CVE-2025-5915
MediumAdvisory
Published 9 Jun 2025In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.6
- base score, highest
- EPSS
- 0.002
- 9th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 11
- of 17,787 indexed, latest versions
- Container images
- 10
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 11 of 17,787 indexed charts deploy, on 10 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libarchivedeb | 3.6.0-1ubuntu1, 3.6.0-1ubuntu1.4, 3.6.2-1, 3.6.2-1+deb12u1+3 more | 3.6.0-1ubuntu1.5, 3.6.2-1+deb12u3, 3.7.2-2ubuntu0.5 | 10 |
- OSV records
- DEBIAN-CVE-2025-5915UBUNTU-CVE-2025-5915
- Also known as
- USN-7601-1
Charts affected
11 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| paperless-ngxcrystalnetVerified publisher | 0.2.22 | 1 of 3See more | 12,924 |
| iobrokereugen | 0.2.6 | 1 of 1See more | 11,483 |
| asya-playgroundasya | 1.1.3 | 1 of 1See more | 8,555 |
| photoprismdjjudas21Verified publisher | 99.99.99 | 1 of 1See more | 17,053 |
| scanservjsgabe565Verified publisher | 0.9.2 | 1 of 1See more | 13,247 |
| nominatimheywood8-helm-chartsVerified publisher | 3.10.8 | 1 of 3See more | 14,350 |
| paperlesshomelabcihelmchartstestVerified publisher | 9.1.9 | 1 of 1See more | 14,629 |
| opencloudjacobcolvinVerified publisher | 0.2.3 | 1 of 13See more | 45,392 |
| adventureworkskronkltdVerified publisher | 0.1.0 | 1 of 1See more | 4,462 |
| stash-boxswuuper-githubVerified publisher | 0.1.1 | 1 of 2See more | 8,251 |
| opencloudunxwaresVerified publisher | 0.2.3 | 1 of 13See more | 45,392 |
Container images carrying it
10 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| apache/ | ae0b86d3c4d0 | libarchive | 3.7.2-2ubuntu0.5 | 2 |
| chriseaton/ | 54c3384ce701 | libarchive | 3.6.0-1ubuntu1.5 | 1 |
| localstack/ | 9d278167f2b7 | libarchive | 3.6.2-1+deb12u3 | 1 |
| mediagis/ | d0eae7b51374 | libarchive | 3.6.0-1ubuntu1.5 | 1 |
| photoprism/ | fc6fd632ca74 | libarchive | 3.7.2-2ubuntu0.5 | 1 |
| sbs20/ | dad1fd6e9a98 | libarchive | 3.6.2-1+deb12u3 | 1 |
| stashapp/ | a534c8afdf39 | libarchive | 3.7.2-2ubuntu0.5 | 1 |
| ghcr.io/ | ca7dc7362968 | libarchive | 3.6.2-1+deb12u3 | 1 |
| ghcr.io/ | 0642357c5dbd | libarchive | 3.6.2-1+deb12u3 | 1 |
| ghcr.io/ | ab255bea133e | libarchive | 3.6.2-1+deb12u3 | 1 |