StackRadarChart IndexLive demo

CVE-2025-66866

High

Advisory

Published 29 Dec 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.003; 24th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 423; of 17,787 indexed, latest versions
Container images: 408; deployed by those charts
Fix available: None; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 423 of 17,787 indexed charts deploy, on 408 images.

Affected package	Affected versions	Fixed in	Images
binutilsdeb	2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+41 more	no fix listed	408

OSV records: DEBIAN-CVE-2025-66866 UBUNTU-CVE-2025-66866

Charts affected

423 by stars

Chart

Latest

Affected images

Radar Score

sn-platform-slimstreamnative

1 of 6 See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	binutils@2.34-6ubuntu1.9	no fix listed

Open the chart page →

10,182

kurento_webrtc_demostunner

1 of 2 See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	binutils@2.42-4ubuntu2.6	no fix listed

Open the chart page →

12,524

stunner-kurento-one2one-callstunner

1 of 2 See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
kurento/kurento-media-server :latest	03c0d34d0828	binutils@2.42-4ubuntu2.6	no fix listed

Open the chart page →

12,524

verbasubstratus

1 of 1 See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
substratusai/verba :v0.4.0-baseURL2	61695be635eb	binutils@2.40-2	no fix listed

Open the chart page →

12,937

nagvissvtech-public-helm-charts

1 of 1 See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_nagvis :v1.2.1	18394b08e6c3	binutils@2.40-2	no fix listed

Open the chart page →

7,880

rundecksvtech-public-helm-charts

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	binutils@2.34-6ubuntu1.9	no fix listed

Open the chart page →

18,828

1 of 1 See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
library/python :3.8	d41127070014	binutils@2.40-2	no fix listed

Open the chart page →

10,545

tensor_apptensor-app

1 of 3 See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
xeladock/mysql_dns :latest	4baf531453f1	binutils@2.38-3ubuntu1	no fix listed

Open the chart page →

17,561

supabaseteochenglim

1 of 13 See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
supabase/studio :latest	94a2a9d2906e	binutils@2.40-2	no fix listed

Open the chart page →

9,469

flask-contactstest-configmap

1 of 3 See more

flask-contacts test-configmap 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
library/phpmyadmin :latest	3a8a8d6b5289	binutils@2.44-3	no fix listed

Open the chart page →

5,624

helm-testtest-helm-artifacthub

1 of 2 See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
carlosmz87/test_helm_backend :latest	8ffa63aa995d	binutils@2.40-2	no fix listed

Open the chart page →

11,674

codegentest-opea

1 of 5 See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
opea/codegen-ui :1.0	2bee4eb66f3e	binutils@2.40-2	no fix listed

Open the chart page →

26,489

codetranstest-opea

1 of 5 See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
opea/codetrans-ui :1.0	3ef121f34610	binutils@2.40-2	no fix listed

Open the chart page →

26,060

docsumtest-opea

1 of 5 See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
opea/docsum-ui :1.0	7f854e9bffaf	binutils@2.40-2	no fix listed

Open the chart page →

26,535

nextcloudth-charts

1 of 1 See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
library/nextcloud :31.0.6-apache	588609d76b21	binutils@2.40-2	no fix listed

Open the chart page →

10,112

tfy-distributortruefoundry

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	binutils@2.40-2	no fix listed

Open the chart page →

17,348

demo-backendv2fly

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	binutils@2.40-2	no fix listed

Open the chart page →

14,383

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	binutils@2.38-4ubuntu2.6	no fix listed

Open the chart page →

9,396

aih-scannerwallarm

1 of 2 See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
wallarm/aih-scanner :2.7.11	f1cb26db1f5b	binutils@2.44-3	no fix listed

Open the chart page →

3,906

supersetwbstack

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	binutils@2.40-2	no fix listed

Open the chart page →

6,540

web-dvwaweb-dvwa

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
gulacedia/web-dvwa-new :v3	67b467d961ca	binutils@2.40-2	no fix listed

Open the chart page →

8,858

Wordpresswordpress-mariadb

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	binutils@2.44-3	no fix listed

Open the chart page →

5,635

zoo-project-druzoo-project

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-66866.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	binutils@2.38-4ubuntu2.12	no fix listed

Open the chart page →

7,916

Container images carrying it

408 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	binutils@2.38-4ubuntu2	no fix listed	1
quay.io/mittwald/kube-httpcache :stable	2169032c5840	binutils@2.40-2	no fix listed	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	binutils@2.40-2	no fix listed	1
registry.gitlab.com/crafty-controller/crafty-4 :latest	166a06f73d8c	binutils@2.42-4ubuntu2.10	no fix listed	1
registry.gitlab.com/dyff/workflows-aggregator :0.16.9	b7984253b128	binutils@2.46-3ubuntu2	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	binutils@2.40-2	no fix listed	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	binutils@2.34-6ubuntu1.1	no fix listed	1
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	binutils@2.40-2	no fix listed	1