StackRadar

CVE-2025-7962

High

Advisory

Published 21 Jul 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
104
of 17,781 indexed, latest versions
Container images
103
deployed by those charts
Fix available
2 of 2
affected packages

Jakarta Mail vulnerable to SMTP Injection

Carried by container images the latest versions of 104 of 17,781 indexed charts deploy, on 103 images.

Affected packageAffected versionsFixed inImages
jakarta.mailmaven1.6.3, 1.6.4, 1.6.5, 1.6.5-atlassian-2+4 more1.6.8, 2.0.276
smtpmaven2.0.1, 2.0.2, 2.0.32.0.428
OSV records
GHSA-9342-92gg-6v29

Charts affected

104 by stars
ChartLatestAffected imagesRadar Score
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
jakarta.mail@1.6.5
1.6.8

Open the chart page →

28,605
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
jakarta.mail@1.6.4
1.6.8

Open the chart page →

2,191
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
smtp@2.0.2
2.0.4

Open the chart page →

11,577
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-7962.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
jakarta.mail@1.6.5
1.6.8

Open the chart page →

6,016

Container images carrying it

103 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
jacobalberty/unifi:v10.0.162896c0ab82d33
smtp@2.0.3
2.0.4
3
apache/fineract:1.12.1a83cf1980609
jakarta.mail@2.0.1
2.0.2
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
jakarta.mail@1.6.4
1.6.8
2
dependencytrack/apiserver:4.6.3485ac0952c02
jakarta.mail@1.6.7
1.6.8
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
jakarta.mail@2.0.1
2.0.2
2
library/elasticsearch:7.17.35e6ac15bf6a5
jakarta.mail@1.6.4
1.6.8
2
library/elasticsearch:8.19.1289729a95066a
jakarta.mail@1.6.4
1.6.8
2
metabase/metabase:v0.45.21fb334ce4820
jakarta.mail@1.6.5
1.6.8
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
smtp@2.0.3
2.0.4
2
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly7752874e71d8
jakarta.mail@2.0.1
2.0.2
2
ghcr.io/janssenproject/jans/casa:0.0.0-nightly3f2d14563495
jakarta.mail@1.6.7
1.6.8
2
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly900e2b88bd08
jakarta.mail@2.0.1
2.0.2
2
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly2a797804f08c
jakarta.mail@2.0.1
2.0.2
2
ghcr.io/janssenproject/jans/scim:0.0.0-nightly096b8bcbbe45
jakarta.mail@2.0.1
2.0.2
2
quay.io/keycloak/keycloak:26.1.4044a457e0498
smtp@2.0.3
2.0.4
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
jakarta.mail@1.6.5
1.6.8
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
jakarta.mail@1.6.7
1.6.8
2
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
smtp@2.0.2
2.0.4
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
smtp@2.0.2
2.0.4
1
airbyte/connector-rollout-worker:2.0.2-alpha-c905e75d42813fcc191
smtp@2.0.3
2.0.4
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
jakarta.mail@1.6.7
1.6.8
1
apache/hertzbeat:1.8.075d48a62748f
smtp@2.0.3
2.0.4
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
jakarta.mail@1.6.4
1.6.8
1
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
jakarta.mail@1.6.4
1.6.8
1
assistiot/identity-manager_kc:latest0df4b4fa899a
jakarta.mail@1.6.7
1.6.8
1
atlassian/confluence-server:7.10.03b9222ab32ef
jakarta.mail@1.6.5
1.6.8
1
atlassian/jira-software:8.14.037bc46cbec1a
jakarta.mail@1.6.5
1.6.8
1
atlassian/jira-software:9.7.264a75aa4ec4e
jakarta.mail@1.6.5-atlassian-2
1.6.8
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
jakarta.mail@1.6.3
1.6.8
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
jakarta.mail@1.6.4
1.6.8
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
jakarta.mail@1.6.4
1.6.8
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
jakarta.mail@1.6.5
1.6.8
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
smtp@2.0.1
2.0.4
1
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
smtp@2.0.3
2.0.4
1
bluerange/bluerange:26.1.307c8f73b55df
smtp@2.0.3
2.0.4
1
castlemock/castlemock:latestb7f3f1527ba9
jakarta.mail@1.6.3
smtp@2.0.3
1.6.8
2.0.4
1
cmosborn/metabase-arm64:0.50.286ec0a8878ad2
jakarta.mail@1.6.5
1.6.8
1
eikek0/sharry:1.8.0661ff3ef42cd
jakarta.mail@2.0.1
2.0.2
1
elastictranscoder/media:627e21dc963ab3858c6b
jakarta.mail@1.6.7
1.6.8
1
elastictranscoder/media-storage:f6d861a026208b8c2359
jakarta.mail@1.6.7
1.6.8
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
jakarta.mail@1.6.7
1.6.8
1
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
jakarta.mail@1.6.3
1.6.8
1
farberg/apache-knox-docker:1.6.14b4a22487394
jakarta.mail@1.6.5
1.6.8
1
flowable/flowable-rest:7.1.0b7ae287502cd
smtp@2.0.3
2.0.4
1
folioci/mod-ncip:latest8ed83674352b
jakarta.mail@2.0.0
2.0.2
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
jakarta.mail@1.6.7
1.6.8
1
graylog/graylog:6.1.1019de1aff48c2
jakarta.mail@1.6.7
1.6.8
1
graylog/graylog:7.1.9598bd41fefd5
jakarta.mail@1.6.7
1.6.8
1
graylog/graylog:7.2.0-beta.2-1e8431d59b84d
jakarta.mail@1.6.7
1.6.8
1
graylog/graylog-enterprise:7.1.88a1f641cd7aa
jakarta.mail@1.6.7
1.6.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.