StackRadar

CVE-2025-8020

High

Advisory

Published 23 Jul 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.003
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
13
of 17,781 indexed, latest versions
Container images
13
deployed by those charts
Fix available
None
affected package

private-ip vulnerable to Server-Side Request Forgery

Carried by container images the latest versions of 13 of 17,781 indexed charts deploy, on 13 images.

Affected packageAffected versionsFixed inImages
private-ipnpm2.3.3, 2.3.4no fix listed13
OSV records
GHSA-9h3q-32c7-r533

Charts affected

13 by stars
ChartLatestAffected imagesRadar Score
misskeyalytiVerified publisher1.0.01 of 1See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
misskey/misskey:12.110.1e08b7c478093
private-ip@2.3.3
no fix listed

Open the chart page →

5,251
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
speckle/speckle-webhook-service:2.26.3c58eb372c488
private-ip@2.3.3
no fix listed

Open the chart page →

10,380
unifi-protectschichtelVerified publisher0.10.11 of 1See more

unifi-protect schichtel 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
private-ip@2.3.4
no fix listed

Open the chart page →

5,582
k8soketisoketi1.0.11 of 1See more

k8soketi soketi 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
private-ip@2.3.4
no fix listed

Open the chart page →

2,267
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e11 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

1 of the 5 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
speckle/speckle-webhook-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e14828aee2277c
private-ip@2.3.3
no fix listed

Open the chart page →

16,368
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb1 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

1 of the 5 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
speckle/speckle-webhook-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb107c63336ab5
private-ip@2.3.3
no fix listed

Open the chart page →

16,400
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f81 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

1 of the 5 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
speckle/speckle-webhook-service:2.17.14-branch.testing.72707.921a5f899913052b72e
private-ip@2.3.3
no fix listed

Open the chart page →

14,679
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091141 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

1 of the 5 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
private-ip@2.3.3
no fix listed

Open the chart page →

16,400
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4691 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

1 of the 5 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
speckle/speckle-webhook-service:2.18.11-branch.testing2.88634-335d469902b98ad5327
private-ip@2.3.3
no fix listed

Open the chart page →

14,221
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3411 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

1 of the 5 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
speckle/speckle-webhook-service:2.18.12-branch.testing3.88744-f55b341771f872cfa63
private-ip@2.3.3
no fix listed

Open the chart page →

14,221
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b21 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

1 of the 5 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
speckle/speckle-webhook-service:2.20.2-branch.testing4.134160-9fad4b270f5167d1d4d
private-ip@2.3.3
no fix listed

Open the chart page →

16,019
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef1 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

1 of the 5 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
speckle/speckle-webhook-service:2.21.3-branch.testing5.219631-2153bef06ecc7a66a40
private-ip@2.3.3
no fix listed

Open the chart page →

15,635
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e1 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

1 of the 4 container images this version deploys carry CVE-2025-8020.

Container imageDigestPackageFixed in
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
private-ip@2.3.3
no fix listed

Open the chart page →

11,100

Container images carrying it

13 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
private-ip@2.3.4
no fix listed
1
misskey/misskey:12.110.1e08b7c478093
private-ip@2.3.3
no fix listed
1
speckle/speckle-webhook-service:2.21.3-branch.testing5.219631-2153bef06ecc7a66a40
private-ip@2.3.3
no fix listed
1
speckle/speckle-webhook-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb107c63336ab5
private-ip@2.3.3
no fix listed
1
speckle/speckle-webhook-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e14828aee2277c
private-ip@2.3.3
no fix listed
1
speckle/speckle-webhook-service:2.20.2-branch.testing4.134160-9fad4b270f5167d1d4d
private-ip@2.3.3
no fix listed
1
speckle/speckle-webhook-service:2.18.12-branch.testing3.88744-f55b341771f872cfa63
private-ip@2.3.3
no fix listed
1
speckle/speckle-webhook-service:2.18.11-branch.testing2.88634-335d469902b98ad5327
private-ip@2.3.3
no fix listed
1
speckle/speckle-webhook-service:2.17.14-branch.testing.72707.921a5f899913052b72e
private-ip@2.3.3
no fix listed
1
speckle/speckle-webhook-service:2.26.3c58eb372c488
private-ip@2.3.3
no fix listed
1
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
private-ip@2.3.3
no fix listed
1
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
private-ip@2.3.3
no fix listed
1
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
private-ip@2.3.4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.