CVE-2025-8114

Medium

Advisory

Published 24 Jul 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.002; 13th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 503; of 17,781 indexed, latest versions
Container images: 416; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 503 of 17,781 indexed charts deploy, on 416 images.

Affected package	Affected versions	Fixed in	Images
libsshdeb	0.6.3-4.3, 0.6.3-4.3ubuntu0.2, 0.8.0~20170825.94fa1e38-1ubuntu0.2, 0.8.0~20170825.94fa1e38-1ubuntu0.5+15 more	0.6.3-4.3ubuntu0.6+esm3, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm5, 0.9.3-2ubuntu2.5+esm2, 0.9.6-2ubuntu0.22.04.5+2 more	416

OSV records: DEBIAN-CVE-2025-8114 UBUNTU-CVE-2025-8114
Also known as: USN-7849-1

Charts affected

503 by stars

Chart

Latest

Affected images

Radar Score

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-8114.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.5

Open the chart page →

9,248

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-8114.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm2

Open the chart page →

6,285

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-8114.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5

Open the chart page →

14,100

Container images carrying it

416 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm2	2
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	2
1dev/server :11.9.0	cd5b12fe5471	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
5200710/hadoop :3.2.3-java8	092d3088a5fb	libssh@0.9.3-2ubuntu2.4	0.9.3-2ubuntu2.5+esm2	1
adorsys/keycloak-config-cli :6.3.0-26.1.0	85be7a45a94c	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
adorsys/keycloak-config-cli :6.1.6-25.0.1	eb49a2dcbbb8	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm2	1
ahmetfurkandemir/iceberg-rest-fixture-postgresql :1.10.0	142231a0b8b7	libssh@0.9.6-2ubuntu0.22.04.4	0.9.6-2ubuntu0.22.04.5	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm2	1
andrewgaul/s3proxy :sha-85b0f98	7dc1d34174a5	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
anguda/ant-media :2.5	c435285fc241	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
apache/activemq-artemis :2.44.0	0305c26f19ed	libssh@0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.2	1
apache/activemq-artemis :2.37.0	bae523439ee3	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
apache/gravitino-iceberg-rest :1.3.0	80136ae753ee	libssh@0.9.6-2ubuntu0.22.04.4	0.9.6-2ubuntu0.22.04.5	1
apache/iotdb :0.13.3-node	afa47bf1692a	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
apache/nifi-registry :1.27.0	63b8e3e40742	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.5	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
apachepulsar/pulsar :3.0.7	9c9947de139d	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
apachepulsar/pulsar :2.9.0	d056c89b7131	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
apachepulsar/pulsar :2.8.2	d538416d5afe	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
apache/ranger :2.7.0	76c176e8a0e4	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
apache/rocketmq :5.3.0	434d8398f996	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
apache/rocketmq-exporter :0.0.2	c8fb51195444	libssh@0.9.6-2ubuntu0.22.04.2	0.9.6-2ubuntu0.22.04.5	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
apache/skywalking-ui :9.2.0	295f1dc87d98	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
apache/skywalking-ui :8.9.1	80530f0308a5	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
arunvelsriram/utils :latest	655ad18fd8d6	libssh@0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.2	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm2	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
assistiot/location_processing :latest	e9bae124095f	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
assistiot/open_api_backend :1.1.2	30812ba93555	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.5	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm2	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
atlassian/jira-software :8.14.0	37bc46cbec1a	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm2	1
castlemock/castlemock :latest	b7f3f1527ba9	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
castopod/castopod :1.12.10	1fd37280cbb2	libssh@0.10.6-0+deb12u1	0.10.6-0+deb12u2	1
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	libssh@0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.2	1
chetangautamm/repo :sipp.v3	e7f7049e1544	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm2	1
cheveo/azp-agent :1.0.2	82240f890884	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
chriseaton/adventureworks :latest	54c3384ce701	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
circleci/runner :launch-agent	9bdc62f02162	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm2	1
consensys/teku :25.4.1	bf6ecd2ea716	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
cortezaproject/corteza :2024.9.0	8eb7a26605c9	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm2	1
cortezaproject/corteza :2024.9.4	cb9f200de5d2	libssh@0.9.6-2ubuntu0.22.04.4	0.9.6-2ubuntu0.22.04.5	1