StackRadar

CVE-2025-61748

Low

Advisory

Published 21 Oct 2025In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
8
of 17,781 indexed, latest versions
Container images
7
deployed by those charts
Fix available
3 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 8 of 17,781 indexed charts deploy, on 7 images.

Affected packageAffected versionsFixed inImages
openjdk-21deb21.0.5+11-1ubuntu1~24.04, 21.0.7+6~us1-0ubuntu1~24.0421.0.9+10-1~24.043
javabitnami21.0.7-9-0, 21.0.8-12-021.0.92
jrebitnami21.0.8-12-0, 21.0.9-15-021.0.92
OSV records
BIT-java-2025-61748BIT-jre-2025-61748UBUNTU-CVE-2025-61748
Also known as
BIT-java-min-2025-61748, USN-7885-1

Charts affected

8 by stars
ChartLatestAffected imagesRadar Score
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2025-61748.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
java@21.0.8-12-0
21.0.9

Open the chart page →

16,210
arlas-aiasarlas-stackVerified publisher28.8.02 of 22See more

arlas-aias arlas-stack 28.8.0

2 of the 22 container images this version deploys carry CVE-2025-61748.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
java@21.0.7-9-0
21.0.9
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
jre@21.0.8-12-0
21.0.9

Open the chart page →

40,238
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-61748.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
openjdk-21@21.0.7+6~us1-0ubuntu1~24.04
21.0.9+10-1~24.04

Open the chart page →

14,352
daveit-at-mOfficialVerified publisher0.2.151 of 11See more

dave it-at-m 0.2.15

1 of the 11 container images this version deploys carry CVE-2025-61748.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
java@21.0.8-12-0
21.0.9

Open the chart page →

15,089
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-61748.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
openjdk-21@21.0.5+11-1ubuntu1~24.04
21.0.9+10-1~24.04

Open the chart page →

6,586
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-61748.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
openjdk-21@21.0.5+11-1ubuntu1~24.04
21.0.9+10-1~24.04

Open the chart page →

6,568
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-61748.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
openjdk-21@21.0.7+6~us1-0ubuntu1~24.04
21.0.9+10-1~24.04

Open the chart page →

8,811
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2025-61748.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
jre@21.0.9-15-0
21.0.9

Open the chart page →

7,624

Container images carrying it

7 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
java@21.0.8-12-0
21.0.9
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
openjdk-21@21.0.7+6~us1-0ubuntu1~24.04
21.0.9+10-1~24.04
2
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
java@21.0.7-9-0
21.0.9
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
jre@21.0.8-12-0
21.0.9
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
openjdk-21@21.0.5+11-1ubuntu1~24.04
21.0.9+10-1~24.04
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
openjdk-21@21.0.5+11-1ubuntu1~24.04
21.0.9+10-1~24.04
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
jre@21.0.9-15-0
21.0.9
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.