StackRadar

CVE-2025-59250

High

Advisory

Published 14 Oct 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
67
of 17,781 indexed, latest versions
Container images
64
deployed by those charts
Fix available
1 of 1
affected package

JDBC Driver for SQL Server has improper input validation issue

Carried by container images the latest versions of 67 of 17,781 indexed charts deploy, on 64 images.

Affected packageAffected versionsFixed inImages
mssql-jdbcmaven9.2.0, 9.2.1, 9.4.1, 10.2.0+11 more10.2.4.jre11, 11.2.4.jre11, 12.6.5.jre11, 12.8.2.jre11+2 more64
OSV records
GHSA-m494-w24q-6f7w

Charts affected

67 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
mssql-jdbc@11.2.3
11.2.4.jre11

Open the chart page →

6,556
metabasepmint932.27.61 of 1See more

metabase pmint93 2.27.6

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

1,639
keycloakxcodecentricVerified publisher7.3.11 of 1See more

keycloakx codecentric 7.3.1

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.7.3ff4257d0d64e
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

80
jiraatlassian-data-centerVerified publisher2.0.151 of 2See more

jira atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
atlassian/jira-software:11.3.11e5548cd4eea8
mssql-jdbc@9.2.1
10.2.4.jre11

Open the chart page →

1,490
keycloakcloudpirates-keycloakVerified publisher0.21.371 of 3See more

keycloak cloudpirates-keycloak 0.21.37

1 of the 3 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.7.3ff4257d0d64e
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

4,382
guacamoleberyju-org1.4.21 of 3See more

guacamole beryju-org 1.4.2

1 of the 3 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
mssql-jdbc@9.4.1
10.2.4.jre11

Open the chart page →

3,606
dependency-trackevryfs-ossVerified publisher1.5.51 of 3See more

dependency-track evryfs-oss 1.5.5

1 of the 3 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
mssql-jdbc@11.2.1
11.2.4.jre11

Open the chart page →

2,503
bitbucketatlassian-data-centerVerified publisher2.0.151 of 1See more

bitbucket atlassian-data-center 2.0.15

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
atlassian/bitbucket:10.2.705933f2b1cfd
mssql-jdbc@12.8.2
12.8.2.jre11

Open the chart page →

1,444
apim3graviteeioVerified publisher4.12.192 of 4See more

apim3 graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
mssql-jdbc@12.10.2
12.10.2.jre11
graviteeio/apim-management-api:4.12.19-debian27374522cd04
mssql-jdbc@12.10.2
12.10.2.jre11

Open the chart page →

4,806
keycloakkubelauncherVerified publisher0.4.41 of 1See more

keycloak kubelauncher 0.4.4

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
ghcr.io/kubelauncher/keycloakdigest-pinnedafe3bd73d7cf
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

1,251
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
mssql-jdbc@9.2.0
10.2.4.jre11

Open the chart page →

4,099
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
mssql-jdbc@10.2.1
10.2.4.jre11

Open the chart page →

2,572
guacamoledmunozv04Verified publisher0.3.41 of 2See more

guacamole dmunozv04 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
mssql-jdbc@9.4.1
10.2.4.jre11

Open the chart page →

3,606
crowdatlassian-data-centerVerified publisher2.0.151 of 2See more

crowd atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
atlassian/crowd:7.2.3c81cc7d6bc9e
mssql-jdbc@12.8.2
12.8.2.jre11

Open the chart page →

1,415
keycloakhelmforgeVerified publisher3.0.121 of 1See more

keycloak helmforge 3.0.12

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.7.3ff4257d0d64e
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

80
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
mssql-jdbc@9.2.1
10.2.4.jre11

Open the chart page →

8,636
bambooatlassian-data-centerVerified publisher2.0.151 of 2See more

bamboo atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
atlassian/bamboo:12.1.114af4bb6c8d46
mssql-jdbc@12.10.2
12.10.2.jre11

Open the chart page →

2,031
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
mssql-jdbc@10.2.0
10.2.4.jre11
apache/hertzbeat-collector:1.8.0a2bab1be574c
mssql-jdbc@10.2.0
10.2.4.jre11

Open the chart page →

14,000
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
mssql-jdbc@9.2.0
10.2.4.jre11
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
mssql-jdbc@9.2.0
10.2.4.jre11

Open the chart page →

8,698
geoservercloudcamptocamp23.0.16 of 7See more

geoservercloud camptocamp2 3.0.1

6 of the 7 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
mssql-jdbc@13.2.1
13.2.1.jre11
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
mssql-jdbc@13.2.1
13.2.1.jre11
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
mssql-jdbc@13.2.1
13.2.1.jre11
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
mssql-jdbc@13.2.1
13.2.1.jre11
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
mssql-jdbc@13.2.1
13.2.1.jre11
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

10,546
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

28,839
apimgraviteeioVerified publisher4.12.192 of 4See more

apim graviteeio 4.12.19

2 of the 4 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
graviteeio/apim-gateway:4.12.19-debian05fd67a93056
mssql-jdbc@12.10.2
12.10.2.jre11
graviteeio/apim-management-api:4.12.19-debian27374522cd04
mssql-jdbc@12.10.2
12.10.2.jre11

Open the chart page →

4,806
metabaseone-acre-fundVerified publisher0.1.111 of 3See more

metabase one-acre-fund 0.1.11

1 of the 3 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
metabase/metabase:latest4093784be49f
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

26
guacamolehelmforgeVerified publisher1.5.21 of 5See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
mssql-jdbc@9.4.1
10.2.4.jre11

Open the chart page →

8,716
keycloakkeycloak1.13.51 of 2See more

keycloak keycloak 1.13.5

1 of the 2 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
registry.gitlab.com/lenitech/docker/keycloak:26.7.3-0297e9df1489d
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

328
keycloakkitstream-keycloak26.7.21 of 1See more

keycloak kitstream-keycloak 26.7.2

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.7.29d1f1b2b7261
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

80
mcpmcp-chartsVerified publisher0.0.231 of 7See more

mcp mcp-charts 0.0.23

1 of the 7 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
ghcr.io/maritimeconnectivity/mcpkeycloakspi:latestaf635391ab61
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

6,929
metabasemetabase-helmVerified publisher2.7.11 of 1See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
metabase/metabase:v0.46.09ebdc664a6b2
mssql-jdbc@10.2.1
10.2.4.jre11

Open the chart page →

2,221
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
mssql-jdbc@9.2.1
10.2.4.jre11

Open the chart page →

3,958
stardogstardog3.1.01 of 3See more

stardog stardog 3.1.0

1 of the 3 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
stardog/stardog:latest2714e5c4b3c1
mssql-jdbc@12.10.2
12.10.2.jre11

Open the chart page →

293
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
mssql-jdbc@10.2.2
10.2.4.jre11

Open the chart page →

13,486
migrationadeptia-automate-migration5.2.91 of 1See more

migration adeptia-automate-migration 5.2.9

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
adeptiainc/adeptia-connect-migration:5.2.98607f4f29732
mssql-jdbc@12.10.2
12.10.2.jre11

Open the chart page →

395
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
mssql-jdbc@12.8.1
12.8.2.jre11

Open the chart page →

40,238
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
mssql-jdbc@10.2.1
10.2.4.jre11

Open the chart page →

13,352
keycloakbysamioVerified publisher1.4.01 of 2See more

keycloak bysamio 1.4.0

1 of the 2 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
ghcr.io/bysamio/keycloak:26.7.37a23a61545fb
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

42
metabasecasemark2.16.111 of 1See more

metabase casemark 2.16.11

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
cmosborn/metabase-arm64:0.50.286ec0a8878ad2
mssql-jdbc@12.6.1
12.6.5.jre11

Open the chart page →

1,215
dependency-trackcnieg3.0.81 of 2See more

dependency-track cnieg 3.0.8

1 of the 2 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
mssql-jdbc@11.2.1
11.2.4.jre11

Open the chart page →

2,503
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.49409c59bdfb6
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

13,936
metabasedasmeta0.1.01 of 1See more

metabase dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
metabase/metabase:v0.63.1.124f150effd484
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

804
datagrokdatagrok1.0.31 of 7See more

datagrok datagrok 1.0.3

1 of the 7 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
datagrok/grok_connect:latestf5876d3aebb8
mssql-jdbc@12.10.2
12.10.2.jre11

Open the chart page →

2,328
datagrok_grok_connectdatagrok1.0.01 of 1See more

datagrok_grok_connect datagrok 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
datagrok/grok_connect:latestf5876d3aebb8
mssql-jdbc@12.10.2
12.10.2.jre11

Open the chart page →

1,626
dial-admindialVerified publisher0.18.01 of 3See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
epam/ai-dial-admin-backend:0.20.00ac5be78d7c2
mssql-jdbc@12.10.2
12.10.2.jre11

Open the chart page →

4,046
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.6.39b0330756022
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

4,586
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
mssql-jdbc@10.2.0
10.2.4.jre11

Open the chart page →

9,334
metabasehelm-charts-nr0.14.41 of 1See more

metabase helm-charts-nr 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
mssql-jdbc@10.2.1
10.2.4.jre11

Open the chart page →

2,572
metabasehelmforgeVerified publisher1.2.281 of 3See more

metabase helmforge 1.2.28

1 of the 3 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
metabase/metabase:v0.63.16c6dd0c6a7861
mssql-jdbc@13.2.1
13.2.1.jre11

Open the chart page →

1,793
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
mssql-jdbc@12.8.1
12.8.2.jre11

Open the chart page →

45,239
sonarqubekubesphereVerified publisher6.7.01 of 3See more

sonarqube kubesphere 6.7.0

1 of the 3 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
library/sonarqube:8.9-communityeb2f0be32efd
mssql-jdbc@9.2.0
10.2.4.jre11

Open the chart page →

2,273
kafka-connect-wrapperlsmhun0.1.01 of 1See more

kafka-connect-wrapper lsmhun 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
lsmaster/kafka-connect-wrapper:6.1.0-0.1061eb5fbfa00
mssql-jdbc@9.2.1
10.2.4.jre11

Open the chart page →

2,391
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-59250.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
mssql-jdbc@12.8.1
12.8.2.jre11

Open the chart page →

2,589

Container images carrying it

64 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/maritimeconnectivity/mcpkeycloakspi:latestaf635391ab61
mssql-jdbc@13.2.1
13.2.1.jre11
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
mssql-jdbc@10.2.2
10.2.4.jre11
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
mssql-jdbc@13.2.1
13.2.1.jre11
1
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
mssql-jdbc@13.2.1
13.2.1.jre11
1
quay.io/keycloak/keycloak:26.009a381c715ab
mssql-jdbc@12.8.1
12.8.2.jre11
1
quay.io/keycloak/keycloak:26.60aae0de7fca8
mssql-jdbc@13.2.1
13.2.1.jre11
1
quay.io/keycloak/keycloak:26.0.74388e2379b7e
mssql-jdbc@12.8.1
12.8.2.jre11
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
mssql-jdbc@12.8.1
12.8.2.jre11
1
quay.io/keycloak/keycloak:26.5.68d44614c7479
mssql-jdbc@13.2.1
13.2.1.jre11
1
quay.io/keycloak/keycloak:26.49409c59bdfb6
mssql-jdbc@13.2.1
13.2.1.jre11
1
quay.io/keycloak/keycloak:26.6.39b0330756022
mssql-jdbc@13.2.1
13.2.1.jre11
1
quay.io/keycloak/keycloak:26.7.29d1f1b2b7261
mssql-jdbc@13.2.1
13.2.1.jre11
1
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
mssql-jdbc@12.8.1
12.8.2.jre11
1
registry.gitlab.com/lenitech/docker/keycloak:26.7.3-0297e9df1489d
mssql-jdbc@13.2.1
13.2.1.jre11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.