StackRadar

CVE-2025-71405

Medium

Advisory

Published 20 Jun 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.1
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
91
of 17,781 indexed, latest versions
Container images
87
deployed by those charts
Fix available
1 of 1
affected package

chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes

Carried by container images the latest versions of 91 of 17,781 indexed charts deploy, on 87 images.

Affected packageAffected versionsFixed inImages
github.com/go-chi/chi/v5golangv5.0.0, v5.0.2, v5.0.3, v5.0.7+8 more5.2.287
OSV records
GHSA-vrw8-fxc6-2r93
Also known as
GO-2025-3770

Charts affected

91 by stars
ChartLatestAffected imagesRadar Score
autobrrgeek-cookbookVerified publisher1.1.31 of 1See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/autobrr/autobrr:v1.10.0d4022cd32df5
github.com/go-chi/chi/v5@v5.0.7
5.2.2

Open the chart page →

2,236
navidromegeek-cookbookVerified publisher6.4.21 of 1See more

navidrome geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
deluan/navidrome:0.43.04e9ae3bff6aa
github.com/go-chi/chi/v5@v5.0.3
5.2.2

Open the chart page →

3,597
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

3,451
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
github.com/go-chi/chi/v5@v5.0.12
5.2.2

Open the chart page →

6,012
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
github.com/go-chi/chi/v5@v5.2.1
5.2.2

Open the chart page →

6,015
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

3,614
lakefsinseefrlab0.0.61 of 2See more

lakefs inseefrlab 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
treeverse/lakefs:0.69.0478f37a6cffc
github.com/go-chi/chi/v5@v5.0.0
5.2.2

Open the chart page →

2,645
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-chi/chi/v5@v5.2.1
5.2.2

Open the chart page →

45,239
rclonejacobcolvinVerified publisher1.0.11 of 1See more

rclone jacobcolvin 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
rclone/rclone:1.63.008e1af3c8814
github.com/go-chi/chi/v5@v5.0.8
5.2.2

Open the chart page →

2,143
zurgk8s-home-lab-repo1.2.11 of 1See more

zurg k8s-home-lab-repo 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
github.com/go-chi/chi/v5@v5.0.11
5.2.2

Open the chart page →

1,733
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
kubeflow/model-registry:v0.2.95783f6db428f
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

70,530
ksoc-pluginsksocOfficialVerified publisher1.9.105 of 5See more

ksoc-plugins ksoc 1.9.10

5 of the 5 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper:v1.1.115ca2d500d374
github.com/go-chi/chi/v5@v5.0.10
5.2.2
public.ecr.aws/n8h5y2v5/rad-security/rad-guard:v1.1.17a94d2d4aae85
github.com/go-chi/chi/v5@v5.0.10
5.2.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/go-chi/chi/v5@v5.0.10
5.2.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sync:v1.1.1514f3dfbc0225
github.com/go-chi/chi/v5@v5.0.10
5.2.2
public.ecr.aws/n8h5y2v5/rad-security/rad-watch:v1.1.25b9a7d6bc2a0c
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

3,199
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
github.com/go-chi/chi/v5@v5.0.14
5.2.2

Open the chart page →

1,308
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
github.com/go-chi/chi/v5@v5.0.8
5.2.2

Open the chart page →

20,204
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/go-chi/chi/v5@v5.0.12
5.2.2

Open the chart page →

6,824
otlp-gatewayloafoe0.0.21 of 2See more

otlp-gateway loafoe 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/go-chi/chi/v5@v5.0.12
5.2.2

Open the chart page →

2,155
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/go-chi/chi/v5@v5.0.11
5.2.2

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/go-chi/chi/v5@v5.0.11
5.2.2

Open the chart page →

3,225
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
github.com/go-chi/chi/v5@v5.0.12
5.2.2

Open the chart page →

23,613
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

2,968
giteamyaVerified publisher23.12.51 of 1See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
gitea/gitea:1.21.6ac73e0da341f
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

3,430
exporteropenshift1.0.471 of 3See more

exporter openshift 1.0.47

1 of the 3 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

13,000
agentoptimizely-agentVerified publisher1.4.01 of 1See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
optimizely/agent:4.0.09d0096cabd63
github.com/go-chi/chi/v5@v5.0.8
5.2.2

Open the chart page →

1,213
parcaparca4.19.01 of 2See more

parca parca 4.19.0

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

3,350
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

1,978
vikunjapascaliskeVerified publisher5.1.01 of 1See more

vikunja pascaliske 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

1,342
cloudflare-tunnelportefaix-hub0.4.01 of 1See more

cloudflare-tunnel portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.8.314d9c6b01b29
github.com/go-chi/chi/v5@v5.0.8
5.2.2

Open the chart page →

1,306
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

7,084
spindlerubxkubeVerified publisher0.1.11 of 2See more

spindle rubxkube 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/go-chi/chi/v5@v5.2.0
5.2.2

Open the chart page →

1,438
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
github.com/go-chi/chi/v5@v5.0.8
5.2.2

Open the chart page →

4,744
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

4,070
cernboxsciencebox0.0.41 of 6See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
github.com/go-chi/chi/v5@v5.0.7
5.2.2

Open the chart page →

2,330
cortezasergiotocaliniVerified publisher1.0.11 of 1See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.60bcdcbcd3c63
github.com/go-chi/chi/v5@v5.0.7
5.2.2

Open the chart page →

3,286
rclonesoftonic2.1.01 of 1See more

rclone softonic 2.1.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

1,672
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
github.com/go-chi/chi/v5@v5.0.12
5.2.2

Open the chart page →

2,938
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
github.com/go-chi/chi/v5@v5.0.8
5.2.2

Open the chart page →

6,779
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

3,460
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

8,193
twitter-apptwitter-helm0.1.122 of 8See more

twitter-app twitter-helm 0.1.12

2 of the 8 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
stakkato95/twitter-service-graphql:0.1.13cbe857234f2
github.com/go-chi/chi/v5@v5.0.7
5.2.2
stakkato95/twitter-service-users:0.1.1456049efee9a
github.com/go-chi/chi/v5@v5.0.7
5.2.2

Open the chart page →

6,132
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-chi/chi/v5@v5.2.1
5.2.2

Open the chart page →

45,239
gateway-control-planewallarmVerified publisher0.2.01 of 2See more

gateway-control-plane wallarm 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
wallarm/gateway-control-plane:0.2.0a321bc974a19
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

1,455

Container images carrying it

87 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
springhack/frpc_ingress:latest4aceb821da88
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
stakkato95/twitter-service-graphql:0.1.13cbe857234f2
github.com/go-chi/chi/v5@v5.0.7
5.2.2
1
stakkato95/twitter-service-users:0.1.1456049efee9a
github.com/go-chi/chi/v5@v5.0.7
5.2.2
1
stashapp/stash-box:latesta534c8afdf39
github.com/go-chi/chi/v5@v5.1.0
5.2.2
1
supabase/gotrue:v2.163.0ba4ddc594b0b
github.com/go-chi/chi/v5@v5.0.12
5.2.2
1
treeverse/lakefs:0.69.0478f37a6cffc
github.com/go-chi/chi/v5@v5.0.0
5.2.2
1
udhos/miniapi:1.3.28a7042db82ce
github.com/go-chi/chi/v5@v5.1.0
5.2.2
1
wallarm/gateway-control-plane:0.2.0a321bc974a19
github.com/go-chi/chi/v5@v5.1.0
5.2.2
1
ghcr.io/0xerr0r/blocky:v0.18b15824464acb
github.com/go-chi/chi/v5@v5.0.7
5.2.2
1
ghcr.io/appscode/cloudflare-dns-proxy:v0.0.5dfbef0285e14
github.com/go-chi/chi/v5@v5.0.12
5.2.2
1
ghcr.io/appscode/fileserver:v0.0.2b1857871e06c
github.com/go-chi/chi/v5@v5.0.12
5.2.2
1
ghcr.io/appscode/gh-ci-webhook:v0.0.2036ce246d884e
github.com/go-chi/chi/v5@v5.0.14
5.2.2
1
ghcr.io/autobrr/autobrr:v1.10.0d4022cd32df5
github.com/go-chi/chi/v5@v5.0.7
5.2.2
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
github.com/go-chi/chi/v5@v5.0.7
5.2.2
1
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
github.com/go-chi/chi/v5@v5.0.11
5.2.2
1
ghcr.io/gabe565/limo:latest6dfdbc9853bb
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
ghcr.io/gabe565/matrimony:latestd39a9d7c3e1b
github.com/go-chi/chi/v5@v5.0.11
5.2.2
1
ghcr.io/gabe565/transsmute:latestc8ac95a30c31
github.com/go-chi/chi/v5@v5.2.1
5.2.2
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
github.com/go-chi/chi/v5@v5.0.12
5.2.2
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/go-chi/chi/v5@v5.1.0
5.2.2
1
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/go-chi/chi/v5@v5.0.12
5.2.2
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/go-chi/chi/v5@v5.0.11
5.2.2
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/go-chi/chi/v5@v5.0.11
5.2.2
1
ghcr.io/prymitive/karma:v0.85d06892218680
github.com/go-chi/chi/v5@v5.0.3
5.2.2
1
ghcr.io/pyrra-dev/pyrra:v0.8.10e02ef538ef0
github.com/go-chi/chi/v5@v5.1.0
5.2.2
1
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/go-chi/chi/v5@v5.2.0
5.2.2
1
ghcr.io/traefik/traefik-hub:v2.11.0322f5f8cc105
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
ghcr.io/wundergraph/cosmo/controlplane:0.133.149800ff775f3
github.com/go-chi/chi/v5@v5.0.12
5.2.2
1
ghcr.io/wyrihaximusnet/kubernetes-redis-db-assignment-operator:v1.0.831060be60bec
github.com/go-chi/chi/v5@v5.0.7
5.2.2
1
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper:v1.1.115ca2d500d374
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
public.ecr.aws/n8h5y2v5/rad-security/rad-guard:v1.1.17a94d2d4aae85
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
public.ecr.aws/n8h5y2v5/rad-security/rad-sync:v1.1.1514f3dfbc0225
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
public.ecr.aws/n8h5y2v5/rad-security/rad-watch:v1.1.25b9a7d6bc2a0c
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.