CVE-2025-6297

High

Advisory

Published 1 Jul 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.004; 29th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,368; of 17,790 indexed, latest versions
Container images: 1,444; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 1,368 of 17,790 indexed charts deploy, on 1,444 images.

Affected package	Affected versions	Fixed in	Images
dpkgdeb	1.17.5ubuntu5.3, 1.17.5ubuntu5.7, 1.17.5ubuntu5.8, 1.18.4ubuntu1.1+22 more	1.21.1ubuntu2.6, 1.21.23, 1.22.6ubuntu6.5	1,444

OSV records: DEBIAN-CVE-2025-6297 UBUNTU-CVE-2025-6297
Also known as: USN-7768-1

Charts affected

1,368 by stars

Chart

Latest

Affected images

Radar Score

giteawenerme

12.7.0

3 of 4 See more

gitea wenerme 12.7.0

3 of the 4 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	dpkg@1.21.22	1.21.23
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	dpkg@1.21.22	1.21.23
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	dpkg@1.21.22	1.21.23

Open the chart page →

8,842

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	dpkg@1.21.22	1.21.23

Open the chart page →

8,824

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	dpkg@1.19.7ubuntu3	no fix listed

Open the chart page →

15,287

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	dpkg@1.21.1ubuntu2.1	1.21.1ubuntu2.6
openebs/node-disk-operator :2.1.0	6afe2123c457	dpkg@1.21.1ubuntu2.1	1.21.1ubuntu2.6

Open the chart page →

10,568

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	dpkg@1.21.22	1.21.23

Open the chart page →

14,618

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	dpkg@1.21.1ubuntu2.2	1.21.1ubuntu2.6

Open the chart page →

9,296

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	dpkg@1.21.22	1.21.23
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	dpkg@1.21.22	1.21.23

Open the chart page →

7,643

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	dpkg@1.19.7ubuntu3.2	no fix listed

Open the chart page →

6,323

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	dpkg@1.21.22	1.21.23

Open the chart page →

5,548

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	dpkg@1.21.22	1.21.23

Open the chart page →

2,383

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	dpkg@1.21.22	1.21.23

Open the chart page →

2,063

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	dpkg@1.21.1ubuntu2.3	1.21.1ubuntu2.6

Open the chart page →

14,172

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	dpkg@1.21.22	1.21.23

Open the chart page →

11,592

tabbyxd

1.0.6

1 of 2 See more

7,685

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	dpkg@1.21.22	1.21.23
hamzaarshad10/querypodpy :1.7	154f38e8668e	dpkg@1.21.22	1.21.23
murtazashah46/helmfile :latest	4d11726cf803	dpkg@1.21.22	1.21.23

Open the chart page →

13,197

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	dpkg@1.22.6ubuntu6	1.22.6ubuntu6.5

Open the chart page →

2,136

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	dpkg@1.21.22	1.21.23

Open the chart page →

2,674

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-6297.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	dpkg@1.19.0.5ubuntu2.3	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	dpkg@1.19.7ubuntu3	no fix listed

Open the chart page →

9,250

Container images carrying it

1,444 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
interlayhq/interbtc-clients :vault-master	c3e311de67da	dpkg@1.19.7ubuntu3	no fix listed	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	dpkg@1.19.7ubuntu3	no fix listed	2
istio/examples-bookinfo-reviews-v1 :1.15.0	40e8aba77c1b	dpkg@1.18.4ubuntu1.5	no fix listed	2
istio/examples-bookinfo-reviews-v1 :1.14.0	ee156b8aefd6	dpkg@1.18.4ubuntu1.5	no fix listed	2
istio/examples-bookinfo-reviews-v2 :1.15.0	e86d247b7ac2	dpkg@1.18.4ubuntu1.5	no fix listed	2
istio/examples-bookinfo-reviews-v2 :1.14.0	eab80bcd2132	dpkg@1.18.4ubuntu1.5	no fix listed	2
istio/examples-bookinfo-reviews-v3 :1.14.0	1e37fca43550	dpkg@1.18.4ubuntu1.5	no fix listed	2
istio/examples-bookinfo-reviews-v3 :1.15.0	e454cab754cf	dpkg@1.18.4ubuntu1.5	no fix listed	2
istio/kubectl :1.5.10	dbb7726d1bf0	dpkg@1.19.0.5ubuntu2.3	no fix listed	2
istio/proxyv2 :1.18.0	757d28c24100	dpkg@1.21.1ubuntu2.2	1.21.1ubuntu2.6	2
istio/proxyv2 :1.10.3	a78b7a165744	dpkg@1.19.0.5ubuntu2.3	no fix listed	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	dpkg@1.21.22	1.21.23	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	dpkg@1.21.22	1.21.23	2
library/cassandra :3.11.6	5aa8400b4b3b	dpkg@1.19.0.5ubuntu2.3	no fix listed	2
library/cassandra :4.1.3	7cbcec0086ac	dpkg@1.21.1ubuntu2.2	1.21.1ubuntu2.6	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	dpkg@1.19.7ubuntu3	no fix listed	2
library/influxdb :2.7	b8d940ca9376	dpkg@1.21.22	1.21.23	2
library/mariadb :10.8.3	0abf60f81588	dpkg@1.21.1ubuntu2.1	1.21.1ubuntu2.6	2
library/mariadb :10.10	334b315c10e5	dpkg@1.21.1ubuntu2.2	1.21.1ubuntu2.6	2
library/mariadb :11.3.2	e101f9db3191	dpkg@1.21.1ubuntu2.3	1.21.1ubuntu2.6	2
library/mongo :5.0	41108d183e97	dpkg@1.19.7ubuntu3.2	no fix listed	2
library/mongo :4.2.3	58b25d51baa1	dpkg@1.19.0.5ubuntu2.3	no fix listed	2
library/nginx :1.27.0	98f8ec75657d	dpkg@1.21.22	1.21.23	2
library/phpmyadmin :5.2.1	6e75aa8f767c	dpkg@1.21.22	1.21.23	2
library/postgres :16.1	09f23e02d766	dpkg@1.21.22	1.21.23	2
library/postgres :16.2	4aea012537ed	dpkg@1.21.22	1.21.23	2
library/postgres :16.4	e62fbf9d3e2b	dpkg@1.21.22	1.21.23	2
library/python :3.7	eedf63967cdb	dpkg@1.21.22	1.21.23	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	dpkg@1.22.6ubuntu6.1	1.22.6ubuntu6.5	2
library/rabbitmq :3.12.1-management	f020c06da226	dpkg@1.21.1ubuntu2.2	1.21.1ubuntu2.6	2
library/redis :7.2.3	a7cee7c8178f	dpkg@1.21.22	1.21.23	2
library/redis :8.2.2	f0957bcaa75f	dpkg@1.21.22	1.21.23	2
library/ubuntu :16.04 :xenial	1f1a2d56de1d	dpkg@1.18.4ubuntu1.7	no fix listed	2
lightstep/collector :2021-01-26_23-02-36Z	11c5569aaf3b	dpkg@1.18.4ubuntu1.5	no fix listed	2
locustio/locust :2.32.2	a0d4b88e42c1	dpkg@1.21.22	1.21.23	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	dpkg@1.21.22	1.21.23	2
mbentley/omada-controller :4.3	f4e682274bed	dpkg@1.19.0.5ubuntu2.4	no fix listed	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	dpkg@1.19.7ubuntu3	no fix listed	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	dpkg@1.21.22	1.21.23	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	dpkg@1.21.22	1.21.23	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	dpkg@1.21.22	1.21.23	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	dpkg@1.19.0.5ubuntu2	no fix listed	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	dpkg@1.19.7ubuntu3	no fix listed	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	dpkg@1.18.4ubuntu1.5	no fix listed	2
opea/embedding-tei :1.0	5c9639de61c1	dpkg@1.21.22	1.21.23	2
opea/reranking-tei :1.0	e48613afb191	dpkg@1.21.22	1.21.23	2
opea/retriever-redis :1.0	eb746b263705	dpkg@1.21.22	1.21.23	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	dpkg@1.21.22	1.21.23	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	dpkg@1.21.22	1.21.23	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	dpkg@1.21.22	1.21.23	2