StackRadar

CVE-2025-71176

Medium

Advisory

Published 22 Jan 2026In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
72
of 17,781 indexed, latest versions
Container images
70
deployed by those charts
Fix available
1 of 1
affected package

pytest has vulnerable tmpdir handling

Carried by container images the latest versions of 72 of 17,781 indexed charts deploy, on 70 images.

Affected packageAffected versionsFixed inImages
pytestpypi3.5.0, 3.5.1, 4.6.9, 5.0.1+27 more9.0.370
OSV records
GHSA-6w46-j5rx-g56g
Also known as
PYSEC-2026-1845

Charts affected

72 by stars
ChartLatestAffected imagesRadar Score
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
pytest@6.0.2
9.0.3

Open the chart page →

16,417
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
pytest@7.4.2
9.0.3

Open the chart page →

6,447
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
pytest@8.3.5
9.0.3

Open the chart page →

8,405
lightlyticslightlytics0.1.211 of 2See more

lightlytics lightlytics 0.1.21

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
pytest@8.3.4
9.0.3

Open the chart page →

5,354
calendar-apiliturgical0.1.51 of 1See more

calendar-api liturgical 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/liturgical-app/calendar-api:0.0.9688a685e2bde
pytest@8.4.1
9.0.3

Open the chart page →

1,556
liturgical-apiliturgical0.2.111 of 1See more

liturgical-api liturgical 0.2.11

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/liturgical-app/liturgical-api:1.0.12637bdcebdd8d
pytest@9.0.2
9.0.3

Open the chart page →

1,004
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
pytest@7.2.1
9.0.3

Open the chart page →

1,949
parent-chartmid-proje0.1.01 of 3See more

parent-chart mid-proje 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
youssef11gaber10/flask-service:latest9c727fcfde76
pytest@7.4.0
9.0.3

Open the chart page →

1,773
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
pytest@5.0.1
9.0.3

Open the chart page →

4,911
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
pytest@7.4.2
9.0.3

Open the chart page →

109,294
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
pytest@9.0.2
9.0.3

Open the chart page →

4,749
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
pytest@7.2.1
9.0.3

Open the chart page →

4,616
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
pytest@6.2.5
9.0.3

Open the chart page →

2,201
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
pytest@8.3.3
9.0.3

Open the chart page →

9,607
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
pytest@8.3.5
9.0.3

Open the chart page →

3,512
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
pytest@8.3.5
9.0.3

Open the chart page →

4,718
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
pytest@8.3.5
9.0.3

Open the chart page →

7,436
syncstorageschichtelVerified publisher0.1.11 of 1See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
mozilla/syncstorage-rs:0.15.893752877dced
pytest@8.2.0
9.0.3

Open the chart page →

1,318
classificationsignalen4.24.01 of 1See more

classification signalen 4.24.0

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
pytest@5.4.3
9.0.3

Open the chart page →

1,553
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
pytest@6.1.2
9.0.3

Open the chart page →

4,086
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
pytest@6.1.1
9.0.3

Open the chart page →

2,643
zahori-serverzahoriVerified publisher1.0.11 of 2See more

zahori-server zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-71176.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
pytest@7.2.1
9.0.3

Open the chart page →

5,846

Container images carrying it

70 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/ai-agent:0.0.16545dac92173
pytest@8.3.3
9.0.3
3
datawire/aes:1.14.48588eafe6862
pytest@6.1.2
9.0.3
2
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
pytest@6.1.1
9.0.3
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
pytest@8.3.5
9.0.3
2
airbyte/manifest-server:7.23.73b3a670af168
pytest@7.4.4
9.0.3
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
pytest@3.5.1
9.0.3
1
amundsendev/amundsen-metadata:2.5.44d98eb21f5f9
pytest@3.5.1
9.0.3
1
amundsendev/amundsen-search:2.4.099dda9502c3e
pytest@3.5.1
9.0.3
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
pytest@8.3.5
9.0.3
1
assistiot/fl_repository:latest0fce3ea719a5
pytest@7.1.3
9.0.3
1
assistiot/fl_training_collector:latest792715dd3084
pytest@6.2.5
9.0.3
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
pytest@5.4.1
9.0.3
1
camptocamp/ekorre:0.1.035c91d5fda04
pytest@5.3.5
9.0.3
1
cdignam/kodiak:v0.54.05a6a55b39cee
pytest@6.0.1
9.0.3
1
chandanteekinavar/findery-market-product-service:1.0c49ff7c141c0
pytest@6.2.5
9.0.3
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
pytest@8.3.5
9.0.3
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
pytest@9.0.2
9.0.3
1
ciuse99/suggestarr:v1.0.20d72768245ef5
pytest@8.3.3
9.0.3
1
codecov/self-hosted-api:24.4.10475cb1c3136
pytest@7.4.2
9.0.3
1
codecov/self-hosted-worker:24.4.1837f546b479b
pytest@7.2.0
9.0.3
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
pytest@6.1.2
9.0.3
1
datawire/aes:1.13.62beb65062c8b
pytest@6.1.2
9.0.3
1
datawire/emissary:2.0.2-ea9716efbdd24b
pytest@6.1.2
9.0.3
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
pytest@5.0.1
9.0.3
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
pytest@7.1.2
9.0.3
1
flyway/flyway:9.1545b5d7cdc75a
pytest@7.2.2
9.0.3
1
flyway/flyway:9.14.1-alpine80f12c80502b
pytest@7.2.1
9.0.3
1
gabibbo97/389ds:fedora-32c047ea64e8cb
pytest@4.6.9
9.0.3
1
gethue/hue:4.11.011b649636e68
pytest@6.0.2
9.0.3
1
gethue/hue:4.10.05702b2c37ff9
pytest@6.0.2
9.0.3
1
gmaas2/github-api:latest148fc2d9afe9
pytest@7.2.0
9.0.3
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
pytest@7.4.2
9.0.3
1
homeassistant/home-assistant:2023.12.48d000332b09b
pytest@7.4.3
9.0.3
1
i4trust/activation-service:2.2.09f3719176893
pytest@7.1.2
9.0.3
1
irakli/ms-hello-python:latest9e7a91ba9ae0
pytest@5.4.2
9.0.3
1
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
pytest@8.4.2
9.0.3
1
langgenius/dify-api:1.0.0066035f93856
pytest@8.3.4
9.0.3
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
pytest@7.2.1
9.0.3
1
mozilla/syncstorage-rs:0.15.893752877dced
pytest@8.2.0
9.0.3
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
pytest@6.1.1
9.0.3
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
pytest@8.4.1
9.0.3
1
opendatacube/pipelines:wofs-1.225d810e8504b8
pytest@3.5.0
9.0.3
1
opendatacube/restcube:latest91870111837c
pytest@3.5.0
9.0.3
1
opendatacube/wms:latest1b90cdf68831
pytest@3.5.0
9.0.3
1
opendatacube/wps:latest80df355a660b
pytest@8.4.1
9.0.3
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
pytest@7.2.1
9.0.3
1
redash/redash:25.8.000d813437db5
pytest@7.4.0
9.0.3
1
redash/redash:26.3.0c5c9148f5c38
pytest@7.4.0
9.0.3
1
salehmir/jesse:1.10.101afa95f979e9
pytest@6.2.5
9.0.3
1
signalen/classification:ad60447d1733473e30ab0a3ba53d58141cc1d2509496ae672877
pytest@5.4.3
9.0.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.