StackRadar

CVE-2025-61729

High

Advisory

Published 2 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,526
of 17,805 indexed, latest versions
Container images
3,968
deployed by those charts
Fix available
2 of 3
affected packages

Red Hat Security Advisory: git-lfs security update

Carried by container images the latest versions of 3,526 of 17,805 indexed charts deploy, on 3,968 images.

Affected packageAffected versionsFixed inImages
git-lfsrpm2.13.3-3.el8_60:3.4.1-7.el8_101
golang-1.19deb1.19.8-2no fix listed1
stdlibgolanggo1.13, go1.13.1, go1.13.3, go1.13.4+169 more1.24.113,968
OSV records
DEBIAN-CVE-2025-61729RHSA-2026:2323GO-2025-4155
Also known as
BIT-golang-2025-61729

Charts affected

3,526 by stars
ChartLatestAffected imagesRadar Score
predicatep2p-avs0.1.41 of 1See more

predicate p2p-avs 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/predicatelabs/operator:v1.0.5b62113fe1b27
stdlib@go1.23.5
1.24.11

Open the chart page →

893
p4p40.1.03 of 7See more

p4 p4 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
stdlib@go1.18.10
1.24.11
library/mongo:5.0-focal5e15a3f014ed
stdlib@go1.24.6
1.24.11
library/mysql:8b3b90af2a655
stdlib@go1.24.6
1.24.11

Open the chart page →

27,870
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
stdlib@go1.24.6
1.24.11

Open the chart page →

19,767
pacmanpacman-mhVerified publisher0.1.281 of 2See more

pacman pacman-mh 0.1.28

1 of the 2 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mongo:7.0.28-jammy88785f6f665a
stdlib@go1.24.0
1.24.11

Open the chart page →

3,626
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-diarmuidkeane1.0.01 of 3See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-draco1.0.01 of 3See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-ellora1.0.01 of 3See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-finchley1.0.01 of 3See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-fornax1.0.01 of 3See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
stdlib@go1.24.6
1.24.11

Open the chart page →

20,279
paperclippaperclip-helmVerified publisher0.1.01 of 3See more

paperclip paperclip-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
library/postgres:17-alpine18cfe3ef5e68
stdlib@go1.24.6
1.24.11

Open the chart page →

494
paperclip-operatorpaperclip-operatorVerified publisher0.19.11 of 1See more

paperclip-operator paperclip-operator 0.19.1

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/paperclipinc/paperclip-operator:v0.19.10984b890eb38
stdlib@go1.25.0
1.24.11

Open the chart page →

352
Parpar0.1.01 of 1See more

Par par 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/jmcgrath207/par:v0.1.09977511cb142
stdlib@go1.19.10
1.24.11

Open the chart page →

890
parcaparca4.19.02 of 2See more

parca parca 4.19.0

2 of the 2 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
stdlib@go1.21.1
1.24.11
ghcr.io/parca-dev/parca-agent:v0.28.06d6794f45f3e
stdlib@go1.21.4
1.24.11

Open the chart page →

3,384
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
stdlib@go1.21.1
1.24.11

Open the chart page →

1,995
parcaparca-rr0.1.02 of 2See more

parca parca-rr 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.24.23776500fde82
stdlib@go1.25.1
1.24.11
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
stdlib@go1.24.7
1.24.11

Open the chart page →

2,405
parcial-1parcial-1-chart1.0.02 of 5See more

parcial-1 parcial-1-chart 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
stdlib@go1.24.6
1.24.11
registry.k8s.io/ingress-nginx/kube-webhook-certgen:v1.6.1e63459ec5965
stdlib@go1.24.6
1.24.11

Open the chart page →

3,887
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
stdlib@go1.22.5
1.24.11

Open the chart page →

4,196
scaleway-webhookparticuleio0.0.11 of 1See more

scaleway-webhook particuleio 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
scaleway/cert-manager-webhook-scaleway:v0.0.1dcc14608d000
stdlib@go1.15.2
1.24.11

Open the chart page →

2,354
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
stdlib@go1.24.7
1.24.11

Open the chart page →

2,071
hammondpascaliskeVerified publisher2.0.01 of 2See more

hammond pascaliske 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
alfhou/hammond:v0.0.24c85dc0293aa1
stdlib@go1.20.6
1.24.11

Open the chart page →

1,807
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-61729.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
stdlib@go1.25.4
1.24.11

Open the chart page →

4,877

Container images carrying it

3,968 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
phntom/chartmuseum:v0.15.29242b4df9e65
stdlib@go1.18.5
1.24.11
1
phntom/codimd:2.4.31b9aafbb62e6
stdlib@go1.16
1.24.11
1
phntom/external-dns-host-network:0.0.123adadbac8443
stdlib@go1.19.2
1.24.11
1
phntom/goalert:0.0.298ca4df55499b
stdlib@go1.21.5
1.24.11
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
stdlib@go1.20.7
1.24.11
1
phntom/mindav:0.1.7-kix35695f546abbb
stdlib@go1.16.2
1.24.11
1
phntom/oauth2-proxy:v7.3.48ea656a2a895
stdlib@go1.19.2
1.24.11
1
photoprism/photoprism:231128-ce284de9cc4f9c
stdlib@go1.21.4
1.24.11
1
photoprism/photoprism:220629-jammy2954334adbda
stdlib@go1.18.3
1.24.11
1
photoprism/photoprism:251130db16ee6b1ba3
stdlib@go1.25.4
1.24.11
1
photoprism/photoprism:240711-cefc6fd632ca74
stdlib@go1.22.5
1.24.11
1
piblokto/backlokto-operator:v0.0.20963cda71e393
stdlib@go1.20.14
1.24.11
1
pinclr/v2ray-proxy:latestf37f250b7091
stdlib@go1.20.2
1.24.11
1
platform9community/admin-server:latestde3fa9b70df1
stdlib@go1.16.4
1.24.11
1
platform9community/api-gateway:latest40a4970de568
stdlib@go1.16.4
1.24.11
1
platform9community/customers-service:latest2089811e5cc6
stdlib@go1.16.4
1.24.11
1
platform9community/vets-service:latestd1165c94dfb3
stdlib@go1.15.11
1.24.11
1
platform9community/visits-service:latest8d11b50368c6
stdlib@go1.16.4
1.24.11
1
platzio/backend:v0.6.5d5e5972f344b
stdlib@go1.24.3
1.24.11
1
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
stdlib@go1.21.2
1.24.11
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
stdlib@go1.13.12
1.24.11
1
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
stdlib@go1.13.10
1.24.11
1
pnnlmiscscripts/pixiecore:1.0.1-1c6f17741a0d7
stdlib@go1.24.1
1.24.11
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
stdlib@go1.19.13
1.24.11
1
polyaxon/training-operator:2.1.0b5b29deaec9a
stdlib@go1.20.13
1.24.11
1
pomerium/pomerium:v0.22.19c69b10a2126
stdlib@go1.20.3
1.24.11
1
portainer/portainer-ce:2.18.4-alpine3e61aaee1341
stdlib@go1.19.4
1.24.11
1
postgis/postgis:17-3.4-alpine5a1dbedac34e
stdlib@go1.18.2
1.24.11
1
postgis/postgis:18-3.67e00e8c3539f
stdlib@go1.24.6
1.24.11
1
postgis/postgis:11-2.5f479f6c3435e
stdlib@go1.16.7
1.24.11
1
pozetroninc/liftbridge:v1.1.079fd6b9d93e6
stdlib@go1.13.12
1.24.11
1
pozetroninc/rethinkdb-cluster:v2.4.16b06a098f994
stdlib@go1.16.9
1.24.11
1
prathamkrishna/dicedb:v1a7298180cd24
stdlib@go1.23.2
1.24.11
1
pravega/zookeeper-operator:0.2.15b2bc4042fdd8
stdlib@go1.19.7
1.24.11
1
pritunl/pritunl-zero:1.0.3648.460f2943e0d41b
stdlib@go1.25.4
1.24.11
1
prodrigestivill/postgres-backup-local:12-alpine-8d72d2d6ed2afadc326
stdlib@go1.16
1.24.11
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
stdlib@go1.22.6
1.24.11
1
projecthami/volcano-vgpu-device-plugin:v1.9.40c94118d1d98
stdlib@go1.19.3
1.24.11
1
prom/blackbox-exporter:v0.22.0608acee5704a
stdlib@go1.18.5
1.24.11
1
prom/blackbox-exporter:v0.25.0b04a9fef4fa0
stdlib@go1.22.2
1.24.11
1
prom/blackbox-exporter:v0.23.0ca04aa9d9093
stdlib@go1.19.3
1.24.11
1
prom/consul-exporter:v0.13.04e4cfd809e96
stdlib@go1.23.2
1.24.11
1
prometheuscommunity/elasticsearch-exporter:v1.3.0fe735268fbdc
stdlib@go1.16.9
1.24.11
1
prometheuscommunity/postgres-exporter:v0.17.0f8381eb4326a
stdlib@go1.23.6
1.24.11
1
prom/graphite-exporter:v0.16.0e54bca6645ea
stdlib@go1.23.2
1.24.11
1
prom/influxdb-exporter:v0.11.427e33e18634a
stdlib@go1.19.9
1.24.11
1
prom/influxdb-exporter:v0.9.0f63fd77c05ee
stdlib@go1.17.8
1.24.11
1
prom/memcached-exporter:v0.9.001267317c95d
stdlib@go1.16.2
1.24.11
1
prom/memcached-exporter:v0.15.0bb01ad25e9fc
stdlib@go1.23.3
1.24.11
1
prom/node-exporter:v1.10.23ac34ce007ac
stdlib@go1.25.3
1.24.11
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.