StackRadar

CVE-2025-69649

High

Advisory

Published 6 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
235
of 17,781 indexed, latest versions
Container images
235
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 235 of 17,781 indexed charts deploy, on 235 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.40-2, 2.44-3, 2.45-7ubuntu1no fix listed234
binutilsapk2.45-r02.46-r01
OSV records
DEBIAN-CVE-2025-69649CGA-8gh5-vqr8-rmjhUBUNTU-CVE-2025-69649
Also known as
CGA-v7f8-23wj-rx8v

Charts affected

235 by stars
ChartLatestAffected imagesRadar Score
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
binutils@2.44-3
no fix listed

Open the chart page →

4,382
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
binutils@2.40-2
no fix listed

Open the chart page →

4,395
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
binutils@2.44-3
no fix listed

Open the chart page →

8,698
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
binutils@2.44-3
no fix listed

Open the chart page →

20,204
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
binutils@2.40-2
no fix listed

Open the chart page →

6,506
demoshopmakaira2.4.01 of 4See more

demoshop makaira 2.4.0

1 of the 4 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
library/php:8.4-fpm59fa733c9af6
binutils@2.44-3
no fix listed

Open the chart page →

4,401
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
binutils@2.40-2
no fix listed

Open the chart page →

8,303
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
binutils@2.40-2
no fix listed

Open the chart page →

9,668
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
binutils@2.40-2
no fix listed

Open the chart page →

5,823
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
binutils@2.40-2
no fix listed

Open the chart page →

13,010
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
binutils@2.40-2
no fix listed

Open the chart page →

43,341
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
binutils@2.44-3
no fix listed

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
localstack/localstack-pro:latest4aef81c53168
binutils@2.44-3
no fix listed

Open the chart page →

10,603
backendmojaloop0.1.01 of 6See more

backend mojaloop 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
binutils@2.40-2
no fix listed

Open the chart page →

16,198
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
binutils@2.40-2
no fix listed

Open the chart page →

25,704
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
binutils@2.40-2
no fix listed

Open the chart page →

30,363
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
binutils@2.40-2
no fix listed

Open the chart page →

13,686
akauntingnas-helm-chartsVerified publisher1.0.31 of 2See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
akaunting/akaunting:3.0.1552811b36ec3a
binutils@2.40-2
no fix listed

Open the chart page →

12,813
smilencsaVerified publisher1.1.04 of 23See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
binutils@2.40-2
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
binutils@2.40-2
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
binutils@2.40-2
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
binutils@2.40-2
no fix listed

Open the chart page →

109,294
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
binutils@2.40-2
no fix listed

Open the chart page →

10,218
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
binutils@2.40-2
no fix listed

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
binutils@2.40-2
no fix listed

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
binutils@2.40-2
no fix listed

Open the chart page →

15,187
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
binutils@2.40-2
no fix listed

Open the chart page →

5,288
laravel-appoli-the-devVerified publisher2.0.171 of 1See more

laravel-app oli-the-dev 2.0.17

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
binutils@2.44-3
no fix listed

Open the chart page →

2,660
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
binutils@2.40-2
no fix listed

Open the chart page →

10,978
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
binutils@2.40-2
no fix listed

Open the chart page →

10,896
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.02 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

2 of the 40 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
yetiplatform/yeti:2.9.09bcbe2650a14
binutils@2.44-3
no fix listed
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
binutils@2.40-2
no fix listed

Open the chart page →

71,208
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
binutils@2.44-3
no fix listed

Open the chart page →

6,583
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
binutils@2.40-2
no fix listed

Open the chart page →

12,350
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
binutils@2.40-2
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
binutils@2.40-2
no fix listed

Open the chart page →

27,373
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
binutils@2.40-2
no fix listed

Open the chart page →

5,706
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
binutils@2.40-2
no fix listed

Open the chart page →

8,189
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
binutils@2.40-2
no fix listed

Open the chart page →

16,196
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
binutils@2.40-2
no fix listed

Open the chart page →

11,347
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
binutils@2.40-2
no fix listed

Open the chart page →

11,923
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
library/node:208f693eaa7e0a
binutils@2.40-2
no fix listed

Open the chart page →

25,934
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
binutils@2.40-2
no fix listed

Open the chart page →

12,912
agentpolyaxon2.16.43 of 4See more

agent polyaxon 2.16.4

3 of the 4 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
binutils@2.44-3
no fix listed
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
binutils@2.44-3
no fix listed
polyaxon/polyaxon-streams:2.16.4c186bd9834c0
binutils@2.44-3
no fix listed

Open the chart page →

10,046
polyaxonpolyaxon2.16.43 of 5See more

polyaxon polyaxon 2.16.4

3 of the 5 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
binutils@2.44-3
no fix listed
polyaxon/polyaxon-api:2.16.42b55c3265a90
binutils@2.44-3
no fix listed
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
binutils@2.44-3
no fix listed

Open the chart page →

13,741
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
binutils@2.40-2
no fix listed

Open the chart page →

5,451
priceapp-chartpriceapp0.1.01 of 1See more

priceapp-chart priceapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
ildarmukhametzyanov/priceapp:0.115d23720a3ee
binutils@2.40-2
no fix listed

Open the chart page →

8,169
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
binutils@2.44-3
no fix listed

Open the chart page →

5,203
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
binutils@2.40-2
no fix listed

Open the chart page →

14,537
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
binutils@2.40-2
no fix listed

Open the chart page →

12,566
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
binutils@2.40-2
no fix listed

Open the chart page →

12,566
rawfile-localpvrawfile0.15.21 of 6See more

rawfile-localpv rawfile 0.15.2

1 of the 6 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
openebs/rawfile-localpv:v0.15.2a39ef27ea28b
binutils@2.44-3
no fix listed

Open the chart page →

2,769
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
binutils@2.40-2
no fix listed

Open the chart page →

5,790
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
binutils@2.40-2
no fix listed

Open the chart page →

15,591
rocketchat-voiprocketchat-server0.1.01 of 1See more

rocketchat-voip rocketchat-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69649.

Container imageDigestPackageFixed in
rocketchat/freeswitch:stablecfba5c20a5cc
binutils@2.40-2
no fix listed

Open the chart page →

5,683

Container images carrying it

235 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
cspconsole/csp-control-center:1.0.1046dda4a31bd6
binutils@2.40-2
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
binutils@2.44-3
no fix listed
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
binutils@2.40-2
no fix listed
1
ddosify/selfhosted_backend:3.2.93c11e3182652
binutils@2.40-2
no fix listed
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
binutils@2.40-2
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
binutils@2.40-2
no fix listed
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
binutils@2.44-3
no fix listed
1
dolibarr/dolibarr:24.0.069ec52e3b7ef
binutils@2.40-2
no fix listed
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
binutils@2.40-2
no fix listed
1
domainmod/domainmod:4.23.04017bfe4c597
binutils@2.40-2
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
binutils@2.40-2
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
binutils@2.44-3
no fix listed
1
electriccoinco/lightwalletd:v0.5.42ae3a551e111
binutils@2.44-3
no fix listed
1
esphome/esphome:2026.7.44866347cb5b4
binutils@2.44-3
no fix listed
1
esphome/esphome:2026.8.285abea33854b
binutils@2.44-3
no fix listed
1
espocrm/espocrm:9.3.101b5a24504ed9
binutils@2.44-3
no fix listed
1
falcosecurity/falco-driver-loader:0.44.17df783d5269a
binutils@2.40-2
no fix listed
1
felipecs8/app-db-connection-test:v129e06c9c6385
binutils@2.40-2
no fix listed
1
fireflyiii/core:version-6.6.6ae69fdd95cde
binutils@2.44-3
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
binutils@2.40-2
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
binutils@2.40-2
no fix listed
1
glpi/glpi:latest4b681082a79e
binutils@2.44-3
no fix listed
1
gulacedia/web-dvwa-new:v367b467d961ca
binutils@2.40-2
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
binutils@2.40-2
no fix listed
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
binutils@2.40-2
no fix listed
1
instill/artifact-backend:b28766ac4a393e601ed
binutils@2.44-3
no fix listed
1
instill/mgmt-backend:d0933d4ebe12f77a3f9
binutils@2.44-3
no fix listed
1
instill/model-backend:611f0f2e980125e5ba5
binutils@2.44-3
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
binutils@2.40-2
no fix listed
1
jaedb/iris:latest048cfbf58d57
binutils@2.40-2
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
binutils@2.40-2
no fix listed
1
kimai/kimai2:2.65.06dfc63199654
binutils@2.40-2
no fix listed
1
kitware/cdash:v5.3.0d7767d9b9da4
binutils@2.44-3
no fix listed
1
kixote/typemill4e9dff179519
binutils@2.44-3
no fix listed
1
kixote/typemill628f79a08cc7
binutils@2.44-3
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
binutils@2.40-2
no fix listed
1
laly9999/node-app:1dd0e503913e1
binutils@2.40-2
no fix listed
1
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
binutils@2.40-2
no fix listed
1
library/golang:latest512690a56605
binutils@2.44-3
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
binutils@2.40-2
no fix listed
1
library/matomo:5.13.0-apache8e6bdd396496
binutils@2.44-3
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
binutils@2.40-2
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
binutils@2.44-3
no fix listed
1
library/node:208f693eaa7e0a
binutils@2.40-2
no fix listed
1
library/node:latestf5d1cc40abc1
binutils@2.44-3
no fix listed
1
library/php:8.4-fpm59fa733c9af6
binutils@2.44-3
no fix listed
1
library/python:3.1070c9cc675605
binutils@2.44-3
no fix listed
1
library/python:3.8d41127070014
binutils@2.40-2
no fix listed
1
library/python:3.9da5aee29682d
binutils@2.44-3
no fix listed
1
library/varnish:7.5.04d0bb287d87b
binutils@2.40-2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.