StackRadar

CVE-2025-71405

Medium

Advisory

Published 20 Jun 2025In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.1
base score, highest
EPSS
0.003
23rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
91
of 17,781 indexed, latest versions
Container images
87
deployed by those charts
Fix available
1 of 1
affected package

chi Allows Host Header Injection which Leads to Open Redirect in RedirectSlashes

Carried by container images the latest versions of 91 of 17,781 indexed charts deploy, on 87 images.

Affected packageAffected versionsFixed inImages
github.com/go-chi/chi/v5golangv5.0.0, v5.0.2, v5.0.3, v5.0.7+8 more5.2.287
OSV records
GHSA-vrw8-fxc6-2r93
Also known as
GO-2025-3770

Charts affected

91 by stars
ChartLatestAffected imagesRadar Score
autobrrgeek-cookbookVerified publisher1.1.31 of 1See more

autobrr geek-cookbook 1.1.3

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/autobrr/autobrr:v1.10.0d4022cd32df5
github.com/go-chi/chi/v5@v5.0.7
5.2.2

Open the chart page →

2,236
navidromegeek-cookbookVerified publisher6.4.21 of 1See more

navidrome geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
deluan/navidrome:0.43.04e9ae3bff6aa
github.com/go-chi/chi/v5@v5.0.3
5.2.2

Open the chart page →

3,597
hoppscotchhelm-charts-nr0.3.11 of 1See more

hoppscotch helm-charts-nr 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

3,451
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
github.com/go-chi/chi/v5@v5.0.12
5.2.2

Open the chart page →

6,012
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
github.com/go-chi/chi/v5@v5.2.1
5.2.2

Open the chart page →

6,015
hoppscotchhoppscotch0.1.11 of 1See more

hoppscotch hoppscotch 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

3,614
lakefsinseefrlab0.0.61 of 2See more

lakefs inseefrlab 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
treeverse/lakefs:0.69.0478f37a6cffc
github.com/go-chi/chi/v5@v5.0.0
5.2.2

Open the chart page →

2,645
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-chi/chi/v5@v5.2.1
5.2.2

Open the chart page →

45,239
rclonejacobcolvinVerified publisher1.0.11 of 1See more

rclone jacobcolvin 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
rclone/rclone:1.63.008e1af3c8814
github.com/go-chi/chi/v5@v5.0.8
5.2.2

Open the chart page →

2,143
zurgk8s-home-lab-repo1.2.11 of 1See more

zurg k8s-home-lab-repo 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
github.com/go-chi/chi/v5@v5.0.11
5.2.2

Open the chart page →

1,733
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
kubeflow/model-registry:v0.2.95783f6db428f
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

70,530
ksoc-pluginsksocOfficialVerified publisher1.9.105 of 5See more

ksoc-plugins ksoc 1.9.10

5 of the 5 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
public.ecr.aws/n8h5y2v5/rad-security/rad-bootstrapper:v1.1.115ca2d500d374
github.com/go-chi/chi/v5@v5.0.10
5.2.2
public.ecr.aws/n8h5y2v5/rad-security/rad-guard:v1.1.17a94d2d4aae85
github.com/go-chi/chi/v5@v5.0.10
5.2.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom:v1.1.34e97e0e7a2088
github.com/go-chi/chi/v5@v5.0.10
5.2.2
public.ecr.aws/n8h5y2v5/rad-security/rad-sync:v1.1.1514f3dfbc0225
github.com/go-chi/chi/v5@v5.0.10
5.2.2
public.ecr.aws/n8h5y2v5/rad-security/rad-watch:v1.1.25b9a7d6bc2a0c
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

3,199
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
github.com/go-chi/chi/v5@v5.0.14
5.2.2

Open the chart page →

1,308
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
github.com/go-chi/chi/v5@v5.0.8
5.2.2

Open the chart page →

20,204
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/go-chi/chi/v5@v5.0.12
5.2.2

Open the chart page →

6,824
otlp-gatewayloafoe0.0.21 of 2See more

otlp-gateway loafoe 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
github.com/go-chi/chi/v5@v5.0.12
5.2.2

Open the chart page →

2,155
devpod-proloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

devpod-pro loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/go-chi/chi/v5@v5.0.11
5.2.2

Open the chart page →

3,225
vcluster-control-planeloftVerified publisher0.0.0-ci.4-do-not-use1 of 1See more

vcluster-control-plane loft 0.0.0-ci.4-do-not-use

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/go-chi/chi/v5@v5.0.11
5.2.2

Open the chart page →

3,225
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
github.com/go-chi/chi/v5@v5.0.12
5.2.2

Open the chart page →

23,613
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

2,968
giteamyaVerified publisher23.12.51 of 1See more

gitea mya 23.12.5

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
gitea/gitea:1.21.6ac73e0da341f
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

3,430
exporteropenshift1.0.471 of 3See more

exporter openshift 1.0.47

1 of the 3 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

13,000
agentoptimizely-agentVerified publisher1.4.01 of 1See more

agent optimizely-agent 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
optimizely/agent:4.0.09d0096cabd63
github.com/go-chi/chi/v5@v5.0.8
5.2.2

Open the chart page →

1,213
parcaparca4.19.01 of 2See more

parca parca 4.19.0

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

3,350
parcaparca-chart0.1.01 of 1See more

parca parca-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

1,978
vikunjapascaliskeVerified publisher5.1.01 of 1See more

vikunja pascaliske 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

1,342
cloudflare-tunnelportefaix-hub0.4.01 of 1See more

cloudflare-tunnel portefaix-hub 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2024.8.314d9c6b01b29
github.com/go-chi/chi/v5@v5.0.8
5.2.2

Open the chart page →

1,306
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

7,084
spindlerubxkubeVerified publisher0.1.11 of 2See more

spindle rubxkube 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
github.com/go-chi/chi/v5@v5.2.0
5.2.2

Open the chart page →

1,438
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
github.com/go-chi/chi/v5@v5.0.8
5.2.2

Open the chart page →

4,744
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

4,070
cernboxsciencebox0.0.41 of 6See more

cernbox sciencebox 0.0.4

1 of the 6 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
cs3org/revad:v1.19.03b57a34a7dfd
github.com/go-chi/chi/v5@v5.0.7
5.2.2

Open the chart page →

2,330
cortezasergiotocaliniVerified publisher1.0.11 of 1See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.60bcdcbcd3c63
github.com/go-chi/chi/v5@v5.0.7
5.2.2

Open the chart page →

3,286
rclonesoftonic2.1.01 of 1See more

rclone softonic 2.1.0

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

1,672
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
github.com/go-chi/chi/v5@v5.0.12
5.2.2

Open the chart page →

2,938
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
github.com/go-chi/chi/v5@v5.0.8
5.2.2

Open the chart page →

6,779
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
github.com/go-chi/chi/v5@v5.0.10
5.2.2

Open the chart page →

3,460
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

8,193
twitter-apptwitter-helm0.1.122 of 8See more

twitter-app twitter-helm 0.1.12

2 of the 8 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
stakkato95/twitter-service-graphql:0.1.13cbe857234f2
github.com/go-chi/chi/v5@v5.0.7
5.2.2
stakkato95/twitter-service-users:0.1.1456049efee9a
github.com/go-chi/chi/v5@v5.0.7
5.2.2

Open the chart page →

6,132
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-chi/chi/v5@v5.2.1
5.2.2

Open the chart page →

45,239
gateway-control-planewallarmVerified publisher0.2.01 of 2See more

gateway-control-plane wallarm 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-71405.

Container imageDigestPackageFixed in
wallarm/gateway-control-plane:0.2.0a321bc974a19
github.com/go-chi/chi/v5@v5.1.0
5.2.2

Open the chart page →

1,455

Container images carrying it

87 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
vikunja/vikunja:0.24.6ed1f3ed467fe
github.com/go-chi/chi/v5@v5.1.0
5.2.2
3
cs3org/revad:v1.19.03b57a34a7dfd
github.com/go-chi/chi/v5@v5.0.7
5.2.2
2
cs3org/revad:v1.24.0e80a4d67b352
github.com/go-chi/chi/v5@v5.0.8
5.2.2
2
hoppscotch/hoppscotch:2024.8.2f1da831950b7
github.com/go-chi/chi/v5@v5.0.10
5.2.2
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
github.com/go-chi/chi/v5@v5.2.1
5.2.2
2
rclone/rclone:1.6874c51b8817e5
github.com/go-chi/chi/v5@v5.1.0
5.2.2
2
ghcr.io/dergeberl/kubeteach:v0.2.3-alphacf4428a3c79e
github.com/go-chi/chi/v5@v5.0.7
5.2.2
2
ghcr.io/parca-dev/parca:v0.20.00d1df8f436f7
github.com/go-chi/chi/v5@v5.0.10
5.2.2
2
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
artifacthub/hub:v1.19.0111918d8c399
github.com/go-chi/chi/v5@v5.0.14
5.2.2
1
baserow/baserow:1.30.1df0c42eb67e8
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
camptocamp/bucket-cloner:latestacfafc308d88
github.com/go-chi/chi/v5@v5.0.2
5.2.2
1
chrislusf/seaweedfs:3.56ed80f00fde46
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
cloudflare/cloudflared:2024.8.314d9c6b01b29
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
cloudflare/cloudflared:2024.5.05d5f70a59d5e
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
cloudflare/cloudflared:2023.10.0c18744ae1767
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
coderenvs/coder-service:1.44.61deffc4670e6
github.com/go-chi/chi/v5@v5.0.7
5.2.2
1
cortezaproject/corteza:2024.9.60bcdcbcd3c63
github.com/go-chi/chi/v5@v5.0.7
5.2.2
1
cortezaproject/corteza:2024.9.08eb7a26605c9
github.com/go-chi/chi/v5@v5.0.7
5.2.2
1
cortezaproject/corteza:2024.9.4cb9f200de5d2
github.com/go-chi/chi/v5@v5.0.7
5.2.2
1
daprio/dashboard:0.15.04be696707bd1
github.com/go-chi/chi/v5@v5.0.11
5.2.2
1
deluan/navidrome:0.49.311a24da08977
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
deluan/navidrome:0.50.02cf4442b0099
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
deluan/navidrome:0.43.04e9ae3bff6aa
github.com/go-chi/chi/v5@v5.0.3
5.2.2
1
engrmth/bnkr:2.1.06d8464e6f0e8
github.com/go-chi/chi/v5@v5.0.3
5.2.2
1
epamedp/edp-admin-console:2.14.0616c678ba3e7
github.com/go-chi/chi/v5@v5.0.7
5.2.2
1
erigontech/erigon:v2.61.288706754b627
github.com/go-chi/chi/v5@v5.0.12
5.2.2
1
gitea/gitea:1.22.376f516a1a8c2
github.com/go-chi/chi/v5@v5.0.12
5.2.2
1
gitea/gitea:1.21.6ac73e0da341f
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
hoppscotch/hoppscotch:2024.11.0538fe6ded4b6
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
ispras/svacer:11-2-042aa9fa9f189
github.com/go-chi/chi/v5@v5.2.1
5.2.2
1
kubeflow/model-registry:v0.2.95783f6db428f
github.com/go-chi/chi/v5@v5.1.0
5.2.2
1
kusionstack/karpor:v0.6.4b707d3bf0abd
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
kusionstack/kusion:v0.14.0126c8f0b0976
github.com/go-chi/chi/v5@v5.0.12
5.2.2
1
library/caddy:2.9-alpineb4e3952384eb
github.com/go-chi/chi/v5@v5.0.12
5.2.2
1
logiqai/flash:v3.10.265b996bc7bdc
github.com/go-chi/chi/v5@v5.0.12
5.2.2
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
louislam/uptime-kuma:13d632903e6af
github.com/go-chi/chi/v5@v5.0.10
5.2.2
1
louislam/uptime-kuma:1.23.1396510915e6be
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
megaease/easegress:latestfad1c7452958
github.com/go-chi/chi/v5@v5.0.14
5.2.2
1
optimizely/agent:4.0.09d0096cabd63
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
orbitalreg/orbitalreg-api:0.1.045f2620337af
github.com/go-chi/chi/v5@v5.0.12
5.2.2
1
owncloud/ocis:7.1.388e7c854517d
github.com/go-chi/chi/v5@v5.1.0
5.2.2
1
pinclr/v2ray-proxy:latestf37f250b7091
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
pomerium/pomerium:v0.22.19c69b10a2126
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
rclone/rclone:1.63.008e1af3c8814
github.com/go-chi/chi/v5@v5.0.8
5.2.2
1
rclone/rclone:1.57.01e6eeabddc01
github.com/go-chi/chi/v5@v5.0.3
5.2.2
1
rclone/rclone:1.56.0f2fc45c8bc57
github.com/go-chi/chi/v5@v5.0.2
5.2.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.