StackRadar

CVE-2025-66865

High

Advisory

Published 29 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
420
of 17,781 indexed, latest versions
Container images
404
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 420 of 17,781 indexed charts deploy, on 404 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+41 moreno fix listed404
OSV records
DEBIAN-CVE-2025-66865UBUNTU-CVE-2025-66865

Charts affected

420 by stars
ChartLatestAffected imagesRadar Score
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
binutils@2.34-6ubuntu1.4
no fix listed

Open the chart page →

25,122
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
binutils@2.44-3
no fix listed

Open the chart page →

7,233
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
binutils@2.38-4ubuntu2.1
no fix listed

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
binutils@2.38-4ubuntu2.1
no fix listed

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
binutils@2.38-4ubuntu2.1
no fix listed

Open the chart page →

27,537
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
binutils@2.38-4ubuntu2.1
no fix listed

Open the chart page →

27,537
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
binutils@2.38-4ubuntu2.1
no fix listed

Open the chart page →

32,205
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
binutils@2.34-6ubuntu1.4
no fix listed

Open the chart page →

9,334
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
binutils@2.40-2
no fix listed

Open the chart page →

5,290
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
binutils@2.44-3
no fix listed

Open the chart page →

6,431
beeport-uiethersphereVerified publisher0.76.21 of 3See more

beeport-ui ethersphere 0.76.2

1 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
binutils@2.40-2
no fix listed

Open the chart page →

7,368
multichain-uiethersphereVerified publisher0.73.11 of 3See more

multichain-ui ethersphere 0.73.1

1 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
binutils@2.40-2
no fix listed

Open the chart page →

7,368
static-siteethersphereVerified publisher0.73.11 of 2See more

static-site ethersphere 0.73.1

1 of the 2 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
library/node:latestf5d1cc40abc1
binutils@2.44-3
no fix listed

Open the chart page →

6,851
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
binutils@2.40-2
no fix listed

Open the chart page →

10,741
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
binutils@2.44-3
no fix listed

Open the chart page →

5,039
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
binutils@2.44-3
no fix listed
fireflyiii/data-importer:version-2.2.3ab52bf932546
binutils@2.44-3
no fix listed

Open the chart page →

10,260
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
binutils@2.44-3
no fix listed

Open the chart page →

4,829
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
binutils@2.44-3
no fix listed

Open the chart page →

5,704
business-api-ecosystemfiware1.1.02 of 4See more

business-api-ecosystem fiware 1.1.0

2 of the 4 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
binutils@2.34-6ubuntu1.11
no fix listed
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
binutils@2.40-2
no fix listed

Open the chart page →

64,489
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
binutils@2.44-3
no fix listed

Open the chart page →

5,704
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
binutils@2.40-2
no fix listed

Open the chart page →

3,463
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest000c5ee5ee96
binutils@2.44-3
no fix listed

Open the chart page →

3,112
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

12,222
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
binutils@2.40-2
no fix listed

Open the chart page →

9,077
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
binutils@2.40-2
no fix listed

Open the chart page →

12,958
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
binutils@2.34-6ubuntu1.1
no fix listed

Open the chart page →

24,293
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
binutils@2.44-3
no fix listed

Open the chart page →

8,923
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
binutils@2.44-3
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
binutils@2.40-2
no fix listed

Open the chart page →

12,170
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
binutils@2.40-2
no fix listed

Open the chart page →

49,025
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
binutils@2.38-4ubuntu2.8
no fix listed

Open the chart page →

4,556
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
binutils@2.38-4ubuntu2.6
no fix listed

Open the chart page →

9,096
heliconehelicone0.1.422 of 14See more

helicone helicone 0.1.42

2 of the 14 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
binutils@2.34-6ubuntu1.9
no fix listed
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
binutils@2.40-2
no fix listed

Open the chart page →

24,995
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
binutils@2.30-21ubuntu1~18.04.8
no fix listed

Open the chart page →

10,627
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
binutils@2.44-3
no fix listed

Open the chart page →

9,342
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
binutils@2.44-3
no fix listed

Open the chart page →

10,849
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
binutils@2.34-6ubuntu1.9
no fix listed

Open the chart page →

18,813
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
binutils@2.44-3
no fix listed

Open the chart page →

29,817
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
binutils@2.40-2
no fix listed

Open the chart page →

3,802
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
binutils@2.40-2
no fix listed

Open the chart page →

9,653
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
binutils@2.40-2
no fix listed

Open the chart page →

6,103
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
binutils@2.44-3
no fix listed

Open the chart page →

4,751
tomcathelmforgeVerified publisher1.0.61 of 2See more

tomcat helmforge 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
library/tomcat:11.0.25-jdk17-temurin-noble9e1d2afa6898
binutils@2.42-4ubuntu2.10
no fix listed

Open the chart page →

1,185
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
binutils@2.40-2
no fix listed

Open the chart page →

12,607
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
binutils@2.40-2
no fix listed

Open the chart page →

25,017
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
binutils@2.38-4ubuntu2.5
no fix listed

Open the chart page →

14,290
printserverhmediadeVerified publisher1.0.21 of 4See more

printserver hmediade 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
hmediade/printserver:latest481a552c8e1c
binutils@2.38-4ubuntu2.5
no fix listed

Open the chart page →

10,839
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
binutils@2.34-6ubuntu1.4
no fix listed

Open the chart page →

8,685
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
binutils@2.38-4ubuntu2.1
no fix listed

Open the chart page →

32,205
mvfi4trustVerified publisher1.1.21 of 1See more

mvf i4trust 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
wistefan/mvf:lateste0887302b2d8
binutils@2.38-4ubuntu2
no fix listed

Open the chart page →

7,144
vcwaltidi4trustVerified publisher0.0.191 of 1See more

vcwaltid i4trust 0.0.19

1 of the 1 container images this version deploys carry CVE-2025-66865.

Container imageDigestPackageFixed in
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
binutils@2.38-4ubuntu2
no fix listed

Open the chart page →

7,862

Container images carrying it

404 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
jaedb/iris:latest048cfbf58d57
binutils@2.40-2
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
binutils@2.34-6ubuntu1.3
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
binutils@2.40-2
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
binutils@2.38-4ubuntu2.6
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
binutils@2.34-6ubuntu1
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
binutils@2.34-6ubuntu1.3
no fix listed
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
binutils@2.38-4ubuntu2.6
no fix listed
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
binutils@2.38-4ubuntu2.6
no fix listed
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
binutils@2.38-4ubuntu2.6
no fix listed
1
kennethreitz/httpbin:latest599fe5e50731
binutils@2.30-21ubuntu1~18.04
no fix listed
1
kimai/kimai2:2.65.06dfc63199654
binutils@2.40-2
no fix listed
1
kitware/cdash:v5.3.0d7767d9b9da4
binutils@2.44-3
no fix listed
1
kixote/typemill4e9dff179519
binutils@2.44-3
no fix listed
1
kixote/typemill628f79a08cc7
binutils@2.44-3
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
binutils@2.40-2
no fix listed
1
kong/httpbin:latesta6ac46531193
binutils@2.38-4ubuntu2.6
no fix listed
1
kusionstack/kusion:v0.14.0126c8f0b0976
binutils@2.38-4ubuntu2.6
no fix listed
1
laly9999/node-app:1dd0e503913e1
binutils@2.40-2
no fix listed
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
binutils@2.42-4ubuntu2.10
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
binutils@2.42-4ubuntu2.7
no fix listed
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
binutils@2.42-4ubuntu2.10
no fix listed
1
library/convertigo:8.4.3ae605bfcda05
binutils@2.42-4ubuntu2.10
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
binutils@2.40-2
no fix listed
1
library/eclipse-temurin:211f79c73404fb
binutils@2.46-3ubuntu2
no fix listed
1
library/eclipse-temurin:2185f00967bcc6
binutils@2.46-3ubuntu2
no fix listed
1
library/golang:latest512690a56605
binutils@2.44-3
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
binutils@2.40-2
no fix listed
1
library/matomo:5.13.0-apache8e6bdd396496
binutils@2.44-3
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
binutils@2.40-2
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
binutils@2.44-3
no fix listed
1
library/node:208f693eaa7e0a
binutils@2.40-2
no fix listed
1
library/node:latestf5d1cc40abc1
binutils@2.44-3
no fix listed
1
library/php:8.4-fpm59fa733c9af6
binutils@2.44-3
no fix listed
1
library/python:3.1070c9cc675605
binutils@2.44-3
no fix listed
1
library/python:3.8d41127070014
binutils@2.40-2
no fix listed
1
library/python:3.9da5aee29682d
binutils@2.44-3
no fix listed
1
library/sonarqube:10.0.0-communityef9723cf4fe4
binutils@2.38-4ubuntu2.2
no fix listed
1
library/tomcat:11.0.25-jdk17-temurin-noble9e1d2afa6898
binutils@2.42-4ubuntu2.10
no fix listed
1
library/varnish:7.5.04d0bb287d87b
binutils@2.40-2
no fix listed
1
library/wordpress:6.4.3-apache8ae66efb09a2
binutils@2.40-2
no fix listed
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
binutils@2.44-3
no fix listed
1
library/wordpress:php8.1-apachef73396626d2f
binutils@2.44-3
no fix listed
1
linuxserver/unifi-controller:8.0.240ae315a3a456
binutils@2.34-6ubuntu1.7
no fix listed
1
linuxserver/unifi-controller:7.3.83ab105cc50322
binutils@2.34-6ubuntu1.5
no fix listed
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
binutils@2.34-6ubuntu1.3
no fix listed
1
makersquad/harp-proxy:0.8.1a40dd258c527
binutils@2.40-2
no fix listed
1
mariusm/vingress:0.5.0b3db186c3d72
binutils@2.44-3
no fix listed
1
martinhelmich/typo3:12.4c83a4f3fd7ae
binutils@2.40-2
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
binutils@2.40-2
no fix listed
1
mautic/mautic:7-apacheeb8cc73d97e1
binutils@2.40-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.