StackRadar

CVE-2025-8176

High

Advisory

Published 26 Jul 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
540
of 17,787 indexed, latest versions
Container images
425
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libtiff security update

Carried by container images the latest versions of 540 of 17,787 indexed charts deploy, on 425 images.

Affected packageAffected versionsFixed inImages
tiffdeb4.0.3-7ubuntu0.9, 4.0.6-1ubuntu0.2, 4.0.6-1ubuntu0.4, 4.0.6-1ubuntu0.5+39 more4.0.3-7ubuntu0.11+esm15, 4.0.6-1ubuntu0.8+esm18, 4.0.9-5ubuntu0.10+esm8, 4.1.0+git191117-2ubuntu0.20.04.14+esm1+2 more411
libtiffrpm4.0.9-17.el8, 4.0.9-18.el8, 4.0.9-28.el8_8, 4.0.9-29.el8_8+1 more0:4.0.9-36.el8_1014
OSV records
DEBIAN-CVE-2025-8176RHSA-2025:20034UBUNTU-CVE-2025-8176
Also known as
USN-7707-1

Charts affected

540 by stars
ChartLatestAffected imagesRadar Score
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
tiff@4.5.0-6
no fix listed

Open the chart page →

13,387
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
tiff@4.0.9-5ubuntu0.3
4.0.9-5ubuntu0.10+esm8

Open the chart page →

27,667
web-chartoje-ktcloudlab0.1.01 of 1See more

web-chart oje-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

4,644
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
tiff@4.5.0-6
no fix listed

Open the chart page →

9,736
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

5,688
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
tiff@4.0.9-5ubuntu0.2
4.0.9-5ubuntu0.10+esm8
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
tiff@4.0.6-1ubuntu0.5
4.0.6-1ubuntu0.8+esm18

Open the chart page →

63,277
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
tiff@4.0.6-1ubuntu0.5
4.0.6-1ubuntu0.8+esm18

Open the chart page →

42,662
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
tiff@4.0.6-1ubuntu0.5
4.0.6-1ubuntu0.8+esm18

Open the chart page →

29,158
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

11,003
canvas-oamportalopenshift4.0.01 of 1See more

canvas-oamportal openshift 4.0.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
gurolakman/oam:4.0.0ed8fd2062548
libtiff@4.0.9-32.el8_10
0:4.0.9-36.el8_10

Open the chart page →

7,519
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

7,848
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
libtiff@4.0.9-29.el8_8
0:4.0.9-36.el8_10

Open the chart page →

13,608
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
libtiff@4.0.9-29.el8_8
0:4.0.9-36.el8_10

Open the chart page →

11,740
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
libtiff@4.0.9-29.el8_8
0:4.0.9-36.el8_10

Open the chart page →

13,570
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
libtiff@4.0.9-29.el8_8
0:4.0.9-36.el8_10

Open the chart page →

13,553
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
libtiff@4.0.9-29.el8_8
0:4.0.9-36.el8_10

Open the chart page →

13,457
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
libtiff@4.0.9-29.el8_8
0:4.0.9-36.el8_10

Open the chart page →

13,101
issuegenopsmxVerified publisher1.0.21 of 1See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
opsmx11/issuegen:v2.1.05c50ca123d88
tiff@4.0.3-7ubuntu0.9
4.0.3-7ubuntu0.11+esm15

Open the chart page →

26,367
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
yetiplatform/yeti-frontend:2.9.0873ef15d267b
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

72,154
yetiosdfir-infrastructureVerified publisher1.0.51 of 4See more

yeti osdfir-infrastructure 1.0.5

1 of the 4 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
yetiplatform/yeti-frontend:latest709064278c7e
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

6,544
webot-container-kit0.1.01 of 1See more

web ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
workerot-container-kit0.1.01 of 1See more

worker ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
lens-metric-proxyowan-charts0.1.01 of 1See more

lens-metric-proxy owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

11,095
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
tiff@4.5.0-6+deb12u1
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

25,681
examplepauls-helm-charts0.1.21 of 1See more

example pauls-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
kubeconpauls-helm-charts0.1.01 of 1See more

kubecon pauls-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
matomopetbattle11.0.11 of 2See more

matomo petbattle 11.0.1

1 of the 2 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

10,801
dummy-servicephanVerified publisher0.3.41 of 1See more

dummy-service phan 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
phan2410/dummy-service:0.0.89c6ed6de26ca
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

5,731
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

8,215
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

15,077
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
tiff@4.1.0+git191117-2ubuntu0.20.04.4
4.1.0+git191117-2ubuntu0.20.04.14+esm1

Open the chart page →

22,146
subgraph-oraclepinaxVerified publisher0.0.11 of 1See more

subgraph-oracle pinax 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

11,373
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

11,017
web-chartpjw-ktcloudlab0.1.01 of 1See more

web-chart pjw-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/node:208f693eaa7e0a
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

25,626
k8s-oidc-discovery-providerpnnl-miscscripts0.1.21 of 2See more

k8s-oidc-discovery-provider pnnl-miscscripts 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:1.29.49dd288848f44
tiff@4.7.0-3+deb13u1
no fix listed

Open the chart page →

4,273
nginx-apppnnl-miscscripts0.1.21 of 1See more

nginx-app pnnl-miscscripts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
pixiecore-simpleconfigpnnl-miscscripts0.1.51 of 1See more

pixiecore-simpleconfig pnnl-miscscripts 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

11,680
podnat-state-storepodnat-controller0.3.21 of 1See more

podnat-state-store podnat-controller 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
tiff@4.1.0+git191117-2ubuntu0.20.04.3
4.1.0+git191117-2ubuntu0.20.04.14+esm1

Open the chart page →

9,212
libretimepodzone-chartsVerified publisher0.4.11 of 9See more

libretime podzone-charts 0.4.1

1 of the 9 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

11,181
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

5,234
web-chartpsb-ktcloudlab0.1.01 of 1See more

web-chart psb-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
web-chartpsg-ktcloudlab0.1.01 of 1See more

web-chart psg-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
nginx-chartpshs-nginx0.1.01 of 1See more

nginx-chart pshs-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
apppvillaverdeVerified publisher0.2.51 of 1See more

app pvillaverde 0.2.5

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
library/nginx:1.3105b8cb60c354
tiff@4.7.0-3+deb13u3
no fix listed

Open the chart page →

1,839
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
tiff@4.5.0-6
no fix listed

Open the chart page →

12,652
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8176.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

11,400

Container images carrying it

425 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
tiff@4.5.0-6
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
tiff@4.5.0-6+deb12u4
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
tiff@4.5.0-6
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
tiff@4.5.0-6+deb12u4
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0011e65123a43ecc
tiff@4.7.0-3+deb13u3
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
tiff@4.5.0-6+deb12u1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
tiff@4.5.0-6+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
tiff@4.5.0-6+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service-gui:v1.9.434823c8abe00
tiff@4.5.0-6+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
tiff@4.5.0-6+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager-front:v1.5.5f8fb4eea4071
tiff@4.5.0-6+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
tiff@4.5.0-6
no fix listed
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
tiff@4.5.0-6+deb12u1
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
tiff@4.1.0+git191117-2ubuntu0.20.04.3
4.1.0+git191117-2ubuntu0.20.04.14+esm1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
tiff@4.5.0-6+deb12u1
no fix listed
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
libtiff@4.0.9-28.el8_8
0:4.0.9-36.el8_10
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
libtiff@4.0.9-18.el8
0:4.0.9-36.el8_10
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
libtiff@4.0.9-17.el8
0:4.0.9-36.el8_10
1
quay.io/mittwald/kube-httpcache:stable2169032c5840
tiff@4.5.0-6+deb12u2
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
tiff@4.0.6-1ubuntu0.6
4.0.6-1ubuntu0.8+esm18
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
libtiff@4.0.9-18.el8
0:4.0.9-36.el8_10
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
tiff@4.5.0-6
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
tiff@4.7.0-3+deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
tiff@4.5.0-6+deb12u4
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
tiff@4.5.0-6+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.