StackRadar

CVE-2025-6141

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,343
of 17,797 indexed, latest versions
Container images
2,308
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

Carried by container images the latest versions of 2,343 of 17,797 indexed charts deploy, on 2,308 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+12 more5.9+20140118-1ubuntu1+esm7, 6.0+20160213-1ubuntu1+esm7, 6.1-1ubuntu1.18.04.1+esm4, 6.2-0ubuntu2.1+esm2+2 more2,307
ncursesrpm6.4-2.azl36.4-31
OSV records
DEBIAN-CVE-2025-6141UBUNTU-CVE-2025-6141AZL-64139
Also known as
USN-8709-1

Charts affected

2,343 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,308 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
cubejs/cubestore:v1.5.334ac523a9bab
ncurses@6.4-4
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
ncurses@6.5+20250216-2
no fix listed
1
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
ncurses@6.4-4
no fix listed
1
cznic/knot-resolver:v6.4.2fe71c5214fdc
ncurses@6.5+20250216-2
no fix listed
1
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
ncurses@6.4-4
no fix listed
1
daedalusproject/base_kubectl:latest6f72b5119eda
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
dagster/dagster-celery-k8s:1.13.230505973033e1
ncurses@6.5+20250216-2
no fix listed
1
dagster/dagster-cloud-agent:1.13.2322036fc83927
ncurses@6.5+20250216-2
no fix listed
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
ncurses@6.4-4
no fix listed
1
dannielkil/book-frontend:latest937993927694
ncurses@6.4-4
no fix listed
1
darthsim/imgproxy:v3.30.13b709e4a0e5e
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
darthsim/imgproxy:v3.26476cb08c816a
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
daskdev/dask-notebook:1.1.0052630f5ca04
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
datadog/agent:6aad9994de6a7
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
datafuselabs/databend-meta:v1.2.279ba877ee6cb4d
ncurses@6.4-4
no fix listed
1
datafuselabs/databend-query:v1.2.279a936843b85b4
ncurses@6.4-4
no fix listed
1
datalayers/datalayers:v2.2.1017b292079239
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
datalust/seq:5.0.832-pre9c731bb207a6
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm7
1
datalust/seq-input-gelf:3.0.441-x643de34aed5642
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
datamate/seafile-professional:11.0.202dd66b722464
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
dbgate/dbgate:7.2.3f2dc7423ea88
ncurses@6.4-4
no fix listed
1
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
ddosify/alaz:v0.12.0ea602056d9ce
ncurses@6.4-4
no fix listed
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
ncurses@6.4-4
no fix listed
1
ddosify/selfhosted_backend:3.2.93c11e3182652
ncurses@6.4-4
no fix listed
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
ncurses@6.4-4
no fix listed
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
ncurses@6.4-4
no fix listed
1
decisionrules/ai-engine:latest38c377e7c01e
ncurses@6.5+20250216-2
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
ncurses@6.4-4
no fix listed
1
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
ncurses@6.3-2
6.3-2ubuntu0.3
1
defactops/defactops-backend:1.0.2307b663c0092a
ncurses@6.4-4
no fix listed
1
defectdojo/defectdojo-django:3.3.100c597abdbb535
ncurses@6.5+20250216-2
no fix listed
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
ncurses@6.5+20250216-2
no fix listed
1
dellcloud/category:distributed02fc234353a9
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
dellcloud/pages:1.04d2eb25b9225
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
dependencytrack/apiserver:4.14.21ba4f004e1ec
ncurses@6.5+20250216-2
no fix listed
1
dependencytrack/apiserver:latestf1da63ed610a
ncurses@6.5+20250216-2
no fix listed
1
dessalines/lemmy:0.19.2079e9f02c286c
ncurses@6.4-4
no fix listed
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
ncurses@6.5+20250216-2
no fix listed
1
devopsgoofy/k8s-platform:latestad865312099f
ncurses@6.4-4
no fix listed
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
ncurses@6.4-4
no fix listed
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
diygod/rsshub:latest1d4b508b6357
ncurses@6.5+20250216-2
no fix listed
1
diygod/rsshub:2025-11-097a6312cac0d5
ncurses@6.4-4
no fix listed
1
djjudas21/alertify:0.1.0ba22be670c37
ncurses@6.4-4
no fix listed
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.