StackRadar

CVE-2025-69725

Medium

Advisory

Published 14 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.7
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
113
of 17,781 indexed, latest versions
Container images
109
deployed by those charts
Fix available
1 of 2
affected packages

chi has an open redirect vulnerability in the RedirectSlashes middleware

Carried by container images the latest versions of 113 of 17,781 indexed charts deploy, on 109 images.

Affected packageAffected versionsFixed inImages
github.com/go-chi/chi/v5golangv5.2.2, v5.2.35.2.432
github.com/go-chi/chigolangv1.5.4, v1.5.5, v3.3.3+incompatible, v3.3.4+incompatible+5 moreno fix listed80
OSV records
GHSA-mqqf-5wvp-8fh8GO-2026-4316

Charts affected

113 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

30,159
kubeviewkubeviewVerified publisher2.0.61 of 1See more

kubeview kubeview 2.0.6

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:latestb5b2b02e4c4e
github.com/go-chi/chi@v4.1.1+incompatible
no fix listed

Open the chart page →

794
influxdb2influxdata2.1.21 of 1See more

influxdb2 influxdata 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
library/influxdb:2.7.4-alpinea10d46445d68
github.com/go-chi/chi@v4.1.0+incompatible
no fix listed

Open the chart page →

2,103
cloudflaredkubitodevVerified publisher1.7.91 of 1See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

1,437
gatekeepergogatekeeperVerified publisher0.1.641 of 1See more

gatekeeper gogatekeeper 0.1.64

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
quay.io/gogatekeeper/gatekeeper:4.9.0dcf583aba224
github.com/go-chi/chi/v5@v5.2.3
5.2.4

Open the chart page →

553
dronecommunity-chartsVerified publisher0.1.51 of 2See more

drone community-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
drone/drone:2.28.255897c8fb22d
github.com/go-chi/chi@v3.3.3+incompatible
no fix listed

Open the chart page →

2,728
cortexcortex3.3.81 of 4See more

cortex cortex 3.3.8

1 of the 4 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
quay.io/cortexproject/cortex:v1.21.18577eb292a01
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

3,897
cloudflaredartur9010Verified publisher1.0.91 of 3See more

cloudflared artur9010 1.0.9

1 of the 3 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

2,984
routercosmo-routerOfficialVerified publisher0.18.01 of 1See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

1,663
policy-controllersigstoreVerified publisher0.10.71 of 2See more

policy-controller sigstore 0.10.7

1 of the 2 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/sigstore/policy-controller/policy-controllerdigest-pinned0bcd60beb93f
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

911
dumpscriptcloudscriptVerified publisher1.8.31 of 1See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
github.com/go-chi/chi/v5@v5.2.3
5.2.4

Open the chart page →

2,125
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
hkotel/mealie:frontend-v1.0.0beta-23c04c0e85039
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

7,579
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
library/influxdb:2.3.0-alpined7f5dd5f70e2
github.com/go-chi/chi@v4.1.0+incompatible
no fix listed

Open the chart page →

30,816
jenkins-operatorjenkins0.8.11 of 1See more

jenkins-operator jenkins 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
quay.io/jenkins-kubernetes-operator/operator:v0.8.171cb50263c3b
github.com/go-chi/chi@v4.0.0+incompatible
no fix listed

Open the chart page →

2,211
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
kubevious/ui:1.2.16233e84bdd59
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

14,204
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
library/influxdb:2.6.1-alpine44a366dd7724
github.com/go-chi/chi@v4.1.0+incompatible
no fix listed

Open the chart page →

22,202
scannerappscodeVerified publisher2026.1.151 of 3See more

scanner appscode 2026.1.15

1 of the 3 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
github.com/go-chi/chi/v5@v5.2.3
5.2.4

Open the chart page →

5,299
finops-stackcert-managerVerified publisher0.0.56 of 12See more

finops-stack cert-manager 0.0.5

6 of the 12 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/kyverno/background-controller:v1.12.506ed5db6cd33
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed
ghcr.io/kyverno/cleanup-controller:v1.12.5b914032ef9ad
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed
ghcr.io/kyverno/kyverno:v1.12.5a61c7022abcf
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed
ghcr.io/kyverno/kyverno-cli:v1.12.5832a32779e6d
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed
ghcr.io/kyverno/kyvernopre:v1.12.563f7eaf5aa8a
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed
ghcr.io/kyverno/reports-controller:v1.12.5c62e3347611c
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

12,562
gripmockdeliveryheroVerified publisher1.1.31 of 1See more

gripmock deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
tkpd/gripmock:1.10.174441dadcfbd
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

2,793
dockyarddockyardVerified publisher0.4.01 of 1See more

dockyard dockyard 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

1,542
beaconchain-explorerethereum-helm-chartsVerified publisher0.1.61 of 2See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
github.com/go-chi/chi@v4.0.2+incompatible
no fix listed

Open the chart page →

3,048
vidcheckfactlyVerified publisher0.5.21 of 2See more

vidcheck factly 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
factly/vidcheck-server:0.12.087064eb0463c
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

3,617
gboxgboxVerified publisher1.0.51 of 2See more

gbox gbox 1.0.5

1 of the 2 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
gboxproxy/gbox:v1.0.63a9f4a711d5c
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

2,521
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
github.com/go-chi/chi@v4.0.2+incompatible
no fix listed

Open the chart page →

15,856
go-hello-world-chartgo-hello-worldVerified publisher1.8.31 of 1See more

go-hello-world-chart go-hello-world 1.8.3

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/wasilak/go-hello-world:1.8.366d353e7693f
github.com/go-chi/chi/v5@v5.2.3
github.com/go-chi/chi@v1.5.5
5.2.4
no fix listed

Open the chart page →

742
headscale-uiheadscale-uiVerified publisher0.2.91 of 1See more

headscale-ui headscale-ui 0.2.9

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

1,476
kubebrowsekubebrowse1.7.01 of 5See more

kubebrowse kubebrowse 1.7.0

1 of the 5 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

4,141
kubeservice-cosign-webhookkubservice-chartsVerified publisher1.1.11 of 5See more

kubeservice-cosign-webhook kubservice-charts 1.1.1

1 of the 5 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

7,087
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

6,883
spirephilips-labsVerified publisher0.12.21 of 6See more

spire philips-labs 0.12.2

1 of the 6 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/spiffe/spire-agent:1.6.062517726d0c4
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

7,236
prometheus-webhook-dingtalkrlex0.0.31 of 1See more

prometheus-webhook-dingtalk rlex 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
timonwong/prometheus-webhook-dingtalk:v1.4.0a0fcc028bd8d
github.com/go-chi/chi@v4.0.2+incompatible
no fix listed

Open the chart page →

1,852
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

38,107
selenosis-deployselenosisVerified publisher2.1.33 of 4See more

selenosis-deploy selenosis 2.1.3

3 of the 4 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
alcounit/browser-service:v0.0.94bd10defc324
github.com/go-chi/chi/v5@v5.2.3
5.2.4
alcounit/browser-ui:v0.0.96a977c92ef27
github.com/go-chi/chi/v5@v5.2.3
github.com/go-chi/chi@v1.5.5
5.2.4
no fix listed
alcounit/selenosis:v2.1.1d01a9dbbd943
github.com/go-chi/chi/v5@v5.2.3
5.2.4

Open the chart page →

1,579
cosignedsigstoreVerified publisher0.1.232 of 2See more

cosigned sigstore 0.1.23

2 of the 2 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
gcr.io/projectsigstore/cosigneddigest-pinned784518ff3ee7
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed
gcr.io/projectsigstore/policy-webhookdigest-pinned82940e8c3e0d
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

5,118
webhookswebhooks0.1.51 of 1See more

webhooks webhooks 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/thecatlady/webhook:2.8.0f04718704dab
github.com/go-chi/chi@v4.0.2+incompatible
no fix listed

Open the chart page →

2,030
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

30,028
ddosifyanteonVerified publisher1.7.51 of 13See more

ddosify anteon 1.7.5

1 of the 13 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
library/influxdb:2.6.1-alpine44a366dd7724
github.com/go-chi/chi@v4.1.0+incompatible
no fix listed

Open the chart page →

25,669
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

9,412
cloudflared-tunnelclouddrove0.1.41 of 1See more

cloudflared-tunnel clouddrove 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2025.8.0eb5c9324efe3
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

1,744
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
github.com/go-chi/chi/v5@v5.2.2
github.com/go-chi/chi@v4.1.2+incompatible
5.2.4
no fix listed

Open the chart page →

18,293
coder-logstream-kubecoder-logstream-kube0.0.151 of 1See more

coder-logstream-kube coder-logstream-kube 0.0.15

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/coder/coder-logstream-kube:v0.0.1510ae596d296e
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

885
cortezacorteza1.0.121 of 3See more

corteza corteza 1.0.12

1 of the 3 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
github.com/go-chi/chi@v3.3.4+incompatible
no fix listed

Open the chart page →

8,368
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
github.com/go-chi/chi@v3.3.4+incompatible
no fix listed

Open the chart page →

4,644
cloudflaredcyberjakeVerified publisher0.3.201 of 1See more

cloudflared cyberjake 0.3.20

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.6.16d91c121b803
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

595
kyvernodevopstalesVerified publisher2.5.12 of 2See more

kyverno devopstales 2.5.1

2 of the 2 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
ghcr.io/kyverno/kyverno:v1.7.19c73f1841ebc
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed
ghcr.io/kyverno/kyvernopre:v1.7.1185d2eebc60c
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

4,722
calertdevtron0.0.11 of 1See more

calert devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
github.com/go-chi/chi@v1.5.4
no fix listed

Open the chart page →

4,648
calertdevtron-labs0.0.11 of 1See more

calert devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
github.com/go-chi/chi@v1.5.4
no fix listed

Open the chart page →

4,648
cloudflaredduck-helm1.1.31 of 1See more

cloudflared duck-helm 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

1,437
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
github.com/go-chi/chi/v5@v5.2.2
5.2.4

Open the chart page →

30,159
parrot-mirroremmas-chartsVerified publisher1.0.01 of 1See more

parrot-mirror emmas-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69725.

Container imageDigestPackageFixed in
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed

Open the chart page →

2,237

Container images carrying it

109 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/wundergraph/cosmo/router:0.243.05afcab98d9d7
github.com/go-chi/chi/v5@v5.2.2
5.2.4
1
public.ecr.aws/docker/library/caddy:2.6.387cbd356af2e
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed
1
quay.io/cortexproject/cortex:v1.21.18577eb292a01
github.com/go-chi/chi/v5@v5.2.2
5.2.4
1
quay.io/gogatekeeper/gatekeeper:4.9.0dcf583aba224
github.com/go-chi/chi/v5@v5.2.3
5.2.4
1
quay.io/jenkins-kubernetes-operator/operator:v0.8.171cb50263c3b
github.com/go-chi/chi@v4.0.0+incompatible
no fix listed
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
github.com/go-chi/chi@v4.1.2+incompatible
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.