CVE-2025-69720

Critical

Advisory

Published 19 Mar 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.004; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,271; of 17,792 indexed, latest versions
Container images: 2,239; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: ncurses security update

Carried by container images the latest versions of 2,271 of 17,792 indexed charts deploy, on 2,239 images.

Affected package	Affected versions	Fixed in	Images
ncursesdeb	5.9+20140118-1ubuntu1, 6.0+20160213-1ubuntu1, 6.1-1ubuntu1, 6.1-1ubuntu1.18.04+11 more	5.9+20140118-1ubuntu1+esm6, 6.0+20160213-1ubuntu1+esm6, 6.1-1ubuntu1.18.04.1+esm3, 6.2-0ubuntu2.1+esm1+4 more	2,227
ncursesrpm	6.1-150000.5.30.1, 6.4-2.azl3, 6.4-14.20240127.el10, 6.5.20250531-160000.2.2	0:6.4-15.20240127.el10_1, 6.1-150000.5.33.1, 6.4-3, 6.5.20250531-160000.3.1	12

OSV records: UBUNTU-CVE-2025-69720 DEBIAN-CVE-2025-69720 RHSA-2026:5913 AZL-80469 ECHO-01c4-4a1e-f949 SUSE-SU-2026:1510-1 SUSE-SU-2026:22294-1
Also known as: USN-8503-1

Charts affected

2,271 by stars

Chart

Latest

Affected images

Radar Score

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.2

Open the chart page →

9,340

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.1

Open the chart page →

2,242

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	ncurses@6.4-4	no fix listed
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	ncurses@6.4-4	no fix listed

Open the chart page →

7,687

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	ncurses@6.2-0ubuntu2.1	6.2-0ubuntu2.1+esm1

Open the chart page →

6,336

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	ncurses@6.4-4	no fix listed

Open the chart page →

5,566

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	ncurses@6.4-4	no fix listed

Open the chart page →

2,500

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	ncurses@6.4-4	no fix listed

Open the chart page →

2,143

wordpress-alpinewordpress-alpine

1.5.18

2 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	628f228f0fd5	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.1
library/memcached :1.6.45	dc561d52bb8a	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

4,080

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

5,713

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.2

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	ncurses@6.4-4	no fix listed

Open the chart page →

11,622

tabbyxd

1.0.6

1 of 2 See more

7,714

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	ncurses@6.4-4	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	ncurses@6.4-4	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	ncurses@6.4-4	no fix listed

Open the chart page →

13,813

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.1

Open the chart page →

2,152

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

1,861

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

1,311

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

1,861

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	ncurses@6.4-4	no fix listed

Open the chart page →

2,692

changedetection-iozekker6

1.99.0

1 of 1 See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.4	7bb6963b730d	ncurses@6.4-4	no fix listed

Open the chart page →

2,630

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	ncurses@6.5+20250216-2	no fix listed

Open the chart page →

1,861

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-69720.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1+esm3
yandex/clickhouse-server :21.3.20	4eccfffb01d7	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm1

Open the chart page →

9,272

Container images carrying it

2,239 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mysql :8.0-debian	9382e4f6f7f0	ncurses@6.4-4	no fix listed	1
library/neo4j :2026.05.0-enterprise	2caf944aa4a5	ncurses@6.5+20250216-2	no fix listed	1
library/neo4j :2026.02.2	5ab4ab0358cf	ncurses@6.5+20250216-2	no fix listed	1
library/neo4j :2026.05.0	6c162e2432f8	ncurses@6.5+20250216-2	no fix listed	1
library/nextcloud :31.0.6-apache	588609d76b21	ncurses@6.4-4	no fix listed	1
library/nextcloud :34.0.4 :34.0.4-apache	8418c398d767	ncurses@6.5+20250216-2	no fix listed	1
library/nextcloud :31.0.10-apache	b7faa1653c39	ncurses@6.5+20250216-2	no fix listed	1
library/nextcloud :34.0.3 :34.0.3-apache	b97df9e0e1ee	ncurses@6.5+20250216-2	no fix listed	1
library/nextcloud :34.0.4-apache	de4ad9389386	ncurses@6.5+20250216-2	no fix listed	1
library/nginx :1.27.4	09369da6b103	ncurses@6.4-4	no fix listed	1
library/nginx :1.29	1881968aff6f	ncurses@6.5+20250216-2	no fix listed	1
library/nginx :1.27	6784fb0834aa	ncurses@6.4-4	no fix listed	1
library/nginx :1.25.1	67f9a4f10d14	ncurses@6.4-4	no fix listed	1
library/nginx :1.25.4	9ff236ed47fe	ncurses@6.4-4	no fix listed	1
library/nginx :1.31	a53fc6c27208	ncurses@6.5+20250216-2	no fix listed	1
library/nginx :1.27.3	fb197595ebe7	ncurses@6.4-4	no fix listed	1
library/node :22-bookworm-slim	83f487e0a634	ncurses@6.4-4	no fix listed	1
library/node :20	8f693eaa7e0a	ncurses@6.4-4	no fix listed	1
library/node :latest	f5d1cc40abc1	ncurses@6.5+20250216-2	no fix listed	1
library/php :8.4-fpm	59fa733c9af6	ncurses@6.5+20250216-2	no fix listed	1
library/postgres :18.0	073e7c8b84e2	ncurses@6.5+20250216-2	no fix listed	1
library/postgres :17.4	304ab8135187	ncurses@6.4-4	no fix listed	1
library/postgres :18.4	3a82e1f56c8f	ncurses@6.5+20250216-2	no fix listed	1
library/postgres :16.11	468e1f126ca5	ncurses@6.5+20250216-2	no fix listed	1
library/postgres :16.6	557fea37a744	ncurses@6.4-4	no fix listed	1
library/postgres :18.3	69e8582b781c	ncurses@6.5+20250216-2	no fix listed	1
library/postgres :15.18	6eb0add3b77c	ncurses@6.5+20250216-2	no fix listed	1
library/postgres :15.3	8775adb39f0d	ncurses@6.4-4	no fix listed	1
library/postgres :18.4	8ff36f3c6637	ncurses@6.5+20250216-2	no fix listed	1
library/postgres :18.3	a9abf4275f9e	ncurses@6.5+20250216-2	no fix listed	1
library/postgres :17.5	aadf2c0696f5	ncurses@6.5+20250216-2	no fix listed	1
library/postgres :13.12	ced3ba927f4c	ncurses@6.4-4	no fix listed	1
library/postgres :15.18-bookworm	e8db9bd3e9e1	ncurses@6.4-4	no fix listed	1
library/postgres :14.22	eba8ddbdd837	ncurses@6.5+20250216-2	no fix listed	1
library/postgres :17.10	ebba4f4de37f	ncurses@6.5+20250216-2	no fix listed	1
library/postgres :17.5-bookworm	fbcea1bd13b6	ncurses@6.4-4	no fix listed	1
library/python :3.10	70c9cc675605	ncurses@6.5+20250216-2	no fix listed	1
library/python :3.11-slim	9534e5a8e315	ncurses@6.5+20250216-2	no fix listed	1
library/python :3.8	d41127070014	ncurses@6.4-4	no fix listed	1
library/python :3.9	da5aee29682d	ncurses@6.5+20250216-2	no fix listed	1
library/rabbitmq :3.12.10	0742852455ad	ncurses@6.3-2ubuntu0.1	6.3-2ubuntu0.2	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	ncurses@6.2-0ubuntu2	6.2-0ubuntu2.1+esm1	1
library/rabbitmq :4.2.8	7561d672fae4	ncurses@6.4+20240113-1ubuntu2	6.4+20240113-1ubuntu2.1	1
library/rabbitmq :3.7-management	b6dd45cc35b3	ncurses@6.1-1ubuntu1.18.04	6.1-1ubuntu1.18.04.1+esm3	1
library/redis :8.6.2	009cc37796fb	ncurses@6.5+20250216-2	no fix listed	1
library/redis :8.8.0	234c902a2db4	ncurses@6.5+20250216-2	no fix listed	1
library/redis :8.4.0	3906b477e4b6	ncurses@6.4-4	no fix listed	1
library/redis :8.8.1-trixie	3eafabb4c93f	ncurses@6.5+20250216-2	no fix listed	1
library/redis :8.2.2	4521b581dbdd	ncurses@6.4-4	no fix listed	1
library/redis :8.6.3	4d25e2fe601f	ncurses@6.5+20250216-2	no fix listed	1