StackRadar

CVE-2025-69646

Medium

Advisory

Published 6 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
263
of 17,781 indexed, latest versions
Container images
266
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 263 of 17,781 indexed charts deploy, on 266 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.40-2, 2.42-4ubuntu2, 2.42-4ubuntu2.3, 2.42-4ubuntu2.5+6 moreno fix listed266
OSV records
DEBIAN-CVE-2025-69646UBUNTU-CVE-2025-69646

Charts affected

263 by stars
ChartLatestAffected imagesRadar Score
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
binutils@2.44-3
no fix listed

Open the chart page →

9,342
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
binutils@2.44-3
no fix listed

Open the chart page →

10,849
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
binutils@2.44-3
no fix listed

Open the chart page →

29,817
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
binutils@2.40-2
no fix listed

Open the chart page →

3,802
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
binutils@2.40-2
no fix listed

Open the chart page →

9,653
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
binutils@2.40-2
no fix listed

Open the chart page →

6,103
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
binutils@2.44-3
no fix listed

Open the chart page →

4,751
tomcathelmforgeVerified publisher1.0.61 of 2See more

tomcat helmforge 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
library/tomcat:11.0.25-jdk17-temurin-noble9e1d2afa6898
binutils@2.42-4ubuntu2.10
no fix listed

Open the chart page →

1,185
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
binutils@2.40-2
no fix listed

Open the chart page →

12,607
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
binutils@2.40-2
no fix listed

Open the chart page →

25,017
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
binutils@2.40-2
no fix listed

Open the chart page →

11,812
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
binutils@2.40-2
no fix listed

Open the chart page →

17,852
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
binutils@2.40-2
no fix listed

Open the chart page →

10,780
jasperjasperVerified publisher1.0.2021 of 2See more

jasper jasper 1.0.202

1 of the 2 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
binutils@2.40-2
no fix listed

Open the chart page →

5,998
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
binutils@2.40-2
no fix listed

Open the chart page →

5,040
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
binutils@2.42-4ubuntu2.10
no fix listed

Open the chart page →

2,149
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
binutils@2.40-2
no fix listed

Open the chart page →

22,589
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
binutils@2.40-2
no fix listed
moreillon/group-manager:latest3caa8f710ee0
binutils@2.40-2
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
binutils@2.40-2
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
binutils@2.40-2
no fix listed

Open the chart page →

63,461
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
binutils@2.40-2
no fix listed

Open the chart page →

16,600
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
binutils@2.42-4ubuntu2.5
no fix listed

Open the chart page →

8,811
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
kitware/cdash:v5.3.0d7767d9b9da4
binutils@2.44-3
no fix listed

Open the chart page →

12,062
rspamdklicktippVerified publisher1.6.01 of 1See more

rspamd klicktipp 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
rspamd/rspamd:4.1.4e870599c970d
binutils@2.44-3
no fix listed

Open the chart page →

1,775
kubeflowkromanow94-kubeflow0.5.12 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

2 of the 30 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
binutils@2.40-2
no fix listed
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
binutils@2.40-2
no fix listed

Open the chart page →

70,530
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
binutils@2.44-3
no fix listed

Open the chart page →

9,620
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
binutils@2.44-3
no fix listed

Open the chart page →

4,382
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
binutils@2.40-2
no fix listed

Open the chart page →

4,395
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
binutils@2.44-3
no fix listed

Open the chart page →

8,698
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
binutils@2.44-3
no fix listed

Open the chart page →

20,204
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
binutils@2.42-4ubuntu2.10
no fix listed

Open the chart page →

2,149
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
binutils@2.40-2
no fix listed

Open the chart page →

6,506
demoshopmakaira2.4.01 of 4See more

demoshop makaira 2.4.0

1 of the 4 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
library/php:8.4-fpm59fa733c9af6
binutils@2.44-3
no fix listed

Open the chart page →

4,401
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
binutils@2.40-2
no fix listed

Open the chart page →

8,303
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
binutils@2.40-2
no fix listed

Open the chart page →

9,668
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
binutils@2.40-2
no fix listed

Open the chart page →

5,823
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
binutils@2.40-2
no fix listed

Open the chart page →

13,010
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
binutils@2.40-2
no fix listed

Open the chart page →

43,341
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
binutils@2.44-3
no fix listed

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
binutils@2.44-3
no fix listed

Open the chart page →

10,603
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
binutils@2.40-2
no fix listed

Open the chart page →

16,198
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
binutils@2.40-2
no fix listed

Open the chart page →

25,704
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
binutils@2.40-2
no fix listed

Open the chart page →

30,363
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
binutils@2.40-2
no fix listed

Open the chart page →

13,686
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
binutils@2.40-2
no fix listed

Open the chart page →

12,813
smilencsaVerified publisher1.1.04 of 23See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
binutils@2.40-2
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
binutils@2.40-2
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
binutils@2.40-2
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
binutils@2.40-2
no fix listed

Open the chart page →

109,294
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
binutils@2.40-2
no fix listed

Open the chart page →

10,218
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
binutils@2.40-2
no fix listed

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
binutils@2.40-2
no fix listed

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
binutils@2.40-2
no fix listed

Open the chart page →

15,187
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
binutils@2.40-2
no fix listed

Open the chart page →

5,288
laravel-appoli-the-devVerified publisher2.0.171 of 1See more

laravel-app oli-the-dev 2.0.17

1 of the 1 container images this version deploys carry CVE-2025-69646.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
binutils@2.44-3
no fix listed

Open the chart page →

2,660

Container images carrying it

266 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
knspar/phronetis-operator:0.1.60c4f0543ee58
binutils@2.40-2
no fix listed
1
laly9999/node-app:1dd0e503913e1
binutils@2.40-2
no fix listed
1
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
binutils@2.42-4ubuntu2.10
no fix listed
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
binutils@2.42-4ubuntu2.7
no fix listed
1
langgenius/dify-plugin-daemon:main-localda995c129e2f
binutils@2.42-4ubuntu2.10
no fix listed
1
library/convertigo:8.4.3ae605bfcda05
binutils@2.42-4ubuntu2.10
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
binutils@2.40-2
no fix listed
1
library/golang:latest512690a56605
binutils@2.44-3
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
binutils@2.40-2
no fix listed
1
library/matomo:5.13.0-apache8e6bdd396496
binutils@2.44-3
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
binutils@2.40-2
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
binutils@2.44-3
no fix listed
1
library/node:208f693eaa7e0a
binutils@2.40-2
no fix listed
1
library/node:latestf5d1cc40abc1
binutils@2.44-3
no fix listed
1
library/php:8.4-fpm59fa733c9af6
binutils@2.44-3
no fix listed
1
library/python:3.1070c9cc675605
binutils@2.44-3
no fix listed
1
library/python:3.8d41127070014
binutils@2.40-2
no fix listed
1
library/python:3.9da5aee29682d
binutils@2.44-3
no fix listed
1
library/tomcat:11.0.25-jdk17-temurin-noble9e1d2afa6898
binutils@2.42-4ubuntu2.10
no fix listed
1
library/varnish:7.5.04d0bb287d87b
binutils@2.40-2
no fix listed
1
library/wordpress:6.4.3-apache8ae66efb09a2
binutils@2.40-2
no fix listed
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
binutils@2.44-3
no fix listed
1
library/wordpress:php8.1-apachef73396626d2f
binutils@2.44-3
no fix listed
1
makersquad/harp-proxy:0.8.1a40dd258c527
binutils@2.40-2
no fix listed
1
mariusm/vingress:0.5.0b3db186c3d72
binutils@2.44-3
no fix listed
1
martinhelmich/typo3:12.4c83a4f3fd7ae
binutils@2.40-2
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
binutils@2.40-2
no fix listed
1
mautic/mautic:7-apacheeb8cc73d97e1
binutils@2.40-2
no fix listed
1
mediagis/nominatim:5.3.27923a8e67197
binutils@2.42-4ubuntu2.10
no fix listed
1
middlewareeng/middleware:0.3.1747d880812f1
binutils@2.40-2
no fix listed
1
mindsdb/mindsdb:latest163011c09299
binutils@2.44-3
no fix listed
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
binutils@2.40-2
no fix listed
1
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
binutils@2.40-2
no fix listed
1
moreillon/api-proxy:latestd7d4a5463525
binutils@2.40-2
no fix listed
1
moreillon/food-manager:lateste8fd856e593d
binutils@2.40-2
no fix listed
1
moreillon/group-manager:latest3caa8f710ee0
binutils@2.40-2
no fix listed
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
binutils@2.40-2
no fix listed
1
muhammedgamal/fp23:latest74b4cd69b6fa
binutils@2.40-2
no fix listed
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
binutils@2.44-3
no fix listed
1
oled01/automx2:2025.1.105d3e398e675
binutils@2.40-2
no fix listed
1
oneuptime/probe:release6b2d98713711
binutils@2.40-2
no fix listed
1
oneuptime/runner:release4accc516d800
binutils@2.44-3
no fix listed
1
opea/codegen-ui:1.02bee4eb66f3e
binutils@2.40-2
no fix listed
1
opea/codetrans-ui:1.03ef121f34610
binutils@2.40-2
no fix listed
1
opea/docsum-ui:1.07f854e9bffaf
binutils@2.40-2
no fix listed
1
openbas/caldera-server:5.1.0a277796d9724
binutils@2.40-2
no fix listed
1
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
binutils@2.44-3
no fix listed
1
openproject/hocuspocus:release-338001b288dc1359dfb5
binutils@2.40-2
no fix listed
1
phan2410/dummy-service:0.0.89c6ed6de26ca
binutils@2.40-2
no fix listed
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
binutils@2.40-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.