CVE-2025-6141

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.8; base score, highest
EPSS: 0.002; 8th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,354; of 17,790 indexed, latest versions
Container images: 2,327; deployed by those charts
Fix available: 2 of 2; affected packages

CVE-2025-6141 affecting package ncurses for versions less than 6.4-3

Carried by container images the latest versions of 2,354 of 17,790 indexed charts deploy, on 2,327 images.

Affected package	Affected versions	Fixed in	Images
ncursesdeb	5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+12 more	5.9+20140118-1ubuntu1+esm7, 6.0+20160213-1ubuntu1+esm7, 6.1-1ubuntu1.18.04.1+esm4, 6.2-0ubuntu2.1+esm2+2 more	2,326
ncursesrpm	6.4-2.azl3	6.4-3	1

OSV records: DEBIAN-CVE-2025-6141 UBUNTU-CVE-2025-6141 AZL-64139
Also known as: USN-8709-1

Charts affected

2,354 by stars

Chart

Latest

Affected images

Radar Score

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	ncurses@6.4-4	no fix listed

Open the chart page →

2,684

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

1,849

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1+esm4
yandex/clickhouse-server :21.3.20	4eccfffb01d7	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2

Open the chart page →

9,256

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-6141.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	ncurses@6.3-2ubuntu0.2	6.3-2ubuntu0.3

Open the chart page →

7,929

Container images carrying it

2,327 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/nginx :1.27.0	98f8ec75657d	ncurses@6.4-4	no fix listed	2
library/nginx :1.29.4	9dd288848f44	ncurses@6.5+20250216-2	no fix listed	2
library/phpmyadmin :5.2.1	6e75aa8f767c	ncurses@6.4-4	no fix listed	2
library/postgres :17-bookworm	051f7b7b3abd	ncurses@6.4-4	no fix listed	2
library/postgres :16.1	09f23e02d766	ncurses@6.4-4	no fix listed	2
library/postgres :18.1	1090bc3a8ccf	ncurses@6.5+20250216-2	no fix listed	2
library/postgres :16.2	4aea012537ed	ncurses@6.4-4	no fix listed	2
library/postgres :18.0	6f3e42ad37de	ncurses@6.5+20250216-2	no fix listed	2
library/postgres :16.4	e62fbf9d3e2b	ncurses@6.4-4	no fix listed	2
library/python :3.14-slim :3-slim	cad9a2c87176	ncurses@6.5+20250216-2	no fix listed	2
library/python :3.7	eedf63967cdb	ncurses@6.4-4	no fix listed	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	2
library/rabbitmq :3.12.1-management	f020c06da226	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.3	2
library/redis :7.2.3	a7cee7c8178f	ncurses@6.4-4	no fix listed	2
library/redis :8.2.2	f0957bcaa75f	ncurses@6.4-4	no fix listed	2
library/redmine :6.1.3-trixie	f474a901faec	ncurses@6.5+20250216-2	no fix listed	2
library/ubuntu :16.04 :xenial	1f1a2d56de1d	ncurses@6.0+20160213-1ubuntu1	6.0+20160213-1ubuntu1+esm7	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	ncurses@6.5+20250216-2	no fix listed	2
library/zookeeper :3.9.5	f258365d4882	ncurses@6.3-2ubuntu0.2	6.3-2ubuntu0.3	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	ncurses@6.0+20160213-1ubuntu1	6.0+20160213-1ubuntu1+esm7	2
localstack/localstack-pro :latest	4aef81c53168	ncurses@6.5+20250216-2	no fix listed	2
locustio/locust :2.32.2	a0d4b88e42c1	ncurses@6.4-4	no fix listed	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	ncurses@6.4-4	no fix listed	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	ncurses@6.4-4	no fix listed	2
mbentley/omada-controller :4.3	f4e682274bed	ncurses@6.1-1ubuntu1.18.04.1	6.1-1ubuntu1.18.04.1+esm4	2
meshery/meshery :stable-latest	44b64ee128fb	ncurses@6.4-4	no fix listed	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	ncurses@6.4-4	no fix listed	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	ncurses@6.4-4	no fix listed	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	ncurses@6.4-4	no fix listed	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	ncurses@6.1-1ubuntu1	6.1-1ubuntu1.18.04.1+esm4	2
nginxinc/nginx-unprivileged :stable	cb92301e719d	ncurses@6.5+20250216-2	no fix listed	2
nutanix/nai-jobs :v2.8.0	9c373718e1b1	ncurses@6.5+20250216-2	no fix listed	2
obolnetwork/charon :v1.10.0	278c7e2897b6	ncurses@6.5+20250216-2	no fix listed	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm2	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	ncurses@6.0+20160213-1ubuntu1	6.0+20160213-1ubuntu1+esm7	2
opea/embedding-tei :1.0	5c9639de61c1	ncurses@6.4-4	no fix listed	2
opea/reranking-tei :1.0	e48613afb191	ncurses@6.4-4	no fix listed	2
opea/retriever-redis :1.0	eb746b263705	ncurses@6.4-4	no fix listed	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	ncurses@6.4-4	no fix listed	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	ncurses@6.4-4	no fix listed	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	ncurses@6.4-4	no fix listed	2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	ncurses@6.4-4	no fix listed	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	ncurses@6.4-4	no fix listed	2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	ncurses@6.4-4	no fix listed	2
opencsghq/postgres :15.19	b98600564e07	ncurses@6.5+20250216-2	no fix listed	2
opendatacube/ows :latest	668cbb41473c	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.2	2
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	ncurses@6.4-4	no fix listed	2
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	ncurses@6.3-2	6.3-2ubuntu0.3	2
openebs/node-disk-operator :2.1.0	6afe2123c457	ncurses@6.3-2	6.3-2ubuntu0.3	2