StackRadar

CVE-2025-6140

Low

Not in the current index: no indexed chart deploys a container image carrying CVE-2025-6140 in its latest version. The tables below are over older indexed versions and charts no longer in the index, and this page is not offered to search engines.

Advisory

Published 16 Jun 2025In the index since 8 Sept 2026
Severity
Low
worst across findings
CVSS
3.3
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
0
of 17,781 indexed, latest versions
Container images
6
in older or deselected versions
Fix available
None
affected package

The matching OSV records carry no description.

Carried by no container image the latest versions of the 17,781 indexed charts deploy; current on 6 images referenced by older indexed versions or by charts no longer in the index.

Affected packageAffected versionsFixed inImages
spdlogdeb1:1.12.0+ds-2build1no fix listed6
OSV records
UBUNTU-CVE-2025-6140

Charts referencing it in older or deselected versions

1 by stars
ChartVersionAffected imagesRadar Score
mcp-orchestratormagertronVerified publisher3.7.661 of 6See more

mcp-orchestrator magertron 3.7.66

1 of the 6 container images this version deploys carry CVE-2025-6140.

Container imageDigestPackageFixed in
curtismager20/mcp-orchestrator:3.7.66091b0af04884
spdlog@1:1.12.0+ds-2build1
no fix listed

Open the chart page →

1,634
mcp-orchestratormagertronVerified publisher3.7.691 of 6See more

mcp-orchestrator magertron 3.7.69

1 of the 6 container images this version deploys carry CVE-2025-6140.

Container imageDigestPackageFixed in
curtismager20/mcp-orchestrator:3.7.69abf5053bd546
spdlog@1:1.12.0+ds-2build1
no fix listed

Open the chart page →

1,634
mcp-orchestratormagertronVerified publisher3.7.811 of 6See more

mcp-orchestrator magertron 3.7.81

1 of the 6 container images this version deploys carry CVE-2025-6140.

Container imageDigestPackageFixed in
curtismager20/mcp-orchestrator:3.7.819487c28802fc
spdlog@1:1.12.0+ds-2build1
no fix listed

Open the chart page →

1,640
mcp-orchestratormagertronVerified publisher3.7.841 of 6See more

mcp-orchestrator magertron 3.7.84

1 of the 6 container images this version deploys carry CVE-2025-6140.

Container imageDigestPackageFixed in
curtismager20/mcp-orchestrator:3.7.84b4af5f70a538
spdlog@1:1.12.0+ds-2build1
no fix listed

Open the chart page →

1,599
mcp-orchestratormagertronVerified publisher3.7.861 of 6See more

mcp-orchestrator magertron 3.7.86

1 of the 6 container images this version deploys carry CVE-2025-6140.

Container imageDigestPackageFixed in
curtismager20/mcp-orchestrator:3.7.8672e12dd10c32
spdlog@1:1.12.0+ds-2build1
no fix listed

Open the chart page →

1,599
mcp-orchestratormagertronVerified publisher3.7.921 of 6See more

mcp-orchestrator magertron 3.7.92

1 of the 6 container images this version deploys carry CVE-2025-6140.

Container imageDigestPackageFixed in
curtismager20/mcp-orchestrator:3.7.9256e74ec00996
spdlog@1:1.12.0+ds-2build1
no fix listed

Open the chart page →

1,599

Container images carrying it

6 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
curtismager20/mcp-orchestrator:3.7.66091b0af04884
spdlog@1:1.12.0+ds-2build1
no fix listed
1
curtismager20/mcp-orchestrator:3.7.9256e74ec00996
spdlog@1:1.12.0+ds-2build1
no fix listed
1
curtismager20/mcp-orchestrator:3.7.8672e12dd10c32
spdlog@1:1.12.0+ds-2build1
no fix listed
1
curtismager20/mcp-orchestrator:3.7.819487c28802fc
spdlog@1:1.12.0+ds-2build1
no fix listed
1
curtismager20/mcp-orchestrator:3.7.69abf5053bd546
spdlog@1:1.12.0+ds-2build1
no fix listed
1
curtismager20/mcp-orchestrator:3.7.84b4af5f70a538
spdlog@1:1.12.0+ds-2build1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.