StackRadar

CVE-2025-6141

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,370
of 17,832 indexed, latest versions
Container images
2,356
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

Carried by container images the latest versions of 2,370 of 17,832 indexed charts deploy, on 2,356 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+12 more5.9+20140118-1ubuntu1+esm7, 6.0+20160213-1ubuntu1+esm7, 6.1-1ubuntu1.18.04.1+esm4, 6.2-0ubuntu2.1+esm2+2 more2,355
ncursesrpm6.4-2.azl36.4-31
OSV records
DEBIAN-CVE-2025-6141UBUNTU-CVE-2025-6141AZL-64139
Also known as
USN-8709-1

Charts affected

2,370 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,356 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
ncurses@6.4-4
no fix listed
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.48a8ec8d4c9ea
ncurses@6.4-4
no fix listed
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
ncurses@6.4-4
no fix listed
1
ghcr.io/chroma-core/chroma:1.5.3cfd193653bd6
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
ncurses@6.4-4
no fix listed
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
ncurses@6.4-4
no fix listed
1
ghcr.io/containeroo/filesystem-exporter:v1.5.2a66121e16d4e
ncurses@6.4-4
no fix listed
1
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
ncurses@6.4-4
no fix listed
1
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
ncurses@6.4-4
no fix listed
1
ghcr.io/dakera-ai/dakera:0.11.101af610992a416
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/dakera-ai/dakera-mcp:0.10.11a3d48418b14a
ncurses@6.4-4
no fix listed
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/danielgines/brightdata-exporter:0.2.176920d17cf6ff
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/dask/dask:2024.1.0080150de7d86
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
ghcr.io/defguard/defguard:2.1.0df2e31d3b4f5
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/defguard/defguard-proxy:2.1.08765a28e383e
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/defguard/gateway:2.1.0738b2b6f413b
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
ncurses@6.4-4
no fix listed
1
ghcr.io/deven96/ahnlich-db:latest45d8b5aab491
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
ncurses@6.4-4
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/dgtlmoon/changedetection.io:0.60.5f69554198005
ncurses@6.4-4
no fix listed
1
ghcr.io/ding113/claude-code-hub:latest87f9e8a92bd7
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/donkie/spoolman:0.24.042135965c42d
ncurses@6.4-4
no fix listed
1
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/drakkan/sftpgo:v2.7.59011fe608d33
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
ncurses@6.4-4
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
ncurses@6.4-4
no fix listed
1
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
ncurses@6.3-2ubuntu0.2
6.3-2ubuntu0.3
1
ghcr.io/eenchev/prometheus-universal-exporter:latest99122b443cf9
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/egos-tech/smtp:1.2.2b5451793ad91
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
ncurses@6.4-4
no fix listed
1
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/eslupmi/impulse:v3.7.1186a24030e82
ncurses@6.5+20250216-2
no fix listed
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.