StackRadar

CVE-2025-6141

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,405
of 17,832 indexed, latest versions
Container images
2,403
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

Carried by container images the latest versions of 2,405 of 17,832 indexed charts deploy, on 2,403 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+12 more5.9+20140118-1ubuntu1+esm7, 6.0+20160213-1ubuntu1+esm7, 6.1-1ubuntu1.18.04.1+esm4, 6.2-0ubuntu2.1+esm2+2 more2,402
ncursesrpm6.4-2.azl36.4-31
OSV records
DEBIAN-CVE-2025-6141UBUNTU-CVE-2025-6141AZL-64139
Also known as
USN-8709-1

Charts affected

2,405 by stars
ChartLatestAffected imagesRadar Score
changedetection-iozekker6Verified publisher1.102.01 of 1See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.7096dae27b5d6
ncurses@6.4-4
no fix listed

Open the chart page →

2,751
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

1,623
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
ncurses@6.4-4
no fix listed

Open the chart page →

4,628
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2

Open the chart page →

9,357
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
ncurses@6.3-2ubuntu0.2
6.3-2ubuntu0.3

Open the chart page →

8,128

Container images carrying it

2,403 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
moreillon/group-manager-front:latest5f0a38498271
ncurses@6.5+20250216-2
no fix listed
1
moreillon/user-manager-front:v5.1.06597e6b98d21
ncurses@6.4-4
no fix listed
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
ncurses@6.4-4
no fix listed
1
mshanley80/httpbin2022:latest5b189a70c0fb
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
muhammedgamal/fp23:latest74b4cd69b6fa
ncurses@6.4-4
no fix listed
1
muluder/prograncontrollermcord:0.1.843b597a93da7
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm7
1
murtazashah46/helmfile:latest4d11726cf803
ncurses@6.4-4
no fix listed
1
mvance/unbound:1.20.04bf67b567f39
ncurses@6.4-4
no fix listed
1
mvance/unbound:1.22.076906da36d18
ncurses@6.4-4
no fix listed
1
n3uronhub/n3uron:v1.22.4423a0bdd9cb9
ncurses@6.5+20250216-2
no fix listed
1
ncsa/checks:main0b738bbc8d70
ncurses@6.5+20250216-2
no fix listed
1
nelssec/qualys-agent-bootstrapper:v2.1.05e471f0cdeaa
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
netapp/trident-protect-utils:v3.0.0cad26cd945d1
ncurses@6.5+20250216-2
no fix listed
1
netbirdio/management:0.45.10c9994b393ea
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
netbirdio/management:0.60.252682e5f48f9
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
netbirdio/management:0.46.0b0adc4ad4ec6
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
netbirdio/netbird-server:0.78.13086534361a1
ncurses@6.4+20240113-1ubuntu2.1
6.4+20240113-1ubuntu2.2
1
netboxcommunity/netbox:v3.2.83d652dca5351
ncurses@6.3-2
6.3-2ubuntu0.3
1
netdata/netdata:v2.11.121970e176031
ncurses@6.5+20250216-2
no fix listed
1
nethermind/nethermind:1.14.615517708c3b6
ncurses@6.3-2
6.3-2ubuntu0.3
1
nethermind/nethermind:1.31.893e57917371a
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
nethermind/nethermind:1.31.9aeca3b55bda5
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
netrisai/bare-metal-dpu-agent:4.7.0.003c271efe749d0
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
netrisai/controller-grpc:4.6.0.00753178bf173c2
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1
netrisai/controller-telescope:4.6.0.00414d82948a8b2
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1
netrisai/controller-telescope-notifier:3.0.455e826ef9a5d
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1
netrisai/controller-web-session-generator:0.2.0a030a31289f4
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
networkboot/dhcpd:lateste99bbfbd6fb2
ncurses@6.3-2
6.3-2ubuntu0.3
1
networkstatic/iperf3:latest5b99d62400dc
ncurses@6.5+20250216-2
no fix listed
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
ncurses@6.5+20250216-2
no fix listed
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
ncurses@6.5+20250216-2
no fix listed
1
newrelic/newrelic-agent-control-cli:1.24.047520b65d6b2
ncurses@6.5+20250216-2
no fix listed
1
ngick8stesting/c3po-mme:mwca-mme-debug8dd6dea45be4
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm7
1
nginxinc/nginx-unprivileged:latest4210a3296e7c
ncurses@6.5+20250216-2
no fix listed
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
ncurses@6.5+20250216-2
no fix listed
1
nginx/nginx-ingress:5.6.33e97f06dce1c
ncurses@6.5+20250216-2
no fix listed
1
nginx/nginx-ingress:edge520d439f9a9a
ncurses@6.5+20250216-2
no fix listed
1
nirmalnaveen/supermario:latest8541a39162f3
ncurses@6.4-4
no fix listed
1
nouchka/sqlite3:latestce0d90cbe832
ncurses@6.5+20250216-2
no fix listed
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
ncurses@6.5+20250216-2
no fix listed
1
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
nvidia/k8s-device-plugin:v0.9.0964847cc3fd8
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm7
1
oamdev/vector-controller:v0.2.39dd8be44ffc9
ncurses@6.1-1ubuntu1.18.04.1
6.1-1ubuntu1.18.04.1+esm4
1
obolnetwork/helios:e10e753cb7e97d39d46
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
ncurses@6.4-4
no fix listed
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
ncurses@6.4-4
no fix listed
1
oled01/automx2:2025.1.105d3e398e675
ncurses@6.4-4
no fix listed
1
oled01/db-backup:0.1.06302fd2b5333
ncurses@6.3-2
6.3-2ubuntu0.3
1
olvid/bot-daemon:2.0.1e0e6b165d879
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
omecproject/c3po-hss:master-latest638671ef4842
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm7
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.