CVE-2025-6141

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.8; base score, highest
EPSS: 0.002; 10th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,365; of 17,821 indexed, latest versions
Container images: 2,348; deployed by those charts
Fix available: 2 of 2; affected packages

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

Carried by container images the latest versions of 2,365 of 17,821 indexed charts deploy, on 2,348 images.

Affected package	Affected versions	Fixed in	Images
ncursesdeb	5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+12 more	5.9+20140118-1ubuntu1+esm7, 6.0+20160213-1ubuntu1+esm7, 6.1-1ubuntu1.18.04.1+esm4, 6.2-0ubuntu2.1+esm2+2 more	2,347
ncursesrpm	6.4-2.azl3	6.4-3	1

OSV records: DEBIAN-CVE-2025-6141 UBUNTU-CVE-2025-6141 AZL-64139
Also known as: USN-8709-1

Charts affected

2,365 by stars

Chart

Latest

Affected images

Radar Score

iomeshkubesphere-stable

1.1.0

4 of 25 See more

iomesh kubesphere-stable 1.1.0

4 of the 25 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.3
iomesh/node-disk-exporter :1.8.0	f03148764f38	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2
iomesh/node-disk-manager :1.8.0	002c4b92fd34	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2
iomesh/node-disk-operator :1.8.0	f6c76380db34	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2

Open the chart page →

49,068

IOMeshkubesphere-stable

1.2.0

4 of 25 See more

IOMesh kubesphere-stable 1.2.0

4 of the 25 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
iomesh/csi-driver :v2.8.0	1a151f602451	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.3
iomesh/node-disk-exporter :1.8.0	f03148764f38	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2
iomesh/node-disk-manager :1.8.0-2	292ad270082e	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2

Open the chart page →

46,758

pulsarkubesphere-stable

2.7.13

1 of 3 See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2

Open the chart page →

91,524

clickhousekubesphere-test

0.1.1

1 of 2 See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
radondb/clickhouse-server :v21.1.3.32-stable	4732df471073	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

6,724

csi-neonsankubesphere-test

1.3.0

1 of 6 See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	ncurses@6.0+20160213-1ubuntu1	6.0+20160213-1ubuntu1+esm7

Open the chart page →

18,553

mongodbkubesphere-test

0.3.2

1 of 2 See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
library/mongo :4.2.1	6ca49afbcb2b	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

9,651

mysqlkubesphere-test

1.0.2

1 of 3 See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
xenondb/percona :5.7.33	0e26872a2b67	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2

Open the chart page →

7,406

sample-bookinfokubesphere-test

1.0.0

1 of 4 See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
kubesphere/examples-bookinfo-reviews-v2 :1.13.0	6d93129beb32	ncurses@6.0+20160213-1ubuntu1	6.0+20160213-1ubuntu1+esm7

Open the chart page →

9,424

xenondbkubesphere-test

1.0.0

1 of 3 See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
xenondb/percona :5.7.33	0e26872a2b67	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2

Open the chart page →

7,406

vector-controllerkubevela

0.2.3

1 of 2 See more

vector-controller kubevela 0.2.3

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
oamdev/vector-controller :v0.2.3	9dd8be44ffc9	ncurses@6.1-1ubuntu1.18.04.1	6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

4,820

kubevoipkubevoip

0.6.8

1 of 1 See more

kubevoip kubevoip 0.6.8

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
ghcr.io/kubevoip/kubevoip :v0.6.8	41c603a93642	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

1,129

kube-wordpress-mysqlkube-wordpress-mysql

0.1.0

1 of 2 See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
library/wordpress :php8.1-apache	f73396626d2f	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

8,931

penpotkubitodev

1.2.1

2 of 5 See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
penpotapp/backend :2.2.1	47853d9bb9dd	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.3
penpotapp/exporter :2.2.1	5c835ffd87ab	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.3

Open the chart page →

17,074

kubiya-runnerkubiya-helm-charts

0.9.4

3 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

3 of the 9 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	ncurses@6.5+20250216-2	no fix listed
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	ncurses@6.4-4	no fix listed

Open the chart page →

20,582

ctrlmeshkusionstack

0.2.0

1 of 1 See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
kusionstack/ctrlmesh-manager :v0.2.0	65e3c32b64d7	ncurses@6.2-0ubuntu2.1	6.2-0ubuntu2.1+esm2

Open the chart page →

3,489

kusionkusionstack

0.14.1

1 of 3 See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.3

Open the chart page →

63,775

sample-operatorkusionstack

0.1.2

1 of 1 See more

sample-operator kusionstack 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
chaerr/kridge :demo-operator-v0.1.2	66833deec017	ncurses@6.2-0ubuntu2.1	6.2-0ubuntu2.1+esm2

Open the chart page →

2,523

fstyr-ddp-keycloak-application-platform-configkvalitetsit

0.1.13

1 of 1 See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
adorsys/keycloak-config-cli :6.3.0-26.1.0	85be7a45a94c	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2

Open the chart page →

3,172

keycloak-application-platform-configkvalitetsit

0.0.29

1 of 1 See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
adorsys/keycloak-config-cli :6.1.6-25.0.1	eb49a2dcbbb8	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2

Open the chart page →

3,403

longhornkvalitetsit

1.1.1-0

1 of 2 See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.1.1	ede61fe2a472	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

16,733

stakitkvalitetsit

0.3.11

1 of 3 See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
kvalitetsit/stakit-backend :0.3.0	f0af0ba589af	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.3

Open the chart page →

7,863

nginx-chartkyb-nginx

0.1.0

1 of 1 See more

nginx-chart kyb-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

1,956

ladeitladeit

0.4.0

1 of 2 See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
kubeoperator/webkubectl :v2.4.0	be8f0d624640	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

26,562

pageslatif-pages

1.0.0

2 of 3 See more

pages latif-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2
flyway/flyway :6.4.4	22d97ceb0c47	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

20,285

pageslavanya-pages

1.0.0

2 of 3 See more

pages lavanya-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2
flyway/flyway :6.4.4	22d97ceb0c47	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

20,285

smtplbenicio-community

0.1.3

1 of 1 See more

smtp lbenicio-community 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
registry.gitlab.com/egos-tech/smtp :latest	df842ed79211	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

1,387

uptime-kumalbenicio-community

0.1.1

1 of 1 See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	ncurses@6.4-4	no fix listed

Open the chart page →

33,925

jenkinsleechistest

2.7.1

1 of 2 See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

4,496

kinesaliteleprechaun-charts

0.1.2

1 of 1 See more

kinesalite leprechaun-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
instructure/kinesalite :latest	34400d82f28f	ncurses@6.2-0ubuntu2.1	6.2-0ubuntu2.1+esm2

Open the chart page →

4,297

owntracks-exporterleprechaun-charts

0.1.11

1 of 1 See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
ghcr.io/leprechaun/owntracks-exporter :0.1.11-de545066	099e1abd6d08	ncurses@6.4-4	no fix listed

Open the chart page →

4,094

vaultwardenleprechaun-charts

0.1.28

1 of 1 See more

vaultwarden leprechaun-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.37.1	ebdfe70701c6	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

2,084

jackettlib42

1.1.0

1 of 1 See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
lib42/jackett :latest	a55596cda383	ncurses@6.4-4	no fix listed

Open the chart page →

4,677

librenmslibrenms

10.1.2

1 of 5 See more

librenms librenms 10.1.2

1 of the 5 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
library/redis :8.10.1	602d361c4da9	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

2,748

kube-iptables-tailerlifen

0.2.3

1 of 1 See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
honestica/kube-iptables-tailer :master-91	a393242fb939	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2

Open the chart page →

4,481

lightlyticslightlytics

0.1.21

2 of 2 See more

lightlytics lightlytics 0.1.21

2 of the 2 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
public.ecr.aws/k6v9y5g3/cluster-agent :master.575	36d051110158	ncurses@6.4-4	no fix listed
public.ecr.aws/k6v9y5g3/cluster-agent :cost_k8s_process.576	9e14a72b066d	ncurses@6.4-4	no fix listed

Open the chart page →

5,471

linkdinglinkding

0.2.3

1 of 1 See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	ncurses@6.4-4	no fix listed

Open the chart page →

38,692

weblinzhengen

0.1.7

1 of 1 See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

1,956

listmonklistmonk-chart

2.0.1

1 of 2 See more

listmonk listmonk-chart 2.0.1

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
library/postgres :15	dfbbb0ad8cab	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

3,143

pocketbase-halitesql

0.0.3

1 of 1 See more

pocketbase-ha litesql 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
ghcr.io/litesql/pocketbase-ha :latest	c5b28608958b	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

1,170

ingresslivekit-server

1.2.2

1 of 1 See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
livekit/ingress :v1.2.2	1ab01641b366	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.3

Open the chart page →

10,844

pagesliviu884422-pages

1.0.0

2 of 3 See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2
flyway/flyway :6.4.4	22d97ceb0c47	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

20,285

web-chartljw-ktcloudlab

0.1.0

1 of 1 See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

1,956

llmarinerllmariner

1.53.1

1 of 21 See more

llmariner llmariner 1.53.1

1 of the 21 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

12,185

jellyfinlmatfy

0.1.3

1 of 1 See more

jellyfin lmatfy 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11	aefb67e6a7ff	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

2,672

mt-mcp-grafanaloafoe

0.10.0

1 of 2 See more

mt-mcp-grafana loafoe 0.10.0

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
grafana/mcp-grafana :0.14.0	42f541f22063	ncurses@6.4-4	no fix listed

Open the chart page →

1,988

locust-pluginslocust-plugins

0.0.4

1 of 3 See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
locustio/locust :2.24.1	51d866285170	ncurses@6.4-4	no fix listed

Open the chart page →

7,581

uptime-kumaloeken-at-home

2.3.2

1 of 1 See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	ncurses@6.4-4	no fix listed

Open the chart page →

33,925

vnode-runtimeloft

0.3.3

1 of 1 See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	ncurses@6.3-2ubuntu0.2	6.3-2ubuntu0.3

Open the chart page →

2,546

nightingalelogic3579

0.3.1

3 of 6 See more

nightingale logic3579 0.3.1

3 of the 6 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
flashcatcloud/categraf :latest	42e6ab16472e	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2
flashcatcloud/nightingale :8.5.1	421acb36181b	ncurses@6.5+20250216-2	no fix listed
library/redis :6.2	e7b96daa9a18	ncurses@6.4-4	no fix listed