CVE-2025-61911
MediumAdvisory
Published 10 Oct 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.9
- base score, highest
- EPSS
- 0.003
- 25th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 41
- of 17,781 indexed, latest versions
- Container images
- 49
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
python-ldap has sanitization bypass in ldap.filter.escape_filter_chars
Carried by container images the latest versions of 41 of 17,781 indexed charts deploy, on 49 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| python-ldappypi | 2.4.15, 2.4.32, 3.1.0, 3.2.0+5 more | 3.4.5 | 49 |
| python-ldapdeb | 3.2.0-4ubuntu7.1 | 3.2.0-4ubuntu7.2 | 2 |
- OSV records
- GHSA-r7r6-cc7p-4v5mUBUNTU-CVE-2025-61911
- Also known as
- PYSEC-2026-1847, USN-7828-1
Charts affected
41 by stars
Container images carrying it
49 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ngoduykhanh/ | ba36ab196d3d | python-ldap | 3.4.5 | 2 |
| weblate/ | 69c160d37a3c | python-ldap | 3.4.5 | 2 |
| alerta/ | 4786b9eaa606 | python-ldap | 3.4.5 | 1 |
| apache/ | 64e58748b6b9 | python-ldap | 3.4.5 | 1 |
| apache/ | ce90bdc3d2af | python-ldap | 3.4.5 | 1 |
| apache/ | e5560ad0b86e | python-ldap | 3.4.5 | 1 |
| apache/ | ab9467fd712c | python-ldap | 3.4.5 | 1 |
| archivebox/ | 1a5a37331091 | python-ldap | 3.4.5 | 1 |
| camptocamp/ | 92c636271b17 | python-ldap | 3.4.5 | 1 |
| ceticasbl/ | 6c0aa7567145 | python-ldap | 3.4.5 | 1 |
| datamate/ | 2dd66b722464 | python-ldap python-ldap | 3.4.5 3.2.0-4ubuntu7.2 | 1 |
| freeipa/ | c87d77342bf5 | python-ldap | 3.4.5 | 1 |
| gabibbo97/ | c047ea64e8cb | python-ldap | 3.4.5 | 1 |
| gethue/ | 11b649636e68 | python-ldap | 3.4.5 | 1 |
| gethue/ | 5702b2c37ff9 | python-ldap | 3.4.5 | 1 |
| gethue/ | 7d5c1b9f8a79 | python-ldap | 3.4.5 | 1 |
| graphiteapp/ | 04a0037cc2ae | python-ldap | 3.4.5 | 1 |
| hayk96/ | 86377705e9e3 | python-ldap | 3.4.5 | 1 |
| hhyo/ | 1aa41843419e | python-ldap | 3.4.5 | 1 |
| hkotel/ | a7e6b6abe087 | python-ldap | 3.4.5 | 1 |
| linuxserver/ | 241009026e6f | python-ldap | 3.4.5 | 1 |
| linuxserver/ | 938810eca3d3 | python-ldap | 3.4.5 | 1 |
| netboxcommunity/ | 3d652dca5351 | python-ldap | 3.4.5 | 1 |
| netboxcommunity/ | 9bf83b350a89 | python-ldap | 3.4.5 | 1 |
| ngoduykhanh/ | 099371dd9ba6 | python-ldap | 3.4.5 | 1 |
| ngoduykhanh/ | 9898a7cf37d2 | python-ldap | 3.4.5 | 1 |
| nlmacamp/ | 5dbb8589f824 | python-ldap | 3.4.5 | 1 |
| openstackhelm/ | e07d75953d2e | python-ldap | 3.4.5 | 1 |
| pschiffe/ | 37ebba8c2b8f | python-ldap | 3.4.5 | 1 |
| seafileltd/ | d0c66e4621bd | python-ldap python-ldap | 3.4.5 3.2.0-4ubuntu7.2 | 1 |
| stackstorm/ | 88235ba70cad | python-ldap | 3.4.5 | 1 |
| stackstorm/ | 6f56d239d280 | python-ldap | 3.4.5 | 1 |
| stackstorm/ | 33ecfda16608 | python-ldap | 3.4.5 | 1 |
| stackstorm/ | 4e3f8c7ca52d | python-ldap | 3.4.5 | 1 |
| stackstorm/ | f190a6212195 | python-ldap | 3.4.5 | 1 |
| stackstorm/ | 259503496ff9 | python-ldap | 3.4.5 | 1 |
| stackstorm/ | b1de2055c362 | python-ldap | 3.4.5 | 1 |
| stackstorm/ | b1a338f64773 | python-ldap | 3.4.5 | 1 |
| stackstorm/ | 1c8904a3bf67 | python-ldap | 3.4.5 | 1 |
| stackstorm/ | 1bf35bfaf00c | python-ldap | 3.4.5 | 1 |
| stackstorm/ | 19fdfffdbba8 | python-ldap | 3.4.5 | 1 |
| swisscomcloud/ | b6639d1a922e | python-ldap | 3.4.5 | 1 |
| vabene1111/ | ec4e9e2905b0 | python-ldap | 3.4.5 | 1 |
| weblate/ | 82848df56ecd | python-ldap | 3.4.5 | 1 |
| ghcr.io/ | 322369a5b748 | python-ldap | 3.4.5 | 1 |
| ghcr.io/ | b56da41cf178 | python-ldap | 3.4.5 | 1 |
| ghcr.io/ | 063eb446e298 | python-ldap | 3.4.5 | 1 |
| quay.io/ | d422ee50c2c3 | python-ldap | 3.4.5 | 1 |
| quay.io/ | 65694109877e | python-ldap | 3.4.5 | 1 |