:latest1f01edf1ee0c
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.21
1
hassroutyyoussef/orderservice:latest2fc3d1617928
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.21
1
hassroutyyoussef/userservice:lateste0392e2b4a90
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.21
1
linuxserver/jellyfin:10.7.72427dde159a2
Microsoft.AspNetCore.Server.Kestrel.Core@2.2.0
2.3.6
1
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
Microsoft.AspNetCore.Server.Kestrel.Core@2.2.0
2.3.6
1
miqm/session-scaler:0.1.0c5c211717d9b
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.3
8.0.21
1
nethermind/nethermind:1.31.893e57917371a
Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.4
9.0.10
1
nethermind/nethermind:1.31.9aeca3b55bda5
Microsoft.AspNetCore.App.Runtime.linux-x64@9.0.4
9.0.10
1
rnwood/smtp4dev:3.6.1912304153668
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.4
8.0.21
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
dotnet6@6.0.136-0ubuntu1~22.04.1
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.13
no fix listed
8.0.21
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.21
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.21
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.21
1
sondresjo/bobby-api:latestfe534731909a
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.17
8.0.21
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.10
8.0.21
1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
Microsoft.AspNetCore.App.Runtime.linux-x64@8.0.11
8.0.21
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.