StackRadar

CVE-2025-6141

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,370
of 17,832 indexed, latest versions
Container images
2,356
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

Carried by container images the latest versions of 2,370 of 17,832 indexed charts deploy, on 2,356 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+12 more5.9+20140118-1ubuntu1+esm7, 6.0+20160213-1ubuntu1+esm7, 6.1-1ubuntu1.18.04.1+esm4, 6.2-0ubuntu2.1+esm2+2 more2,355
ncursesrpm6.4-2.azl36.4-31
OSV records
DEBIAN-CVE-2025-6141UBUNTU-CVE-2025-6141AZL-64139
Also known as
USN-8709-1

Charts affected

2,370 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,356 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
venturenox/redis:latest83b471c193ba
ncurses@6.4-4
no fix listed
1
vexorian/dizquetv:1.4.37e2b99844a5c
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
ncurses@6.4-4
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
ncurses@6.4-4
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
ncurses@6.4-4
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
ncurses@6.4-4
no fix listed
1
voltha/bbsim:1.16.7d90403d58016
ncurses@6.1-1ubuntu1.18.04.1
6.1-1ubuntu1.18.04.1+esm4
1
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
ncurses@6.1-1ubuntu1.18.04.1
6.1-1ubuntu1.18.04.1+esm4
1
voltha/bbsim-sadis-server:0.4.0762b272d439e
ncurses@6.1-1ubuntu1.18.04.1
6.1-1ubuntu1.18.04.1+esm4
1
voltha/voltha-cli:1.6.0c4e41e92f046
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm7
1
voltha/voltha-envoy:1.6.059ab2a00f712
ncurses@5.9+20140118-1ubuntu1
5.9+20140118-1ubuntu1+esm7
1
voltha/voltha-netconf:1.6.037f80524c207
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm7
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm7
1
voltha/voltha-onos:5.1.8e038acb950d3
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
voltha/voltha-tester:1.7.0655c3048a602
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm7
1
voltha/voltha-voltha:1.6.0ff596b62de59
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm7
1
voska/hass-mcp:latest7142a431e2c5
ncurses@6.4-4
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
ncurses@6.5+20250216-2
no fix listed
1
wallarm/api-gateway:0.2.0a3d4d2f780e8
ncurses@6.4-4
no fix listed
1
wallarm/gateway-controller:0.4.09c6ed23e2f0e
ncurses@6.5+20250216-2
no fix listed
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
wasmcloud/wasmcloud:0.81.05c7acfe7e8e1
ncurses@6.4-4
no fix listed
1
wateim/lighthouse-launch:latest2520149ee574
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
wavefronthq/proxy:9.2d1064d28f6eb
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
wazuh/wazuh-dashboard:4.4.11787550d2358
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
wazuh/wazuh-manager:4.4.121994f40e0da
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
wekanteam/wekan:v4.2268a51f0327df
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
wger/server:2.71c5789b93bfe
ncurses@6.4+20240113-1ubuntu2.1
6.4+20240113-1ubuntu2.2
1
wiktorn/overpass-api:latest9bb5f4a9b54c
ncurses@6.4-4
no fix listed
1
wistefan/mvf:lateste0887302b2d8
ncurses@6.3-2
6.3-2ubuntu0.3
1
wolveix/satisfactory-server:v1.9.1199be1064b18
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
woojoong/wowza:latestec230db19652
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
wso2/wso2am:2.6.0fbe0f4059b74
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
wso2/wso2am-analytics-worker:2.6.005fa15b3d927
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
xeladock/mysql_dns:latest4baf531453f1
ncurses@6.3-2
6.3-2ubuntu0.3
1
xeladock/nginx2:latestc259a67b1dff
ncurses@6.3-2
6.3-2ubuntu0.3
1
xeotek/kadeck:6.3.439a3b37a17c5
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
xeotek/kadeck:4.2.94c6b04d9ce55
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
xingse/kubernetes-oom-event-generator:v1.2.09f9d5492e4bf
ncurses@6.0+20160213-1ubuntu1
6.0+20160213-1ubuntu1+esm7
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
ncurses@6.4-4
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
ncurses@6.4-4
no fix listed
1
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
yandex/clickhouse-server:latest1cbf75aabe1e
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
yandex/clickhouse-server:19.17ab1738a64b70
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.