StackRadar

CVE-2025-58160

Low

Advisory

Published 29 Aug 2025In the index since 8 Sept 2026
Severity
Low
worst across findings
CVSS
2.3
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
7
of 17,781 indexed, latest versions
Container images
16
deployed by those charts
Fix available
2 of 2
affected packages

Tracing logging user input may result in poisoning logs with ANSI escape sequences

Carried by container images the latest versions of 7 of 17,781 indexed charts deploy, on 16 images.

Affected packageAffected versionsFixed inImages
tracing-subscribercargo0.3.18, 0.3.190.3.2015
uvapk0.2.13-r0, 0.8.11-r00.8.14-r12
OSV records
CGA-29mr-ggcr-hwcgGHSA-xwfj-jgwm-7wp5
Also known as
CGA-w7pr-gpx3-4c7q, RUSTSEC-2025-0055

Charts affected

7 by stars
ChartLatestAffected imagesRadar Score
openebsopenebsOfficialVerified publisher4.6.111 of 35See more

openebs openebs 4.6.1

11 of the 35 container images this version deploys carry CVE-2025-58160.

Container imageDigestPackageFixed in
openebs/mayastor-agent-core:v2.12.16c4d5a9b445b
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-agent-ha-cluster:v2.12.1e00ff76f8fc5
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-agent-ha-node:v2.12.1547f60e1667f
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-api-rest:v2.12.12579357ed812
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-csi-controller:v2.12.197b21a6229f1
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-csi-node:v2.12.1483219d1bdc6
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-eventing-aggregator:v2.12.1e7cb929c2c1d
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-metrics-exporter-io-engine:v2.12.1ff563da470cd
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-obs-callhome:v2.12.1b9e01affcd07
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-obs-callhome-stats:v2.12.11ee2f440bea7
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-operator-diskpool:v2.12.119739f0ed727
tracing-subscriber@0.3.18
0.3.20

Open the chart page →

23,894
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2025-58160.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
uv@0.2.13-r0
0.8.14-r1

Open the chart page →

17,245
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-58160.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
tracing-subscriber@0.3.19
uv@0.8.11-r0
0.3.20
0.8.14-r1

Open the chart page →

4,292
n3uronn3uronVerified publisher0.3.51 of 1See more

n3uron n3uron 0.3.5

1 of the 1 container images this version deploys carry CVE-2025-58160.

Container imageDigestPackageFixed in
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
tracing-subscriber@0.3.19
0.3.20

Open the chart page →

1,879
nostr-rs-relayk8s-chartsVerified publisher1.0.11 of 1See more

nostr-rs-relay k8s-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-58160.

Container imageDigestPackageFixed in
scsibug/nostr-rs-relay:0.9.003f54bfbffff
tracing-subscriber@0.3.18
0.3.20

Open the chart page →

3,354
mayastormayastorVerified publisher2.12.111 of 31See more

mayastor mayastor 2.12.1

11 of the 31 container images this version deploys carry CVE-2025-58160.

Container imageDigestPackageFixed in
openebs/mayastor-agent-core:v2.12.16c4d5a9b445b
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-agent-ha-cluster:v2.12.1e00ff76f8fc5
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-agent-ha-node:v2.12.1547f60e1667f
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-api-rest:v2.12.12579357ed812
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-csi-controller:v2.12.197b21a6229f1
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-csi-node:v2.12.1483219d1bdc6
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-eventing-aggregator:v2.12.1e7cb929c2c1d
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-metrics-exporter-io-engine:v2.12.1ff563da470cd
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-obs-callhome:v2.12.1b9e01affcd07
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-obs-callhome-stats:v2.12.11ee2f440bea7
tracing-subscriber@0.3.18
0.3.20
openebs/mayastor-operator-diskpool:v2.12.119739f0ed727
tracing-subscriber@0.3.18
0.3.20

Open the chart page →

21,064
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2025-58160.

Container imageDigestPackageFixed in
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
tracing-subscriber@0.3.19
0.3.20

Open the chart page →

9,256

Container images carrying it

16 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
openebs/mayastor-agent-core:v2.12.16c4d5a9b445b
tracing-subscriber@0.3.18
0.3.20
2
openebs/mayastor-agent-ha-cluster:v2.12.1e00ff76f8fc5
tracing-subscriber@0.3.18
0.3.20
2
openebs/mayastor-agent-ha-node:v2.12.1547f60e1667f
tracing-subscriber@0.3.18
0.3.20
2
openebs/mayastor-api-rest:v2.12.12579357ed812
tracing-subscriber@0.3.18
0.3.20
2
openebs/mayastor-csi-controller:v2.12.197b21a6229f1
tracing-subscriber@0.3.18
0.3.20
2
openebs/mayastor-csi-node:v2.12.1483219d1bdc6
tracing-subscriber@0.3.18
0.3.20
2
openebs/mayastor-eventing-aggregator:v2.12.1e7cb929c2c1d
tracing-subscriber@0.3.18
0.3.20
2
openebs/mayastor-metrics-exporter-io-engine:v2.12.1ff563da470cd
tracing-subscriber@0.3.18
0.3.20
2
openebs/mayastor-obs-callhome:v2.12.1b9e01affcd07
tracing-subscriber@0.3.18
0.3.20
2
openebs/mayastor-obs-callhome-stats:v2.12.11ee2f440bea7
tracing-subscriber@0.3.18
0.3.20
2
openebs/mayastor-operator-diskpool:v2.12.119739f0ed727
tracing-subscriber@0.3.18
0.3.20
2
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
tracing-subscriber@0.3.19
0.3.20
1
openmined/syft-backend:0.9.5b72f74a68b32
uv@0.2.13-r0
0.8.14-r1
1
scsibug/nostr-rs-relay:0.9.003f54bfbffff
tracing-subscriber@0.3.18
0.3.20
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
tracing-subscriber@0.3.19
uv@0.8.11-r0
0.3.20
0.8.14-r1
1
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
tracing-subscriber@0.3.19
0.3.20
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.