StackRadar

CVE-2025-58050

Critical

Advisory

Published 27 Aug 2025In the index since 6 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
43
of 17,781 indexed, latest versions
Container images
45
deployed by those charts
Fix available
3 of 3
affected packages

Security update for pcre2

Carried by container images the latest versions of 43 of 17,781 indexed charts deploy, on 45 images.

Affected packageAffected versionsFixed inImages
pcre2apk10.42-r1, 10.43-r110.46-r030
pcre2deb10.45-110.45-1ubuntu0.1, 10.46-1~deb13u114
pcre2rpm10.45-160000.2.210.45-160000.3.11
OSV records
ALPINE-CVE-2025-58050DEBIAN-CVE-2025-58050SUSE-SU-2026:21172-1USN-7777-1

Charts affected

43 by stars
ChartLatestAffected imagesRadar Score
excalidrawexcalidrawVerified publisher0.18.01 of 1See more

excalidraw excalidraw 0.18.0

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
pmoscode/excalidraw:v0.18.08ee61554699c
pcre2@10.43-r1
10.46-r0

Open the chart page →

1,109
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8be69156acbb
pcre2@10.45-1
10.46-1~deb13u1

Open the chart page →

5,634
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
platzio/frontend:v0.6.073083749b46a
pcre2@10.43-r1
10.46-r0

Open the chart page →

2,866
pocketbasetechwolf12Verified publisher0.29.31 of 1See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/techwolf12/pocketbase:0.29.3106099641679
pcre2@10.43-r1
10.46-r0

Open the chart page →

1,446
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
pcre2@10.45-1
10.46-1~deb13u1

Open the chart page →

3,804
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
pcre2@10.43-r1
10.46-r0

Open the chart page →

14,917
tikaapache-tika3.2.21 of 1See more

tika apache-tika 3.2.2

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
apache/tika:3.2.2.0-fullffab324253ed
pcre2@10.45-1
10.45-1ubuntu0.1

Open the chart page →

437
backendikusi-bk-chart1.0.32 of 3See more

backend ikusi-bk-chart 1.0.3

2 of the 3 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
pcre2@10.45-1
10.46-1~deb13u1
kyovint/kyoimgusers:1.0.080084149156e
pcre2@10.45-1
10.46-1~deb13u1

Open the chart page →

5,940
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
pcre2@10.45-1
10.46-1~deb13u1

Open the chart page →

15,712
nginx-php-fpmkokuwa0.1.41 of 2See more

nginx-php-fpm kokuwa 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
pcre2@10.43-r1
10.46-r0

Open the chart page →

1,838
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
chibisafe/chibisafe-server:latest3da4fcbc1a18
pcre2@10.43-r1
10.46-r0

Open the chart page →

5,654
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
pcre2@10.43-r1
10.46-r0

Open the chart page →

6,639
rke2-ingress-nginxrke2-charts4.15.1091 of 2See more

rke2-ingress-nginx rke2-charts 4.15.109

1 of the 2 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
rancher/nginx-ingress-controller:v1.14.5-hardened26cbc1e932b5b
pcre2@10.45-160000.2.2
10.45-160000.3.1

Open the chart page →

739
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
pcre2@10.45-1
10.46-1~deb13u1

Open the chart page →

3,929
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
pcre2@10.43-r1
10.46-r0

Open the chart page →

5,213
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
pcre2@10.43-r1
10.46-r0

Open the chart page →

10,323
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
pcre2@10.43-r1
10.46-r0

Open the chart page →

4,880
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
pcre2@10.45-1
10.46-1~deb13u1

Open the chart page →

7,489
ms-basecodedesignplus-chartsVerified publisher0.0.321 of 1See more

ms-base codedesignplus-charts 0.0.32

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
nginxdemos/hello:0.4b28d1e16c676
pcre2@10.43-r1
10.46-r0

Open the chart page →

1,291
cosanetcosanet1.0.01 of 1See more

cosanet cosanet 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
pcre2@10.45-1
10.46-1~deb13u1

Open the chart page →

2,190
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
pcre2@10.45-1
10.46-1~deb13u1

Open the chart page →

5,174
rommernail-romm1.0.11 of 1See more

romm ernail-romm 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
rommapp/romm:4.4.1b909e95d1aab
pcre2@10.43-r1
10.46-r0

Open the chart page →

2,896
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
intelowlproject/intelowl_nginx:v6.6.12f01e79b8064
pcre2@10.43-r1
10.46-r0

Open the chart page →

17,852
beetsk8s-home-lab-repo3.1.11 of 1See more

beets k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
pcre2@10.43-r1
10.46-r0

Open the chart page →

2,733
zileank8s-home-lab-repo1.0.11 of 1See more

zilean k8s-home-lab-repo 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
pcre2@10.42-r1
10.46-r0

Open the chart page →

2,025
kestra-starterkestraOfficialVerified publisher2.0.11 of 5See more

kestra-starter kestra 2.0.1

1 of the 5 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
library/postgres:17.5aadf2c0696f5
pcre2@10.45-1
10.46-1~deb13u1

Open the chart page →

5,455
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
jeboehm/mailserver-web:5.0.929da13edf5aa8
pcre2@10.43-r1
10.46-r0

Open the chart page →

10,897
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
beyzkaya/blog-frontend:v1.0.0bf412d75c510
pcre2@10.43-r1
10.46-r0

Open the chart page →

13,010
agent-controlnewrelic0.0.921 of 1See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
pcre2@10.45-1
10.46-1~deb13u1

Open the chart page →

3,843
ciliumnicklasfrahm-ciliumVerified publisher0.7.41 of 6See more

cilium nicklasfrahm-cilium 0.7.4

1 of the 6 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
quay.io/cilium/hubble-ui:v0.13.3661d5de70501
pcre2@10.43-r1
10.46-r0

Open the chart page →

7,092
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
pcre2@10.43-r1
10.46-r0

Open the chart page →

17,070
opencost-lensopencost-lens1.0.01 of 2See more

opencost-lens opencost-lens 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
pcre2@10.43-r1
10.46-r0

Open the chart page →

1,109
parcial-1parcial-1-chart1.0.01 of 5See more

parcial-1 parcial-1-chart 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
esteban1930/frontend-1:1.8.0f9078279632c
pcre2@10.43-r1
10.46-r0

Open the chart page →

3,844
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
pcre2@10.43-r1
10.46-r0

Open the chart page →

5,338
ed-deploymentscaleway-charts0.1.01 of 1See more

ed-deployment scaleway-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
nginxdemos/hello:plain-text751bf8933179
pcre2@10.43-r1
10.46-r0

Open the chart page →

1,291
return-nginx-chartseture0.1.01 of 1See more

return-nginx-chart seture 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
seyiogunniran/my-nginx:1.03a0ed39e5830
pcre2@10.43-r1
10.46-r0

Open the chart page →

1,291
tabixsinextraVerified publisher0.2.21 of 1See more

tabix sinextra 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/tabix:22.05.17a6e3e996a4ae
pcre2@10.43-r1
10.46-r0

Open the chart page →

1,249
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
ncsa/checks:main0b738bbc8d70
pcre2@10.45-1
10.46-1~deb13u1

Open the chart page →

66,266
todolist-charttodolist-chart0.1.72 of 10See more

todolist-chart todolist-chart 0.1.7

2 of the 10 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
pcre2@10.45-1
10.46-1~deb13u1
erenozcan17/react_frontend:v4.56e1b14973f9b
pcre2@10.43-r1
10.46-r0

Open the chart page →

6,973
togglr-frontendtogglrVerified publisher1.0.01 of 1See more

togglr-frontend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
gdrocha/togglr-frontend:1.0.0ffbc1571c234
pcre2@10.43-r1
10.46-r0

Open the chart page →

1,109
trident-protect-bxp-previewtrident-protect100.2511.0-bxp-preview1 of 3See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

1 of the 3 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v1.0.058b9fac358bd
pcre2@10.43-r1
10.46-r0

Open the chart page →

2,183
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
evoapicloud/evolution-manager:latestcbfeb314afb9
pcre2@10.43-r1
10.46-r0

Open the chart page →

3,746
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-58050.

Container imageDigestPackageFixed in
vcnngr/pnfrontend:latest4e4979ab8c41
pcre2@10.43-r1
10.46-r0

Open the chart page →

4,768

Container images carrying it

45 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
pcre2@10.43-r1
10.46-r0
1
alpine/k8s:1.31.106dbe6f391eda
pcre2@10.43-r1
10.46-r0
1
alpine/k8s:1.31.137a319b15cfc9
pcre2@10.43-r1
10.46-r0
1
apache/tika:3.2.2.0-fullffab324253ed
pcre2@10.45-1
10.45-1ubuntu0.1
1
beyzkaya/blog-frontend:v1.0.0bf412d75c510
pcre2@10.43-r1
10.46-r0
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
pcre2@10.43-r1
10.46-r0
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
pcre2@10.45-1
10.46-1~deb13u1
1
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
pcre2@10.45-1
10.46-1~deb13u1
1
erenozcan17/react_frontend:v4.56e1b14973f9b
pcre2@10.43-r1
10.46-r0
1
esteban1930/frontend-1:1.8.0f9078279632c
pcre2@10.43-r1
10.46-r0
1
evoapicloud/evolution-manager:latestcbfeb314afb9
pcre2@10.43-r1
10.46-r0
1
gdrocha/togglr-frontend:1.0.0ffbc1571c234
pcre2@10.43-r1
10.46-r0
1
intelowlproject/intelowl_nginx:v6.6.12f01e79b8064
pcre2@10.43-r1
10.46-r0
1
ixsystems/truecommand:3.2.019c218455cd2
pcre2@10.45-1
10.46-1~deb13u1
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
pcre2@10.43-r1
10.46-r0
1
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
pcre2@10.45-1
10.46-1~deb13u1
1
kyovint/kyoimgusers:1.0.080084149156e
pcre2@10.45-1
10.46-1~deb13u1
1
library/postgres:17.5aadf2c0696f5
pcre2@10.45-1
10.46-1~deb13u1
1
ncsa/checks:main0b738bbc8d70
pcre2@10.45-1
10.46-1~deb13u1
1
netapp/trident-protect-utils:v1.0.058b9fac358bd
pcre2@10.43-r1
10.46-r0
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
pcre2@10.45-1
10.46-1~deb13u1
1
nginxdemos/hello:plain-text751bf8933179
pcre2@10.43-r1
10.46-r0
1
nginxdemos/hello:0.4b28d1e16c676
pcre2@10.43-r1
10.46-r0
1
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
pcre2@10.43-r1
10.46-r0
1
platzio/frontend:v0.6.073083749b46a
pcre2@10.43-r1
10.46-r0
1
pmoscode/excalidraw:v0.18.08ee61554699c
pcre2@10.43-r1
10.46-r0
1
rancher/nginx-ingress-controller:v1.14.5-hardened26cbc1e932b5b
pcre2@10.45-160000.2.2
10.45-160000.3.1
1
rommapp/romm:4.4.1b909e95d1aab
pcre2@10.43-r1
10.46-r0
1
seyiogunniran/my-nginx:1.03a0ed39e5830
pcre2@10.43-r1
10.46-r0
1
vcnngr/pnfrontend:latest4e4979ab8c41
pcre2@10.43-r1
10.46-r0
1
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
pcre2@10.43-r1
10.46-r0
1
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
pcre2@10.45-1
10.46-1~deb13u1
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
pcre2@10.43-r1
10.46-r0
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
pcre2@10.45-1
10.46-1~deb13u1
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
pcre2@10.43-r1
10.46-r0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
pcre2@10.43-r1
10.46-r0
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
pcre2@10.45-1
10.46-1~deb13u1
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
pcre2@10.45-1
10.46-1~deb13u1
1
ghcr.io/monicahq/monica-next:main8be69156acbb
pcre2@10.45-1
10.46-1~deb13u1
1
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
pcre2@10.43-r1
10.46-r0
1
ghcr.io/sergelogvinov/tabix:22.05.17a6e3e996a4ae
pcre2@10.43-r1
10.46-r0
1
ghcr.io/techwolf12/pocketbase:0.29.3106099641679
pcre2@10.43-r1
10.46-r0
1
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
pcre2@10.42-r1
10.46-r0
1
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
pcre2@10.43-r1
10.46-r0
1
quay.io/cilium/hubble-ui:v0.13.3661d5de70501
pcre2@10.43-r1
10.46-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.