StackRadar

CVE-2025-66866

High

Advisory

Published 29 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
24th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
423
of 17,787 indexed, latest versions
Container images
408
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 423 of 17,787 indexed charts deploy, on 408 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+41 moreno fix listed408
OSV records
DEBIAN-CVE-2025-66866UBUNTU-CVE-2025-66866

Charts affected

423 by stars
ChartLatestAffected imagesRadar Score
admin-api-svcmojaloop12.0.01 of 4See more

admin-api-svc mojaloop 12.0.0

1 of the 4 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

12,147
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
binutils@2.40-2
no fix listed

Open the chart page →

16,111
fspiop-transfer-api-svcmojaloop12.0.11 of 3See more

fspiop-transfer-api-svc mojaloop 12.0.1

1 of the 3 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

11,518
mojaloopmojaloop14.0.01 of 6See more

mojaloop mojaloop 14.0.0

1 of the 6 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
solsson/kafka:latest41e5d8f6f290
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

19,265
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
binutils@2.40-2
no fix listed

Open the chart page →

23,263
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
binutils@2.40-2
no fix listed

Open the chart page →

30,195
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

25,989
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
binutils@2.40-2
no fix listed

Open the chart page →

13,711
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
binutils@2.40-2
no fix listed

Open the chart page →

12,839
smilencsaVerified publisher1.1.07 of 23See more

smile ncsa 1.1.0

7 of the 23 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
binutils@2.34-6ubuntu1.6
no fix listed
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
binutils@2.30-21ubuntu1~18.04.8
no fix listed
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
binutils@2.40-2
no fix listed
socialmediamacroscope/image_crawler:0.1.2f508216be63c
binutils@2.30-21ubuntu1~18.04.8
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
binutils@2.40-2
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
binutils@2.40-2
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
binutils@2.40-2
no fix listed

Open the chart page →

109,485
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
binutils@2.40-2
no fix listed

Open the chart page →

9,831
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

22,713
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
binutils@2.40-2
no fix listed

Open the chart page →

13,331
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
binutils@2.40-2
no fix listed

Open the chart page →

13,405
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
binutils@2.40-2
no fix listed

Open the chart page →

13,387
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
binutils@2.30-21ubuntu1~18.04.2
no fix listed

Open the chart page →

27,667
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
binutils@2.40-2
no fix listed

Open the chart page →

5,313
laravel-appoli-the-devVerified publisher2.0.171 of 1See more

laravel-app oli-the-dev 2.0.17

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
binutils@2.44-3
no fix listed

Open the chart page →

2,692
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
binutils@2.26.1-1ubuntu1~16.04.8
no fix listed
omecproject/onos-progran:1.0.05715e5648aa0
binutils@2.26.1-1ubuntu1~16.04.6
no fix listed
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
binutils@2.26.1-1ubuntu1~16.04.8
no fix listed

Open the chart page →

88,616
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
binutils@2.26.1-1ubuntu1~16.04.8
no fix listed

Open the chart page →

26,234
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
binutils@2.30-21ubuntu1~18.04.2
no fix listed

Open the chart page →

40,795
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
binutils@2.26.1-1ubuntu1~16.04.6
no fix listed

Open the chart page →

38,889
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
voltha/voltha-envoy:1.6.059ab2a00f712
binutils@2.24-5ubuntu14.2
no fix listed

Open the chart page →

93,965
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
binutils@2.40-2
no fix listed

Open the chart page →

11,003
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
binutils@2.30-21ubuntu1~18.04.4
no fix listed

Open the chart page →

36,230
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
binutils@2.40-2
no fix listed

Open the chart page →

10,965
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.07 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

7 of the 40 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
binutils@2.44-3
no fix listed
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
binutils@2.40-2
no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
binutils@2.42-4ubuntu2.10
no fix listed
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
binutils@2.42-4ubuntu2.10
no fix listed
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
binutils@2.42-4ubuntu2.10
no fix listed
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
binutils@2.42-4ubuntu2.10
no fix listed
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
binutils@2.42-4ubuntu2.10
no fix listed

Open the chart page →

72,154
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
binutils@2.44-3
no fix listed

Open the chart page →

6,544
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
binutils@2.40-2
no fix listed

Open the chart page →

11,095
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
binutils@2.40-2
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
binutils@2.40-2
no fix listed

Open the chart page →

25,681
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
mastercloudapps/planner:v1.2340a950b311b2
binutils@2.38-4ubuntu2.1
no fix listed

Open the chart page →

27,667
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
binutils@2.40-2
no fix listed

Open the chart page →

5,731
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
binutils@2.40-2
no fix listed

Open the chart page →

8,215
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
binutils@2.40-2
no fix listed

Open the chart page →

15,077
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
binutils@2.34-6ubuntu1.3
no fix listed

Open the chart page →

22,146
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
binutils@2.40-2
no fix listed

Open the chart page →

11,373
substreams-sink-kvpinaxVerified publisher0.0.41 of 1See more

substreams-sink-kv pinax 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
binutils@2.34-6ubuntu1.9
no fix listed

Open the chart page →

6,695
substreams-sink-nooppinaxVerified publisher0.0.31 of 1See more

substreams-sink-noop pinax 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
binutils@2.34-6ubuntu1.9
no fix listed

Open the chart page →

6,641
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
binutils@2.40-2
no fix listed

Open the chart page →

11,017
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
library/node:208f693eaa7e0a
binutils@2.40-2
no fix listed

Open the chart page →

25,626
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
binutils@2.40-2
no fix listed

Open the chart page →

11,680
agentpolyaxon2.16.43 of 4See more

agent polyaxon 2.16.4

3 of the 4 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
binutils@2.44-3
no fix listed
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
binutils@2.44-3
no fix listed
polyaxon/polyaxon-streams:2.16.4c186bd9834c0
binutils@2.44-3
no fix listed

Open the chart page →

10,004
polyaxonpolyaxon2.16.43 of 5See more

polyaxon polyaxon 2.16.4

3 of the 5 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
binutils@2.44-3
no fix listed
polyaxon/polyaxon-api:2.16.42b55c3265a90
binutils@2.44-3
no fix listed
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
binutils@2.44-3
no fix listed

Open the chart page →

13,520
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
binutils@2.40-2
no fix listed

Open the chart page →

4,996
priceapp-chartpriceapp0.1.01 of 1See more

priceapp-chart priceapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
ildarmukhametzyanov/priceapp:0.115d23720a3ee
binutils@2.40-2
no fix listed

Open the chart page →

6,932
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
binutils@2.44-3
no fix listed

Open the chart page →

5,234
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
binutils@2.40-2
no fix listed

Open the chart page →

12,652
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
binutils@2.40-2
no fix listed

Open the chart page →

11,400
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
binutils@2.40-2
no fix listed

Open the chart page →

11,400
rawfile-localpvrawfile0.15.21 of 6See more

rawfile-localpv rawfile 0.15.2

1 of the 6 container images this version deploys carry CVE-2025-66866.

Container imageDigestPackageFixed in
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
binutils@2.44-3
no fix listed

Open the chart page →

2,794

Container images carrying it

408 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
binutils@2.38-4ubuntu2
no fix listed
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
binutils@2.40-2
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
binutils@2.40-2
no fix listed
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
binutils@2.42-4ubuntu2.10
no fix listed
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
binutils@2.46-3ubuntu2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
binutils@2.40-2
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
binutils@2.34-6ubuntu1.1
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
binutils@2.40-2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.