StackRadar

CVE-2025-61915

Medium

Advisory

Published 27 Nov 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.7
base score, highest
EPSS
0.005
39th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
197
of 17,781 indexed, latest versions
Container images
168
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 197 of 17,781 indexed charts deploy, on 168 images.

Affected packageAffected versionsFixed inImages
cupsdeb2.1.3-4ubuntu0.3, 2.1.3-4ubuntu0.4, 2.1.3-4ubuntu0.7, 2.1.3-4ubuntu0.10+25 more2.1.3-4ubuntu0.11+esm11, 2.2.7-1ubuntu2.10+esm9, 2.3.1-9ubuntu1.9+esm3, 2.4.1op1-1ubuntu4.15+1 more158
cupsapk2.4.11-r02.4.16-r010
OSV records
ALPINE-CVE-2025-61915DEBIAN-CVE-2025-61915UBUNTU-CVE-2025-61915
Also known as
USN-7897-1

Charts affected

197 by stars
ChartLatestAffected imagesRadar Score
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

38,107
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
cups@2.4.11-r0
2.4.16-r0

Open the chart page →

5,213
smarter-demosmarterOfficialVerified publisher0.1.51 of 7See more

smarter-demo smarter 0.1.5

1 of the 7 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
cups@2.3.1-9ubuntu1.2
2.3.1-9ubuntu1.9+esm3

Open the chart page →

45,832
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

10,380
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
cups@2.3.1-9ubuntu1.2
2.3.1-9ubuntu1.9+esm3

Open the chart page →

13,486
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
cups@2.2.7-1ubuntu2.8
2.2.7-1ubuntu2.10+esm9

Open the chart page →

15,970
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

7,696
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

8,217
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

5,582
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

3,820
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

30,028
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
cups@2.4.11-r0
2.4.16-r0

Open the chart page →

4,880
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

27,274
omada-controllerandrelote-k8sVerified publisher4.5.01 of 1See more

omada-controller andrelote-k8s 4.5.0

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
cups@2.2.7-1ubuntu2.10
2.2.7-1ubuntu2.10+esm9

Open the chart page →

11,553
games-on-whalesangelnu2.0.03 of 7See more

games-on-whales angelnu 2.0.0

3 of the 7 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
cups@2.4.1op1-1ubuntu4.11
2.4.1op1-1ubuntu4.15
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
cups@2.3.1-9ubuntu1.1
2.3.1-9ubuntu1.9+esm3
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
cups@2.3.1-9ubuntu1.1
2.3.1-9ubuntu1.9+esm3

Open the chart page →

42,126
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

37,268
argonix-apiargonix0.2.01 of 4See more

argonix-api argonix 0.2.0

1 of the 4 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

4,923
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
cups@2.1.3-4ubuntu0.4
2.1.3-4ubuntu0.11+esm11
hyperledger/fabric-couchdb:0.4.15f6c724592abf
cups@2.1.3-4ubuntu0.7
2.1.3-4ubuntu0.11+esm11

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
cups@2.1.3-4ubuntu0.4
2.1.3-4ubuntu0.11+esm11
hyperledger/fabric-couchdb:0.4.15f6c724592abf
cups@2.1.3-4ubuntu0.7
2.1.3-4ubuntu0.11+esm11

Open the chart page →

77,706
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

27,274
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
cups@2.4.7-1.2ubuntu7.3
2.4.7-1.2ubuntu7.7

Open the chart page →

14,352
gotenbergbysamioVerified publisher0.2.01 of 1See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8-chromiuma40f92d7419a
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

8,978
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
cups@2.4.1op1-1ubuntu4.11
2.4.1op1-1ubuntu4.15

Open the chart page →

5,886
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

15,027
calibre-webcharts-derwitt-devVerified publisher1.1.21 of 1See more

calibre-web charts-derwitt-dev 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

4,911
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

4,626
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
cups@2.1.3-4ubuntu0.4
2.1.3-4ubuntu0.11+esm11

Open the chart page →

36,094
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
cups@2.1.3-4ubuntu0.4
2.1.3-4ubuntu0.11+esm11

Open the chart page →

33,963
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
rundeck/rundeck:3.0.16b13e8059ad72
cups@2.1.3-4ubuntu0.7
2.1.3-4ubuntu0.11+esm11

Open the chart page →

23,665
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
cups@2.3.1-9ubuntu1.1
2.3.1-9ubuntu1.9+esm3

Open the chart page →

11,782
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
cups@2.1.3-4ubuntu0.7
2.1.3-4ubuntu0.11+esm11

Open the chart page →

22,442
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
cups@2.1.3-4ubuntu0.3
2.1.3-4ubuntu0.11+esm11

Open the chart page →

77,758
ms-emails-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-grpc:lateste336012bc781
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

9,367
ms-emails-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-emails-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
codedesignplus/ms-emails-rest:latestac84661c605e
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

9,367
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
cups@2.3.1-9ubuntu1.2
2.3.1-9ubuntu1.9+esm3

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
cups@2.3.1-9ubuntu1.2
2.3.1-9ubuntu1.9+esm3

Open the chart page →

7,963
damap-chartdamapVerified publisher0.3.01 of 5See more

damap-chart damap 0.3.0

1 of the 5 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

13,936
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
cups@2.4.2-3+deb12u8
no fix listed

Open the chart page →

9,607
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
cups@2.4.2-3+deb12u8
no fix listed

Open the chart page →

9,607
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
cups@2.4.7-1.2ubuntu7.2
2.4.7-1.2ubuntu7.7

Open the chart page →

16,954
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
cups@2.3.1-9ubuntu1.1
2.3.1-9ubuntu1.9+esm3

Open the chart page →

11,782
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
cups@2.1.3-4ubuntu0.11
2.1.3-4ubuntu0.11+esm11

Open the chart page →

19,802
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
cups@2.3.1-9ubuntu1.9
2.3.1-9ubuntu1.9+esm3

Open the chart page →

7,268
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

30,159
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
cups@2.4.10-3+deb13u2
no fix listed

Open the chart page →

7,233
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
cups@2.4.2-3+deb12u9
no fix listed

Open the chart page →

12,127
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
cups@2.4.11-r0
2.4.16-r0

Open the chart page →

1,395
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cups@2.3.1-9ubuntu1.9
2.3.1-9ubuntu1.9+esm3

Open the chart page →

64,489
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
cups@2.4.2-3+deb12u4
no fix listed

Open the chart page →

13,241
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2025-61915.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
cups@2.4.7-1.2ubuntu7.3
2.4.7-1.2ubuntu7.7
gchq/hdfs:3.3.35ec58edbb2db
cups@2.4.7-1.2ubuntu7.3
2.4.7-1.2ubuntu7.7

Open the chart page →

16,892

Container images carrying it

168 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
cups@2.3.1-9ubuntu1.2
2.3.1-9ubuntu1.9+esm3
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
cups@2.4.2-3+deb12u8
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
cups@2.4.2-3+deb12u4
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
cups@2.4.10-3+deb13u2
no fix listed
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
cups@2.3.1-9ubuntu1.2
2.3.1-9ubuntu1.9+esm3
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
cups@2.3.1-9ubuntu1.2
2.3.1-9ubuntu1.9+esm3
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
cups@2.4.1op1-1ubuntu4.8
2.4.1op1-1ubuntu4.15
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
cups@2.4.1op1-1ubuntu4.8
2.4.1op1-1ubuntu4.15
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
cups@2.4.1op1-1ubuntu4.11
2.4.1op1-1ubuntu4.15
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
cups@2.4.2-3+deb12u4
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
cups@2.4.2-3+deb12u9
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
cups@2.4.10-3+deb13u2
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
cups@2.1.3-4ubuntu0.10
2.1.3-4ubuntu0.11+esm11
1
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
cups@2.4.11-r0
2.4.16-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.