StackRadar

CVE-2025-62408

Medium

Advisory

Published 8 Dec 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
144
of 17,781 indexed, latest versions
Container images
141
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 144 of 17,781 indexed charts deploy, on 141 images.

Affected packageAffected versionsFixed inImages
c-aresapk1.34.3-r0, 1.34.4-r0, 1.34.5-r01.34.6-r0141
OSV records
ALPINE-CVE-2025-62408

Charts affected

144 by stars
ChartLatestAffected imagesRadar Score
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
c-ares@1.34.3-r0
1.34.6-r0

Open the chart page →

2,589
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
beyzkaya/blog-frontend:v1.0.0bf412d75c510
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

13,010
mongopingmongoping1.3.11 of 1See more

mongoping mongoping 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
udhos/mongoping:1.3.103b08b63f524
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

1,136
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
ghcr.io/umami-software/umami:3.0.328f263fe06f7
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

4,016
nacosnacos-yunyeVerified publisher1.0.31 of 1See more

nacos nacos-yunye 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
nacos/nacos-server:v3.0.130a39cb0c54d
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

1,783
lensoci-ai-incubations0.1.143 of 16See more

lens oci-ai-incubations 0.1.14

3 of the 16 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
c-ares@1.34.5-r0
1.34.6-r0
grafana/grafana:12.1.1a1701c218024
c-ares@1.34.5-r0
1.34.6-r0
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

17,070
opencost-lensopencost-lens1.0.01 of 2See more

opencost-lens opencost-lens 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

1,109
operatonoperatonVerified publisher1.0.51 of 1See more

operaton operaton 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
operaton/operaton:1.0.0-beta-4b35867ffe4d8
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

2,003
hiveopstty0.1.81 of 4See more

hive opstty 0.1.8

1 of the 4 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
alpine/curl:8.12.08943e8c7e8e4
c-ares@1.34.3-r0
1.34.6-r0

Open the chart page →

4,523
parcial-1parcial-1-chart1.0.02 of 5See more

parcial-1 parcial-1-chart 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
esteban1930/frontend-1:1.8.0f9078279632c
c-ares@1.34.5-r0
1.34.6-r0
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

3,844
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

4,749
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

3,332
rabbitpingrabbitping1.3.01 of 1See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
udhos/rabbitping:1.3.0474c467bbf42
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

889
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
c-ares@1.34.3-r0
1.34.6-r0

Open the chart page →

1,667
radar-upload-connect-frontendradar-baseVerified publisher0.8.11 of 1See more

radar-upload-connect-frontend radar-base 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

936
claude-relayrevolution10.1.371 of 4See more

claude-relay revolution1 0.1.37

1 of the 4 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

4,600
wallosrm3lVerified publisher0.1.01 of 1See more

wallos rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
c-ares@1.34.3-r0
1.34.6-r0

Open the chart page →

1,529
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

4,499
trmnl-serverrubxkubeVerified publisher0.1.01 of 2See more

trmnl-server rubxkube 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

2,757
sagawisesagawiseVerified publisher0.1.01 of 3See more

sagawise sagawise 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
venturenox/sagawise:latestc11d32f18718
c-ares@1.34.3-r0
1.34.6-r0

Open the chart page →

4,178
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

1,795
ed-deploymentscaleway-charts0.1.01 of 1See more

ed-deployment scaleway-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
nginxdemos/hello:plain-text751bf8933179
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

1,291
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
c-ares@1.34.4-r0
1.34.6-r0

Open the chart page →

2,817
nvme-exporterschichtelVerified publisher0.1.61 of 1See more

nvme-exporter schichtel 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

1,071
hetzner-ddnsschoolguys-helmcharts0.1.21 of 1See more

hetzner-ddns schoolguys-helmcharts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
filiparag/hetzner_ddns:1.0.15a9cbae7997c
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

843
secretssecrets-proxy1.0.61 of 1See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
udhos/secrets:1.0.6daa2b4eaac09
c-ares@1.34.3-r0
1.34.6-r0

Open the chart page →

987
seed-audio-ai-pwa-toolkitseed-audio-ai-pwa-helm-chartsVerified publisher0.1.01 of 1See more

seed-audio-ai-pwa-toolkit seed-audio-ai-pwa-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
library/nginx:1.27-alpine65645c7bb6a0
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

840
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.28031d190c7ee
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

7,157
return-nginx-chartseture0.1.01 of 1See more

return-nginx-chart seture 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
seyiogunniran/my-nginx:1.03a0ed39e5830
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

1,291
shopwareshopware-storeVerified publisher2.1.11 of 5See more

shopware shopware-store 2.1.1

1 of the 5 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.0-alpha.738e467b32af3f
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

4,876
prowlarrsudo-kraken-prowlarrVerified publisher3.2.11 of 1See more

prowlarr sudo-kraken-prowlarr 3.2.1

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
ghcr.io/home-operations/prowlarr:2.3.01a8a4b11972b
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

876
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
erenozcan17/react_frontend:v4.56e1b14973f9b
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

6,973
togglr-backendtogglrVerified publisher1.0.01 of 1See more

togglr-backend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

3,221
togglr-frontendtogglrVerified publisher1.0.01 of 1See more

togglr-frontend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
gdrocha/togglr-frontend:1.0.0ffbc1571c234
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

1,109
token-servertoken-server1.0.91 of 1See more

token-server token-server 1.0.9

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
udhos/token-server:1.0.9728013f2fac1
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

1,245
trident-protect-bxp-previewtrident-protect100.2511.0-bxp-preview1 of 3See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

1 of the 3 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v1.0.058b9fac358bd
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

2,183
traceetrivy-operator0.24.11 of 1See more

tracee trivy-operator 0.24.1

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
aquasec/tracee:0.24.1cfbbfee972e6
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

1,074
truefoundry-monitoringtruefoundryVerified publisher0.1.61 of 8See more

truefoundry-monitoring truefoundry 0.1.6

1 of the 8 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

4,526
deep-learning-toolsuninettsigma29.1.21 of 3See more

deep-learning-tools uninettsigma2 9.1.2

1 of the 3 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
library/nginx:1.29.3-alpineb3c656d55d7a
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

1,567
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
evoapicloud/evolution-manager:latestcbfeb314afb9
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

3,746
simple-prima-notavcnngrVerified publisher0.5.32 of 4See more

simple-prima-nota vcnngr 0.5.3

2 of the 4 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
vcnngr/pnbackend:latesteaf44ad0ad1f
c-ares@1.34.5-r0
1.34.6-r0
vcnngr/pnfrontend:latest4e4979ab8c41
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

4,768
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
ghcr.io/colanode/web:latestbcad696f03ee
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

2,076
wexa-studiowexa-studio1.2.02 of 15See more

wexa-studio wexa-studio 1.2.0

2 of the 15 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
c-ares@1.34.5-r0
1.34.6-r0
temporalio/server:1.29.1c1e3326b2ce1
c-ares@1.34.5-r0
1.34.6-r0

Open the chart page →

14,983
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2025-62408.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
c-ares@1.34.3-r0
1.34.6-r0

Open the chart page →

1,286

Container images carrying it

141 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
venturenox/sagawise:latestc11d32f18718
c-ares@1.34.3-r0
1.34.6-r0
1
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/appscode/inbox-ui:0.0.5ae3b0e29daaa
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/bitmagnet-io/bitmagnet:v0.10.0cf2c16fac5b5
c-ares@1.34.3-r0
1.34.6-r0
1
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/bnb-chain/bsc:1.6.2fd0e3ec7d960
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
c-ares@1.34.3-r0
1.34.6-r0
1
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/colanode/web:latestbcad696f03ee
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/dani-garcia/vaultwarden:1.33.2-alpine63cce7624f65
c-ares@1.34.3-r0
1.34.6-r0
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
c-ares@1.34.3-r0
1.34.6-r0
1
ghcr.io/data-fair/notify:3c739b74dabb0
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
c-ares@1.34.3-r0
1.34.6-r0
1
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
c-ares@1.34.3-r0
1.34.6-r0
1
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.2c7adcc4db378
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
c-ares@1.34.3-r0
1.34.6-r0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/home-operations/prowlarr:2.3.01a8a4b11972b
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
c-ares@1.34.3-r0
1.34.6-r0
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/umami-software/umami:3.0.328f263fe06f7
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/umami-software/umami:postgresql-v2.20.173ca19b41745
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
c-ares@1.34.5-r0
1.34.6-r0
1
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
c-ares@1.34.3-r0
1.34.6-r0
1
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
c-ares@1.34.5-r0
1.34.6-r0
1
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
c-ares@1.34.5-r0
1.34.6-r0
1
quay.io/jupyterhub/configurable-http-proxy:5.1.0eb10d5bf045c
c-ares@1.34.5-r0
1.34.6-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
c-ares@1.34.5-r0
1.34.6-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
c-ares@1.34.5-r0
1.34.6-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
c-ares@1.34.3-r0
1.34.6-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.