StackRadar

CVE-2025-67725

High

Advisory

Published 12 Dec 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
89
of 17,781 indexed, latest versions
Container images
94
deployed by those charts
Fix available
2 of 2
affected packages

Tornado: Quadratic DoS via Repeated Header Coalescing

Carried by container images the latest versions of 89 of 17,781 indexed charts deploy, on 94 images.

Affected packageAffected versionsFixed inImages
tornadopypi2.4.1, 4.5.3, 5.1.1, 6.0.2+10 more6.5.394
python-tornadodeb6.2.0-3+deb12u16.2.0-3+deb12u41
OSV records
DEBIAN-CVE-2025-67725GHSA-c98p-7wgm-6p64
Also known as
PYSEC-2025-266

Charts affected

89 by stars
ChartLatestAffected imagesRadar Score
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
tornado@6.3.3
6.5.3

Open the chart page →

16,384
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
tornado@6.1
6.5.3

Open the chart page →

37,671
ilum-streamlitilumVerified publisher0.1.01 of 1See more

ilum-streamlit ilum 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
ilum/streamlit-example:1.0.0ce5dcdeb22ba
tornado@6.5.2
6.5.3

Open the chart page →

2,736
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
tornado@6.1
6.5.3

Open the chart page →

18,066
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
tornado@5.1.1
6.5.3

Open the chart page →

7,232
istio-bookinfoistio-bookinfo1.2.21 of 6See more

istio-bookinfo istio-bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
tornado@4.5.3
6.5.3

Open the chart page →

18,980
webappiti-web-appVerified publisher0.1.01 of 2See more

webapp iti-web-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
mohameddev006/web-app:v50fbc7360ecf4
tornado@5.1.1
6.5.3

Open the chart page →

1,230
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
tornado@6.5.2
6.5.3

Open the chart page →

9,103
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
tornado@6.2
6.5.3

Open the chart page →

16,417
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
tornado@6.3.3
6.5.3

Open the chart page →

6,447
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
tornado@6.4.2
6.5.3

Open the chart page →

8,405
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
tornado@6.3.2
6.5.3
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
tornado@6.3.2
6.5.3

Open the chart page →

7,356
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-productpage-v1:1.13.0378f49ec9c44
tornado@4.5.3
6.5.3

Open the chart page →

9,378
kyso-nbdimekyso1.0.01 of 1See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
kyso/kyso-nbdime:latest4aa9d38ee81d
tornado@6.2
6.5.3

Open the chart page →

2,765
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
tornado@6.1
6.5.3
lsstsqre/sciplat-hub:latest5e0ade6bed1c
tornado@6.1
6.5.3
lsstsqre/wfdispatcher:lateste9feb99f524d
tornado@6.1
6.5.3

Open the chart page →

5,786
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
tornado@6.1
6.5.3

Open the chart page →

17,779
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
tornado@6.4.2
6.5.3

Open the chart page →

5,823
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
tornado@6.1
6.5.3

Open the chart page →

2,233
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
tornado@6.5.2
6.5.3

Open the chart page →

11,950
chatbot-ai-sampleopenshift0.1.61 of 4See more

chatbot-ai-sample openshift 0.1.6

1 of the 4 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
tornado@6.4
6.5.3

Open the chart page →

18,922
python-apppython-app-chart0.1.01 of 2See more

python-app python-app-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
mnaggar3396/python-app:latest371d8ed84b15
tornado@6.2
6.5.3

Open the chart page →

3,382
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
tornado@6.4.1
6.5.3

Open the chart page →

21,211
reload-counterreload-counter0.1.01 of 1See more

reload-counter reload-counter 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
alaaamin/reload-count-tornado-py-app:v1.0.1alpine46da5844794e
tornado@5.1.1
6.5.3

Open the chart page →

1,009
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
tornado@6.4
6.5.3

Open the chart page →

7,431
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
tornado@4.5.3
6.5.3

Open the chart page →

20,462
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
tornado@4.5.3
6.5.3

Open the chart page →

20,462
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
tornado@6.4.2
6.5.3

Open the chart page →

9,256
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
tornado@6.5.2
6.5.3

Open the chart page →

10,605
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
tornado@6.4
6.5.3

Open the chart page →

10,209
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
tornado@6.1
6.5.3

Open the chart page →

21,997
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
tornado@2.4.1
6.5.3

Open the chart page →

3,116
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
mher/flower:2.051c3c3db5be3
tornado@6.3.3
6.5.3

Open the chart page →

4,674
icinga2-reportsvtech-public-helm-charts1.0.01 of 1See more

icinga2-report svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
trungkien210493/icinga2-report:v1.7.12cc8c3763c4c
tornado@5.1.1
6.5.3

Open the chart page →

1,779
tezos-nodetezos-nodeVerified publisher1.0.01 of 4See more

tezos-node tezos-node 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
tornado@6.1
6.5.3

Open the chart page →

5,321
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
tornado@6.1
6.5.3

Open the chart page →

3,164
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
tornado@6.2
6.5.3

Open the chart page →

8,607
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
tornado@6.0.2
6.5.3

Open the chart page →

9,347
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
tornado@6.4.2
6.5.3

Open the chart page →

7,628
webapp-chartwebappchart1.0.01 of 1See more

webapp-chart webappchart 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-67725.

Container imageDigestPackageFixed in
amagdi888/my-repo:hello-appd8a10fc8faf6
tornado@5.1.1
6.5.3

Open the chart page →

1,201

Container images carrying it

94 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
linuxserver/medusa:v1.0.26-ls2884477fb1ce3ca
tornado@6.5.2
6.5.3
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
tornado@5.1.1
6.5.3
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
tornado@6.1
6.5.3
1
lsstsqre/prepuller:latest19c2dfc4e4ff
tornado@6.1
6.5.3
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
tornado@6.1
6.5.3
1
lsstsqre/wfdispatcher:lateste9feb99f524d
tornado@6.1
6.5.3
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
tornado@6.4.2
6.5.3
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
tornado@6.1
6.5.3
1
matrixdotorg/synapse:v1.78.0def97fd537d8
tornado@6.1
6.5.3
1
mher/flower:2.051c3c3db5be3
tornado@6.3.3
6.5.3
1
mnaggar3396/python-app:latest371d8ed84b15
tornado@6.2
6.5.3
1
mohameddev006/web-app:v50fbc7360ecf4
tornado@5.1.1
6.5.3
1
octoprint/octoprint:1.4.0106c26efcd8a
tornado@4.5.3
6.5.3
1
octoprint/octoprint:1.6.1ea3bffae2470
tornado@5.1.1
6.5.3
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
tornado@6.5.1
6.5.3
1
opendatacube/explorer:latest120457ffcd69
tornado@6.5.2
6.5.3
1
opendatacube/wps:latest80df355a660b
tornado@6.4.2
6.5.3
1
openzaak/open-notificaties:1.3.02e65313b9b10
tornado@6.1
6.5.3
1
oxheadalpha/tezos-k8s-utils:5.3.4d9faed45bf1c
tornado@6.1
6.5.3
1
pangeo/base-notebook:2024.01.155fbe688a4f80
tornado@6.3.3
6.5.3
1
roadiehq/community-backstage-image:latestef355bf5b639
tornado@5.1.1
6.5.3
1
robmarkcole/deepstack-ui:latest410275726459
tornado@6.1
6.5.3
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
tornado@6.1
6.5.3
1
sruthitanneru/pi-sample:ui-lateste565ea454ffd
tornado@6.4.2
6.5.3
1
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
tornado@2.4.1
6.5.3
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
tornado@4.5.3
6.5.3
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
tornado@4.5.3
6.5.3
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
tornado@6.4.2
6.5.3
1
trungkien210493/icinga2-report:v1.7.12cc8c3763c4c
tornado@5.1.1
6.5.3
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
tornado@6.4
6.5.3
1
ghcr.io/dask/dask:2024.1.0080150de7d86
tornado@6.3.3
6.5.3
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
tornado@6.3.3
6.5.3
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
tornado@6.4.1
6.5.3
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
tornado@6.1
6.5.3
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
tornado@6.3.3
6.5.3
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
tornado@6.4.1
6.5.3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
tornado@6.5.2
6.5.3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
tornado@6.5.2
6.5.3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
tornado@6.5.2
6.5.3
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
tornado@6.3.3
6.5.3
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
tornado@6.5.2
6.5.3
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
tornado@6.3.3
6.5.3
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
tornado@6.2
6.5.3
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
tornado@6.4
6.5.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.