CVE-2025-68276

Medium

Advisory

Published 12 Jan 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.5; base score, highest
EPSS: 0.002; 5th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 206; of 17,781 indexed, latest versions
Container images: 173; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 173 images.

Affected package	Affected versions	Fixed in	Images
avahideb	0.6.31-4ubuntu1, 0.6.31-4ubuntu1.2, 0.6.32~rc+dfsg-1ubuntu2, 0.6.32~rc+dfsg-1ubuntu2.2+15 more	0.6.31-4ubuntu1.3+esm4, 0.6.32~rc+dfsg-1ubuntu2.3+esm4, 0.7-3.1ubuntu1.3+esm3, 0.7-4ubuntu7.3+esm1+3 more	173

OSV records: DEBIAN-CVE-2025-68276 UBUNTU-CVE-2025-68276
Also known as: USN-7967-1

Charts affected

206 by stars

Chart

Latest

Affected images

Radar Score

owncloudth-charts

0.2.1

1 of 1 See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-68276.

Container image	Digest	Package	Fixed in
owncloud/server :10.15.0	51d9b74fc2a8	avahi@0.7-4ubuntu7.3	0.7-4ubuntu7.3+esm1

Open the chart page →

10,006

calibre-webvista

0.1.3

1 of 1 See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-68276.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :0.6.24	241009026e6f	avahi@0.8-13ubuntu6	0.8-13ubuntu6.1

Open the chart page →

7,628

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-68276.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	avahi@0.7-4ubuntu7.1	0.7-4ubuntu7.3+esm1

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-68276.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	avahi@0.7-4ubuntu7.1	0.7-4ubuntu7.3+esm1

Open the chart page →

28,605

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-68276.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	avahi@0.8-16	no fix listed

Open the chart page →

5,560

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-68276.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	avahi@0.8-5ubuntu5.2	0.8-5ubuntu5.4

Open the chart page →

14,100

Container images carrying it

173 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	avahi@0.7-3.1ubuntu1.3	0.7-3.1ubuntu1.3+esm3	1
ghcr.io/music-assistant/server :2.7.5	3522e8a7a8f0	avahi@0.8-10+deb12u1	no fix listed	1
ghcr.io/music-assistant/server :2.9.9	50666a6f8d7f	avahi@0.8-10+deb12u1	no fix listed	1
ghcr.io/music-assistant/server :2.10.3	885872224fa5	avahi@0.8-16	no fix listed	1
ghcr.io/music-assistant/server :2.8.7	eef3ee7810d0	avahi@0.8-10+deb12u1	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	avahi@0.8-10	no fix listed	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	avahi@0.7-4ubuntu7.1	0.7-4ubuntu7.3+esm1	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	avahi@0.8-10	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	avahi@0.8-16	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	avahi@0.8-16	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	avahi@0.8-16	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	avahi@0.8-10	no fix listed	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	avahi@0.8-16	no fix listed	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	avahi@0.7-4ubuntu7.1	0.7-4ubuntu7.3+esm1	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	avahi@0.7-4ubuntu7.1	0.7-4ubuntu7.3+esm1	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	avahi@0.8-5ubuntu5.2	0.8-5ubuntu5.4	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	avahi@0.8-5ubuntu5.2	0.8-5ubuntu5.4	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	avahi@0.8-5ubuntu5.2	0.8-5ubuntu5.4	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	avahi@0.8-10	no fix listed	1
ghcr.io/wittdennis/calibre-web :1.1.1	aa7d5d5dd6be	avahi@0.8-10+deb12u1	no fix listed	1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium :0.1.2	7bff29dcec72	avahi@0.8-10+deb12u1	no fix listed	1
ghcr.io/zammad/zammad :7.1.3-0011	e65123a43ecc	avahi@0.8-16	no fix listed	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	avahi@0.6.32~rc+dfsg-1ubuntu2.3	0.6.32~rc+dfsg-1ubuntu2.3+esm4	1