StackRadar

CVE-2025-66863

High

Advisory

Published 29 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
420
of 17,781 indexed, latest versions
Container images
404
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 420 of 17,781 indexed charts deploy, on 404 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+41 moreno fix listed404
OSV records
DEBIAN-CVE-2025-66863UBUNTU-CVE-2025-66863

Charts affected

420 by stars
ChartLatestAffected imagesRadar Score
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
binutils@2.34-6ubuntu1.6
no fix listed

Open the chart page →

7,960
convertigoconvertigoOfficialVerified publisher8.4.32 of 5See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
binutils@2.40-2
no fix listed
library/convertigo:8.4.3ae605bfcda05
binutils@2.42-4ubuntu2.10
no fix listed

Open the chart page →

17,404
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
binutils@2.40-2
no fix listed

Open the chart page →

28,839
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
binutils@2.44-3
no fix listed

Open the chart page →

9,316
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
binutils@2.40-2
no fix listed

Open the chart page →

4,641
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

10,154
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
binutils@2.30-21ubuntu1~18.04.9
no fix listed

Open the chart page →

11,839
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
binutils@2.40-2
no fix listed

Open the chart page →

4,127
coreinstill-aiOfficialVerified publisher0.1.753 of 15See more

core instill-ai 0.1.75

3 of the 15 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
binutils@2.44-3
no fix listed
instill/mgmt-backend:d0933d4ebe12f77a3f9
binutils@2.44-3
no fix listed
instill/model-backend:611f0f2e980125e5ba5
binutils@2.44-3
no fix listed

Open the chart page →

30,816
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
binutils@2.34-6ubuntu1.11
no fix listed

Open the chart page →

11,582
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
binutils@2.44-3
no fix listed

Open the chart page →

2,582
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
binutils@2.42-4ubuntu2.10
no fix listed

Open the chart page →

8,690
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
binutils@2.34-6ubuntu1.1
no fix listed

Open the chart page →

24,488
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
binutils@2.44-3
no fix listed

Open the chart page →

5,852
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
binutils@2.34-6ubuntu1.9
no fix listed

Open the chart page →

15,477
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
binutils@2.44-3
no fix listed

Open the chart page →

9,770
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
binutils@2.38-3ubuntu1
no fix listed

Open the chart page →

28,534
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
binutils@2.30-21ubuntu1~18.04.4
no fix listed

Open the chart page →

18,137
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
binutils@2.30-21ubuntu1~18.04.7
no fix listed

Open the chart page →

12,046
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
binutils@2.44-3
no fix listed

Open the chart page →

5,880
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
binutils@2.40-2
no fix listed

Open the chart page →

22,202
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
binutils@2.26.1-1ubuntu1~16.04.6
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
binutils@2.26.1-1ubuntu1~16.04.8
no fix listed

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
binutils@2.26.1-1ubuntu1~16.04.6
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
binutils@2.26.1-1ubuntu1~16.04.8
no fix listed

Open the chart page →

77,687
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
binutils@2.34-6ubuntu1.1
no fix listed

Open the chart page →

13,145
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
binutils@2.42-4ubuntu2.5
no fix listed

Open the chart page →

3,674
passbolt-hachristianhuthVerified publisher6.0.11 of 4See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
binutils@2.40-2
no fix listed

Open the chart page →

10,817
typo3christianhuthVerified publisher7.7.02 of 2See more

typo3 christianhuth 7.7.0

2 of the 2 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
binutils@2.40-2
no fix listed
martinhelmich/typo3:12.4c83a4f3fd7ae
binutils@2.40-2
no fix listed

Open the chart page →

8,466
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
binutils@2.26.1-1ubuntu1~16.04.6
no fix listed

Open the chart page →

36,094
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
binutils@2.44-3
no fix listed

Open the chart page →

11,205
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
binutils@2.40-2
no fix listed

Open the chart page →

7,473
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
binutils@2.38-4ubuntu2.6
no fix listed

Open the chart page →

10,858
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
binutils@2.40-2
no fix listed

Open the chart page →

18,376
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
binutils@2.42-4ubuntu2.10
no fix listed

Open the chart page →

3,671
rstudiodsri-helm-charts0.1.281 of 1See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
binutils@2.42-4ubuntu2.5
no fix listed

Open the chart page →

5,670
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
binutils@2.40-2
no fix listed

Open the chart page →

31,510
roundcubeencircle360-ossVerified publisher0.8.31 of 1See more

roundcube encircle360-oss 0.8.3

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
roundcube/roundcubemail:1.6.16-apache-nonroot17d9d9580962
binutils@2.44-3
no fix listed

Open the chart page →

5,584
eoapieoapiOfficialVerified publisher0.16.21 of 7See more

eoapi eoapi 0.16.2

1 of the 7 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
ghcr.io/stac-utils/stac-fastapi-pgstac:6.4.0fa35b9519abb
binutils@2.44-3
no fix listed

Open the chart page →

6,250
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
binutils@2.40-2
no fix listed

Open the chart page →

11,458
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
binutils@2.30-21ubuntu1~18.04.2
no fix listed

Open the chart page →

12,908
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

15,653
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
binutils@2.38-3ubuntu1
no fix listed

Open the chart page →

13,025
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

31,000
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
binutils@2.40-2
no fix listed

Open the chart page →

10,072
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
binutils@2.40-2
no fix listed

Open the chart page →

6,374
guacamolehelmforgeVerified publisher1.5.21 of 5See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
binutils@2.42-4ubuntu2.5
no fix listed

Open the chart page →

8,716
matomohelmforgeVerified publisher2.3.01 of 3See more

matomo helmforge 2.3.0

1 of the 3 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
library/matomo:5.13.0-apache8e6bdd396496
binutils@2.44-3
no fix listed

Open the chart page →

2,680
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
binutils@2.38-4ubuntu2.8
no fix listed

Open the chart page →

12,397
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
binutils@2.44-3
no fix listed

Open the chart page →

11,764
kafka-kraft-on-k8skafka-kraft-on-k8sVerified publisher1.1.03 of 3See more

kafka-kraft-on-k8s kafka-kraft-on-k8s 1.1.0

3 of the 3 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
kafkakraft/kafka-connect:3.7.0062d697db7e5
binutils@2.38-4ubuntu2.6
no fix listed
kafkakraft/kafka-controller:3.7.0f261ad288fce
binutils@2.38-4ubuntu2.6
no fix listed
kafkakraft/kafkakraft:3.7.02e4b593b878b
binutils@2.38-4ubuntu2.6
no fix listed

Open the chart page →

14,130
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2025-66863.

Container imageDigestPackageFixed in
glpi/glpi:latest4b681082a79e
binutils@2.44-3
no fix listed

Open the chart page →

4,802

Container images carrying it

404 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
binutils@2.46-3ubuntu2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
binutils@2.40-2
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
binutils@2.34-6ubuntu1.1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
binutils@2.40-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.