CVE-2025-59731

Medium

Advisory

Published 6 Oct 2025In the index since 6 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.9; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 22; of 17,781 indexed, latest versions
Container images: 22; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 22 of 17,781 indexed charts deploy, on 22 images.

Affected package	Affected versions	Fixed in	Images
ffmpegdeb	7:4.4.2-0ubuntu0.22.04.1, 7:5.1.4-0+deb12u1, 7:5.1.6-0+deb12u1, 7:6.1.1-3ubuntu5+1 more	7:4.4.2-0ubuntu0.22.04.1+esm11, 7:5.1.7-0+deb12u1, 7:6.1.1-3ubuntu5+esm7, 7:7.1.1-1ubuntu4.2	22

OSV records: DEBIAN-CVE-2025-59731 UBUNTU-CVE-2025-59731
Also known as: USN-7982-1

Charts affected

22 by stars

Chart

Latest

Affected images

Radar Score

difydouban

0.10.0

1 of 6 See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7

Open the chart page →

19,391

difydify-helm

0.38.0

1 of 11 See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
langgenius/dify-plugin-daemon :0.6.3-local	3c694329357b	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7

Open the chart page →

22,002

selenium-gridselenium-grid

0.59.1

2 of 4 See more

selenium-grid selenium-grid 0.59.1

2 of the 4 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
selenium/node-chrome :4.48.0-20260905	5ac71fd8dd1e	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7
selenium/node-firefox :4.48.0-20260905	74a5c1c90f95	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7

Open the chart page →

7,028

local-ailocalai

3.4.2

1 of 1 See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
quay.io/go-skynet/local-ai :latest	d78cd113b2bc	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7

Open the chart page →

3,997

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	ffmpeg@7:5.1.6-0+deb12u1	7:5.1.7-0+deb12u1

Open the chart page →

13,761

castopodh2m

1.12.10

1 of 3 See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
castopod/castopod :1.12.10	1fd37280cbb2	ffmpeg@7:5.1.6-0+deb12u1	7:5.1.7-0+deb12u1

Open the chart page →

10,072

difykubeblocks

0.5.1

1 of 5 See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
langgenius/dify-api :0.6.11	fca918260dd6	ffmpeg@7:5.1.4-0+deb12u1	7:5.1.7-0+deb12u1

Open the chart page →

20,403

photoprismmmontes

0.14.0

1 of 1 See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
photoprism/photoprism :251130	db16ee6b1ba3	ffmpeg@7:7.1.1-1ubuntu4.1	7:7.1.1-1ubuntu4.2

Open the chart page →

11,103

napcatredish101

0.1.3

1 of 1 See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
mlikiowa/napcat-docker :latest	1336a777f9a4	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm11

Open the chart page →

7,405

games-on-whalesangelnu

2.0.0

1 of 7 See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm11

Open the chart page →

42,126

difydify

1.0.0

1 of 4 See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
langgenius/dify-plugin-daemon :main-local	da995c129e2f	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7

Open the chart page →

19,224

photoprismdjjudas21

99.99.99

1 of 1 See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
photoprism/photoprism :240711-ce	fc6fd632ca74	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7

Open the chart page →

16,954

mopidygeek-cookbook

0.1.2

1 of 1 See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
jaedb/iris :latest	048cfbf58d57	ffmpeg@7:5.1.6-0+deb12u1	7:5.1.7-0+deb12u1

Open the chart page →

12,958

photoprismgeek-cookbook

7.2.0

1 of 1 See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
photoprism/photoprism :220629-jammy	2954334adbda	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm11

Open the chart page →

19,503

paperlesshomelabcihelmchartstest

9.1.9

1 of 1 See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	ffmpeg@7:5.1.4-0+deb12u1	7:5.1.7-0+deb12u1

Open the chart page →

16,384

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm11

Open the chart page →

10,716

stirling-pdfrubxkube

0.1.2

1 of 1 See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7

Open the chart page →

6,207

nadekobotryuunosukeds3

0.1.2

1 of 2 See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
ryuunosukeds3/nadeko-bot-docker :latest	c0398f13e8a9	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm11

Open the chart page →

8,619

kurento_webrtc_demostunner

0.1.0

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7

Open the chart page →

12,460

stunner-kurento-one2one-callstunner

0.1.0

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7

Open the chart page →

12,460

speecht5test-opea

1.0.0

1 of 1 See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
opea/speecht5 :1.0	249afad3d268	ffmpeg@7:5.1.6-0+deb12u1	7:5.1.7-0+deb12u1

Open the chart page →

9,616

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-59731.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm11

Open the chart page →

14,100

Container images carrying it

22 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
kurento/kurento-media-server :latest	03c0d34d0828	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7	2
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm11	1
castopod/castopod :1.12.10	1fd37280cbb2	ffmpeg@7:5.1.6-0+deb12u1	7:5.1.7-0+deb12u1	1
jaedb/iris :latest	048cfbf58d57	ffmpeg@7:5.1.6-0+deb12u1	7:5.1.7-0+deb12u1	1
langgenius/dify-api :0.6.11	fca918260dd6	ffmpeg@7:5.1.4-0+deb12u1	7:5.1.7-0+deb12u1	1
langgenius/dify-plugin-daemon :0.6.3-local	3c694329357b	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7	1
langgenius/dify-plugin-daemon :0.5.1-local	8269050f192e	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7	1
langgenius/dify-plugin-daemon :main-local	da995c129e2f	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7	1
livekit/ingress :v1.2.2	1ab01641b366	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm11	1
mlikiowa/napcat-docker :latest	1336a777f9a4	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm11	1
opea/speecht5 :1.0	249afad3d268	ffmpeg@7:5.1.6-0+deb12u1	7:5.1.7-0+deb12u1	1
photoprism/photoprism :220629-jammy	2954334adbda	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm11	1
photoprism/photoprism :251130	db16ee6b1ba3	ffmpeg@7:7.1.1-1ubuntu4.1	7:7.1.1-1ubuntu4.2	1
photoprism/photoprism :240711-ce	fc6fd632ca74	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7	1
ryuunosukeds3/nadeko-bot-docker :latest	c0398f13e8a9	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm11	1
selenium/node-chrome :4.48.0-20260905	5ac71fd8dd1e	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7	1
selenium/node-firefox :4.48.0-20260905	74a5c1c90f95	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	ffmpeg@7:4.4.2-0ubuntu0.22.04.1	7:4.4.2-0ubuntu0.22.04.1+esm11	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	ffmpeg@7:5.1.6-0+deb12u1	7:5.1.7-0+deb12u1	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	ffmpeg@7:5.1.4-0+deb12u1	7:5.1.7-0+deb12u1	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7	1
quay.io/go-skynet/local-ai :latest	d78cd113b2bc	ffmpeg@7:6.1.1-3ubuntu5	7:6.1.1-3ubuntu5+esm7	1