StackRadar

CVE-2025-6558

HighKEV

Advisory

Published 15 Jul 2025In the index since 8 Sept 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.096
95th percentile
CISA KEV
Listed
since 22 Jul 2025
Charts affected
3
of 17,781 indexed, latest versions
Container images
3
deployed by those charts
Fix available
1 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 3 images.

Affected packageAffected versionsFixed inImages
qtwebkit-opensource-srcdeb5.212.0~alpha4-1ubuntu2.1, 5.212.0~alpha4-36no fix listed2
chromiumdeb137.0.7151.119-1~deb12u1138.0.7204.157-1~deb12u11
webkit2gtkdeb2.38.6-0ubuntu0.20.04.1no fix listed1
OSV records
DEBIAN-CVE-2025-6558UBUNTU-CVE-2025-6558

Charts affected

3 by stars
ChartLatestAffected imagesRadar Score
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-6558.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
qtwebkit-opensource-src@5.212.0~alpha4-36
no fix listed

Open the chart page →

23,964
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-6558.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1
webkit2gtk@2.38.6-0ubuntu0.20.04.1
no fix listed
no fix listed

Open the chart page →

64,489
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-6558.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
chromium@137.0.7151.119-1~deb12u1
138.0.7204.157-1~deb12u1

Open the chart page →

37,942

Container images carrying it

3 by charts deploying them

A fixed version is listed for 1 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
qtwebkit-opensource-src@5.212.0~alpha4-1ubuntu2.1
webkit2gtk@2.38.6-0ubuntu0.20.04.1
no fix listed
no fix listed
1
qonstrukt/php:8.4-v8-apache089af7925aa1
qtwebkit-opensource-src@5.212.0~alpha4-36
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
chromium@137.0.7151.119-1~deb12u1
138.0.7204.157-1~deb12u1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.