StackRadar

CVE-2025-61664

Medium

Advisory

Published 18 Nov 2025In the index since 14 Sept 2026
Severity
Medium
worst across findings
CVSS
4.9
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1
of 17,781 indexed, latest versions
Container images
1
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1 of 17,781 indexed charts deploy, on 1 image.

Affected packageAffected versionsFixed inImages
grub2-signeddeb1.167.2+2.04-1ubuntu44.2no fix listed1
grub2-unsigneddeb2.04-1ubuntu44.2no fix listed1
OSV records
UBUNTU-CVE-2025-61664

Charts affected

1 by stars
ChartLatestAffected imagesRadar Score
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2025-61664.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
grub2-signed@1.167.2+2.04-1ubuntu44.2
grub2-unsigned@2.04-1ubuntu44.2
no fix listed
no fix listed

Open the chart page →

12,422

Container images carrying it

1 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
grub2-signed@1.167.2+2.04-1ubuntu44.2
grub2-unsigned@2.04-1ubuntu44.2
no fix listed
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.