CVE-2025-5987
HighAdvisory
Published 25 Jun 2025In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.015
- 73rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 61
- of 17,781 indexed, latest versions
- Container images
- 54
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: libssh security update
Carried by container images the latest versions of 61 of 17,781 indexed charts deploy, on 54 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libsshdeb | 0.10.5-2, 0.10.6-0+deb12u1, 0.10.6-2build2 | 0.10.6-0+deb12u2, 0.10.6-2ubuntu0.1 | 50 |
| libsshrpm | 0.10.4-12.el9_3, 0.10.4-13.el9, 0.11.1-4.el10_1 | 0:0.10.4-17.el9_7, 0:0.11.1-5.el10_1 | 4 |
- OSV records
- DEBIAN-CVE-2025-5987RHSA-2025:23483RHSA-2025:23484UBUNTU-CVE-2025-5987RLSA-2025:23483
- Also known as
- RHSA-2026:0428, USN-7619-1
Charts affected
61 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| istio-operatorparticuleio | 1.7.0 | 1 of 1See more | 4,120 |
| planectlplanectlVerified publisher | 0.7.0 | 1 of 10See more | 25,934 |
| trinopresto-loadbalancer | 0.2.10 | 1 of 2See more | 2,264 |
| radar-integrationradar-baseVerified publisher | 0.9.0 | 1 of 1See more | 2,855 |
| radar-push-endpointradar-baseVerified publisher | 0.6.8 | 1 of 2See more | 3,018 |
| s3-proxyradar-baseVerified publisher | 0.6.0 | 1 of 1See more | 2,737 |
| datadogspartan | 0.1.0 | 1 of 1See more | 3,232 |
| teku-validatorstakewise | 4.3.2 | 1 of 2See more | 3,153 |
| stash-boxswuuper-githubVerified publisher | 0.1.1 | 1 of 2See more | 8,193 |
| speecht5test-opea | 1.0.0 | 1 of 1See more | 9,616 |
| opencloudunxwaresVerified publisher | 0.2.3 | 1 of 13See more | 45,239 |
Container images carrying it
54 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| gchq/ | 5ec58edbb2db | libssh | 0.10.6-2ubuntu0.1 | 3 |
| guacamole/ | f344085e618b | libssh | 0.10.6-2ubuntu0.1 | 3 |
| apache/ | ae0b86d3c4d0 | libssh | 0.10.6-2ubuntu0.1 | 2 |
| opendatacube/ | 668cbb41473c | libssh | 0.10.6-2ubuntu0.1 | 2 |
| zabbix/ | 349b924472a7 | libssh | 0.10.6-2ubuntu0.1 | 2 |
| ghcr.io/ | 82d0b161161d | libssh | 0.10.6-2ubuntu0.1 | 2 |
| quay.io/ | 5fc69e31c755 | libssh | 0.10.6-2ubuntu0.1 | 2 |
| 1dev/ | cd5b12fe5471 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| adorsys/ | 85be7a45a94c | libssh | 0.10.6-2ubuntu0.1 | 1 |
| adorsys/ | eb49a2dcbbb8 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| andrewgaul/ | 7dc1d34174a5 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| apache/ | bae523439ee3 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| apache/ | 434d8398f996 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| atlassian/ | 64a75aa4ec4e | libssh | 0.10.6-2ubuntu0.1 | 1 |
| castlemock/ | b7f3f1527ba9 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| castopod/ | 1fd37280cbb2 | libssh | 0.10.6-0+deb12u2 | 1 |
| cleveritcz/ | c75c1636e0b7 | libssh | 0:0.10.4-17.el9_7 | 1 |
| consensys/ | bf6ecd2ea716 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| foundationdb/ | 7d7b6985291e | libssh | 0:0.10.4-17.el9_7 | 1 |
| gradiant/ | 332031245fce | libssh | 0.10.6-2ubuntu0.1 | 1 |
| grafana/ | 09d8c3ce4f3a | libssh | 0:0.10.4-17.el9_7 | 1 |
| istio/ | ab34c4740f44 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| istio/ | 9c3d6a218181 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| istio/ | 05f3972d80a9 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| jaedb/ | 048cfbf58d57 | libssh | 0.10.6-0+deb12u2 | 1 |
| kafkace/ | 7adc206bf5a4 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| kubeovn/ | 6722b54eb5c0 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| langgenius/ | fca918260dd6 | libssh | 0.10.6-0+deb12u2 | 1 |
| linuxserver/ | 9a997426d71e | libssh | 0.10.6-2ubuntu0.1 | 1 |
| obolnetwork/ | cb7e97d39d46 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| opea/ | 249afad3d268 | libssh | 0.10.6-0+deb12u2 | 1 |
| photoprism/ | fc6fd632ca74 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| prom/ | 71c2e988af06 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| radarbase/ | e1758508e033 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| radarbase/ | fcd973d4796d | libssh | 0.10.6-2ubuntu0.1 | 1 |
| stashapp/ | a534c8afdf39 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| structurizr/ | 4b5ffb5119c8 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| trinodb/ | 6af989b0846d | libssh | 0:0.11.1-5.el10_1 | 1 |
| zabbix/ | 55d074b6b031 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| zabbix/ | 0e5f69c4c54e | libssh | 0.10.6-2ubuntu0.1 | 1 |
| gcr.io/ | 6efe04ba4e06 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| gcr.io/ | 8d4576f7b98f | libssh | 0.10.6-2ubuntu0.1 | 1 |
| ghcr.io/ | d110504d551d | libssh | 0.10.6-2ubuntu0.1 | 1 |
| ghcr.io/ | 7a50c07e7c69 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| ghcr.io/ | ec01d3ac7887 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| ghcr.io/ | dab685e668d9 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| ghcr.io/ | 4569cae83c70 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| ghcr.io/ | e6d2775e77ec | libssh | 0.10.6-2ubuntu0.1 | 1 |
| ghcr.io/ | 981aa4c109e1 | libssh | 0.10.6-2ubuntu0.1 | 1 |
| ghcr.io/ | a59e5eead495 | libssh | 0.10.6-2ubuntu0.1 | 1 |