StackRadar

CVE-2025-71176

Medium

Advisory

Published 22 Jan 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
72
of 17,781 indexed, latest versions
Container images
70
deployed by those charts
Fix available
1 of 1
affected package

pytest has vulnerable tmpdir handling

Carried by container images the latest versions of 72 of 17,781 indexed charts deploy, on 70 images.

Affected packageAffected versionsFixed inImages
pytestpypi3.5.0, 3.5.1, 4.6.9, 5.0.1+27 more9.0.370
OSV records
GHSA-6w46-j5rx-g56g
Also known as
PYSEC-2026-1845

Charts affected

72 by stars
ChartLatestAffected imagesRadar Score
ambassadordatawire6.9.51 of 2See more

ambassador datawire 6.9.5

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
pytest@6.1.2
9.0.3

Open the chart page →

4,086
emissary-ingressdatawire7.1.8-ea1 of 1See more

emissary-ingress datawire 7.1.8-ea

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
datawire/emissary:2.0.2-ea9716efbdd24b
pytest@6.1.2
9.0.3

Open the chart page →

4,918
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pytest@7.1.2
9.0.3

Open the chart page →

7,705
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
pytest@7.4.0
9.0.3

Open the chart page →

5,987
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
pytest@7.4.3
9.0.3

Open the chart page →

6,041
edge-stackdatawire7.1.8-ea1 of 2See more

edge-stack datawire 7.1.8-ea

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
datawire/aes:2.0.3-ea07f8fe4f4f8e
pytest@6.1.2
9.0.3

Open the chart page →

5,173
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
pytest@9.0.2
9.0.3

Open the chart page →

4,634
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
pytest@9.0.2
9.0.3

Open the chart page →

3,804
syncstorage-rschristianhuthVerified publisher6.1.11 of 2See more

syncstorage-rs christianhuth 6.1.1

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
pytest@8.3.5
9.0.3

Open the chart page →

693
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
pytest@6.2.5
9.0.3

Open the chart page →

7,801
helmuphelmupVerified publisher0.1.01 of 3See more

helmup helmup 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
pytest@7.4.3
9.0.3

Open the chart page →

16,514
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.41 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

1 of the 7 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
pytest@7.2.0
9.0.3

Open the chart page →

6,095
jessejesse-chartVerified publisher0.0.461 of 6See more

jesse jesse-chart 0.0.46

1 of the 6 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
salehmir/jesse:1.10.101afa95f979e9
pytest@6.2.5
9.0.3

Open the chart page →

3,421
jupyterhub-outpostjupyter-jscVerified publisher2.4.11 of 1See more

jupyterhub-outpost jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
pytest@8.4.2
9.0.3

Open the chart page →

1,678
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
pytest@8.4.0
9.0.3

Open the chart page →

4,095
verbacapverbacapVerified publisher1.0.71 of 1See more

verbacap verbacap 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
pytest@8.1.1
9.0.3

Open the chart page →

2,233
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.23.73b3a670af168
pytest@7.4.4
9.0.3

Open the chart page →

12,473
flrepositorydbassist-iot-fl-repository1.1.01 of 2See more

flrepositorydb assist-iot-fl-repository 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
assistiot/fl_repository:latest0fce3ea719a5
pytest@7.1.3
9.0.3

Open the chart page →

4,367
trainingcollectorassist-iot-fl-training-collector1.1.01 of 1See more

trainingcollector assist-iot-fl-training-collector 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
assistiot/fl_training_collector:latest792715dd3084
pytest@6.2.5
9.0.3

Open the chart page →

1,719
ambassadorazureorkestra6.7.91 of 2See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
datawire/aes:1.13.62beb65062c8b
pytest@6.1.2
9.0.3

Open the chart page →

5,521
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
pytest@6.0.2
9.0.3

Open the chart page →

22,891
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
pytest@5.3.5
9.0.3

Open the chart page →

3,891
suggestarrcharliecharts0.4.41 of 1See more

suggestarr charliecharts 0.4.4

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ciuse99/suggestarr:v1.0.20d72768245ef5
pytest@8.3.3
9.0.3

Open the chart page →

1,126
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
pytest@8.4.2
9.0.3

Open the chart page →

9,128
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
pytest@8.4.1
9.0.3

Open the chart page →

58,897
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
pytest@7.4.3
9.0.3

Open the chart page →

6,179
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
pytest@7.4.0
9.0.3

Open the chart page →

5,062
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
pytest@3.5.0
9.0.3

Open the chart page →

27,728
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
pytest@3.5.0
9.0.3

Open the chart page →

22,405
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
pytest@8.4.1
9.0.3

Open the chart page →

6,172
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
pytest@3.5.0
9.0.3

Open the chart page →

24,335
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
pytest@8.3.3
9.0.3

Open the chart page →

9,607
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
pytest@8.3.3
9.0.3

Open the chart page →

9,607
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
pytest@8.3.4
9.0.3

Open the chart page →

19,224
codecovdoubanVerified publisher0.2.42 of 8See more

codecov douban 0.2.4

2 of the 8 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
pytest@7.4.2
9.0.3
codecov/self-hosted-worker:24.4.1837f546b479b
pytest@7.2.0
9.0.3

Open the chart page →

24,917
amundsenduyet1.1.03 of 7See more

amundsen duyet 1.1.0

3 of the 7 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
pytest@3.5.1
9.0.3
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
pytest@3.5.1
9.0.3
amundsendev/amundsen-search:2.4.099dda9502c3e
pytest@3.5.1
9.0.3

Open the chart page →

11,174
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
flyway/flyway:9.1545b5d7cdc75a
pytest@7.2.2
9.0.3

Open the chart page →

9,334
kodiakfikaworks1.1.41 of 2See more

kodiak fikaworks 1.1.4

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
cdignam/kodiak:v0.54.05a6a55b39cee
pytest@6.0.1
9.0.3

Open the chart page →

3,892
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-product-service:1.0c49ff7c141c0
pytest@6.2.5
9.0.3

Open the chart page →

7,691
ishare-satellitefiware1.3.21 of 1See more

ishare-satellite fiware 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
pytest@7.1.2
9.0.3

Open the chart page →

1,778
forms-catalogueforms-catalogue0.1.01 of 2See more

forms-catalogue forms-catalogue 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
pytest@6.2.5
9.0.3

Open the chart page →

2,188
powerdnsfsdrw080.1.31 of 4See more

powerdns fsdrw08 0.1.3

1 of the 4 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
pytest@6.1.1
9.0.3

Open the chart page →

1,958
389dsgabibbo970.1.01 of 1See more

389ds gabibbo97 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
gabibbo97/389ds:fedora-32c047ea64e8cb
pytest@4.6.9
9.0.3

Open the chart page →

200
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
pytest@6.1.1
9.0.3

Open the chart page →

2,643
whooglegeek-cookbookVerified publisher3.4.21 of 1See more

whoogle geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
pytest@5.4.1
9.0.3

Open the chart page →

2,061
gmaas-github-apigmaas-github-api2.0.11 of 1See more

gmaas-github-api gmaas-github-api 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
gmaas2/github-api:latest148fc2d9afe9
pytest@7.2.0
9.0.3

Open the chart page →

1,205
ms-hello-pythonhello-python-helm0.1.11 of 1See more

ms-hello-python hello-python-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
irakli/ms-hello-python:latest9e7a91ba9ae0
pytest@5.4.2
9.0.3

Open the chart page →

891
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
pytest@8.3.5
9.0.3

Open the chart page →

4,647
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
pytest@9.0.2
9.0.3

Open the chart page →

10,849
activation-servicei4trustVerified publisher2.3.11 of 1See more

activation-service i4trust 2.3.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
i4trust/activation-service:2.2.09f3719176893
pytest@7.1.2
9.0.3

Open the chart page →

2,058

Container images carrying it

70 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/ai-agent:0.0.16545dac92173
pytest@8.3.3
9.0.3
3
datawire/aes:1.14.48588eafe6862
pytest@6.1.2
9.0.3
2
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
pytest@6.1.1
9.0.3
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
pytest@8.3.5
9.0.3
2
airbyte/manifest-server:7.23.73b3a670af168
pytest@7.4.4
9.0.3
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
pytest@3.5.1
9.0.3
1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
pytest@3.5.1
9.0.3
1
amundsendev/amundsen-search:2.4.099dda9502c3e
pytest@3.5.1
9.0.3
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
pytest@8.3.5
9.0.3
1
assistiot/fl_repository:latest0fce3ea719a5
pytest@7.1.3
9.0.3
1
assistiot/fl_training_collector:latest792715dd3084
pytest@6.2.5
9.0.3
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
pytest@5.4.1
9.0.3
1
camptocamp/ekorre:0.1.035c91d5fda04
pytest@5.3.5
9.0.3
1
cdignam/kodiak:v0.54.05a6a55b39cee
pytest@6.0.1
9.0.3
1
chandanteekinavar/findery-market-product-service:1.0c49ff7c141c0
pytest@6.2.5
9.0.3
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
pytest@8.3.5
9.0.3
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
pytest@9.0.2
9.0.3
1
ciuse99/suggestarr:v1.0.20d72768245ef5
pytest@8.3.3
9.0.3
1
codecov/self-hosted-api:24.4.10475cb1c3136
pytest@7.4.2
9.0.3
1
codecov/self-hosted-worker:24.4.1837f546b479b
pytest@7.2.0
9.0.3
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
pytest@6.1.2
9.0.3
1
datawire/aes:1.13.62beb65062c8b
pytest@6.1.2
9.0.3
1
datawire/emissary:2.0.2-ea9716efbdd24b
pytest@6.1.2
9.0.3
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
pytest@5.0.1
9.0.3
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
pytest@7.1.2
9.0.3
1
flyway/flyway:9.1545b5d7cdc75a
pytest@7.2.2
9.0.3
1
flyway/flyway:9.14.1-alpine80f12c80502b
pytest@7.2.1
9.0.3
1
gabibbo97/389ds:fedora-32c047ea64e8cb
pytest@4.6.9
9.0.3
1
gethue/hue:4.11.011b649636e68
pytest@6.0.2
9.0.3
1
gethue/hue:4.10.05702b2c37ff9
pytest@6.0.2
9.0.3
1
gmaas2/github-api:latest148fc2d9afe9
pytest@7.2.0
9.0.3
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
pytest@7.4.2
9.0.3
1
homeassistant/home-assistant:2023.12.48d000332b09b
pytest@7.4.3
9.0.3
1
i4trust/activation-service:2.2.09f3719176893
pytest@7.1.2
9.0.3
1
irakli/ms-hello-python:latest9e7a91ba9ae0
pytest@5.4.2
9.0.3
1
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
pytest@8.4.2
9.0.3
1
langgenius/dify-api:1.0.0066035f93856
pytest@8.3.4
9.0.3
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
pytest@7.2.1
9.0.3
1
mozilla/syncstorage-rs:0.15.893752877dced
pytest@8.2.0
9.0.3
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
pytest@6.1.1
9.0.3
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
pytest@8.4.1
9.0.3
1
opendatacube/pipelines:wofs-1.225d810e8504b8
pytest@3.5.0
9.0.3
1
opendatacube/restcube:latest91870111837c
pytest@3.5.0
9.0.3
1
opendatacube/wms:latest1b90cdf68831
pytest@3.5.0
9.0.3
1
opendatacube/wps:latest80df355a660b
pytest@8.4.1
9.0.3
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
pytest@7.2.1
9.0.3
1
redash/redash:25.8.000d813437db5
pytest@7.4.0
9.0.3
1
redash/redash:26.3.0c5c9148f5c38
pytest@7.4.0
9.0.3
1
salehmir/jesse:1.10.101afa95f979e9
pytest@6.2.5
9.0.3
1
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
pytest@5.4.3
9.0.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.