StackRadar

CVE-2025-58068

Critical

Advisory

Published 29 Aug 2025In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
27
of 17,781 indexed, latest versions
Container images
36
deployed by those charts
Fix available
2 of 2
affected packages

Eventlet affected by HTTP request smuggling in unparsed trailers

Carried by container images the latest versions of 27 of 17,781 indexed charts deploy, on 36 images.

Affected packageAffected versionsFixed inImages
python-eventletdeb0.25.1-2ubuntu1.1, 0.30.2-5ubuntu20.25.1-2ubuntu1.1+esm2, 0.30.2-5ubuntu2.26
eventletpypi0.20.0, 0.24.1, 0.25.0, 0.25.1+9 more0.40.336
OSV records
UBUNTU-CVE-2025-58068GHSA-hw6f-rjfj-j7j7
Also known as
PYSEC-2026-1350, USN-7772-1

Charts affected

27 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
eventlet@0.35.2
0.40.3

Open the chart page →

11,367
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
python-eventlet@0.25.1-2ubuntu1.1
eventlet@0.25.1
0.25.1-2ubuntu1.1+esm2
0.40.3

Open the chart page →

32,259
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
python-eventlet@0.30.2-5ubuntu2
eventlet@0.30.2
0.30.2-5ubuntu2.2
0.40.3

Open the chart page →

10,670
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
eventlet@0.33.3
0.40.3
stackstorm/st2api:3.86f56d239d280
eventlet@0.33.3
0.40.3
stackstorm/st2auth:3.833ecfda16608
eventlet@0.33.3
0.40.3
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
eventlet@0.33.3
0.40.3
stackstorm/st2notifier:3.8f190a6212195
eventlet@0.33.3
0.40.3
stackstorm/st2rulesengine:3.8259503496ff9
eventlet@0.33.3
0.40.3
stackstorm/st2scheduler:3.8b1de2055c362
eventlet@0.33.3
0.40.3
stackstorm/st2sensorcontainer:3.8b1a338f64773
eventlet@0.33.3
0.40.3
stackstorm/st2stream:3.81c8904a3bf67
eventlet@0.33.3
0.40.3
stackstorm/st2timersengine:3.81bf35bfaf00c
eventlet@0.33.3
0.40.3
stackstorm/st2workflowengine:3.819fdfffdbba8
eventlet@0.33.3
0.40.3

Open the chart page →

96,419
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
eventlet@0.25.2
0.40.3

Open the chart page →

30,326
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
eventlet@0.33.3
0.40.3

Open the chart page →

14,546
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
eventlet@0.37.0
0.40.3

Open the chart page →

9,205
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
eventlet@0.30.2
0.40.3

Open the chart page →

11,764
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
eventlet@0.33.0
0.40.3

Open the chart page →

2,418
swdpgadminarunalakmalVerified publisher0.1.01 of 1See more

swdpgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
eventlet@0.33.0
0.40.3

Open the chart page →

2,418
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
eventlet@0.30.2
0.40.3
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
eventlet@0.30.2
0.40.3

Open the chart page →

22,568
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
eventlet@0.33.0
0.40.3

Open the chart page →

10,061
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
eventlet@0.31.0
0.40.3

Open the chart page →

22,891
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
eventlet@0.20.0
0.40.3

Open the chart page →

16,860
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
eventlet@0.25.1
0.40.3

Open the chart page →

27,728
infrafibonacci-cluster-infraVerified publisher1.0.01 of 4See more

infra fibonacci-cluster-infra 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.418cd5711fc9a
eventlet@0.34.2
0.40.3

Open the chart page →

12,454
changedetection-iogeek-cookbookVerified publisher1.5.21 of 1See more

changedetection-io geek-cookbook 1.5.2

1 of the 1 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
eventlet@0.33.0
0.40.3

Open the chart page →

1,950
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
eventlet@0.30.2
0.40.3

Open the chart page →

16,417
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
python-eventlet@0.25.1-2ubuntu1.1
eventlet@0.25.1
0.25.1-2ubuntu1.1+esm2
0.40.3

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
python-eventlet@0.25.1-2ubuntu1.1
eventlet@0.25.1
0.25.1-2ubuntu1.1+esm2
0.40.3

Open the chart page →

15,675
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
eventlet@0.25.0
0.40.3

Open the chart page →

4,911
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
python-eventlet@0.30.2-5ubuntu2
eventlet@0.30.2
0.30.2-5ubuntu2.2
0.40.3

Open the chart page →

9,005
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
eventlet@0.24.1
0.40.3
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
eventlet@0.24.1
0.40.3

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
eventlet@0.24.1
0.40.3

Open the chart page →

26,211
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
eventlet@0.37.0
0.40.3

Open the chart page →

21,211
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
eventlet@0.34.3
0.40.3

Open the chart page →

10,209
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-58068.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
python-eventlet@0.30.2-5ubuntu2
eventlet@0.30.2
0.30.2-5ubuntu2.2
0.40.3

Open the chart page →

13,459

Container images carrying it

36 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:6.12781369df9994
eventlet@0.33.0
0.40.3
3
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
eventlet@0.24.1
0.40.3
2
apache/airflow:2.8.4-python3.964e58748b6b9
eventlet@0.35.2
0.40.3
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
eventlet@0.37.0
0.40.3
1
apache/airflow:2.8.1e5560ad0b86e
eventlet@0.34.3
0.40.3
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
python-eventlet@0.30.2-5ubuntu2
eventlet@0.30.2
0.30.2-5ubuntu2.2
0.40.3
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
python-eventlet@0.25.1-2ubuntu1.1
eventlet@0.25.1
0.25.1-2ubuntu1.1+esm2
0.40.3
1
apachepulsar/pulsar:2.6.14db6ff0b4045
eventlet@0.20.0
0.40.3
1
apachepulsar/pulsar:3.0.79c9947de139d
python-eventlet@0.30.2-5ubuntu2
eventlet@0.30.2
0.30.2-5ubuntu2.2
0.40.3
1
apachepulsar/pulsar:2.9.0d056c89b7131
python-eventlet@0.25.1-2ubuntu1.1
eventlet@0.25.1
0.25.1-2ubuntu1.1+esm2
0.40.3
1
apachepulsar/pulsar:2.8.2d538416d5afe
python-eventlet@0.25.1-2ubuntu1.1
eventlet@0.25.1
0.25.1-2ubuntu1.1+esm2
0.40.3
1
devopstales/kubedash:3.1.08bb837da5aec
eventlet@0.37.0
0.40.3
1
dpage/pgadmin4:8.418cd5711fc9a
eventlet@0.34.2
0.40.3
1
dpage/pgadmin4:7.537946e4f3e7b
eventlet@0.33.3
0.40.3
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
eventlet@0.25.0
0.40.3
1
gethue/hue:4.11.011b649636e68
eventlet@0.30.2
0.40.3
1
gethue/hue:4.10.05702b2c37ff9
eventlet@0.31.0
0.40.3
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
eventlet@0.25.2
0.40.3
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
eventlet@0.24.1
0.40.3
1
opendatacube/wms:latest1b90cdf68831
eventlet@0.25.1
0.40.3
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
eventlet@0.30.2
0.40.3
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
eventlet@0.30.2
0.40.3
1
stackstorm/st2actionrunner:3.888235ba70cad
eventlet@0.33.3
0.40.3
1
stackstorm/st2api:3.86f56d239d280
eventlet@0.33.3
0.40.3
1
stackstorm/st2auth:3.833ecfda16608
eventlet@0.33.3
0.40.3
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
eventlet@0.33.3
0.40.3
1
stackstorm/st2notifier:3.8f190a6212195
eventlet@0.33.3
0.40.3
1
stackstorm/st2rulesengine:3.8259503496ff9
eventlet@0.33.3
0.40.3
1
stackstorm/st2scheduler:3.8b1de2055c362
eventlet@0.33.3
0.40.3
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
eventlet@0.33.3
0.40.3
1
stackstorm/st2stream:3.81c8904a3bf67
eventlet@0.33.3
0.40.3
1
stackstorm/st2timersengine:3.81bf35bfaf00c
eventlet@0.33.3
0.40.3
1
stackstorm/st2workflowengine:3.819fdfffdbba8
eventlet@0.33.3
0.40.3
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
python-eventlet@0.30.2-5ubuntu2
eventlet@0.30.2
0.30.2-5ubuntu2.2
0.40.3
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
eventlet@0.30.2
0.40.3
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
eventlet@0.33.0
0.40.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.