StackRadar

CVE-2025-67899

Low

Advisory

Published 14 Dec 2025In the index since 6 Sept 2026
Severity
Low
worst across findings
CVSS
2.9
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
24
of 17,781 indexed, latest versions
Container images
22
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 24 of 17,781 indexed charts deploy, on 22 images.

Affected packageAffected versionsFixed inImages
uriparserdeb0.8.4-1, 0.9.3-2, 0.9.6+dfsg-1, 0.9.7+dfsg-2+3 more0.8.4-1+deb9u2ubuntu0.1+esm2, 0.9.3-2ubuntu0.1~esm4, 0.9.6+dfsg-1ubuntu0.1~esm2, 0.9.7+dfsg-2ubuntu0.1~esm222
OSV records
DEBIAN-CVE-2025-67899UBUNTU-CVE-2025-67899
Also known as
USN-8409-1

Charts affected

24 by stars
ChartLatestAffected imagesRadar Score
photoprismandrenarchyVerified publisher8.15.01 of 1See more

photoprism andrenarchy 8.15.0

1 of the 1 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
photoprism/photoprism:260728958642220223
uriparser@0.9.8+dfsg-2build1
no fix listed

Open the chart page →

8,825
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
uriparser@0.9.7+dfsg-2build1
0.9.7+dfsg-2ubuntu0.1~esm2

Open the chart page →

8,690
routehub-client-hubroutehub-helm1.0.01 of 3See more

routehub-client-hub routehub-helm 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg16d7db8f1085a3
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2

Open the chart page →

12,930
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2

Open the chart page →

32,501
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2

Open the chart page →

20,900
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
uriparser@0.9.8+dfsg-2build1
no fix listed

Open the chart page →

3,773
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
uriparser@0.8.4-1
0.8.4-1+deb9u2ubuntu0.1+esm2

Open the chart page →

27,728
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
uriparser@0.8.4-1
0.8.4-1+deb9u2ubuntu0.1+esm2

Open the chart page →

18,863
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
uriparser@0.8.4-1
0.8.4-1+deb9u2ubuntu0.1+esm2

Open the chart page →

22,405
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
uriparser@0.8.4-1
0.8.4-1+deb9u2ubuntu0.1+esm2

Open the chart page →

24,335
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
uriparser@0.9.8+dfsg-2
no fix listed

Open the chart page →

7,459
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2

Open the chart page →

30,699
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
uriparser@0.9.7+dfsg-2
no fix listed

Open the chart page →

9,077
dawarichhelmforgeVerified publisher1.0.01 of 4See more

dawarich helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
uriparser@0.9.8+dfsg-2
no fix listed

Open the chart page →

4,742
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2

Open the chart page →

14,290
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
uriparser@0.9.7+dfsg-2build1
0.9.7+dfsg-2ubuntu0.1~esm2

Open the chart page →

45,239
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
uriparser@0.9.3-2
0.9.3-2ubuntu0.1~esm4

Open the chart page →

22,658
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
uriparser@0.9.8+dfsg-2build1
no fix listed

Open the chart page →

10,348
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
uriparser@0.9.7+dfsg-2
no fix listed

Open the chart page →

11,636
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
uriparser@0.9.7+dfsg-2build1
0.9.7+dfsg-2ubuntu0.1~esm2

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
uriparser@0.9.7+dfsg-2build1
0.9.7+dfsg-2ubuntu0.1~esm2

Open the chart page →

12,460
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
uriparser@0.9.7+dfsg-2build1
0.9.7+dfsg-2ubuntu0.1~esm2

Open the chart page →

45,239
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-67899.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2

Open the chart page →

7,849

Container images carrying it

22 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apache/tika:2.9.2.1-fullae0b86d3c4d0
uriparser@0.9.7+dfsg-2build1
0.9.7+dfsg-2ubuntu0.1~esm2
2
kurento/kurento-media-server:latest03c0d34d0828
uriparser@0.9.7+dfsg-2build1
0.9.7+dfsg-2ubuntu0.1~esm2
2
apache/tika:latest-full80072bb73dd3
uriparser@0.9.8+dfsg-2build1
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
uriparser@0.8.4-1
0.8.4-1+deb9u2ubuntu0.1+esm2
1
jordan/icinga2:latestf75025fe8ea8
uriparser@0.9.7+dfsg-2
no fix listed
1
mediagis/nominatim:5.3.27923a8e67197
uriparser@0.9.7+dfsg-2build1
0.9.7+dfsg-2ubuntu0.1~esm2
1
mediagis/nominatim:3.7c15e941485ef
uriparser@0.9.3-2
0.9.3-2ubuntu0.1~esm4
1
mediagis/nominatim:4.2d0eae7b51374
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2
1
opendatacube/pipelines:wofs-1.225d810e8504b8
uriparser@0.8.4-1
0.8.4-1+deb9u2ubuntu0.1+esm2
1
opendatacube/restcube:latest91870111837c
uriparser@0.8.4-1
0.8.4-1+deb9u2ubuntu0.1+esm2
1
opendatacube/wms:latest1b90cdf68831
uriparser@0.8.4-1
0.8.4-1+deb9u2ubuntu0.1+esm2
1
photoprism/photoprism:260601650c6ad5a651
uriparser@0.9.8+dfsg-2build1
no fix listed
1
photoprism/photoprism:260728958642220223
uriparser@0.9.8+dfsg-2build1
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
uriparser@0.9.8+dfsg-2
no fix listed
1
signalen/backend:2.50.14760256000738
uriparser@0.9.7+dfsg-2
no fix listed
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2
1
timescale/timescaledb-ha:pg16d7db8f1085a3
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
uriparser@0.9.6+dfsg-1
0.9.6+dfsg-1ubuntu0.1~esm2
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
uriparser@0.9.8+dfsg-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.