StackRadar

CVE-2025-6141

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,318
of 17,813 indexed, latest versions
Container images
2,310
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

Carried by container images the latest versions of 2,318 of 17,813 indexed charts deploy, on 2,310 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+12 more5.9+20140118-1ubuntu1+esm7, 6.0+20160213-1ubuntu1+esm7, 6.1-1ubuntu1.18.04.1+esm4, 6.2-0ubuntu2.1+esm2+2 more2,309
ncursesrpm6.4-2.azl36.4-31
OSV records
DEBIAN-CVE-2025-6141UBUNTU-CVE-2025-6141AZL-64139
Also known as
USN-8709-1

Charts affected

2,318 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,310 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
ncurses@6.3-2ubuntu0.2
6.3-2ubuntu0.3
1
ghcr.io/loxilb-io/loxilb:latestc7ede1bab641
ncurses@6.3-2ubuntu0.2
6.3-2ubuntu0.3
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
ncurses@6.4-4
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
ncurses@6.4-4
no fix listed
1
ghcr.io/mcp-hangar/mcp-hangar:2.21.0ee409f91176c
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
ncurses@6.4-4
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
ncurses@6.4-4
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/microboxlabs/miot-harness:0.1.0d548e9ae4b84
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
ncurses@6.4-4
no fix listed
1
ghcr.io/mollyim/mollysocket:1.7.1c675622546a4
ncurses@6.4-4
no fix listed
1
ghcr.io/monicahq/monica-next:main8be69156acbb
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
ncurses@6.4-4
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
ncurses@6.4-4
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
ncurses@6.4-4
no fix listed
1
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
ncurses@6.4-4
no fix listed
1
ghcr.io/nicholaswilde/writefreely:version-0.13.1c3c8481b7e56
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
1
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
ncurses@6.4+20240113-1ubuntu2.1
6.4+20240113-1ubuntu2.2
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
ncurses@6.4-4
no fix listed
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/obeone/ollama-exporter:latestf43af285c6e0
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/observal/observal-api:1.13.1153b8b893232
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
ncurses@6.4-4
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
ncurses@6.4-4
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
ncurses@6.4-4
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
ncurses@6.4-4
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
ncurses@6.4-4
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.