StackRadar

CVE-2025-6141

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,352
of 17,805 indexed, latest versions
Container images
2,301
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

Carried by container images the latest versions of 2,352 of 17,805 indexed charts deploy, on 2,301 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+12 more5.9+20140118-1ubuntu1+esm7, 6.0+20160213-1ubuntu1+esm7, 6.1-1ubuntu1.18.04.1+esm4, 6.2-0ubuntu2.1+esm2+2 more2,300
ncursesrpm6.4-2.azl36.4-31
OSV records
DEBIAN-CVE-2025-6141UBUNTU-CVE-2025-6141AZL-64139
Also known as
USN-8709-1

Charts affected

2,352 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2

Open the chart page →

9,280
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
ncurses@6.3-2ubuntu0.2
6.3-2ubuntu0.3

Open the chart page →

7,949

Container images carrying it

2,301 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
wallarm/gateway-controller:0.4.09c6ed23e2f0e
ncurses@6.5+20250216-2
no fix listed
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
wasmcloud/wasmcloud:0.81.05c7acfe7e8e1
ncurses@6.4-4
no fix listed
1
wateim/lighthouse-launch:latest2520149ee574
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
wavefronthq/proxy:9.2d1064d28f6eb
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
wazuh/wazuh-dashboard:4.4.11787550d2358
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
wazuh/wazuh-manager:4.4.121994f40e0da
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
wekanteam/wekan:v4.2268a51f0327df
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
wger/server:2.6997ead43aabd
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
wiktorn/overpass-api:latest9bb5f4a9b54c
ncurses@6.4-4
no fix listed
1
wistefan/mvf:lateste0887302b2d8
ncurses@6.3-2
6.3-2ubuntu0.3
1
wolveix/satisfactory-server:v1.9.1199be1064b18
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
woojoong/wowza:latestec230db19652
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
xeladock/mysql_dns:latest4baf531453f1
ncurses@6.3-2
6.3-2ubuntu0.3
1
xeladock/nginx2:latestc259a67b1dff
ncurses@6.3-2
6.3-2ubuntu0.3
1
xeotek/kadeck:6.3.439a3b37a17c5
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
xeotek/kadeck:4.2.94c6b04d9ce55
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
xingse/kubernetes-oom-event-generator:v1.2.09f9d5492e4bf
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm7
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
ncurses@6.4-4
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
ncurses@6.4-4
no fix listed
1
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
yandex/clickhouse-server:latest1cbf75aabe1e
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
yandex/clickhouse-server:19.17ab1738a64b70
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
yandex/clickhouse-server:19.16d210dc69321e
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
ybucci/traefik-external-dns-controller:2.2.08d27ad8b5f73
ncurses@6.5+20250216-2
no fix listed
1
yetiplatform/yeti:2.9.09bcbe2650a14
ncurses@6.5+20250216-2
no fix listed
1
yetiplatform/yeti:latest9c3006cedcca
ncurses@6.5+20250216-2
no fix listed
1
yetiplatform/yeti-frontend:latest709064278c7e
ncurses@6.5+20250216-2
no fix listed
1
yetiplatform/yeti-frontend:2.9.0873ef15d267b
ncurses@6.5+20250216-2
no fix listed
1
youkadev/api-snap:0.1.14db0f9428e67
ncurses@6.4-4
no fix listed
1
youssef11gaber10/flask-service:latest9c727fcfde76
ncurses@6.5+20250216-2
no fix listed
1
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
ncurses@6.3-2
6.3-2ubuntu0.3
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
zabbix/zabbix-server-pgsql:ubuntu-7.0.237e8c8e059533
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
ncurses@6.3-2
6.3-2ubuntu0.3
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
ncurses@6.3-2
6.3-2ubuntu0.3
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
ncurses@6.3-2
6.3-2ubuntu0.3
1
zenmldocker/zenml-server:0.96.409027a6312ee
ncurses@6.4-4
no fix listed
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
ncurses@6.4-4
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.