StackRadar

CVE-2025-61594

High

Advisory

Published 30 Dec 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
36
of 17,781 indexed, latest versions
Container images
40
deployed by those charts
Fix available
5 of 7
affected packages

URI Credential Leakage Bypass over CVE-2025-27221

Carried by container images the latest versions of 36 of 17,781 indexed charts deploy, on 40 images.

Affected packageAffected versionsFixed inImages
urigem0.10.0, 0.10.0.2, 0.10.1, 0.10.2+7 more0.12.5, 0.13.3, 1.0.438
ruby2.7deb2.7.0-5ubuntu1.4, 2.7.0-5ubuntu1.5, 2.7.0-5ubuntu1.82.7.0-5ubuntu1.18+esm46
ruby2.3deb2.3.1-2~16.04.52.3.1-2~ubuntu16.04.16+esm122
ruby3.0deb3.0.2-7ubuntu2.4, 3.0.2-7ubuntu2.83.0.2-7ubuntu2.122
rubyapk3.3.3-r03.3.10-r01
ruby3.1deb3.1.2-7+deb12u1no fix listed1
rubygemsdeb3.3.15-2+deb12u1no fix listed1
OSV records
ALPINE-CVE-2025-61594DEBIAN-CVE-2025-61594GHSA-j4pr-3wm6-xx2rUBUNTU-CVE-2025-61594
Also known as
USN-8137-1

Charts affected

36 by stars
ChartLatestAffected imagesRadar Score
chatwootchatwootVerified publisher2.0.241 of 3See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v4.15.167ebc751c171
uri@1.0.3
1.0.4

Open the chart page →

9,203
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
uri@0.10.0.2
0.12.5
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
ruby3.0@3.0.2-7ubuntu2.4
uri@0.10.1
3.0.2-7ubuntu2.12
0.12.5

Open the chart page →

14,184
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
uffizzi/app:latest66e9e3937c60
uri@0.10.0
0.12.5

Open the chart page →

19,337
coder-observabilitycoder-observabilityVerified publisher0.7.31 of 21See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
dannyben/madness:latestebdf50556c02
ruby@3.3.3-r0
uri@0.13.0
3.3.10-r0
0.13.3

Open the chart page →

24,700
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
uri@0.10.2
0.12.5

Open the chart page →

5,056
gollumgeek-cookbookVerified publisher3.4.21 of 3See more

gollum geek-cookbook 3.4.2

1 of the 3 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
gollumorg/gollum:latest7cd5305a3cf7
uri@0.10.0
0.12.5

Open the chart page →

4,629
docker-registry-browsergmelilloVerified publisher0.1.21 of 1See more

docker-registry-browser gmelillo 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.3.5430a440d95af
uri@0.10.0
0.12.5

Open the chart page →

4,108
openprojecthomeenterpriseinc0.5.01 of 1See more

openproject homeenterpriseinc 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
openproject/community:12.0.2734743d11094
uri@0.10.0
0.12.5

Open the chart page →

6,810
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
ruby2.7@2.7.0-5ubuntu1.5
uri@0.10.0
2.7.0-5ubuntu1.18+esm4
0.12.5
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
ruby2.7@2.7.0-5ubuntu1.4
uri@0.10.0
2.7.0-5ubuntu1.18+esm4
0.12.5
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
ruby2.7@2.7.0-5ubuntu1.5
uri@0.10.0
2.7.0-5ubuntu1.18+esm4
0.12.5
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
ruby2.7@2.7.0-5ubuntu1.5
uri@0.10.0
2.7.0-5ubuntu1.18+esm4
0.12.5
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
ruby2.7@2.7.0-5ubuntu1.5
uri@0.10.0
2.7.0-5ubuntu1.18+esm4
0.12.5

Open the chart page →

113,791
chatwootmaxcrm-chartsVerified publisher1.1.2011 of 4See more

chatwoot maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
uri@0.12.1
0.12.5

Open the chart page →

5,940
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
uri@0.12.2
0.12.5

Open the chart page →

5,558
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
istio/examples-bookinfo-details-v1:1.17.02b081e3c86dd
uri@0.10.0
0.12.5

Open the chart page →

20,671
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
uri@0.10.0
0.12.5

Open the chart page →

6,143
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
ruby3.0@3.0.2-7ubuntu2.8
uri@0.10.1
3.0.2-7ubuntu2.12
0.12.5

Open the chart page →

5,886
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
uri@0.13.0
0.13.3

Open the chart page →

14,130
pact-brokercloud-native-toolkit0.3.01 of 1See more

pact-broker cloud-native-toolkit 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
pactfoundation/pact-broker:2.101.0.0a3021fc42834
uri@0.10.0
0.12.5

Open the chart page →

2,814
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
grafana/fluent-plugin-loki:latest8a3882e8c28b
uri@1.0.3
1.0.4

Open the chart page →

3,176
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
library/logstash:9.1.233eae14f0867
uri@0.12.3
0.12.5

Open the chart page →

2,942
yelbfairwinds-incubator0.1.11 of 5See more

yelb fairwinds-incubator 0.1.1

1 of the 5 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
uri@0.10.0
0.12.5

Open the chart page →

5,089
icinga2g0dscookie0.2.01 of 1See more

icinga2 g0dscookie 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
uri@0.10.0
0.12.5

Open the chart page →

4,428
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
ruby3.1@3.1.2-7+deb12u1
rubygems@3.3.15-2+deb12u1
uri@0.11.0
no fix listed
no fix listed
0.12.5

Open the chart page →

9,077
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
uri@0.12.1
0.12.5

Open the chart page →

49,025
docker-registry-browsergtaylor0.4.41 of 1See more

docker-registry-browser gtaylor 0.4.4

1 of the 1 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
uri@0.10.1
0.12.5

Open the chart page →

3,564
fluentd-elasticsearchkfirfer13.9.11 of 1See more

fluentd-elasticsearch kfirfer 13.9.1

1 of the 1 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
quay.io/fluentd_elasticsearch/fluentd:v4.2.399079df58561
uri@0.11.0
0.12.5

Open the chart page →

1,178
lm-logslogicmonitorVerified publisher0.3.51 of 1See more

lm-logs logicmonitor 0.3.5

1 of the 1 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
logicmonitor/lm-logs-k8s-fluentd:1.0.55ac21b3f1572
uri@0.12.1
0.12.5

Open the chart page →

1,029
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
uri@0.12.1
0.12.5

Open the chart page →

5,940
danboorumy0nVerified publisher0.0.21 of 1See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
uri@0.11.0
0.12.5

Open the chart page →

12,791
danbooru-stackmy0nVerified publisher0.0.31 of 4See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
uri@0.11.0
0.12.5

Open the chart page →

12,791
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
ruby2.3@2.3.1-2~16.04.5
2.3.1-2~ubuntu16.04.16+esm12

Open the chart page →

88,546
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
ruby2.3@2.3.1-2~16.04.5
2.3.1-2~ubuntu16.04.16+esm12

Open the chart page →

38,865
mastodonrivals-spaceVerified publisher3.1.21 of 3See more

mastodon rivals-space 3.1.2

1 of the 3 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
uri@0.10.1
0.12.5

Open the chart page →

6,026
fluentd-operatorstatcan0.5.11 of 1See more

fluentd-operator statcan 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
vmware/kube-fluentd-operator:latestf028c138a5f4
uri@0.12.1
0.12.5

Open the chart page →

1,955
velero-notificationsvelero-notifications1.1.01 of 1See more

velero-notifications velero-notifications 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
uri@0.10.0
0.12.5

Open the chart page →

1,285
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
uri@1.0.2
1.0.4

Open the chart page →

10,795
kongwallarmVerified publisher4.6.32 of 7See more

kong wallarm 4.6.3

2 of the 7 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
wallarm/ingress-ruby:4.6.0-1aecdb35c4def
uri@0.10.0
0.12.5
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
ruby2.7@2.7.0-5ubuntu1.8
uri@0.10.0
2.7.0-5ubuntu1.18+esm4
0.12.5

Open the chart page →

11,405
kong-previewwallarmVerified publisher4.2.31 of 5See more

kong-preview wallarm 4.2.3

1 of the 5 container images this version deploys carry CVE-2025-61594.

Container imageDigestPackageFixed in
wallarm/ingress-ruby:4.2.1-195ea2632326c
uri@0.10.0
0.12.5

Open the chart page →

2,905

Container images carrying it

40 by charts deploying them

A fixed version is listed for 5 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
chatwoot/chatwoot:v3.1.0d530ab8c1753
uri@0.12.1
0.12.5
2
ghcr.io/danbooru/danbooru:9cab67c0ac72a8c52289302c519715ceec2372d95f545698e907
uri@0.11.0
0.12.5
2
chatwoot/chatwoot:v4.15.167ebc751c171
uri@1.0.3
1.0.4
1
dannyben/madness:latestebdf50556c02
ruby@3.3.3-r0
uri@0.13.0
3.3.10-r0
0.13.3
1
gollumorg/gollum:latest7cd5305a3cf7
uri@0.10.0
0.12.5
1
grafana/fluent-plugin-loki:latest8a3882e8c28b
uri@1.0.3
1.0.4
1
istio/examples-bookinfo-details-v1:1.17.02b081e3c86dd
uri@0.10.0
0.12.5
1
jordan/icinga2:latestf75025fe8ea8
ruby3.1@3.1.2-7+deb12u1
rubygems@3.3.15-2+deb12u1
uri@0.11.0
no fix listed
no fix listed
0.12.5
1
klausmeyer/docker-registry-browser:1.3.5430a440d95af
uri@0.10.0
0.12.5
1
klausmeyer/docker-registry-browser:1.4.0bdc4c6b8595b
uri@0.10.1
0.12.5
1
library/logstash:9.1.233eae14f0867
uri@0.12.3
0.12.5
1
logicmonitor/lm-logs-k8s-fluentd:1.0.55ac21b3f1572
uri@0.12.1
0.12.5
1
muluder/prograncontrollermcord:0.1.843b597a93da7
ruby2.3@2.3.1-2~16.04.5
2.3.1-2~ubuntu16.04.16+esm12
1
omecproject/onos-progran:1.0.05715e5648aa0
ruby2.3@2.3.1-2~16.04.5
2.3.1-2~ubuntu16.04.16+esm12
1
openproject/community:12.0.2734743d11094
uri@0.10.0
0.12.5
1
pactfoundation/pact-broker:2.101.0.0a3021fc42834
uri@0.10.0
0.12.5
1
puppet/puppet-agent:7.14.00b6fd9a6b7da
uri@0.10.0
0.12.5
1
uffizzi/app:latest66e9e3937c60
uri@0.10.0
0.12.5
1
vmware/kube-fluentd-operator:latestf028c138a5f4
uri@0.12.1
0.12.5
1
wallarm/ingress-ruby:4.2.1-195ea2632326c
uri@0.10.0
0.12.5
1
wallarm/ingress-ruby:4.6.0-1aecdb35c4def
uri@0.10.0
0.12.5
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
ruby2.7@2.7.0-5ubuntu1.8
uri@0.10.0
2.7.0-5ubuntu1.18+esm4
0.12.5
1
ghcr.io/caninehq/canine:latesta058034ca006
uri@0.13.0
0.13.3
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
uri@0.10.0
0.12.5
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
uri@0.12.2
0.12.5
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
ruby2.7@2.7.0-5ubuntu1.5
uri@0.10.0
2.7.0-5ubuntu1.18+esm4
0.12.5
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
ruby2.7@2.7.0-5ubuntu1.4
uri@0.10.0
2.7.0-5ubuntu1.18+esm4
0.12.5
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
ruby2.7@2.7.0-5ubuntu1.5
uri@0.10.0
2.7.0-5ubuntu1.18+esm4
0.12.5
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
ruby2.7@2.7.0-5ubuntu1.5
uri@0.10.0
2.7.0-5ubuntu1.18+esm4
0.12.5
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
ruby2.7@2.7.0-5ubuntu1.5
uri@0.10.0
2.7.0-5ubuntu1.18+esm4
0.12.5
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
uri@0.10.2
0.12.5
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
uri@1.0.2
1.0.4
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
uri@0.12.1
0.12.5
1
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
uri@0.10.1
0.12.5
1
ghcr.io/simoncaron/velero-notifications:1.0.0d058963d4de7
uri@0.10.0
0.12.5
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
uri@0.10.0.2
0.12.5
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
ruby3.0@3.0.2-7ubuntu2.4
uri@0.10.1
3.0.2-7ubuntu2.12
0.12.5
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
ruby3.0@3.0.2-7ubuntu2.8
uri@0.10.1
3.0.2-7ubuntu2.12
0.12.5
1
quay.io/fairwinds/yelb-appserver:v0.6.0fae21f06131f
uri@0.10.0
0.12.5
1
quay.io/fluentd_elasticsearch/fluentd:v4.2.399079df58561
uri@0.11.0
0.12.5
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.