CVE-2025-8114

Medium

Advisory

Published 24 Jul 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.7; base score, highest
EPSS: 0.002; 13th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 504; of 17,787 indexed, latest versions
Container images: 417; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 504 of 17,787 indexed charts deploy, on 417 images.

Affected package	Affected versions	Fixed in	Images
libsshdeb	0.6.3-4.3, 0.6.3-4.3ubuntu0.2, 0.8.0~20170825.94fa1e38-1ubuntu0.2, 0.8.0~20170825.94fa1e38-1ubuntu0.5+15 more	0.6.3-4.3ubuntu0.6+esm3, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm5, 0.9.3-2ubuntu2.5+esm2, 0.9.6-2ubuntu0.22.04.5+2 more	417

OSV records: DEBIAN-CVE-2025-8114 UBUNTU-CVE-2025-8114
Also known as: USN-7849-1

Charts affected

504 by stars

Chart

Latest

Affected images

Radar Score

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-8114.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2

Open the chart page →

15,287

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-8114.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.5

Open the chart page →

9,296

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-8114.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm2

Open the chart page →

6,323

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-8114.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5

Open the chart page →

14,172

Container images carrying it

417 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
stashapp/stash-box :latest	a534c8afdf39	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
statcan/ckan :2.9	3921305425b8	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm2	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm2	1
structurizr/onpremises :2025.11.09	4b5ffb5119c8	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
svtechnmaa/svtech_debuger :v1.0.3	a934ffd63d25	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm2	1
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm2	1
thmmniii/fbs-core :v1.27.1	5438517d9fc2	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	libssh@0.6.3-4.3	0.6.3-4.3ubuntu0.6+esm3	1
trinodb/trino :405	ee80ab5eeab2	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
wazuh/wazuh-manager :4.4.1	21994f40e0da	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
wistefan/mvf :latest	e0887302b2d8	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
wolveix/satisfactory-server :v1.9.1	199be1064b18	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
wolveix/satisfactory-server :v1.9.9	464d11e36e10	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
xeotek/kadeck :6.3.4	39a3b37a17c5	libssh@0.9.6-2ubuntu0.22.04.4	0.9.6-2ubuntu0.22.04.5	1
xeotek/kadeck :4.2.9	4c6b04d9ce55	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
zabbix/zabbix-agent :ubuntu-5.4.6	2127168cab03	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
zabbix/zabbix-server-mysql :ubuntu-6.4-latest	55d074b6b031	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
zabbix/zabbix-server-pgsql :ubuntu-5.4.6	6c946b1f45cd	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
zabbix/zabbix-web-nginx-mysql :ubuntu-6.4-latest	0e5f69c4c54e	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.5	1
gcr.io/datadoghq/cluster-agent :7.61.0	6efe04ba4e06	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm2	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm2	1
gcr.io/istio-testing/operator :latest	8d4576f7b98f	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
ghcr.io/alexmorbo/dell_idrac_fan_controller :v0.1.6-1	d110504d551d	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
ghcr.io/apache/flink-kubernetes-operator :c703255	e9c2ce635b89	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
ghcr.io/appscode/inbox-server :MailetGroup	4a2824296412	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
ghcr.io/appscode/s3proxy :sha-a82ca68	20518335f9f9	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.5	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
ghcr.io/camunda-community-hub/zeebe-simple-monitor :2.6.2	d9d796a1b846	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.5	1
ghcr.io/dask/dask :2024.1.0	080150de7d86	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm2	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	libssh@0.9.6-2ubuntu0.22.04.2	0.9.6-2ubuntu0.22.04.5	1
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	libssh@0.10.6-2build2	0.10.6-2ubuntu0.2	1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb :v0.3.2	7e1d7a11a11a	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
ghcr.io/ferama/vipien :v0.5.3	923a3f704b21	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm2	1
ghcr.io/formancehq/membership :v1.11.0	24a0113d5fb0	libssh@0.9.6-2ubuntu0.22.04.4	0.9.6-2ubuntu0.22.04.5	1