StackRadar

CVE-2025-8176

High

Advisory

Published 26 Jul 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
534
of 17,787 indexed, latest versions
Container images
419
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libtiff security update

Carried by container images the latest versions of 534 of 17,787 indexed charts deploy, on 419 images.

Affected packageAffected versionsFixed inImages
tiffdeb4.0.3-7ubuntu0.9, 4.0.6-1ubuntu0.2, 4.0.6-1ubuntu0.4, 4.0.6-1ubuntu0.5+38 more4.0.3-7ubuntu0.11+esm15, 4.0.6-1ubuntu0.8+esm18, 4.0.9-5ubuntu0.10+esm8, 4.1.0+git191117-2ubuntu0.20.04.14+esm1+2 more405
libtiffrpm4.0.9-17.el8, 4.0.9-18.el8, 4.0.9-28.el8_8, 4.0.9-29.el8_8+1 more0:4.0.9-36.el8_1014
OSV records
DEBIAN-CVE-2025-8176RHSA-2025:20034UBUNTU-CVE-2025-8176
Also known as
USN-7707-1

Charts affected

534 by stars
ChartLatestAffected imagesRadar Score
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
tiff@4.5.1+git230720-4ubuntu2.2
4.5.1+git230720-4ubuntu2.3

Open the chart page →

6,586
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
tiff@4.5.1+git230720-4ubuntu2.2
4.5.1+git230720-4ubuntu2.3

Open the chart page →

6,568
nginx-chartjinbok-nginx0.1.01 of 1See more

nginx-chart jinbok-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
nginx-chartjiungVerified publisher0.1.01 of 1See more

nginx-chart jiung 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
nginx-chartjongh09160.1.01 of 1See more

nginx-chart jongh0916 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
image-storage-servicejtektVerified publisher0.4.32 of 4See more

image-storage-service jtekt 0.4.3

2 of the 4 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
tiff@4.5.0-6+deb12u1
no fix listed
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

22,589
shinsei-managerjtektVerified publisher0.2.07 of 8See more

shinsei-manager jtekt 0.2.0

7 of the 8 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
tiff@4.5.0-6+deb12u2
no fix listed
moreillon/group-manager:latest3caa8f710ee0
tiff@4.5.0-6+deb12u3
no fix listed
moreillon/group-manager-front:latest5f0a38498271
tiff@4.7.0-3+deb13u1
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
tiff@4.5.0-6
no fix listed
moreillon/user-manager-front:v5.0.3b067dbbbb6af
tiff@4.5.0-6
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
tiff@4.5.0-6+deb12u1
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

63,461
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
tiff@4.5.0-6
no fix listed

Open the chart page →

16,600
jupyter-hub-customizationsjupyter-jscVerified publisher0.27.171 of 4See more

jupyter-hub-customizations jupyter-jsc 0.27.17

1 of the 4 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:1.291881968aff6f
tiff@4.7.0-3+deb13u2
no fix listed

Open the chart page →

3,389
jupyter-nginxjupyter-jscVerified publisher0.1.31 of 1See more

jupyter-nginx jupyter-jsc 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
tiff@4.7.0-3+deb13u1
no fix listed

Open the chart page →

3,508
jwks-mergejwks-merge0.1.01 of 2See more

jwks-merge jwks-merge 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

3,033
k10appk10app0.2.11 of 11See more

k10app k10app 0.2.1

1 of the 11 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

10,546
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
tiff@4.7.0-3+deb13u2
no fix listed

Open the chart page →

5,669
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
tiff@4.3.0-6ubuntu0.10
4.3.0-6ubuntu0.11

Open the chart page →

6,075
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
tiff@4.5.1+git230720-4ubuntu2.2
4.5.1+git230720-4ubuntu2.3

Open the chart page →

8,811
flaresolverrk8s-home-lab-repo6.2.01 of 1See more

flaresolverr k8s-home-lab-repo 6.2.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

27,274
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
tiff@4.7.0-3+deb13u2
no fix listed

Open the chart page →

9,103
librephotosk8sonlabVerified publisher1.1.61 of 7See more

librephotos k8sonlab 1.1.6

1 of the 7 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
reallibrephotos/librephotos-proxy:1.0.398a13dabbadc
tiff@4.7.0-3+deb13u2
no fix listed

Open the chart page →

14,801
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
tiff@4.5.0-6+deb12u3
no fix listed

Open the chart page →

7,081
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
tiff@4.7.0-3+deb13u1
no fix listed

Open the chart page →

32,509
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

8,860
web-chartkcilab0.1.01 of 1See more

web-chart kcilab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
web-chartkgw-ktcloudlab0.1.01 of 1See more

web-chart kgw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
nginx-chartkosunjo-nginx0.1.01 of 1See more

nginx-chart kosunjo-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
kubeflowkromanow94-kubeflow0.5.12 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

2 of the 30 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
tiff@4.5.0-6
no fix listed
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

70,530
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
tiff@4.7.0-3+deb13u2
no fix listed

Open the chart page →

9,620
web-chartktcloudhelm0.1.01 of 1See more

web-chart ktcloudhelm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
web-chartktcloudlab0.1.01 of 1See more

web-chart ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
web-chartktcloudlabstudent0.1.01 of 1See more

web-chart ktcloudlabstudent 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
web-chartktcloudljw0.1.01 of 1See more

web-chart ktcloudljw 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
tiff@4.5.0-6+deb12u3
no fix listed

Open the chart page →

33,583
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

28,843
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

4,395
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
tiff@4.7.0-3+deb13u1
no fix listed

Open the chart page →

8,698
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
tiff@4.3.0-6ubuntu0.10
4.3.0-6ubuntu0.11
penpotapp/exporter:2.2.15c835ffd87ab
tiff@4.3.0-6ubuntu0.10
4.3.0-6ubuntu0.11

Open the chart page →

16,877
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
tiff@4.3.0-6ubuntu0.10
4.3.0-6ubuntu0.11

Open the chart page →

6,824
nginx-chartkyb-nginx0.1.01 of 1See more

nginx-chart kyb-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

33,242
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

37,942
weblinzhengen0.1.71 of 1See more

web linzhengen 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
ingresslivekit-server1.2.21 of 1See more

ingress livekit-server 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
livekit/ingress:v1.2.21ab01641b366
tiff@4.3.0-6ubuntu0.4
4.3.0-6ubuntu0.11

Open the chart page →

10,716
web-chartljw-ktcloudlab0.1.01 of 1See more

web-chart ljw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

33,242
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

23,613
elastictranscoderluiscajl0.46.02 of 4See more

elastictranscoder luiscajl 0.46.0

2 of the 4 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
elastictranscoder/transcoder:627e21dcb4a0327029e6
tiff@4.0.9-5ubuntu0.4
4.0.9-5ubuntu0.10+esm8
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
tiff@4.0.9-5ubuntu0.4
4.0.9-5ubuntu0.10+esm8

Open the chart page →

58,160
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:latest139dfee1c6f8
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

27,274
demoshopmakaira2.4.01 of 4See more

demoshop makaira 2.4.0

1 of the 4 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

4,401
nginxmatic-insurance1.1.11 of 1See more

nginx matic-insurance 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,827
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
tiff@4.7.0-3+deb13u1
no fix listed

Open the chart page →

9,668
flaresolverrmedia-servarrVerified publisher0.18.11 of 1See more

flaresolverr media-servarr 0.18.1

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

6,136

Container images carrying it

419 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
tiff@4.5.0-6+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
tiff@4.5.0-6+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
tiff@4.5.0-6+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
tiff@4.5.0-6+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
tiff@4.5.0-6+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
tiff@4.5.0-6
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
tiff@4.5.0-6+deb12u1
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
tiff@4.1.0+git191117-2ubuntu0.20.04.3
4.1.0+git191117-2ubuntu0.20.04.14+esm1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
tiff@4.5.0-6+deb12u1
no fix listed
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
libtiff@4.0.9-28.el8_8
0:4.0.9-36.el8_10
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
libtiff@4.0.9-18.el8
0:4.0.9-36.el8_10
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
libtiff@4.0.9-17.el8
0:4.0.9-36.el8_10
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
tiff@4.5.0-6+deb12u2
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
tiff@4.0.6-1ubuntu0.6
4.0.6-1ubuntu0.8+esm18
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
libtiff@4.0.9-18.el8
0:4.0.9-36.el8_10
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
tiff@4.5.0-6
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
tiff@4.7.0-3+deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
tiff@4.5.0-6+deb12u4
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
tiff@4.5.0-6+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.