CVE-2025-56200
MediumAdvisory
Published 30 Sept 2025In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.1
- base score, highest
- EPSS
- 0.003
- 25th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 108
- of 17,781 indexed, latest versions
- Container images
- 103
- deployed by those charts
- Fix available
- 1 of 1
- affected package
validator.js has a URL validation bypass vulnerability in its isURL function
Carried by container images the latest versions of 108 of 17,781 indexed charts deploy, on 103 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| validatornpm | 1.5.1, 2.1.0, 3.2.1, 4.4.0+16 more | 13.15.20 | 103 |
- OSV records
- GHSA-9965-vmph-33xx
Charts affected
108 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| tfy-distributortruefoundryVerified publisher | 0.0.1 | 1 of 4See more | 17,323 |
| unleash-proxyunleash | 0.8.12 | 1 of 1See more | 929 |
| hedgedocvista | 0.1.1 | 1 of 1See more | 3,118 |
| websitewaldo-visionVerified publisher | 0.33.0 | 1 of 2See more | 3,474 |
| sirenwateim | 1.0.2 | 1 of 1See more | 5,984 |
| webhookiewebhookie | 0.1.2 | 1 of 1See more | 14,364 |
| webhookie-allwebhookie | 0.1.2 | 1 of 3See more | 28,605 |
| workadventureworkadventure | 1.1.0 | 1 of 9See more | 16,083 |
Container images carrying it
103 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| mojaloop/ | 89b8ab71b74b | validator | 13.15.20 | 5 |
| oscarsotosanchez/ | 6e2e1279126b | validator | 13.15.20 | 4 |
| ghcr.io/ | 180acad33d69 | validator | 13.15.20 | 4 |
| pantsel/ | c8172b75607d | validator | 13.15.20 | 3 |
| governify/ | 608c6940bb98 | validator | 13.15.20 | 2 |
| governify/ | d3f37f4f8168 | validator | 13.15.20 | 2 |
| governify/ | 38595913458f | validator | 13.15.20 | 2 |
| hookiesolutions/ | 0629694246ba | validator | 13.15.20 | 2 |
| hoppscotch/ | f1da831950b7 | validator | 13.15.20 | 2 |
| mojaloop/ | 1abc8a7aa71c | validator | 13.15.20 | 2 |
| mojaloop/ | fb71d233c742 | validator | 13.15.20 | 2 |
| mojaloop/ | def4bf273721 | validator | 13.15.20 | 2 |
| outlinewiki/ | d060dcd8f9aa | validator | 13.15.20 | 2 |
| redis/ | 1c5f43fddcdd | validator | 13.15.20 | 2 |
| quay.io/ | e09967519a1d | validator | 13.15.20 | 2 |
| arturisimo/ | d8dc4430531e | validator | 13.15.20 | 1 |
| assistiot/ | 7473d77448e1 | validator | 13.15.20 | 1 |
| catalysm/ | f003b35f54d9 | validator | 13.15.20 | 1 |
| chandanteekinavar/ | 49e164a9a439 | validator | 13.15.20 | 1 |
| codetogether/ | 4348c8a38752 | validator | 13.15.20 | 1 |
| cryptexlabs/ | 189c07411d7c | validator | 13.15.20 | 1 |
| cryptexlabs/ | ed0bc94fd412 | validator | 13.15.20 | 1 |
| fiware/ | a1b6ed4ae84f | validator | 13.15.20 | 1 |
| fonoster/ | e8c84b5eaa67 | validator | 13.15.20 | 1 |
| fonoster/ | 5f8f380dc174 | validator | 13.15.20 | 1 |
| fonoster/ | 051ba9c34ef5 | validator | 13.15.20 | 1 |
| fonoster/ | e4d5f5ff1945 | validator | 13.15.20 | 1 |
| fonoster/ | e27001f2813c | validator | 13.15.20 | 1 |
| glenndehaan/ | 99b9e4f73848 | validator | 13.15.20 | 1 |
| governify/ | 6d3d1a5b46a9 | validator | 13.15.20 | 1 |
| heywood8/ | 0bc9ab313d37 | validator | 13.15.20 | 1 |
| hoppscotch/ | 538fe6ded4b6 | validator | 13.15.20 | 1 |
| hugohg34/ | 503e5d8960ff | validator | 13.15.20 | 1 |
| ibmcom/ | 02d882f2836e | validator | 13.15.20 | 1 |
| ibmcom/ | ab3fd1fdfa18 | validator | 13.15.20 | 1 |
| ibmcom/ | ed5505e5c7ec | validator | 13.15.20 | 1 |
| inseefrlab/ | 31f04ca7436b | validator | 13.15.20 | 1 |
| interlayhq/ | 423d567d47aa | validator | 13.15.20 | 1 |
| jakowenko/ | b858bac9e32a | validator | 13.15.20 | 1 |
| jayfong/ | 163e5d621910 | validator | 13.15.20 | 1 |
| keyoxide/ | 96f27a71269d | validator | 13.15.20 | 1 |
| kubebb/ | 0fbb732379bc | validator | 13.15.20 | 1 |
| kubebb/ | fd8ecbd73213 | validator | 13.15.20 | 1 |
| kyso/ | e52595c5c16f | validator | 13.15.20 | 1 |
| library/ | 1ef2e532ca4d | validator | 13.15.20 | 1 |
| library/ | 2654b1e90413 | validator | 13.15.20 | 1 |
| library/ | 29773d6be407 | validator | 13.15.20 | 1 |
| library/ | 767230c0f263 | validator | 13.15.20 | 1 |
| library/ | 77196da4b0df | validator | 13.15.20 | 1 |
| library/ | 83f7bf209844 | validator | 13.15.20 | 1 |