StackRadar

CVE-2025-57352

Medium

Advisory

Published 24 Sept 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
37
of 17,781 indexed, latest versions
Container images
34
deployed by those charts
Fix available
1 of 1
affected package

min-document vulnerable to prototype pollution

Carried by container images the latest versions of 37 of 17,781 indexed charts deploy, on 34 images.

Affected packageAffected versionsFixed inImages
min-documentnpm2.19.02.19.134
OSV records
GHSA-rx8g-88g5-qh64

Charts affected

37 by stars
ChartLatestAffected imagesRadar Score
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
min-document@2.19.0
2.19.1

Open the chart page →

11,384
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
min-document@2.19.0
2.19.1

Open the chart page →

6,168
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
min-document@2.19.0
2.19.1

Open the chart page →

10,530
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
min-document@2.19.0
2.19.1

Open the chart page →

9,261
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
min-document@2.19.0
2.19.1

Open the chart page →

17,404
flagsmithone-acre-fundVerified publisher0.1.51 of 6See more

flagsmith one-acre-fund 0.1.5

1 of the 6 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
min-document@2.19.0
2.19.1

Open the chart page →

6,868
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
kobotoolbox/kpi:2.022.24dbcacc01bccd4
min-document@2.19.0
2.19.1

Open the chart page →

18,517
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
min-document@2.19.0
2.19.1

Open the chart page →

10,730
opensearch-dashboardscaptnbpVerified publisher2.2.11 of 1See more

opensearch-dashboards captnbp 2.2.1

1 of the 1 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
min-document@2.19.0
2.19.1

Open the chart page →

1,843
sendgeek-cookbookVerified publisher1.2.21 of 1See more

send geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
registry.gitlab.com/timvisee/send:v3.4.2047986cf6ef69
min-document@2.19.0
2.19.1

Open the chart page →

1,148
open5gs-webuiopen5gs-webuiVerified publisher2.3.11 of 2See more

open5gs-webui open5gs-webui 2.3.1

1 of the 2 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
gradiant/open5gs-webui:2.7.5fbd10c017541
min-document@2.19.0
2.19.1

Open the chart page →

5,300
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
min-document@2.19.0
2.19.1

Open the chart page →

31,844
testhubteshubVerified publisher0.1.41 of 3See more

testhub teshub 0.1.4

1 of the 3 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
testhubio/testhub-frontend:on-preme86c2db53be8
min-document@2.19.0
2.19.1

Open the chart page →

7,517
open5gsadaptivenetlabVerified publisher1.0.31 of 3See more

open5gs adaptivenetlab 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
min-document@2.19.0
2.19.1

Open the chart page →

25,443
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
min-document@2.19.0
2.19.1

Open the chart page →

5,806
countlychristianhuthVerified publisher5.2.12 of 3See more

countly christianhuth 5.2.1

2 of the 3 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
countly/api:25.05.4f4cc7447c4f5
min-document@2.19.0
2.19.1
countly/frontend:25.05.42acbc11499b6
min-document@2.19.0
2.19.1

Open the chart page →

7,295
quickchartcowboysysopVerified publisher5.0.01 of 1See more

quickchart cowboysysop 5.0.0

1 of the 1 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
ianw/quickchart:v1.7.1dc49dd460c37
min-document@2.19.0
2.19.1

Open the chart page →

5,488
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
min-document@2.19.0
2.19.1

Open the chart page →

13,852
picolorsealenn0.1.01 of 1See more

picolors ealenn 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
ealen/picolors:0.1.03cb01dcbf652
min-document@2.19.0
2.19.1

Open the chart page →

576
testnet-faucetethereum-helm-chartsVerified publisher0.1.31 of 1See more

testnet-faucet ethereum-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
parithoshj/testnet-faucet:9859e0dcdca426fea6d
min-document@2.19.0
2.19.1

Open the chart page →

3,005
bzz-token-serviceethersphereVerified publisher0.2.01 of 1See more

bzz-token-service ethersphere 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
ethersphere/bzz-token-service:latest7624f11a72ad
min-document@2.19.0
2.19.1

Open the chart page →

3,260
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
min-document@2.19.0
2.19.1

Open the chart page →

3,159
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
min-document@2.19.0
2.19.1

Open the chart page →

18,813
dtlinfradao0.0.11 of 1See more

dtl infradao 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
min-document@2.19.0
2.19.1

Open the chart page →

4,944
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
min-document@2.19.0
2.19.1

Open the chart page →

22,589
ohmyformkrzwiatrzyk0.0.11 of 1See more

ohmyform krzwiatrzyk 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
ohmyform/ohmyform:1.0.3afe53f4acdb1
min-document@2.19.0
2.19.1

Open the chart page →

4,230
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.4.05126e2e79a1f
min-document@2.19.0
2.19.1

Open the chart page →

7,929
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
min-document@2.19.0
2.19.1

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
min-document@2.19.0
2.19.1

Open the chart page →

10,603
indexer-toolsnodeifyVerified publisher2.1.11 of 1See more

indexer-tools nodeify 2.1.1

1 of the 1 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
min-document@2.19.0
2.19.1

Open the chart page →

2,919
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
min-document@2.19.0
2.19.1

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
library/arangodb:3.11.81e75d74954a4
min-document@2.19.0
2.19.1

Open the chart page →

6,583
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
samajh/alprfrontend:latest05ef4fddbb75
min-document@2.19.0
2.19.1

Open the chart page →

20,270
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
min-document@2.19.0
2.19.1

Open the chart page →

2,789
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.14.491c8d793746f
min-document@2.19.0
2.19.1

Open the chart page →

5,484
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
min-document@2.19.0
2.19.1

Open the chart page →

5,806
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-57352.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:2.18.00ecd8444add2
min-document@2.19.0
2.19.1

Open the chart page →

9,381

Container images carrying it

34 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
min-document@2.19.0
2.19.1
2
gradiant/open5gs-webui:2.7.5fbd10c017541
min-document@2.19.0
2.19.1
2
library/arangodb:3.11.81e75d74954a4
min-document@2.19.0
2.19.1
2
opensearchproject/opensearch-dashboards:1.0.039695180364b
min-document@2.19.0
2.19.1
2
amazon/opendistro-for-elasticsearch-kibana:1.4.05126e2e79a1f
min-document@2.19.0
2.19.1
1
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
min-document@2.19.0
2.19.1
1
baserow/baserow:1.30.1df0c42eb67e8
min-document@2.19.0
2.19.1
1
countly/api:25.05.4f4cc7447c4f5
min-document@2.19.0
2.19.1
1
countly/countly-server:25.05.4e3c238248f99
min-document@2.19.0
2.19.1
1
countly/frontend:25.05.42acbc11499b6
min-document@2.19.0
2.19.1
1
ealen/picolors:0.1.03cb01dcbf652
min-document@2.19.0
2.19.1
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
min-document@2.19.0
2.19.1
1
ethersphere/bzz-token-service:latest7624f11a72ad
min-document@2.19.0
2.19.1
1
fiware/idm:8.3.3a1b6ed4ae84f
min-document@2.19.0
2.19.1
1
flagsmith/flagsmith-frontend:v2.6.0df02a29e8b0c
min-document@2.19.0
2.19.1
1
ianw/quickchart:v1.7.1dc49dd460c37
min-document@2.19.0
2.19.1
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
min-document@2.19.0
2.19.1
1
ohmyform/ohmyform:1.0.3afe53f4acdb1
min-document@2.19.0
2.19.1
1
opensearchproject/opensearch-dashboards:2.18.00ecd8444add2
min-document@2.19.0
2.19.1
1
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
min-document@2.19.0
2.19.1
1
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
min-document@2.19.0
2.19.1
1
parithoshj/testnet-faucet:9859e0dcdca426fea6d
min-document@2.19.0
2.19.1
1
samajh/alprfrontend:latest05ef4fddbb75
min-document@2.19.0
2.19.1
1
testhubio/testhub-frontend:on-preme86c2db53be8
min-document@2.19.0
2.19.1
1
treskon/portrait-ui:DEV-lateste7970783bc8d
min-document@2.19.0
2.19.1
1
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
min-document@2.19.0
2.19.1
1
wazuh/wazuh-dashboard:4.4.11787550d2358
min-document@2.19.0
2.19.1
1
wazuh/wazuh-dashboard:4.14.491c8d793746f
min-document@2.19.0
2.19.1
1
wazuh/wazuh-dashboard:4.14.391e4f0a7feed
min-document@2.19.0
2.19.1
1
ghcr.io/ajnart/homarr:lateste103abadfb52
min-document@2.19.0
2.19.1
1
ghcr.io/vincenttaglia/indexer-tools:v3.4.45bae30456ddb
min-document@2.19.0
2.19.1
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
min-document@2.19.0
2.19.1
1
registry.gitlab.com/infinitydon/registry/open5gs-webui:v2.2.2fda21b0a0344
min-document@2.19.0
2.19.1
1
registry.gitlab.com/timvisee/send:v3.4.2047986cf6ef69
min-document@2.19.0
2.19.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.