StackRadar

CVE-2025-6141

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
10th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,402
of 17,828 indexed, latest versions
Container images
2,401
deployed by those charts
Fix available
2 of 2
affected packages

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

Carried by container images the latest versions of 2,402 of 17,828 indexed charts deploy, on 2,401 images.

Affected packageAffected versionsFixed inImages
ncursesdeb5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+12 more5.9+20140118-1ubuntu1+esm7, 6.0+20160213-1ubuntu1+esm7, 6.1-1ubuntu1.18.04.1+esm4, 6.2-0ubuntu2.1+esm2+2 more2,400
ncursesrpm6.4-2.azl36.4-31
OSV records
DEBIAN-CVE-2025-6141UBUNTU-CVE-2025-6141AZL-64139
Also known as
USN-8709-1

Charts affected

2,402 by stars
ChartLatestAffected imagesRadar Score
pageslavanya-pages1.0.02 of 3See more

pages lavanya-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
flyway/flyway:6.4.422d97ceb0c47
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

20,350
smtplbenicio-communityVerified publisher0.1.31 of 1See more

smtp lbenicio-community 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
registry.gitlab.com/egos-tech/smtp:latestdf842ed79211
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

1,414
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
ncurses@6.4-4
no fix listed

Open the chart page →

33,939
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

4,493
kinesaliteleprechaun-charts0.1.21 of 1See more

kinesalite leprechaun-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
instructure/kinesalite:latest34400d82f28f
ncurses@6.2-0ubuntu2.1
6.2-0ubuntu2.1+esm2

Open the chart page →

4,316
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
ncurses@6.4-4
no fix listed

Open the chart page →

4,104
vaultwardenleprechaun-charts0.1.281 of 1See more

vaultwarden leprechaun-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

2,081
jackettlib42Verified publisher1.1.01 of 1See more

jackett lib42 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
lib42/jackett:latesta55596cda383
ncurses@6.4-4
no fix listed

Open the chart page →

4,678
libredb-studiolibredb-studio-oci0.1.671 of 1See more

libredb-studio libredb-studio-oci 0.1.67

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
ghcr.io/libredb/libredb-studio:0.16.2c398419c29a7
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

1,198
librenmslibrenms10.1.21 of 5See more

librenms librenms 10.1.2

1 of the 5 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
library/redis:8.10.1602d361c4da9
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

2,743
kube-iptables-tailerlifen0.2.31 of 1See more

kube-iptables-tailer lifen 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2

Open the chart page →

4,501
lightlyticslightlytics0.1.212 of 2See more

lightlytics lightlytics 0.1.21

2 of the 2 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
ncurses@6.4-4
no fix listed
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
ncurses@6.4-4
no fix listed

Open the chart page →

5,453
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
ncurses@6.4-4
no fix listed

Open the chart page →

38,690
weblinzhengen0.1.71 of 1See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

1,965
listmonklistmonk-chartVerified publisher2.0.11 of 2See more

listmonk listmonk-chart 2.0.1

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
library/postgres:15dfbbb0ad8cab
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

2,712
pocketbase-halitesql0.0.31 of 1See more

pocketbase-ha litesql 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
ghcr.io/litesql/pocketbase-ha:latestc5b28608958b
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

1,168
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3

Open the chart page →

10,874
pagesliviu884422-pages1.0.02 of 3See more

pages liviu884422-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2
flyway/flyway:6.4.422d97ceb0c47
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

20,350
web-chartljw-ktcloudlab0.1.01 of 1See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

1,589
llmarinerllmariner1.53.11 of 21See more

llmariner llmariner 1.53.1

1 of the 21 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

13,114
jellyfinlmatfyVerified publisher0.1.31 of 1See more

jellyfin lmatfy 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11aefb67e6a7ff
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

2,681
mt-mcp-grafanaloafoe0.10.01 of 2See more

mt-mcp-grafana loafoe 0.10.0

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
grafana/mcp-grafana:0.14.042f541f22063
ncurses@6.4-4
no fix listed

Open the chart page →

1,986
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
ncurses@6.4-4
no fix listed

Open the chart page →

7,583
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
ncurses@6.4-4
no fix listed

Open the chart page →

33,939
vnode-runtimeloftVerified publisher0.3.31 of 1See more

vnode-runtime loft 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
ncurses@6.3-2ubuntu0.2
6.3-2ubuntu0.3

Open the chart page →

2,568
nightingalelogic3579Verified publisher0.3.13 of 6See more

nightingale logic3579 0.3.1

3 of the 6 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2
flashcatcloud/nightingale:8.5.1421acb36181b
ncurses@6.5+20250216-2
no fix listed
library/redis:6.2e7b96daa9a18
ncurses@6.4-4
no fix listed

Open the chart page →

9,147
rocketmq-exporterlogic3579Verified publisher0.0.21 of 1See more

rocketmq-exporter logic3579 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
apache/rocketmq-exporter:0.0.2c8fb51195444
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3

Open the chart page →

6,727
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
ncurses@6.4-4
no fix listed

Open the chart page →

6,619
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
ncurses@6.4-4
no fix listed

Open the chart page →

23,820
clickhouselohmag0.2.01 of 1See more

clickhouse lohmag 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.17ab1738a64b70
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

5,953
allure_docker_servicelovemew67Verified publisher0.0.11 of 1See more

allure_docker_service lovemew67 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.27.00815040339a9
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

62,599
mongo_guilovemew67Verified publisher0.0.21 of 1See more

mongo_gui lovemew67 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
haohanyang/compass-web:0.1.1e3952b14ae8e
ncurses@6.4-4
no fix listed

Open the chart page →

2,015
oncall-hobbylovemew67Verified publisher0.0.51 of 2See more

oncall-hobby lovemew67 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
library/redis:7.0.15352c1fdadc91
ncurses@6.4-4
no fix listed

Open the chart page →

5,908
vulnerability-scaninglovemew67Verified publisher0.0.31 of 2See more

vulnerability-scaning lovemew67 0.0.3

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.35.14154286c0209
ncurses@6.4+20240113-1ubuntu2
6.4+20240113-1ubuntu2.2

Open the chart page →

5,280
loxilbloxilbVerified publisher0.1.01 of 2See more

loxilb loxilb 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
ncurses@6.3-2ubuntu0.2
6.3-2ubuntu0.3

Open the chart page →

4,467
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
ncurses@6.4-4
no fix listed

Open the chart page →

5,088
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
ncurses@6.2-0ubuntu2
6.2-0ubuntu2.1+esm2

Open the chart page →

89,174
redislsst-sqre1.2.11 of 1See more

redis lsst-sqre 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

1,008
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
library/redis:6.2143f7bfc2358
ncurses@6.4-4
no fix listed

Open the chart page →

6,666
elastictranscoderluiscajl0.46.04 of 4See more

elastictranscoder luiscajl 0.46.0

4 of the 4 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
elastictranscoder/media-storage:f6d861a026208b8c2359
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
elastictranscoder/transcoder:627e21dcb4a0327029e6
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
ncurses@6.1-1ubuntu1.18.04
6.1-1ubuntu1.18.04.1+esm4

Open the chart page →

58,521
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
ncurses@6.4-4
no fix listed

Open the chart page →

27,797
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

4,725
jellyfinm0nsterrr-jellyfinVerified publisher2.3.51 of 1See more

jellyfin m0nsterrr-jellyfin 2.3.5

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

2,681
kea-exporterm0nsterrr-kea-exporterVerified publisher2.2.11 of 1See more

kea-exporter m0nsterrr-kea-exporter 2.2.1

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

1,097
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
ncurses@6.4-4
no fix listed

Open the chart page →

9,850
magistralamagistrala-devopsVerified publisher0.16.22 of 42See more

magistrala magistrala-devops 0.16.2

2 of the 42 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31-latestcaa5b411be16
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
ncurses@6.3-2ubuntu0.1
6.3-2ubuntu0.3

Open the chart page →

24,785
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
mvance/unbound:1.22.076906da36d18
ncurses@6.4-4
no fix listed

Open the chart page →

11,557
demoshopmakaira2.4.02 of 4See more

demoshop makaira 2.4.0

2 of the 4 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
ncurses@6.5+20250216-2
no fix listed
library/php:8.4-fpm59fa733c9af6
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

4,673
plane-mcp-servermakeplaneVerified publisher1.0.02 of 2See more

plane-mcp-server makeplane 1.0.0

2 of the 2 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
ncurses@6.5+20250216-2
no fix listed
valkey/valkey:9.1.164e361b630ec
ncurses@6.5+20250216-2
no fix listed

Open the chart page →

2,654
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-6141.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
ncurses@6.4-4
no fix listed

Open the chart page →

7,402

Container images carrying it

2,401 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
ncurses@6.4-4
no fix listed
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.