StackRadar

CVE-2025-5987

High

Advisory

Published 25 Jun 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
61
of 17,781 indexed, latest versions
Container images
54
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libssh security update

Carried by container images the latest versions of 61 of 17,781 indexed charts deploy, on 54 images.

Affected packageAffected versionsFixed inImages
libsshdeb0.10.5-2, 0.10.6-0+deb12u1, 0.10.6-2build20.10.6-0+deb12u2, 0.10.6-2ubuntu0.150
libsshrpm0.10.4-12.el9_3, 0.10.4-13.el9, 0.11.1-4.el10_10:0.10.4-17.el9_7, 0:0.11.1-5.el10_14
OSV records
DEBIAN-CVE-2025-5987RHSA-2025:23483RHSA-2025:23484UBUNTU-CVE-2025-5987RLSA-2025:23483
Also known as
RHSA-2026:0428, USN-7619-1

Charts affected

61 by stars
ChartLatestAffected imagesRadar Score
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-5987.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

4,120
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2025-5987.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

25,934
trinopresto-loadbalancer0.2.101 of 2See more

trino presto-loadbalancer 0.2.10

1 of the 2 container images this version deploys carry CVE-2025-5987.

Container imageDigestPackageFixed in
trinodb/trino:4796af989b0846d
libssh@0.11.1-4.el10_1
0:0.11.1-5.el10_1

Open the chart page →

2,264
radar-integrationradar-baseVerified publisher0.9.01 of 1See more

radar-integration radar-base 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-5987.

Container imageDigestPackageFixed in
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

2,855
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2025-5987.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

3,018
s3-proxyradar-baseVerified publisher0.6.01 of 1See more

s3-proxy radar-base 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-5987.

Container imageDigestPackageFixed in
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

2,737
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-5987.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

3,232
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2025-5987.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

3,153
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-5987.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

8,193
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-5987.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
libssh@0.10.6-0+deb12u1
0.10.6-0+deb12u2

Open the chart page →

9,616
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-5987.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1

Open the chart page →

45,239

Container images carrying it

54 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
libssh@0.10.6-0+deb12u1
0.10.6-0+deb12u2
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
libssh@0.10.5-2
0.10.6-0+deb12u2
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
libssh@0.10.6-2build2
0.10.6-2ubuntu0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.