StackRadar

CVE-2025-61729

High

Advisory

Published 2 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,542
of 17,821 indexed, latest versions
Container images
3,994
deployed by those charts
Fix available
2 of 3
affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 3,542 of 17,821 indexed charts deploy, on 3,994 images.

Affected packageAffected versionsFixed inImages
git-lfsrpm2.13.3-3.el8_60:3.4.1-7.el8_101
golang-1.19deb1.19.8-2no fix listed1
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+170 more1.24.113,994
OSV records
DEBIAN-CVE-2025-61729RHSA-2026:2323GO-2025-4155
Also known as
BIT-golang-2025-61729

Charts affected

3,542 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

3,994 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
stdlib@go1.20.7
1.24.11
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
stdlib@go1.21.10
1.24.11
1
huacnlee/gobackup:v3.1.1560be93229a5
stdlib@go1.20.12
1.24.11
1
huangchengwu6904/hi-app:cac-16910478061b932f8221a9
stdlib@go1.20.4
1.24.11
1
huseyinbabal/demory:0.0.0-rc.20ae8eb4053c60
stdlib@go1.17.2
1.24.11
1
huzafach/aws-cli-k8:1.0.06e271d43ea48
stdlib@go1.22.4
1.24.11
1
hyperledger/fabric-ca:1.5.1c7f3422ec1d5
stdlib@go1.15.7
1.24.11
1
hyperledger/fabric-ca:1.5.0f270dfeee91d
stdlib@go1.15.7
1.24.11
1
hyperledger/fabric-orderer:2.2.137294e05209b
stdlib@go1.14.4
1.24.11
1
hyperledger/fabric-peer:2.2.1bf4995c86af6
stdlib@go1.14.4
1.24.11
1
hyperledgerk8s/bc-explorer:v202305041f1a06b61f18
stdlib@go1.20.2
1.24.11
1
hyperledgerk8s/bc-saas:v0.0.1-20230524d8bc31176257
stdlib@go1.20.2
1.24.11
1
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
stdlib@go1.18.4
1.24.11
1
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
stdlib@go1.19.4
1.24.11
1
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
stdlib@go1.19.4
1.24.11
1
hyperledgerk8s/tektoncd-operator:v0.64.0d0a3a35a138d
stdlib@go1.18.7
1.24.11
1
hyperledgerk8s/tekton-operator-webhook:v0.64.02237cb80f52b
stdlib@go1.18.7
1.24.11
1
iamdorsah/bastillion:v0.1db83a0254d81
stdlib@go1.17.13
1.24.11
1
ianw/quickchart:v1.7.1dc49dd460c37
stdlib@go1.13.1
1.24.11
1
ibarreche/cloud-reporting-ci:latest1f45af91da6a
stdlib@go1.16.15
1.24.11
1
igrantio/bb-consent-api:2023.12.22d2ea6546ffe
stdlib@go1.18.8
1.24.11
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
stdlib@go1.21.1
1.24.11
1
inaccel/cloud-init:latesta5d3d0af05c1
stdlib@go1.21.6
1.24.11
1
inaccel/device-selector:latest44b4f274f40b
stdlib@go1.21.9
1.24.11
1
inaccel/kubevirt-hack:latestbdfd61803a70
stdlib@go1.21.7
1.24.11
1
inbucket/inbucket:3.0.01f10a0efea69
stdlib@go1.17.1
1.24.11
1
indevlab/ejabberd:24.12-k8s8bc689d093a7
stdlib@go1.23.6
1.24.11
1
inseefrlab/shelly:cloudshell31f04ca7436b
stdlib@go1.15.7
1.24.11
1
instill/console:0.68.54cd70e2df5c6
stdlib@go1.23.10
1.24.11
1
intel/intel-gaudi-resource-driver:v0.3.0ac758c14c2de
stdlib@go1.23.4
1.24.11
1
intel/intel-gpu-plugin:0.20.0143f0a45e174
stdlib@go1.15.10
1.24.11
1
intel/intel-gpu-resource-driver:v0.7.0e158711e32ce
stdlib@go1.23.4
1.24.11
1
intel/intel-qat-resource-driver:v0.1.0ac7616986a2b
stdlib@go1.22.4
1.24.11
1
intel/multimodal-data-visualization:3.03426deb77337
stdlib@go1.17.11
1.24.11
1
intel/trusted-certificate-issuer:0.5.0591a9db4a427
stdlib@go1.19.3
1.24.11
1
invisibl/gravity-init:v1.0.91a970f84178b
stdlib@go1.17.12
1.24.11
1
invisibl/identity-manager:1.0.01029f4fe20eb
stdlib@go1.17.11
1.24.11
1
invisibl/identity-manager-demo:v1.0.0cf5400cb935a
stdlib@go1.19.2
1.24.11
1
iofog/router:2.0.17260cf861479
stdlib@go1.15
1.24.11
1
iomesh/blockdevice-monitor:v0.2.1376577ed98ac
stdlib@go1.21.5
1.24.11
1
iomesh/blockdevice-monitor:v0.1.0d86dab5611a7
stdlib@go1.20.3
1.24.11
1
iomesh/blockdevice-monitor-prober:v0.2.1026a1d87f6e9
stdlib@go1.21.5
1.24.11
1
iomesh/blockdevice-monitor-prober:v0.1.0584dbe19db7e
stdlib@go1.20.3
1.24.11
1
iomesh/csi-driver:v2.8.01a151f602451
stdlib@go1.21.11
1.24.11
1
iomesh/csi-driver:v2.7.25d3f9bf9240b
stdlib@go1.16.7
1.24.11
1
iomesh/deck:v0.2.0282d6c419ed3
stdlib@go1.22.6
1.24.11
1
iomesh/deck:v0.1.0a31e26b6ae22
stdlib@go1.21.10
1.24.11
1
iomesh/deck-plugin-iomesh:v0.1.00b13bf217110
stdlib@go1.21.10
1.24.11
1
iomesh/deck-plugin-iomesh:v0.2.0df149e4ab39f
stdlib@go1.22.6
1.24.11
1
iomesh/node-disk-manager:1.8.0002c4b92fd34
stdlib@go1.14.7
1.24.11
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.