StackRadar

CVE-2025-6141

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,351
of 17,803 indexed, latest versions
Container images
2,320
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

Carried by container images the latest versions of 2,351 of 17,803 indexed charts deploy, on 2,320 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+12 more5.9+20140118-1ubuntu1+esm7, 6.0+20160213-1ubuntu1+esm7, 6.1-1ubuntu1.18.04.1+esm4, 6.2-0ubuntu2.1+esm2+2 more2,319
ncursesrpm6.4-2.azl36.4-31
OSV records
DEBIAN-CVE-2025-6141UBUNTU-CVE-2025-6141AZL-64139
Also known as
USN-8709-1

Charts affected

2,351 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
ncurses@6.3-2ubuntu0.2
6.3-2ubuntu0.3

Open the chart page →

7,949

Container images carrying it

2,320 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kyovint/kyoimgusers:1.0.080084149156e
ncurses@6.5+20250216-2
no fix listed
1
labs64/traefik-authproxy:0.0.3dfc6086dfbce
ncurses@6.5+20250216-2
no fix listed
1
laly9999/node-app:1dd0e503913e1
ncurses@6.4-4
no fix listed
1
lancachenet/monolithic:latest37f28b362c93
ncurses@6.4+20240113-1ubuntu2.1
6.4+20240113-1ubuntu2.2
1
langflowai/langflow-frontend:latest54f67f1961fe
ncurses@6.4-4
no fix listed
1
langgenius/dify-agent-backend:1.16.1097d3fd27a7b
ncurses@6.4-4
no fix listed
1
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
ncurses@6.4-4
no fix listed
1
langgenius/dify-api:1.0.0066035f93856
ncurses@6.4-4
no fix listed
1
langgenius/dify-api:1.16.1dcefa5f7c47c
ncurses@6.4-4
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
ncurses@6.4-4
no fix listed
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
ncurses@6.4+20240113-1ubuntu2.1
6.4+20240113-1ubuntu2.2
1
langgenius/dify-sandbox:0.2.15750e1111426e
ncurses@6.5+20250216-2
no fix listed
1
lib42/jackett:latesta55596cda383
ncurses@6.4-4
no fix listed
1
library/buildpack-deps:scmac978b783657
ncurses@6.5+20250216-2
no fix listed
1
library/cassandra:4.0093ee8ee5eb2
ncurses@6.4-4
no fix listed
1
library/cassandra:3.11.10b095ff3248c6
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
library/convertigo:8.4.3ae605bfcda05
ncurses@6.4+20240113-1ubuntu2.1
6.4+20240113-1ubuntu2.2
1
library/couchdb:3.4.22817ad50b5c5
ncurses@6.4-4
no fix listed
1
library/debian:12.5-slim67f3931ad8cb
ncurses@6.4-4
no fix listed
1
library/debian:bookworm6ebd97fa83de
ncurses@6.4-4
no fix listed
1
library/debian:12.12-slimd5d3f9c23164
ncurses@6.4-4
no fix listed
1
library/debian:latestf324c7ff5432
ncurses@6.5+20250216-2
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
ncurses@6.4-4
no fix listed
1
library/elasticsearch:8.17.32cc40b15dff8
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1
library/elasticsearch:8.15.0310b9fc03b06
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1
library/elasticsearch:7.17.0332c6d416808
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
library/elasticsearch:7.17.1588c2ec10c7f2
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1
library/elasticsearch:7.17.8fdc73b3249c1
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
library/flink:1.14.6-scala_2.122461f02672b3
ncurses@6.3-2
6.3-2ubuntu0.3
1
library/ghost:6.37.01ef2e532ca4d
ncurses@6.4-4
no fix listed
1
library/ghost:6.25.12654b1e90413
ncurses@6.4-4
no fix listed
1
library/ghost:6.41.129773d6be407
ncurses@6.4-4
no fix listed
1
library/ghost:5.79.083f7bf209844
ncurses@6.4-4
no fix listed
1
library/ghost:6.64.0a31d03f1f629
ncurses@6.4-4
no fix listed
1
library/golang:latest512690a56605
ncurses@6.5+20250216-2
no fix listed
1
library/haproxy:3.4.10f597665a2a6
ncurses@6.5+20250216-2
no fix listed
1
library/haproxy:3.1-bookworm49a0a0d6f0b8
ncurses@6.4-4
no fix listed
1
library/haproxy:2.8.288baa7d29a27a
ncurses@6.5+20250216-2
no fix listed
1
library/haproxy:2.9.6fc5748ff7c72
ncurses@6.4-4
no fix listed
1
library/httpd:2.4.631ae8051591a5
ncurses@6.4-4
no fix listed
1
library/influxdb:2.8571eb4514977
ncurses@6.4-4
no fix listed
1
library/influxdb:3.10.5-core695a8063ff10
ncurses@6.4+20240113-1ubuntu2.1
6.4+20240113-1ubuntu2.2
1
library/influxdb:3.11.2-enterprise6ce2bf22499b
ncurses@6.4+20240113-1ubuntu2.1
6.4+20240113-1ubuntu2.2
1
library/influxdb:1.12.3-meta8812029260b5
ncurses@6.4-4
no fix listed
1
library/influxdb:1.12.3-datab0f9fc41ed79
ncurses@6.4-4
no fix listed
1
library/influxdb:latestf75e48af0598
ncurses@6.4-4
no fix listed
1
library/kibana:7.17.150172f1c538e7
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1
library/kibana:8.18.004c0fc150f3a
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.