StackRadar

CVE-2025-6141

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,402
of 17,828 indexed, latest versions
Container images
2,401
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

Carried by container images the latest versions of 2,402 of 17,828 indexed charts deploy, on 2,401 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+12 more5.9+20140118-1ubuntu1+esm7, 6.0+20160213-1ubuntu1+esm7, 6.1-1ubuntu1.18.04.1+esm4, 6.2-0ubuntu2.1+esm2+2 more2,400
ncursesrpm6.4-2.azl36.4-31
OSV records
DEBIAN-CVE-2025-6141UBUNTU-CVE-2025-6141AZL-64139
Also known as
USN-8709-1

Charts affected

2,402 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
yandex/clickhouse-server:21.3.204eccfffb01d7
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2

Open the chart page →

9,340
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
ncurses@6.3-2ubuntu0.2
6.3-2ubuntu0.3

Open the chart page →

8,105

Container images carrying it

2,401 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend:0.6.46a04b43b8d9a
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/rajnandan1/kener:3.2.182b993cb232eb
ncurses@6.4-4
no fix listed
1
ghcr.io/reitermarkus/7d2d:main39953b387b61
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/retyc/retyc-k8s-csi:v0.2.01521d4baeb85
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
ncurses@6.4-4
no fix listed
1
ghcr.io/rss-bridge/rss-bridge:latest606896116558
ncurses@6.4-4
no fix listed
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.0533ce58c6e02
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
ncurses@6.4-4
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
ncurses@6.4-4
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/securo-finance/securo-backend:0.16.0f452147e07f1
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
ncurses@6.4-4
no fix listed
1
ghcr.io/sergelogvinov/fluentd:1.19.33273d13f1e75
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
ncurses@6.4-4
no fix listed
1
ghcr.io/sergelogvinov/mongosqld:2.14.230b826375ed42
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
1
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
ncurses@6.4-4
no fix listed
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
ncurses@6.4-4
no fix listed
1
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/siafoundation/renterd:2.9.0e0334f124863
ncurses@6.4-4
no fix listed
1
ghcr.io/siafoundation/s3d:bf33bf3b3fcc85f7282
ncurses@6.4-4
no fix listed
1
ghcr.io/sikalabs/hello-world-server:latestcf8538bf6489
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/slskd/slskd:0.25.1ab9ed50e028b
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/spidernet-io/egressgateway-controller:v0.6.99deda7b68c34
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
ncurses@6.4-4
no fix listed
1
ghcr.io/stac-utils/stac-fastapi-pgstac:7.0.08b026c47cc1b
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
1
ghcr.io/steadybit/agent:2.4.6d246bfa55f63
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.1ae79f958b479
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.103a5ef26aac5
ncurses@6.5+20250216-2
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2
1
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
ncurses@6.4-4
no fix listed
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.