StackRadar

CVE-2025-69645

Medium

Advisory

Published 6 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
6th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
411
of 17,781 indexed, latest versions
Container images
394
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 411 of 17,781 indexed charts deploy, on 394 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+40 moreno fix listed394
OSV records
DEBIAN-CVE-2025-69645UBUNTU-CVE-2025-69645

Charts affected

411 by stars
ChartLatestAffected imagesRadar Score
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-69645.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
binutils@2.40-2
no fix listed

Open the chart page →

28,385
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-69645.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
binutils@2.40-2
no fix listed

Open the chart page →

28,858
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-69645.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
binutils@2.40-2
no fix listed

Open the chart page →

10,086
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-69645.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
binutils@2.40-2
no fix listed

Open the chart page →

17,323
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-69645.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
binutils@2.40-2
no fix listed

Open the chart page →

14,358
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-69645.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
binutils@2.38-4ubuntu2.6
no fix listed

Open the chart page →

9,347
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2025-69645.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
binutils@2.44-3
no fix listed

Open the chart page →

3,911
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69645.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
binutils@2.40-2
no fix listed

Open the chart page →

7,085
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-69645.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
binutils@2.40-2
no fix listed

Open the chart page →

10,001
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-69645.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
binutils@2.44-3
no fix listed

Open the chart page →

5,560
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-69645.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
binutils@2.38-4ubuntu2.12
no fix listed

Open the chart page →

7,849

Container images carrying it

394 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
binutils@2.26.1-1ubuntu1~16.04.8
no fix listed
11
library/phpmyadmin:5.2.3-apache:latest3a8a8d6b5289
binutils@2.44-3
no fix listed
7
library/wordpress:7.1.0-apache:latest5a93c470ae82
binutils@2.44-3
no fix listed
6
oomk8s/readiness-check:2.0.07daa08b81954
binutils@2.26.1-1ubuntu1~16.04.6
no fix listed
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
binutils@2.40-2
no fix listed
6
solsson/kafka:latest41e5d8f6f290
binutils@2.34-6ubuntu1.3
no fix listed
5
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
binutils@2.40-2
no fix listed
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
binutils@2.26.1-1ubuntu1~16.04.6
no fix listed
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
binutils@2.26.1-1ubuntu1~16.04.8
no fix listed
4
mastercloudapps/planner:v1.2340a950b311b2
binutils@2.38-4ubuntu2.1
no fix listed
4
codeurjc/planner:v1.0800cf520c245
binutils@2.38-4ubuntu2.1
no fix listed
3
guacamole/guacamole:1.6.0f344085e618b
binutils@2.42-4ubuntu2.5
no fix listed
3
jacobalberty/unifi:v10.0.162896c0ab82d33
binutils@2.34-6ubuntu1.11
no fix listed
3
library/node:ltsbe23f54a88d3
binutils@2.40-2
no fix listed
3
localstack/localstack-pro:latest4aef81c53168
binutils@2.44-3
no fix listed
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
binutils@2.40-2
no fix listed
3
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
binutils@2.40-2
no fix listed
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
binutils@2.44-3
no fix listed
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
binutils@2.44-3
no fix listed
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
binutils@2.40-2
no fix listed
2
homebridge/homebridge:latest77c685a40911
binutils@2.42-4ubuntu2.10
no fix listed
2
kurento/kurento-media-server:latest03c0d34d0828
binutils@2.42-4ubuntu2.6
no fix listed
2
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
binutils@2.44-3
no fix listed
2
library/phpmyadmin:5.2.16e75aa8f767c
binutils@2.40-2
no fix listed
2
library/python:3.7eedf63967cdb
binutils@2.40-2
no fix listed
2
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
binutils@2.44-3
no fix listed
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
binutils@2.40-2
no fix listed
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
binutils@2.26.1-1ubuntu1~16.04.8
no fix listed
2
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
binutils@2.44-3
no fix listed
2
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
binutils@2.44-3
no fix listed
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
binutils@2.40-2
no fix listed
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
binutils@2.34-6ubuntu1.3
no fix listed
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
binutils@2.34-6ubuntu1.9
no fix listed
2
uffizzi/controller:latest0344805f267b
binutils@2.40-2
no fix listed
2
vdiogov/glpi-conteiner:latest6945f84f0058
binutils@2.40-2
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
binutils@2.42-4ubuntu2.5
no fix listed
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
binutils@2.38-4ubuntu2
no fix listed
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
binutils@2.40-2
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
binutils@2.40-2
no fix listed
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
binutils@2.38-3ubuntu1
no fix listed
2
a10networks/acos-prometheus-exporter:latest8dc58d434d71
binutils@2.30-21ubuntu1~18.04.3
no fix listed
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
binutils@2.44-3
no fix listed
1
aboogie/login_test_backend:new9c41a4483ac8
binutils@2.40-2
no fix listed
1
adamzammit/limesurvey:7.0.15e75e2f455c8d
binutils@2.44-3
no fix listed
1
akaunting/akaunting:3.0.1552811b36ec3a
binutils@2.40-2
no fix listed
1
allegroai/clearml:2.0.0-613713ae38f7daf
binutils@2.40-2
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
binutils@2.30-21ubuntu1~18.04.7
no fix listed
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
binutils@2.42-4ubuntu2.10
no fix listed
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
binutils@2.38-4ubuntu2.8
no fix listed
1
apache/hertzbeat:1.8.075d48a62748f
binutils@2.42-4ubuntu2.8
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.