StackRadar

CVE-2025-7962

High

Advisory

Published 21 Jul 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
104
of 17,781 indexed, latest versions
Container images
103
deployed by those charts
Fix available
2 of 2
affected packages

Jakarta Mail vulnerable to SMTP Injection

Carried by container images the latest versions of 104 of 17,781 indexed charts deploy, on 103 images.

Affected packageAffected versionsFixed inImages
jakarta.mailmaven1.6.3, 1.6.4, 1.6.5, 1.6.5-atlassian-2+4 more1.6.8, 2.0.276
smtpmaven2.0.1, 2.0.2, 2.0.32.0.428
OSV records
GHSA-9342-92gg-6v29

Charts affected

104 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
jakarta.mail@1.6.3
1.6.8

Open the chart page →

6,556
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jakarta.mail@1.6.7
1.6.8

Open the chart page →

7,713
graylogkong-zVerified publisher3.0.321 of 5See more

graylog kong-z 3.0.32

1 of the 5 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
graylog/graylog:7.2.0-beta.2-1e8431d59b84d
jakarta.mail@1.6.7
1.6.8

Open the chart page →

2,699
dependency-trackevryfs-ossVerified publisher1.5.51 of 3See more

dependency-track evryfs-oss 1.5.5

1 of the 3 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
jakarta.mail@1.6.7
1.6.8

Open the chart page →

2,503
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
jakarta.mail@1.6.5
1.6.8

Open the chart page →

2,572
grayloggroundhog2k0.13.101 of 1See more

graylog groundhog2k 0.13.10

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
graylog/graylog:7.1.9598bd41fefd5
jakarta.mail@1.6.7
1.6.8

Open the chart page →

1,074
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
smtp@2.0.3
2.0.4

Open the chart page →

7,268
elasticsearch-clusterwiremindVerified publisher4.5.21 of 2See more

elasticsearch-cluster wiremind 4.5.2

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
jakarta.mail@1.6.4
1.6.8

Open the chart page →

2,283
grayloggraylog2OfficialVerified publisher2.0.01 of 2See more

graylog graylog2 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
graylog/graylog-enterprise:7.1.88a1f641cd7aa
jakarta.mail@1.6.7
1.6.8

Open the chart page →

1,500
janssenjanssen-auth-serverOfficialVerified publisher0.0.0-nightly5 of 8See more

janssen janssen-auth-server 0.0.0-nightly

5 of the 8 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly7752874e71d8
jakarta.mail@2.0.1
2.0.2
ghcr.io/janssenproject/jans/casa:0.0.0-nightly3f2d14563495
jakarta.mail@1.6.7
1.6.8
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly900e2b88bd08
jakarta.mail@2.0.1
2.0.2
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly2a797804f08c
jakarta.mail@2.0.1
2.0.2
ghcr.io/janssenproject/jans/scim:0.0.0-nightly096b8bcbbe45
jakarta.mail@2.0.1
2.0.2

Open the chart page →

1,068
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
jakarta.mail@1.6.5-atlassian-2
1.6.8

Open the chart page →

8,636
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
jakarta.mail@1.6.4
1.6.8

Open the chart page →

16,210
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
jakarta.mail@1.6.4
1.6.8

Open the chart page →

27,267
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
geonode/geoserver:2.28.4-latest81b1d431b7e9
jakarta.mail@1.6.7
1.6.8

Open the chart page →

13,953
hertzbeathertzbeatOfficialVerified publisher1.8.11 of 4See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
smtp@2.0.3
2.0.4

Open the chart page →

14,000
musicocielmusicocielVerified publisher0.0.01 of 3See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
smtp@2.0.1
2.0.4

Open the chart page →

4,406
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
jakarta.mail@1.6.3
1.6.8
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
jakarta.mail@1.6.3
1.6.8

Open the chart page →

8,698
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
jakarta.mail@2.0.1
2.0.2

Open the chart page →

5,235
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
smtp@2.0.3
2.0.4

Open the chart page →

2,784
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
jakarta.mail@1.6.4
1.6.8

Open the chart page →

13,521
vrijbrpvrijbrpVerified publisher0.1.52 of 5See more

vrijbrp vrijbrp 0.1.5

2 of the 5 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
vrijbrp/balie:developbc85c89530b9
jakarta.mail@1.6.7
1.6.8
vrijbrp/balie-ws:developc6603cb829ea
jakarta.mail@1.6.7
1.6.8

Open the chart page →

8,811
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
jakarta.mail@1.6.4
1.6.8

Open the chart page →

17,896
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
jakarta.mail@1.6.4
1.6.8

Open the chart page →

38,346
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
smtp@2.0.2
2.0.4

Open the chart page →

5,291
gluugluu-flexOfficialVerified publisher0.0.0-nightly5 of 9See more

gluu gluu-flex 0.0.0-nightly

5 of the 9 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly7752874e71d8
jakarta.mail@2.0.1
2.0.2
ghcr.io/janssenproject/jans/casa:0.0.0-nightly3f2d14563495
jakarta.mail@1.6.7
1.6.8
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly900e2b88bd08
jakarta.mail@2.0.1
2.0.2
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly2a797804f08c
jakarta.mail@2.0.1
2.0.2
ghcr.io/janssenproject/jans/scim:0.0.0-nightly096b8bcbbe45
jakarta.mail@2.0.1
2.0.2

Open the chart page →

1,507
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
jakarta.mail@1.6.4
1.6.8

Open the chart page →

17,284
traccarjeffrescVerified publisher0.2.01 of 2See more

traccar jeffresc 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
traccar/traccar:6.7-alpine621c8d6d46fd
jakarta.mail@2.0.1
2.0.2

Open the chart page →

1,341
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
smtp@2.0.3
2.0.4

Open the chart page →

7,387
metabasemetabase-helmVerified publisher2.7.11 of 1See more

metabase metabase-helm 2.7.1

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
metabase/metabase:v0.46.09ebdc664a6b2
jakarta.mail@1.6.5
1.6.8

Open the chart page →

2,221
clowder2ncsaVerified publisher1.9.72 of 12See more

clowder2 ncsa 1.9.7

2 of the 12 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
jakarta.mail@1.6.3
1.6.8
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
jakarta.mail@1.6.5
1.6.8

Open the chart page →

37,373
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
jakarta.mail@1.6.4
1.6.8
treskon/portrait:DEV-latest88e813f22347
smtp@2.0.3
2.0.4

Open the chart page →

31,844
shinyproxyremche0.6.61 of 2See more

shinyproxy remche 0.6.6

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
remche/shinyproxy:2.6.18bcda8a04d3b
jakarta.mail@1.6.7
1.6.8

Open the chart page →

3,958
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
jakarta.mail@1.6.4
1.6.8

Open the chart page →

6,045
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
smtp@2.0.3
2.0.4

Open the chart page →

2,406
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
jakarta.mail@2.0.1
2.0.2

Open the chart page →

9,102
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
jakarta.mail@2.0.1
2.0.2

Open the chart page →

9,102
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jakarta.mail@1.6.7
1.6.8

Open the chart page →

7,713
connector-rollout-workerairbyteVerified publisher1.9.21 of 1See more

connector-rollout-worker airbyte 1.9.2

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
airbyte/connector-rollout-worker:2.0.2-alpha-c905e75d42813fcc191
smtp@2.0.3
2.0.4

Open the chart page →

829
airsonic-advancedairsonic-advancedVerified publisher0.3.11 of 1See more

airsonic-advanced airsonic-advanced 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
linuxserver/airsonic-advanced:11.1.4d286a7f55a59
smtp@2.0.3
2.0.4

Open the chart page →

1,748
inbox-serverappscodeVerified publisher2025.12.251 of 1See more

inbox-server appscode 2025.12.25

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:postgres-latest536358d7b17e
smtp@2.0.3
2.0.4

Open the chart page →

3,963
inbox-server-distributedappscodeVerified publisher2025.12.251 of 4See more

inbox-server-distributed appscode 2025.12.25

1 of the 4 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-server:latest536358d7b17e
smtp@2.0.3
2.0.4

Open the chart page →

15,573
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
jakarta.mail@1.6.4
1.6.8

Open the chart page →

40,238
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
jakarta.mail@1.6.7
1.6.8

Open the chart page →

13,352
axelor-open-suiteaxelor-open-suiteVerified publisher7.2.581 of 2See more

axelor-open-suite axelor-open-suite 7.2.58

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
jakarta.mail@1.6.5
1.6.8

Open the chart page →

9,722
keycloakbarravarVerified publisher1.0.41 of 1See more

keycloak barravar 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:24.0.34d6f22991266
smtp@2.0.1
2.0.4

Open the chart page →

2,381
blackduck-alertblackduck8.4.01 of 4See more

blackduck-alert blackduck 8.4.0

1 of the 4 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
smtp@2.0.3
2.0.4

Open the chart page →

4,292
bluerange-serverbluerangeOfficialVerified publisher1.3.11 of 1See more

bluerange-server bluerange 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
bluerange/bluerange:26.1.307c8f73b55df
smtp@2.0.3
2.0.4

Open the chart page →

1,816
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
jenkins/jenkins:2.440.3-jdk17de4fea113221
smtp@2.0.3
2.0.4

Open the chart page →

8,323
metabasecasemark2.16.111 of 1See more

metabase casemark 2.16.11

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
cmosborn/metabase-arm64:0.50.286ec0a8878ad2
jakarta.mail@1.6.5
1.6.8

Open the chart page →

1,215
castlemockcnieg2.0.11 of 1See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
castlemock/castlemock:latestb7f3f1527ba9
jakarta.mail@1.6.3
smtp@2.0.3
1.6.8
2.0.4

Open the chart page →

4,578

Container images carrying it

103 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
smtp@2.0.3
2.0.4
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
jakarta.mail@1.6.5
1.6.8
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
smtp@2.0.2
2.0.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.