StackRadar

CVE-2025-7962

High

Advisory

Published 21 Jul 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
104
of 17,781 indexed, latest versions
Container images
103
deployed by those charts
Fix available
2 of 2
affected packages

Jakarta Mail vulnerable to SMTP Injection

Carried by container images the latest versions of 104 of 17,781 indexed charts deploy, on 103 images.

Affected packageAffected versionsFixed inImages
jakarta.mailmaven1.6.3, 1.6.4, 1.6.5, 1.6.5-atlassian-2+4 more1.6.8, 2.0.276
smtpmaven2.0.1, 2.0.2, 2.0.32.0.428
OSV records
GHSA-9342-92gg-6v29

Charts affected

104 by stars
ChartLatestAffected imagesRadar Score
dependency-trackcnieg3.0.81 of 2See more

dependency-track cnieg 3.0.8

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.6.3485ac0952c02
jakarta.mail@1.6.7
1.6.8

Open the chart page →

2,503
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
jakarta.mail@1.6.5
1.6.8

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
jakarta.mail@1.6.5
1.6.8

Open the chart page →

6,915
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
smtp@2.0.3
2.0.4

Open the chart page →

7,268
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
jakarta.mail@1.6.3
1.6.8

Open the chart page →

10,564
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
jakarta.mail@2.0.1
2.0.2

Open the chart page →

7,792
mod-ncipfolio-org0.1.341 of 1See more

mod-ncip folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
folioci/mod-ncip:latest8ed83674352b
jakarta.mail@2.0.0
2.0.2

Open the chart page →

1,103
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
jakarta.mail@1.6.7
1.6.8

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
jakarta.mail@1.6.5
1.6.8

Open the chart page →

19,215
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
jakarta.mail@1.6.7
1.6.8

Open the chart page →

8,943
sharrygeek-cookbookVerified publisher5.4.21 of 1See more

sharry geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
eikek0/sharry:1.8.0661ff3ef42cd
jakarta.mail@2.0.1
2.0.2

Open the chart page →

1,419
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.1588c2ec10c7f2
jakarta.mail@1.6.4
1.6.8

Open the chart page →

34,754
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
jakarta.mail@1.6.7
1.6.8

Open the chart page →

5,261
metabasehelm-charts-nr0.14.41 of 1See more

metabase helm-charts-nr 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
jakarta.mail@1.6.5
1.6.8

Open the chart page →

2,572
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
openbas/platform:2.0.5d986d80b0a75
smtp@2.0.3
2.0.4

Open the chart page →

25,017
daveit-at-mOfficialVerified publisher0.2.152 of 11See more

dave it-at-m 0.2.15

2 of the 11 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
jakarta.mail@1.6.4
1.6.8
ghcr.io/it-at-m/dave-backend/dave-backend:10.0.0f66413e62afc
jakarta.mail@1.6.7
1.6.8

Open the chart page →

15,089
zammad-ldap-syncit-at-mVerified publisher0.6.51 of 1See more

zammad-ldap-sync it-at-m 0.6.5

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/zammad-ldap-sync:dev10de22c8cbce
smtp@2.0.3
2.0.4

Open the chart page →

1,345
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
smtp@2.0.3
2.0.4

Open the chart page →

45,239
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
jakarta.mail@1.6.5
1.6.8

Open the chart page →

12,856
xxl-job-adminjoelee2012Verified publisher1.1.01 of 2See more

xxl-job-admin joelee2012 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
xuxueli/xxl-job-admin:2.4.0640093c35fd6
jakarta.mail@1.6.7
1.6.8

Open the chart page →

3,127
unifik8sonlabVerified publisher0.3.71 of 1See more

unifi k8sonlab 0.3.7

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
smtp@2.0.3
2.0.4

Open the chart page →

7,268
penpotkubitodevVerified publisher1.2.11 of 5See more

penpot kubitodev 1.2.1

1 of the 5 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
jakarta.mail@2.0.1
2.0.2

Open the chart page →

16,877
fstyr-ddp-keycloak-application-platform-configkvalitetsitVerified publisher0.1.131 of 1See more

fstyr-ddp-keycloak-application-platform-config kvalitetsit 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
smtp@2.0.2
2.0.4

Open the chart page →

3,104
keycloak-application-platform-configkvalitetsitVerified publisher0.0.291 of 1See more

keycloak-application-platform-config kvalitetsit 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
smtp@2.0.2
2.0.4

Open the chart page →

3,334
stakitkvalitetsitVerified publisher0.3.111 of 3See more

stakit kvalitetsit 0.3.11

1 of the 3 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
smtp@2.0.3
2.0.4

Open the chart page →

7,802
elastictranscoderluiscajl0.46.03 of 4See more

elastictranscoder luiscajl 0.46.0

3 of the 4 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
elastictranscoder/media:627e21dc963ab3858c6b
jakarta.mail@1.6.7
1.6.8
elastictranscoder/media-storage:f6d861a026208b8c2359
jakarta.mail@1.6.7
1.6.8
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
jakarta.mail@1.6.7
1.6.8

Open the chart page →

58,160
lavandaluiscajl0.0.1343 of 5See more

lavanda luiscajl 0.0.134

3 of the 5 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
lavandadelpatio/automated-download-films:0.0.2094e225a5a6f8
jakarta.mail@1.6.5
1.6.8
lavandadelpatio/automated-download-shows:0.0.492de3c3426d2
jakarta.mail@1.6.5
1.6.8
lavandadelpatio/filebot:0.0.671f2ccec8c0d
jakarta.mail@1.6.6
1.6.8

Open the chart page →

18,248
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
jakarta.mail@1.6.5
1.6.8

Open the chart page →

2,589
elasticmicroboxlabs0.3.01 of 1See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
library/elasticsearch:8.17.32cc40b15dff8
jakarta.mail@1.6.3
1.6.8

Open the chart page →

4,257
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
jakarta.mail@1.6.4
1.6.8

Open the chart page →

9,300
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
smtp@2.0.1
2.0.4

Open the chart page →

15,369
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
vlebediantsev/logic-ms:latestdf8bf38c535b
jakarta.mail@1.6.7
1.6.8

Open the chart page →

6,852
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
jakarta.mail@1.6.7
1.6.8

Open the chart page →

5,873
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
smtp@2.0.3
2.0.4

Open the chart page →

5,826
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
jakarta.mail@2.0.1
2.0.2

Open the chart page →

7,792
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
opensearchproject/opensearch:3.1.0474ea3fdf25d
jakarta.mail@2.0.1
2.0.2

Open the chart page →

71,208
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
smtp@2.0.3
2.0.4

Open the chart page →

2,097
apache-knox-helmpfisterer-knox0.1.111 of 1See more

apache-knox-helm pfisterer-knox 0.1.11

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
farberg/apache-knox-docker:1.6.14b4a22487394
jakarta.mail@1.6.5
1.6.8

Open the chart page →

6,237
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
jakarta.mail@1.6.7
1.6.8

Open the chart page →

3,182
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
jakarta.mail@1.6.3
1.6.8

Open the chart page →

4,203
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
smtp@2.0.3
2.0.4

Open the chart page →

2,590
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
jakarta.mail@1.6.5
1.6.8

Open the chart page →

6,443
sonatype-nexus3simcube1.0.11 of 2See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
sonatype/nexus3:3.58.1586060431b64
jakarta.mail@1.6.5
1.6.8

Open the chart page →

4,946
sistas-chatbotsistas-chatbot5.0.21 of 6See more

sistas-chatbot sistas-chatbot 5.0.2

1 of the 6 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
jhipster/jhipster-registry:latest7184525acd4d
jakarta.mail@1.6.7
1.6.8

Open the chart page →

5,856
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
jakarta.mail@1.6.5
1.6.8

Open the chart page →

13,605
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
jakarta.mail@1.6.5
1.6.8

Open the chart page →

13,079
smtp-fake-serversomeblackmagic0.1.01 of 1See more

smtp-fake-server someblackmagic 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
someblackmagic/smtp-fake-server:latest0d63ba37a560
jakarta.mail@1.6.5
1.6.8

Open the chart page →

4,278
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.009a381c715ab
smtp@2.0.3
2.0.4

Open the chart page →

5,063
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
jakarta.mail@1.6.4
1.6.8

Open the chart page →

12,455
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
smtp@2.0.3
2.0.4

Open the chart page →

45,239

Container images carrying it

103 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
smtp@2.0.3
2.0.4
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
jakarta.mail@1.6.5
1.6.8
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
smtp@2.0.2
2.0.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.