StackRadar

CVE-2025-59343

High

Advisory

Published 24 Sept 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.006
44th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
125
of 17,781 indexed, latest versions
Container images
122
deployed by those charts
Fix available
1 of 1
affected package

tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball

Carried by container images the latest versions of 125 of 17,781 indexed charts deploy, on 122 images.

Affected packageAffected versionsFixed inImages
tar-fsnpm0.5.2, 1.12.0, 1.15.3, 1.16.2+12 more1.16.6, 2.1.4, 3.1.1122
OSV records
GHSA-vj76-c3g6-qr5v

Charts affected

125 by stars
ChartLatestAffected imagesRadar Score
redisinsightredisinsight-helmVerified publisher0.1.11 of 1See more

redisinsight redisinsight-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
redis/redisinsight:2.46699d341bd329
tar-fs@2.1.1
2.1.4

Open the chart page →

1,884
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
tar-fs@2.1.3
2.1.4

Open the chart page →

5,338
audiobookshelfrubxkubeVerified publisher0.1.31 of 1See more

audiobookshelf rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
tar-fs@2.1.2
2.1.4

Open the chart page →

1,722
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
tar-fs@2.1.1
2.1.4

Open the chart page →

5,582
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
tar-fs@3.0.6
3.1.1

Open the chart page →

5,950
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e12 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

2 of the 5 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
tar-fs@2.1.1
2.1.4
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
tar-fs@2.1.1
2.1.4

Open the chart page →

16,368
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

2 of the 5 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
tar-fs@2.1.1
2.1.4
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
tar-fs@3.0.4
3.1.1

Open the chart page →

16,400
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f82 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

2 of the 5 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
tar-fs@3.0.4
3.1.1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
tar-fs@3.0.4
3.1.1

Open the chart page →

14,679
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091142 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

2 of the 5 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
tar-fs@3.0.4
3.1.1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
tar-fs@3.0.4
3.1.1

Open the chart page →

16,400
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4692 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

2 of the 5 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
tar-fs@2.1.1
2.1.4
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
tar-fs@3.0.4
3.1.1

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3412 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

2 of the 5 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
tar-fs@2.1.1
2.1.4
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
tar-fs@3.0.4
3.1.1

Open the chart page →

14,221
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b22 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

2 of the 5 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
tar-fs@3.0.4
3.1.1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
tar-fs@2.1.1
2.1.4

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef2 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

2 of the 5 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
tar-fs@3.0.4
3.1.1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
tar-fs@3.0.4
3.1.1

Open the chart page →

15,635
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
tar-fs@3.0.6
3.1.1

Open the chart page →

11,100
retail-store-sample-checkout-chartstacksimplifyVerified publisher1.0.01 of 1See more

retail-store-sample-checkout-chart stacksimplify 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
public.ecr.aws/aws-containers/retail-store-sample-checkout:1.3.0687aa68dd490
tar-fs@2.1.3
2.1.4

Open the chart page →

1,313
lodestar-validatorstakewise1.2.01 of 1See more

lodestar-validator stakewise 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
chainsafe/lodestar:v1.27.07b9fe4aa8073
tar-fs@3.0.6
3.1.1

Open the chart page →

4,052
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
tar-fs@1.16.2
1.16.6

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
tar-fs@1.16.2
1.16.6

Open the chart page →

12,460
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
tar-fs@2.1.1
2.1.4

Open the chart page →

39,090
redis-vector-dbtest-opea1.0.01 of 1See more

redis-vector-db test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
redis/redis-stack:7.2.0-v91c5f43fddcdd
tar-fs@2.1.1
2.1.4

Open the chart page →

5,604
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
tar-fs@2.1.2
2.1.4

Open the chart page →

5,228
homarrvhdirkVerified publisher0.1.51 of 1See more

homarr vhdirk 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
ghcr.io/ajnart/homarr:lateste103abadfb52
tar-fs@2.0.1
2.1.4

Open the chart page →

2,789
sirenwateim1.0.21 of 1See more

siren wateim 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
sigp/siren:v3.0.42c219b04758e
tar-fs@2.1.3
2.1.4

Open the chart page →

5,984
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
tar-fs@2.1.1
2.1.4

Open the chart page →

5,459
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-59343.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
tar-fs@3.0.8
3.1.1

Open the chart page →

6,285

Container images carrying it

122 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
tar-fs@2.1.2
2.1.4
4
assistiot/dlt_api:2.0.0e36a8922fa0c
tar-fs@2.1.1
2.1.4
3
pantsel/konga:latestc8172b75607d
tar-fs@1.15.3
1.16.6
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
tar-fs@2.1.1
2.1.4
3
governify/assets-manager:v1.4.12987672448c7
tar-fs@2.1.1
2.1.4
2
koenkk/zigbee2mqtt:1.19.15f9129b1ffbc
tar-fs@2.1.1
2.1.4
2
l7mp/kurento-one2one-call-server:latestfd2b2d06fff6
tar-fs@1.16.2
1.16.6
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
tar-fs@2.0.1
2.1.4
2
rajnandan1/kener:3.2.1930407afca731
tar-fs@2.1.2
2.1.4
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
tar-fs@2.1.1
2.1.4
2
requarks/wiki:2:latest68f0d1848261
tar-fs@2.1.1
2.1.4
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
tar-fs@2.1.1
2.1.4
2
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
tar-fs@2.1.2
2.1.4
2
activepieces/activepieces:0.23.0c26188b44e62
tar-fs@2.1.1
2.1.4
1
actualbudget/actual-server:25.3.158fecd9088b7
tar-fs@2.1.1
2.1.4
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
tar-fs@3.0.5
3.1.1
1
alazidis/stornx:1.1.1602d4f7f090c
tar-fs@3.0.8
3.1.1
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
tar-fs@2.1.1
2.1.4
1
assistiot/dlt_api:2.1.0c8a170683be7
tar-fs@2.1.1
2.1.4
1
automatischio/automatisch:0.15.03bace7a12d5f
tar-fs@2.1.1
2.1.4
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
tar-fs@2.1.1
2.1.4
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
tar-fs@2.1.1
2.1.4
1
chainsafe/lodestar:v1.27.07b9fe4aa8073
tar-fs@3.0.6
3.1.1
1
coderaiser/cloudcmd:16.6.1b34a9775c7ce
tar-fs@2.1.1
2.1.4
1
codercom/code-server:4.11.0-debian1e2cc688008e
tar-fs@2.1.1
2.1.4
1
codercom/code-server:3.10.247605610ad8d
tar-fs@2.1.1
2.1.4
1
codetogether/codetogether:latest4348c8a38752
tar-fs@1.16.3
1.16.6
1
contane/foreman:0.5.2efb98bdcc4e9
tar-fs@3.0.8
3.1.1
1
countly/api:25.05.4f4cc7447c4f5
tar-fs@2.1.1
2.1.4
1
countly/countly-server:25.05.4e3c238248f99
tar-fs@2.1.1
2.1.4
1
countly/frontend:25.05.42acbc11499b6
tar-fs@2.1.1
2.1.4
1
dacinfomotion/h2p:latest68fa393b472c
tar-fs@3.0.4
3.1.1
1
directus/directus:11.1.0e3c8bb975350
tar-fs@2.1.1
2.1.4
1
enketo/enketo-express:3.0.4dcad9c2273f6
tar-fs@2.0.0
2.1.4
1
ethereumoptimism/data-transport-layer:0.5.56e07968a0e686
tar-fs@2.1.1
2.1.4
1
fallenbagel/jellyseerr:latest4538137bc5af
tar-fs@2.1.2
2.1.4
1
getferdi/ferdi-server:1.3.26e620b85afaa
tar-fs@1.16.3
1.16.6
1
heywood8/redisinsight:2.28.00bc9ab313d37
tar-fs@2.1.1
2.1.4
1
ianw/quickchart:v1.7.1dc49dd460c37
tar-fs@2.1.1
2.1.4
1
ibmcom/microclimate-file-watcher:latestab3fd1fdfa18
tar-fs@1.12.0
1.16.6
1
ibmcom/microclimate-portal:latested5505e5c7ec
tar-fs@1.12.0
1.16.6
1
jakowenko/double-take:1.6.0b858bac9e32a
tar-fs@2.1.1
2.1.4
1
konradkleine/docker-registry-frontend:v2181aad54ee64
tar-fs@0.5.2
1.16.6
1
library/ghost:4.37.0767230c0f263
tar-fs@2.1.1
2.1.4
1
library/ghost:5.79.083f7bf209844
tar-fs@3.0.4
3.1.1
1
library/kibana:7.17.150172f1c538e7
tar-fs@3.0.4
3.1.1
1
library/kibana:8.18.004c0fc150f3a
tar-fs@3.0.8
3.1.1
1
library/kibana:7.17.8c5781ba340ef
tar-fs@2.1.1
2.1.4
1
library/kibana:7.17.3e2e2031c15be
tar-fs@2.0.0
2.1.4
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
tar-fs@2.1.1
2.1.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.