StackRadar

CVE-2025-8677

High

Advisory

Published 22 Oct 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.112
96th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
126
of 17,781 indexed, latest versions
Container images
108
deployed by those charts
Fix available
3 of 5
affected packages

Red Hat Security Advisory: bind security update

Carried by container images the latest versions of 126 of 17,781 indexed charts deploy, on 108 images.

Affected packageAffected versionsFixed inImages
bind9deb1:9.10.3.dfsg.P4-8ubuntu1.6, 1:9.10.3.dfsg.P4-8ubuntu1.9, 1:9.10.3.dfsg.P4-8ubuntu1.10, 1:9.10.3.dfsg.P4-8ubuntu1.11+36 more1:9.18.30-0ubuntu0.20.04.2+esm1, 1:9.18.39-0ubuntu0.22.04.2, 1:9.18.39-0ubuntu0.24.04.2, 1:9.18.41-1~deb12u1+1 more92
bindapk9.18.19-r1, 9.18.24-r1, 9.18.31-r0, 9.18.33-r0+4 more9.18.41-r0, 9.20.15-r013
bindrpm32:9.16.23-14.el9_3, 32:9.16.23-18.el9_4.132:9.16.23-40.el9_8.12
bind9-libsdeb1:9.11.19+dfsg-2.1ubuntu3no fix listed1
isc-dhcpdeb4.3.5-3ubuntu7.1no fix listed1
OSV records
ALPINE-CVE-2025-8677DEBIAN-CVE-2025-8677RHSA-2026:18786UBUNTU-CVE-2025-8677
Also known as
USN-7836-1, USN-7836-2

Charts affected

126 by stars
ChartLatestAffected imagesRadar Score
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
bind9@1:9.18.24-1
1:9.18.41-1~deb12u1

Open the chart page →

9,244
ejabberdejabberdVerified publisher0.1.01 of 1See more

ejabberd ejabberd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
indevlab/ejabberd:24.12-k8s8bc689d093a7
bind@9.18.33-r0
9.18.41-r0

Open the chart page →

903
rospoferama0.4.31 of 1See more

rospo ferama 0.4.3

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
bind9@1:9.18.19-1~deb12u1
1:9.18.41-1~deb12u1

Open the chart page →

6,026
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
bind9@1:9.18.30-0ubuntu0.20.04.2
1:9.18.30-0ubuntu0.20.04.2+esm1

Open the chart page →

64,489
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
bind9@1:9.16.1-0ubuntu2.10
1:9.18.30-0ubuntu0.20.04.2+esm1

Open the chart page →

14,659
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
bind9@1:9.16.1-0ubuntu2.10
1:9.18.30-0ubuntu0.20.04.2+esm1

Open the chart page →

9,698
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
bind9@1:9.16.1-0ubuntu2.8
1:9.18.30-0ubuntu0.20.04.2+esm1

Open the chart page →

14,283
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
bind9@1:9.18.1-1ubuntu1.1
1:9.18.39-0ubuntu0.22.04.2

Open the chart page →

12,076
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
bind9@1:9.16.1-0ubuntu2.10
1:9.18.30-0ubuntu0.20.04.2+esm1

Open the chart page →

11,807
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
bind9@1:9.18.1-1ubuntu1.1
1:9.18.39-0ubuntu0.22.04.2

Open the chart page →

10,379
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
bind9@1:9.16.1-0ubuntu2.10
1:9.18.30-0ubuntu0.20.04.2+esm1

Open the chart page →

11,861
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
bind9@1:9.16.1-0ubuntu2.10
1:9.18.30-0ubuntu0.20.04.2+esm1

Open the chart page →

17,929
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
bind@9.18.33-r0
9.18.41-r0

Open the chart page →

4,647
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
bind9@1:9.10.3.dfsg.P4-8ubuntu1.9
no fix listed

Open the chart page →

57,669
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
bind9@1:9.10.3.dfsg.P4-8ubuntu1.10
no fix listed

Open the chart page →

25,160
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
bind9@1:9.18.30-0ubuntu0.24.04.2
1:9.18.39-0ubuntu0.24.04.2

Open the chart page →

8,967
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
bind9@1:9.16.1-0ubuntu2.9
1:9.18.30-0ubuntu0.20.04.2+esm1

Open the chart page →

37,671
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
bind9@1:9.11.3+dfsg-1ubuntu1.18
no fix listed

Open the chart page →

16,212
wjh-rechnerit-at-mOfficialVerified publisher1.0.41 of 1See more

wjh-rechner it-at-m 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
bind@32:9.16.23-14.el9_3
32:9.16.23-40.el9_8.1

Open the chart page →

3,460
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
bind9@1:9.18.18-0ubuntu0.22.04.2
1:9.18.39-0ubuntu0.22.04.2

Open the chart page →

5,208
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
bind9@1:9.16.1-0ubuntu2.11
1:9.18.30-0ubuntu0.20.04.2+esm1

Open the chart page →

16,417
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
bind9@1:9.18.30-0ubuntu0.24.04.2
1:9.18.39-0ubuntu0.24.04.2

Open the chart page →

4,940
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
bind9@1:9.18.39-0ubuntu0.22.04.4
no fix listed

Open the chart page →

3,528
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
bind9@1:9.11.3+dfsg-1ubuntu1.14
no fix listed

Open the chart page →

16,520
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
bind9@1:9.11.3+dfsg-1ubuntu1.12
no fix listed

Open the chart page →

26,356
localpathprovisionermesosphere-stable0.1.21 of 1See more

localpathprovisioner mesosphere-stable 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
bind9@1:9.10.3.dfsg.P4-8ubuntu1.11
no fix listed

Open the chart page →

17,942
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
bind9@1:9.16.1-0ubuntu2.9
1:9.18.30-0ubuntu0.20.04.2+esm1

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
bind9@1:9.16.1-0ubuntu2.9
1:9.18.30-0ubuntu0.20.04.2+esm1

Open the chart page →

15,675
librenmsnimbolus0.5.11 of 3See more

librenms nimbolus 0.5.1

1 of the 3 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
librenms/librenms:24.11.00920bc9117a8
bind@9.18.31-r0
9.18.41-r0

Open the chart page →

2,293
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
bind9@1:9.18.12-0ubuntu0.22.04.2
1:9.18.39-0ubuntu0.22.04.2

Open the chart page →

9,005
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
bind9@1:9.10.3.dfsg.P4-8ubuntu1.11
no fix listed

Open the chart page →

63,223
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
bind9@1:9.10.3.dfsg.P4-8ubuntu1.11
no fix listed
omecproject/onos-progran:1.0.05715e5648aa0
bind9@1:9.10.3.dfsg.P4-8ubuntu1.10
no fix listed
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
bind9@1:9.10.3.dfsg.P4-8ubuntu1.11
no fix listed

Open the chart page →

88,546
comac-cuopencord0.1.11 of 4See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
bind9@1:9.11.3+dfsg-1ubuntu1.1
no fix listed

Open the chart page →

8,047
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
bind9@1:9.10.3.dfsg.P4-8ubuntu1.11
no fix listed

Open the chart page →

26,211
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
bind9@1:9.10.3.dfsg.P4-8ubuntu1.11
no fix listed

Open the chart page →

42,614
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
bind9@1:9.10.3.dfsg.P4-8ubuntu1.11
no fix listed

Open the chart page →

29,124
mcord-control-planeopencord0.2.22 of 5See more

mcord-control-plane opencord 0.2.2

2 of the 5 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mme:mwca-mme-debug8dd6dea45be4
bind9@1:9.10.3.dfsg.P4-8ubuntu1.10
no fix listed
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
bind9@1:9.11.3+dfsg-1ubuntu1.1
no fix listed

Open the chart page →

15,648
oaisimopencord0.1.72 of 3See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
bind9@1:9.11.3+dfsg-1ubuntu1.13
no fix listed
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
bind9@1:9.11.3+dfsg-1ubuntu1.15
no fix listed

Open the chart page →

14,536
omec-control-planeopencord0.1.312 of 8See more

omec-control-plane opencord 0.1.31

2 of the 8 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
omecproject/c3po-hssdb:master-latest28a90cc26716
bind9@1:9.16.1-0ubuntu2.9
1:9.18.30-0ubuntu0.20.04.2+esm1
omecproject/openmme:master-latest64776cb9edb3
bind9@1:9.10.3.dfsg.P4-8ubuntu1.17
no fix listed

Open the chart page →

40,715
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
bind9@1:9.10.3.dfsg.P4-8ubuntu1.10
no fix listed

Open the chart page →

38,865
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
bind9@1:9.10.3.dfsg.P4-8ubuntu1.14
no fix listed

Open the chart page →

12,609
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
bind9@1:9.10.3.dfsg.P4-8ubuntu1.9
no fix listed

Open the chart page →

93,855
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
bind9@1:9.11.3+dfsg-1ubuntu1.13
isc-dhcp@4.3.5-3ubuntu7.1
no fix listed
no fix listed

Open the chart page →

15,592
cloudflaredpascaliskeVerified publisher3.0.01 of 1See more

cloudflared pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
bind@9.20.13-r0
9.20.15-r0

Open the chart page →

2,028
argocd-certificate-refreshromholdings0.10.81 of 1See more

argocd-certificate-refresh romholdings 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
bind9@1:9.18.1-1ubuntu1.3
1:9.18.39-0ubuntu0.22.04.2

Open the chart page →

12,949
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
bind9@1:9.18.39-0ubuntu0.22.04.4
no fix listed

Open the chart page →

7,436
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
bind9@1:9.18.30-0ubuntu0.24.04.2
1:9.18.39-0ubuntu0.24.04.2

Open the chart page →

6,094
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
bind9@1:9.10.3.dfsg.P4-8ubuntu1.14
no fix listed

Open the chart page →

23,007
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bind9@1:9.10.3.dfsg.P4-8ubuntu1.12
no fix listed

Open the chart page →

25,769
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2025-8677.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bind9@1:9.10.3.dfsg.P4-8ubuntu1.12
no fix listed

Open the chart page →

25,803

Container images carrying it

108 by charts deploying them

A fixed version is listed for 3 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
bind@9.18.24-r1
9.18.41-r0
1
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
bind@9.18.19-r1
9.18.41-r0
1
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
bind@9.18.19-r1
9.18.41-r0
1
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
bind@9.18.19-r1
9.18.41-r0
1
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
bind@9.18.19-r1
9.18.41-r0
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
bind9@1:9.16.1-0ubuntu2.10
1:9.18.30-0ubuntu0.20.04.2+esm1
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
bind9@1:9.18.18-0ubuntu0.22.04.2
1:9.18.39-0ubuntu0.22.04.2
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
bind9@1:9.10.3.dfsg.P4-8ubuntu1.18
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.