StackRadar

CVE-2025-6020

High

Advisory

Published 17 Jun 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,388
of 17,787 indexed, latest versions
Container images
1,464
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,388 of 17,787 indexed charts deploy, on 1,464 images.

Affected packageAffected versionsFixed inImages
pamdeb1.1.8-1ubuntu2, 1.1.8-1ubuntu2.2, 1.1.8-3.2ubuntu2, 1.1.8-3.2ubuntu2.1+24 more1.4.0-11ubuntu2.6, 1.5.2-6+deb12u2, 1.5.3-5ubuntu5.41,338
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.0-lp151.7.38, 1.3.1-4.el8+18 more0:1.1.8-23.el7_9.1, 0:1.3.1-37.el8_10, 0:1.5.1-15.el9_2.1, 0:1.5.1-24.el9_4+2 more126
OSV records
DEBIAN-CVE-2025-6020RHSA-2025:10024RHSA-2025:10027RHSA-2025:10180RHSA-2025:10357RHSA-2025:9526RLSA-2025:10027RLSA-2025:9526UBUNTU-CVE-2025-6020openSUSE-SU-2025:15256-1
Also known as
RHSA-2025:10358, RHSA-2025:10359, RHSA-2025:10361, RHSA-2025:10362, USN-7580-1

Charts affected

1,388 by stars
ChartLatestAffected imagesRadar Score
giteagiteaOfficialVerified publisher12.7.03 of 4See more

gitea gitea 12.7.0

3 of the 4 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

8,842
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.6

Open the chart page →

6,597
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

11,372
openebsopenebsOfficialVerified publisher4.6.12 of 35See more

openebs openebs 4.6.1

2 of the 35 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.4
openebs/etcd:3.6.4-debian-12-r0c86c06f1ce6a
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

24,009
apisixapisix2.17.01 of 3See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

3,096
node-problem-detectordeliveryheroVerified publisher2.4.11 of 1See more

node-problem-detector deliveryhero 2.4.1

1 of the 1 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

1,901
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
pam@1.1.8-3.6ubuntu2.18.04.4
no fix listed

Open the chart page →

5,557
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
jpgouin/openldap:2.6.9-fixbfdd0088c776
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

5,948
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.6

Open the chart page →

9,194
grafana-agentgrafana0.44.21 of 2See more

grafana-agent grafana 0.44.2

1 of the 2 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
grafana/agent:v0.44.23364714a2f64
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.4

Open the chart page →

3,514
milvusmilvus4.0.313 of 5See more

milvus milvus 4.0.31

3 of the 5 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
pam@1.3.1-5ubuntu4.3
no fix listed
milvusdb/milvus:v2.2.13a3a55e1c1497
pam@1.3.1-5ubuntu4.3
no fix listed
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
pam@1.3.1-22.el8
0:1.3.1-37.el8_10

Open the chart page →

32,353
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

10,648
signozsignoz0.141.11 of 5See more

signoz signoz 0.141.1

1 of the 5 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
signoz/signoz-otel-collector:v0.144.972aa1e4c1ec5
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

7,582
weblateweblateOfficialVerified publisher0.5.362 of 3See more

weblate weblate 0.5.36

2 of the 3 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:latest42a8200d3597
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
bitnamilegacy/redis:latest5927ff3702df
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

6,761
locustdeliveryheroVerified publisher0.35.01 of 1See more

locust deliveryhero 0.35.0

1 of the 1 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

2,660
bitcoin-corehirosystemsVerified publisher2.1.71 of 1See more

bitcoin-core hirosystems 2.1.7

1 of the 1 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
dobtc/bitcoin:25.1a870f7cb1105
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

4,808
difydoubanVerified publisher0.10.02 of 6See more

dify douban 0.10.0

2 of the 6 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
bitnamilegacy/redis:7.2.4-debian-12-r139c6fecd24bf3
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

19,497
guacamoleberyju-org1.4.21 of 3See more

guacamole beryju-org 1.4.2

1 of the 3 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.4

Open the chart page →

3,645
vertical-pod-autoscalercowboysysopVerified publisher11.1.11 of 4See more

vertical-pod-autoscaler cowboysysop 11.1.1

1 of the 4 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

6,949
stacks-blockchainhirosystemsVerified publisher2.2.21 of 1See more

stacks-blockchain hirosystems 2.2.2

1 of the 1 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
blockstack/stacks-core:3.2.0.0.0f79944317326
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

1,385
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
pam@1.1.8-3.2ubuntu2.1
no fix listed
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
pam@1.1.8-3.2ubuntu2.1
no fix listed

Open the chart page →

23,992
san-iscsi-csienixOfficialVerified publisher4.0.21 of 7See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
enix/san-iscsi-csi:v4.0.2f963da81ecf7
pam@1.1.8-3.6ubuntu2.18.04.3
no fix listed

Open the chart page →

4,159
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.02 of 5See more

openproject openproject-helm-charts 13.11.0

2 of the 5 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
openproject/hocuspocus:release-338001b288dc1359dfb5
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

19,998
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

11,402
zabbixcetic3.1.34 of 5See more

zabbix cetic 3.1.3

4 of the 5 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.6
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.6
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.6
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.6

Open the chart page →

33,907
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
pam@1.5.2-6
1.5.2-6+deb12u2

Open the chart page →

3,700
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

6,550
stacks-blockchain-apihirosystemsVerified publisher6.5.12 of 5See more

stacks-blockchain-api hirosystems 6.5.1

2 of the 5 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
blockstack/stacks-core:3.2.0.0.0f79944317326
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

8,387
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

6,012
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
pam@1.3.1-5ubuntu4.6
no fix listed
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.6

Open the chart page →

12,830
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
netbirdio/management:0.45.10c9994b393ea
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.4

Open the chart page →

8,473
litellm-helmlitellm1.101.01 of 2See more

litellm-helm litellm 1.101.0

1 of the 2 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

4,574
prometheus-cloudwatch-exporterprometheus-communityVerified publisher0.28.21 of 1See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:v0.16.071c2e988af06
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.4

Open the chart page →

3,422
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
pam@1.1.8-3.6ubuntu2.18.04.2
no fix listed

Open the chart page →

15,607
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
pam@1.3.1-5ubuntu4.3
no fix listed

Open the chart page →

7,917
scribebackube-helm-chartsVerified publisher0.2.01 of 2See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
quay.io/backube/scribe:0.2.0cdefc81c6b2e
pam@1.3.1-14.el8
0:1.3.1-37.el8_10

Open the chart page →

6,853
glasskube-operatorglasskubeOfficialVerified publisher0.12.23 of 3See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.6
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
pam@1.3.1-25.el8
0:1.3.1-37.el8_10
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
pam@1.3.1-25.el8
0:1.3.1-37.el8_10

Open the chart page →

11,971
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

5,364
milvusmilvus-helm5.0.281 of 4See more

milvus milvus-helm 5.0.28

1 of the 4 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.6

Open the chart page →

10,764
prefect-serverprefectVerified publisher2026.9.141419101 of 2See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

5,448
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
pam@1.3.1-5ubuntu4.3
no fix listed

Open the chart page →

18,570
codefreshcodefresh-onpremOfficialVerified publisher2.12.134 of 42See more

codefresh codefresh-onprem 2.12.13

4 of the 42 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
bitnamilegacy/rabbitmq:4.1.39e635efba431
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

14,615
stackstorm-hastackstormVerified publisher1.1.012 of 17See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
pam@1.3.1-5ubuntu4.6
no fix listed
stackstorm/st2api:3.86f56d239d280
pam@1.3.1-5ubuntu4.6
no fix listed
stackstorm/st2auth:3.833ecfda16608
pam@1.3.1-5ubuntu4.6
no fix listed
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
pam@1.3.1-5ubuntu4.6
no fix listed
stackstorm/st2notifier:3.8f190a6212195
pam@1.3.1-5ubuntu4.6
no fix listed
stackstorm/st2rulesengine:3.8259503496ff9
pam@1.3.1-5ubuntu4.6
no fix listed
stackstorm/st2scheduler:3.8b1de2055c362
pam@1.3.1-5ubuntu4.6
no fix listed
stackstorm/st2sensorcontainer:3.8b1a338f64773
pam@1.3.1-5ubuntu4.6
no fix listed
stackstorm/st2stream:3.81c8904a3bf67
pam@1.3.1-5ubuntu4.6
no fix listed
stackstorm/st2timersengine:3.81bf35bfaf00c
pam@1.3.1-5ubuntu4.6
no fix listed
stackstorm/st2web:3.809989a26c8b7
pam@1.3.1-5ubuntu4.6
no fix listed
stackstorm/st2workflowengine:3.819fdfffdbba8
pam@1.3.1-5ubuntu4.6
no fix listed

Open the chart page →

96,984
supabasetokens-studioVerified publisher1.0.05 of 14See more

supabase tokens-studio 1.0.0

5 of the 14 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.26476cb08c816a
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.4
supabase/edge-runtime:v1.59.0eff9c554d649
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
supabase/postgres-meta:v0.84.2d0a96973e9f1
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
supabase/realtime:v2.33.8d207e6e23ad3
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
supabase/studio:20241021-9f9b08326d8070c55e9
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

23,263
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

8,530
bitcoindfold0.3.21 of 2See more

bitcoind fold 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
thesisrobot/bitcoind:v23.016b368e4d52c
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.6

Open the chart page →

3,493
cubestoregadsme1.2.01 of 3See more

cubestore gadsme 1.2.0

1 of the 3 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
cubejs/cubestore:v1.5.334ac523a9bab
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

3,037
hivemq-operatorhivemqOfficialVerified publisher0.11.621 of 2See more

hivemq-operator hivemq 0.11.62

1 of the 2 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
hivemq/hivemq-operator:4.7.10241d6a8e1963
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.6

Open the chart page →

7,896
quickwitquickwit0.8.161 of 1See more

quickwit quickwit 0.8.16

1 of the 1 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
quickwit/quickwit:v0.8.2363ff56ce456
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2

Open the chart page →

3,492
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2025-6020.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
pam@1.3.1-5ubuntu4.2
no fix listed

Open the chart page →

11,453

Container images carrying it

1,464 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
xeladock/nginx2:latestc259a67b1dff
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.6
1
xeotek/kadeck:4.2.94c6b04d9ce55
pam@1.3.1-5ubuntu4.6
no fix listed
1
xingse/kubernetes-oom-event-generator:v1.2.09f9d5492e4bf
pam@1.1.8-3.2ubuntu2.3
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
1
yandex/clickhouse-client:21.3863f94a0f607
pam@1.1.8-3.6ubuntu2.18.04.3
no fix listed
1
yandex/clickhouse-server:latest1cbf75aabe1e
pam@1.3.1-5ubuntu4.3
no fix listed
1
yandex/clickhouse-server:21.3.204eccfffb01d7
pam@1.3.1-5ubuntu4.3
no fix listed
1
yandex/clickhouse-server:19.17ab1738a64b70
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed
1
yandex/clickhouse-server:19.16d210dc69321e
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed
1
youkadev/api-snap:0.1.14db0f9428e67
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
1
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
pam@1.3.1-5ubuntu4.3
no fix listed
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.6
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.4
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
pam@1.3.1-5ubuntu4.3
no fix listed
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.6
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.4
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
pam@1.3.1-5ubuntu4.3
no fix listed
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.6
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
pam@1.4.0-11ubuntu2
1.4.0-11ubuntu2.6
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
1
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.6
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.4
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
pam@1.1.8-3.6ubuntu2.18.04.1
no fix listed
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
pam@1.1.8-3.2ubuntu2
no fix listed
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
pam@1.1.8-3.2ubuntu2
no fix listed
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
pam@1.1.8-3.2ubuntu2.1
no fix listed
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
pam@1.3.1-5ubuntu4.2
no fix listed
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
pam@1.1.8-3.2ubuntu2.1
no fix listed
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
pam@1.3.1-5ubuntu4.2
no fix listed
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
pam@1.5.3-5ubuntu5
1.5.3-5ubuntu5.4
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
pam@1.4.0-11ubuntu2.3
1.4.0-11ubuntu2.6
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
pam@1.5.1-22.el9_5
0:1.5.1-25.el9_6
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
pam@1.1.8-3.2ubuntu2.1
no fix listed
1
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
pam@1.3.1-5ubuntu4.7
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.14.051404ef4419c
pam@1.3.1-5ubuntu4.6
no fix listed
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
pam@1.1.8-3.6ubuntu2.18.04.3
no fix listed
1
ghcr.io/98jan/smalland-server/smalland-server:deveb7be822d5b2
pam@1.1.8-3.6ubuntu2.18.04.6
no fix listed
1
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
pam@1.5.3-5ubuntu5
1.5.3-5ubuntu5.4
1
ghcr.io/aetrius/msockperf-server/msockperf-server:main46ae4ea003e0
pam@1.5.3-5ubuntu5
1.5.3-5ubuntu5.4
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
pam@1.5.3-5ubuntu5.1
1.5.3-5ubuntu5.4
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.6
1
ghcr.io/appscode/csi-driver-cacerts:v0.5.0b6bf1888f9d5
pam@1.5.2-6+deb12u1
1.5.2-6+deb12u2
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
pam@1.4.0-11ubuntu2.4
1.4.0-11ubuntu2.6
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.