StackRadar

CVE-2025-56200

Medium

Advisory

Published 30 Sept 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
108
of 17,781 indexed, latest versions
Container images
103
deployed by those charts
Fix available
1 of 1
affected package

validator.js has a URL validation bypass vulnerability in its isURL function

Carried by container images the latest versions of 108 of 17,781 indexed charts deploy, on 103 images.

Affected packageAffected versionsFixed inImages
validatornpm1.5.1, 2.1.0, 3.2.1, 4.4.0+16 more13.15.20103
OSV records
GHSA-9965-vmph-33xx

Charts affected

108 by stars
ChartLatestAffected imagesRadar Score
outlineoutline0.0.91 of 4See more

outline outline 0.0.9

1 of the 4 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
validator@13.7.0
13.15.20

Open the chart page →

4,431
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
validator@13.12.0
13.15.20

Open the chart page →

5,352
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
validator@13.7.0
13.15.20

Open the chart page →

5,639
lighthouse-cicowboysysopVerified publisher9.0.01 of 1See more

lighthouse-ci cowboysysop 9.0.0

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
patrickhulce/lhci-server:0.8.174b4b6a3954d
validator@10.11.0
13.15.20

Open the chart page →

2,213
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
validator@13.0.0
13.15.20

Open the chart page →

2,828
redisinsight-secureredisinsight-secureVerified publisher1.0.21 of 1See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
redis/redisinsight:2.68019fcf774631
validator@13.12.0
13.15.20

Open the chart page →

1,721
codetogethercodetogether1.4.251 of 1See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
codetogether/codetogether:latest4348c8a38752
validator@13.12.0
13.15.20

Open the chart page →

7,450
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
validator@13.11.0
13.15.20

Open the chart page →

3,451
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher1.1.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
ghcr.io/sredevopsorg/ghost-on-kubernetes:maindd991bafa85e
validator@7.2.0
13.15.20

Open the chart page →

1,447
kongakonga1.1.01 of 1See more

konga konga 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
validator@4.4.0
13.15.20

Open the chart page →

5,209
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
validator@13.7.0
13.15.20

Open the chart page →

7,776
predatorzooz1.7.01 of 1See more

predator zooz 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
zooz/predator:1.6f491d1f7a865
validator@10.11.0
13.15.20

Open the chart page →

2,851
ranetogabisonfire0.1.21 of 1See more

raneto gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
validator@13.5.2
13.15.20

Open the chart page →

2,519
ghostgeek-cookbookVerified publisher2.2.01 of 1See more

ghost geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
library/ghost:4.37.0767230c0f263
validator@7.2.0
13.15.20

Open the chart page →

4,260
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
validator@13.7.0
13.15.20

Open the chart page →

15,653
sendgeek-cookbookVerified publisher1.2.21 of 1See more

send geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
registry.gitlab.com/timvisee/send:v3.4.2047986cf6ef69
validator@13.7.0
13.15.20

Open the chart page →

1,148
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
validator@13.12.0
13.15.20

Open the chart page →

13,738
flamerlex0.3.01 of 1See more

flame rlex 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
pawelmalak/flame:2.1.193e7b0abb603
validator@13.7.0
13.15.20

Open the chart page →

2,449
openhab-cloudandibraeuVerified publisher1.2.61 of 1See more

openhab-cloud andibraeu 1.2.6

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
openhab/openhab-cloud:a8138a329dd2bac8c4b
validator@2.1.0
13.15.20

Open the chart page →

3,437
fl-orchestrator-guiassist-iot-fl-orchestrator0.1.01 of 3See more

fl-orchestrator-gui assist-iot-fl-orchestrator 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
assistiot/fl_orchestrator:api-latest7473d77448e1
validator@13.11.0
13.15.20

Open the chart page →

9,369
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
validator@4.4.0
13.15.20

Open the chart page →

18,277
audiobookshelfbdclark-helm-chartsVerified publisher0.1.41 of 1See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
validator@13.9.0
13.15.20

Open the chart page →

1,722
ghostchart-ghost0.1.51 of 2See more

ghost chart-ghost 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
validator@13.12.0
13.15.20

Open the chart page →

4,083
audiobookshelfcharts-derwitt-devVerified publisher1.1.01 of 1See more

audiobookshelf charts-derwitt-dev 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
validator@13.9.0
13.15.20

Open the chart page →

1,722
audiobookshelfchristianhuthVerified publisher2.4.01 of 1See more

audiobookshelf christianhuth 2.4.0

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
validator@13.9.0
13.15.20

Open the chart page →

1,722
cors-proxycors-proxyVerified publisher1.2.01 of 1See more

cors-proxy cors-proxy 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
validator@13.15.15
13.15.20

Open the chart page →

1,598
kongacreate-databases0.1.01 of 1See more

konga create-databases 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
pantsel/konga:latestc8172b75607d
validator@4.4.0
13.15.20

Open the chart page →

5,209
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
validator@13.12.0
13.15.20

Open the chart page →

3,769
swagger-combine-uicryptexlabsVerified publisher0.2.41 of 1See more

swagger-combine-ui cryptexlabs 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
cryptexlabs/swagger-combine-ui:0.2.1ed0bc94fd412
validator@10.11.0
13.15.20

Open the chart page →

1,378
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.01 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
validator@10.11.0
13.15.20

Open the chart page →

27,550
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.01 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
validator@10.11.0
13.15.20

Open the chart page →

24,656
eolicplantseolicplantsVerified publisher0.1.01 of 7See more

eolicplants eolicplants 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
validator@10.11.0
13.15.20

Open the chart page →

27,291
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.01 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
oscarsotosanchez/server:v1.06e2e1279126b
validator@10.11.0
13.15.20

Open the chart page →

27,256
eolo-plannereolo-planner-repo0.1.01 of 7See more

eolo-planner eolo-planner-repo 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
arturisimo/server-urjc:v1.0d8dc4430531e
validator@13.7.0
13.15.20

Open the chart page →

27,096
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-user-service:1.049e164a9a439
validator@13.12.0
13.15.20

Open the chart page →

7,691
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
validator@13.9.0
13.15.20

Open the chart page →

3,159
flamegabe565Verified publisher0.6.01 of 1See more

flame gabe565 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
pawelmalak/flame:multiarch2.3.19f88b17692a0
validator@13.7.0
13.15.20

Open the chart page →

2,172
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
validator@13.11.0
13.15.20

Open the chart page →

13,241
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
validator@13.6.0
13.15.20

Open the chart page →

12,222
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
validator@12.2.0
13.15.20

Open the chart page →

9,019
contentbridgeglenndehaanVerified publisher1.1.01 of 1See more

contentbridge glenndehaan 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
glenndehaan/contentbridge:latest99b9e4f73848
validator@13.9.0
13.15.20

Open the chart page →

1,000
Governify-Bluejaygovernify0.1.03 of 12See more

Governify-Bluejay governify 0.1.0

3 of the 12 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
governify/director:v1.4.0608c6940bb98
validator@13.6.0
13.15.20
governify/registry:v3.4.0d3f37f4f8168
validator@13.5.2
13.15.20
governify/reporter:v2.2.038595913458f
validator@10.11.0
13.15.20

Open the chart page →

22,512
Governify-Falcongovernify0.1.04 of 10See more

Governify-Falcon governify 0.1.0

4 of the 10 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
governify/collector-dynamic:v1.3.06d3d1a5b46a9
validator@13.5.2
13.15.20
governify/director:v1.4.0608c6940bb98
validator@13.6.0
13.15.20
governify/registry:v3.4.0d3f37f4f8168
validator@13.5.2
13.15.20
governify/reporter:v2.2.038595913458f
validator@10.11.0
13.15.20

Open the chart page →

24,319
iofoghelm-chartsVerified publisher0.1.11 of 3See more

iofog helm-charts 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
validator@10.11.0
13.15.20

Open the chart page →

24,161
streamsheetshelm-chartsVerified publisher0.2.34 of 8See more

streamsheets helm-charts 0.2.3

4 of the 8 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
validator@12.2.0
13.15.20
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
validator@10.11.0
13.15.20
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
validator@12.2.0
13.15.20
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
validator@10.11.0
13.15.20

Open the chart page →

89,959
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
validator@13.11.0
13.15.20

Open the chart page →

3,451
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
validator@13.11.0
13.15.20

Open the chart page →

3,614
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
ibmcom/bai-admin-dev:19.0.202d882f2836e
validator@10.9.0
13.15.20

Open the chart page →

39,349
ibm-microclimateibm-charts0.1.02 of 8See more

ibm-microclimate ibm-charts 0.1.0

2 of the 8 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
validator@6.2.1
13.15.20
ibmcom/microclimate-portal:latested5505e5c7ec
validator@9.4.1
13.15.20

Open the chart page →

57,669
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2025-56200.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
validator@12.2.0
13.15.20

Open the chart page →

10,494

Container images carrying it

103 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/ghost:6.22.0-alpine3.23ac533a6988ee
validator@13.12.0
13.15.20
1
linuxserver/cloud9:latest45c5fe102ff3
validator@1.5.1
13.15.20
1
linuxserver/codimd:latestb801bbcf6386
validator@10.11.0
13.15.20
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
validator@13.9.0
13.15.20
1
mintproject/ensemble-manager:d5656dbc01623e291564d2894c72f0e7cb2408f4222e3b941a36
validator@13.15.15
13.15.20
1
mishtinetwork/operator:latestbb3fe67a5f7c
validator@13.12.0
13.15.20
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
validator@13.11.0
13.15.20
1
moreillon/food-manager:lateste8fd856e593d
validator@13.12.0
13.15.20
1
mozilla/sentencecollector:2.0.91da6ff5c4895
validator@10.11.0
13.15.20
1
n8nio/n8n:1.86.08b39ed5a2de9
validator@13.7.0
13.15.20
1
n8nio/n8n:0.212.0a9195bc499a3
validator@13.7.0
13.15.20
1
n8nio/n8n:1.33.1dd171d45102a
validator@13.7.0
13.15.20
1
nocodb/nocodb:0.258.06779a4ddedf2
validator@13.12.0
13.15.20
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
validator@13.7.0
13.15.20
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
validator@2.1.0
13.15.20
1
outlinewiki/outline:0.82.0494dfb9249a6
validator@13.12.0
13.15.20
1
patrickhulce/lhci-server:0.8.174b4b6a3954d
validator@10.11.0
13.15.20
1
pawelmalak/flame:2.1.193e7b0abb603
validator@13.7.0
13.15.20
1
pawelmalak/flame:multiarch2.3.19f88b17692a0
validator@13.7.0
13.15.20
1
phntom/codimd:2.4.31b9aafbb62e6
validator@10.11.0
13.15.20
1
redis/redisinsight:2.68019fcf774631
validator@13.12.0
13.15.20
1
redis/redisinsight:2.46699d341bd329
validator@13.9.0
13.15.20
1
roadiehq/community-backstage-image:latestef355bf5b639
validator@8.2.0
13.15.20
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
validator@13.11.0
13.15.20
1
sigp/siren:v3.0.42c219b04758e
validator@13.15.15
13.15.20
1
slagattollas/server-practica:latest6dd8ead8e2b1
validator@10.11.0
13.15.20
1
someblackmagic/alertmanager-to-alerta-bot:latest78bf43744ea5
validator@13.7.0
13.15.20
1
sqlpad/sqlpad:6.7d3d2f430dffd
validator@10.11.0
13.15.20
1
thecodingmachine/workadventure-play:v1.17.7d8f66979b9b4
validator@13.7.0
13.15.20
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
validator@13.7.0
13.15.20
1
unleashorg/unleash-proxy:v1.4.82538f89e2685
validator@13.12.0
13.15.20
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
validator@13.11.0
13.15.20
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
validator@13.12.0
13.15.20
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
validator@13.9.0
13.15.20
1
zooz/predator:1.6f491d1f7a865
validator@10.11.0
13.15.20
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
validator@13.9.0
13.15.20
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
validator@12.2.0
13.15.20
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
validator@10.11.0
13.15.20
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
validator@12.2.0
13.15.20
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
validator@10.11.0
13.15.20
1
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
validator@13.15.15
13.15.20
1
ghcr.io/linuxserver/raneto:version-0.16.6ef768f3df5d0
validator@13.5.2
13.15.20
1
ghcr.io/m9sweeper/dash:1.6.02e27cdff8344
validator@13.11.0
13.15.20
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
validator@13.7.0
13.15.20
1
ghcr.io/sredevopsorg/ghost-on-kubernetes:maindd991bafa85e
validator@7.2.0
13.15.20
1
ghcr.io/waldo-vision/web:v0.3.65bbc7647df07
validator@13.9.0
13.15.20
1
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
validator@13.11.0
13.15.20
1
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
validator@13.12.0
13.15.20
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
validator@13.11.0
13.15.20
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
validator@10.11.0
13.15.20
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.