StackRadar

CVE-2025-66031

High

Advisory

Published 26 Nov 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
127
of 17,781 indexed, latest versions
Container images
121
deployed by those charts
Fix available
1 of 1
affected package

node-forge has ASN.1 Unbounded Recursion

Carried by container images the latest versions of 127 of 17,781 indexed charts deploy, on 121 images.

Affected packageAffected versionsFixed inImages
node-forgenpm0.7.1, 0.7.6, 0.8.0, 0.8.5+6 more1.3.2121
OSV records
GHSA-554w-wpv2-vw27

Charts affected

127 by stars
ChartLatestAffected imagesRadar Score
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
node-forge@1.3.1
1.3.2

Open the chart page →

5,141
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
node-forge@0.10.0
1.3.2

Open the chart page →

12,907
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
node-forge@1.3.1
1.3.2

Open the chart page →

9,146
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
node-forge@1.3.1
1.3.2

Open the chart page →

3,769
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
node-forge@1.3.1
1.3.2

Open the chart page →

13,852
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
node-forge@1.3.1
1.3.2

Open the chart page →

4,551
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
node-forge@0.10.0
1.3.2

Open the chart page →

3,744
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
node-forge@1.3.1
1.3.2

Open the chart page →

3,159
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
node-forge@0.7.6
1.3.2

Open the chart page →

4,043
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
node-forge@0.10.0
1.3.2

Open the chart page →

4,591
theloungegeek-cookbookVerified publisher3.4.21 of 1See more

thelounge geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
thelounge/thelounge:4.2.0-alpine639978459c3a
node-forge@0.9.1
1.3.2

Open the chart page →

2,689
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
library/kibana:7.17.150172f1c538e7
node-forge@1.3.1
1.3.2

Open the chart page →

34,754
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
node-forge@1.3.1
1.3.2

Open the chart page →

9,019
theloungehalkeye4.3.11 of 1See more

thelounge halkeye 4.3.1

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
thelounge/thelounge:4.3.0-alpine0037aa258261
node-forge@0.10.0
1.3.2

Open the chart page →

1,938
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
node-forge@0.9.0
1.3.2

Open the chart page →

8,213
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
node-forge@1.3.1
1.3.2

Open the chart page →

18,813
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
node-forge@0.10.0
1.3.2

Open the chart page →

4,253
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
node-forge@1.3.1
1.3.2

Open the chart page →

3,407
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
node-forge@1.3.1
1.3.2

Open the chart page →

11,812
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
node-forge@0.8.5
1.3.2

Open the chart page →

7,232
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
node-forge@1.3.1
1.3.2

Open the chart page →

5,826
shinobik8s-home-lab-repo2.1.11 of 1See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
shinobisystems/shinobi:latestc2f5ce2e1067
node-forge@0.10.0
1.3.2

Open the chart page →

4,667
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
node-forge@0.10.0
1.3.2

Open the chart page →

70,530
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
node-forge@0.10.0
1.3.2

Open the chart page →

3,397
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
node-forge@1.2.1
1.3.2

Open the chart page →

5,410
online-boutiquekubesphere-testVerified publisher0.1.02 of 11See more

online-boutique kubesphere-test 0.1.0

2 of the 11 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
node-forge@0.10.0
1.3.2
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
node-forge@0.10.0
1.3.2

Open the chart page →

26,018
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
node-forge@1.3.1
1.3.2

Open the chart page →

3,555
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
node-forge@0.10.0
1.3.2

Open the chart page →

5,287
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
node-forge@0.10.0
1.3.2

Open the chart page →

5,940
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
node-forge@0.10.0
1.3.2

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
node-forge@0.10.0
1.3.2

Open the chart page →

10,603
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
node-forge@0.10.0
1.3.2

Open the chart page →

6,438
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
node-forge@0.7.6
1.3.2

Open the chart page →

6,684
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
node-forge@1.3.1
1.3.2

Open the chart page →

4,960
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
node-forge@1.3.0
1.3.2

Open the chart page →

6,608
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
node-forge@1.3.1
1.3.2

Open the chart page →

2,116
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
node-forge@1.3.1
1.3.2

Open the chart page →

2,116
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
node-forge@1.3.1
1.3.2

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
node-forge@1.3.1
1.3.2

Open the chart page →

2,116
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
node-forge@1.3.1
1.3.2

Open the chart page →

17,929
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
node-forge@0.10.0
1.3.2

Open the chart page →

3,269
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_server:0.3.31a528c794270
node-forge@0.7.6
1.3.2

Open the chart page →

109,294
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
node-forge@1.3.1
1.3.2

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
node-forge@1.3.1
1.3.2

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
node-forge@1.3.1
1.3.2

Open the chart page →

15,187
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
node-forge@0.10.0
1.3.2

Open the chart page →

27,465
flomesh-consoleopenshift0.70.0-30-ubi81 of 2See more

flomesh-console openshift 0.70.0-30-ubi8

1 of the 2 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
node-forge@0.10.0
1.3.2

Open the chart page →

9,968
codimdphntom0.1.121 of 3See more

codimd phntom 0.1.12

1 of the 3 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
phntom/codimd:2.4.31b9aafbb62e6
node-forge@0.7.6
1.3.2

Open the chart page →

6,524
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
node-forge@0.10.0
1.3.2

Open the chart page →

5,215
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2025-66031.

Container imageDigestPackageFixed in
joplin/server:3.0-beta52af57880c0e
node-forge@1.3.1
1.3.2

Open the chart page →

7,413

Container images carrying it

121 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
rcdelacruz/my-strapi-app:js-amd6438007f358355
node-forge@1.3.1
1.3.2
3
agoldis/sorry-cypress-director:2.5.1110228ecd353b
node-forge@1.3.0
1.3.2
2
amazon/opendistro-for-elasticsearch-kibana:1.13.2c740d7a89475
node-forge@0.10.0
1.3.2
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
node-forge@0.10.0
1.3.2
2
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
node-forge@0.9.0
1.3.2
2
opensearchproject/opensearch-dashboards:1.0.039695180364b
node-forge@0.10.0
1.3.2
2
stakater/stakater-nordmart-review-ui:1.0.143f4926eedc74
node-forge@0.10.0
1.3.2
2
ghcr.io/lissy93/dashy:2.1.1acb40032ad4b
node-forge@0.10.0
1.3.2
2
apimap/developer:v1.3.1406d3858e20c
node-forge@1.3.1
1.3.2
1
apimap/portal:v2.4.0041a4790c65c
node-forge@1.3.1
1.3.2
1
arfath29/3-tier-app-frontend:latest384b3e377f47
node-forge@0.10.0
1.3.2
1
assistiot/cybersecurity-monitoring_id-kbn:latest2297b4350211
node-forge@0.10.0
1.3.2
1
assistiot/cybersecurity-monitoring_ir-kbn:latest0570b27bb7c2
node-forge@0.10.0
1.3.2
1
assistiot/open_api_frontend:1.0.1f11d82defc70
node-forge@1.3.1
1.3.2
1
ccjacobs14/amazon:59a9b14a6f09e
node-forge@1.3.1
1.3.2
1
chatwoot/chatwoot:v4.15.167ebc751c171
node-forge@0.10.0
1.3.2
1
codercom/code-server:4.11.0-debian1e2cc688008e
node-forge@1.3.1
1.3.2
1
coldatom/containers-security-front:latest7c2fbbb41bcf
node-forge@1.3.1
1.3.2
1
conduction/conduction-ui-app:devd591f5e6f2a9
node-forge@0.10.0
1.3.2
1
countly/api:25.05.4f4cc7447c4f5
node-forge@1.3.1
1.3.2
1
countly/countly-server:25.05.4e3c238248f99
node-forge@1.3.1
1.3.2
1
countly/frontend:25.05.42acbc11499b6
node-forge@1.3.1
1.3.2
1
cryptexlabs/authf:0.12.11189c07411d7c
node-forge@1.3.1
1.3.2
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
node-forge@1.3.1
1.3.2
1
directus/directus:11.1.0e3c8bb975350
node-forge@1.3.1
1.3.2
1
enketo/enketo-express:3.0.4dcad9c2273f6
node-forge@0.10.0
1.3.2
1
fallenbagel/jellyseerr:latest4538137bc5af
node-forge@1.3.1
1.3.2
1
fiware/idm:8.3.3a1b6ed4ae84f
node-forge@1.3.1
1.3.2
1
gristlabs/grist:0.7.96e71b1914a7e
node-forge@0.10.0
1.3.2
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
node-forge@1.3.1
1.3.2
1
helga09/shoes_ukr:v1.1.17999bc8b77c0
node-forge@1.3.1
1.3.2
1
henrywhitaker3/speedtest-tracker:latest47159a940229
node-forge@0.10.0
1.3.2
1
i4trust/pdc-portal:2.0.03e77858e1219
node-forge@0.10.0
1.3.2
1
ibarreche/cloud-front-ci:latestc8970ac1c8dc
node-forge@0.10.0
1.3.2
1
joplin/server:3.0-beta52af57880c0e
node-forge@1.3.1
1.3.2
1
joplin/server:2.14.2-betab87564ef34e9
node-forge@1.3.1
1.3.2
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
node-forge@1.3.1
1.3.2
1
kubeflownotebookswg/centraldashboard:v1.6.137300551dea6
node-forge@0.10.0
1.3.2
1
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
node-forge@0.10.0
1.3.2
1
kyleslugg/klusterview:latestba8c36dfdfbd
node-forge@1.3.1
1.3.2
1
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
node-forge@1.3.1
1.3.2
1
library/ghost:6.25.12654b1e90413
node-forge@1.3.1
1.3.2
1
library/ghost:4.37.0767230c0f263
node-forge@1.2.1
1.3.2
1
library/ghost:5.79.083f7bf209844
node-forge@1.3.1
1.3.2
1
library/ghost:6.22.0-alpine3.23ac533a6988ee
node-forge@1.3.1
1.3.2
1
library/kibana:7.17.150172f1c538e7
node-forge@1.3.1
1.3.2
1
library/kibana:8.18.004c0fc150f3a
node-forge@1.3.1
1.3.2
1
library/kibana:7.17.8c5781ba340ef
node-forge@1.3.1
1.3.2
1
library/kibana:7.17.3e2e2031c15be
node-forge@1.3.0
1.3.2
1
linuxserver/code-server:4.10.1a5e43a05ae79
node-forge@1.3.1
1.3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.