StackRadar

CVE-2025-8941

High

Advisory

Published 13 Aug 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
19th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,450
of 17,790 indexed, latest versions
Container images
1,333
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,450 of 17,790 indexed charts deploy, on 1,333 images.

Affected packageAffected versionsFixed inImages
pamdeb1.5.2-6, 1.5.2-6+deb12u1, 1.5.2-6+deb12u2, 1.7.0-5+1 moreno fix listed1,269
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.1-4.el8, 1.3.1-8.el8+6 more0:1.1.8-23.el7_9.2, 0:1.3.1-8.el8_2.2, 0:1.3.1-14.el8_4.2, 0:1.3.1-16.el8_6.3+3 more64
OSV records
DEBIAN-CVE-2025-8941RHSA-2025:15101RHSA-2025:15102RHSA-2025:15103RHSA-2025:15104RHSA-2025:15105RHSA-2025:15106RHSA-2025:15107

Charts affected

1,450 by stars
ChartLatestAffected imagesRadar Score
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,864
mlflowsb-helm-charts0.3.01 of 1See more

mlflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/python:3.11-slim9534e5a8e315
pam@1.7.0-5
no fix listed

Open the chart page →

885
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
pam@1.7.0-5
no fix listed

Open the chart page →

9,687
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,065
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
pam@1.7.0-5
no fix listed

Open the chart page →

2,345
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,559
vaultwardensb-helm-charts0.4.01 of 1See more

vaultwarden sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
vaultwarden/server:1.34.384fd8a47f58d
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,210
wordpresssb-helm-charts0.4.02 of 2See more

wordpress sb-helm-charts 0.4.0

2 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/mysql:8.0-debian9382e4f6f7f0
pam@1.5.2-6+deb12u2
no fix listed
library/wordpress:6.4.3-apache8ae66efb09a2
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

12,009
postgresscalified-postgresVerified publisher18.4.01 of 1See more

postgres scalified-postgres 18.4.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
pam@1.7.0-5
no fix listed

Open the chart page →

1,673
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
pam@1.7.0-5
no fix listed

Open the chart page →

2,983
s3-backupschichtelVerified publisher0.10.01 of 1See more

s3-backup schichtel 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
pam@1.7.0-5
no fix listed

Open the chart page →

2,322
vaultwardenschichtelVerified publisher0.9.21 of 1See more

vaultwarden schichtel 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
pam@1.7.0-5
no fix listed

Open the chart page →

1,756
wordpressschichtelVerified publisher0.10.102 of 2See more

wordpress schichtel 0.10.10

2 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/wordpress:6.9.4-fpmad4a8bae2eb4
pam@1.7.0-5
no fix listed
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
pam@1.7.0-5
no fix listed

Open the chart page →

8,082
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
redimp/otterwiki:2778bf30da3da
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

3,019
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
pam@1.7.0-5
no fix listed

Open the chart page →

2,967
typo3schoolguys-helmcharts0.4.21 of 1See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

4,630
unboundschoolguys-helmcharts0.1.11 of 1See more

unbound schoolguys-helmcharts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
mvance/unbound:1.20.04bf67b567f39
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,748
wyoming-faster-whisperschoolguys-helmcharts0.1.41 of 1See more

wyoming-faster-whisper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:3.5.0308b7959a925
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

2,196
wyoming-piperschoolguys-helmcharts0.1.41 of 1See more

wyoming-piper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.3.169b7f797ae3a
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,770
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,570
search-proxysearch-proxy2026.38.01 of 1See more

search-proxy search-proxy 2026.38.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
pam@1.7.0-5
no fix listed

Open the chart page →

1,262
seawise-dashboardseawiseVerified publisher1.7.11 of 1See more

seawise-dashboard seawise 1.7.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
shwcloud/seawise-backup:v1.7.1a97479a54df4
pam@1.7.0-5
no fix listed

Open the chart page →

1,078
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
pam@1.3.1-14.el8
0:1.3.1-14.el8_4.2

Open the chart page →

21,997
postgresself-hosters-by-nightVerified publisher0.14.31 of 1See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
pam@1.7.0-5
no fix listed

Open the chart page →

2,386
valkeyself-hosters-by-nightVerified publisher0.1.01 of 1See more

valkey self-hosters-by-night 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
valkey/valkey:9.1.164e361b630ec
pam@1.7.0-5
no fix listed

Open the chart page →

818
miniosergiotocaliniVerified publisher1.0.01 of 1See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
pam@1.3.1-25.el8
0:1.3.1-26.el8_8.2

Open the chart page →

4,203
service-exampleservice-example-10.1.01 of 7See more

service-example service-example-1 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
pam@1.7.0-5
no fix listed

Open the chart page →

9,074
serviceexampleserviceexample-chart0.3.02 of 4See more

serviceexample serviceexample-chart 0.3.0

2 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
pam@1.7.0-5
no fix listed
tibyandocker/serviceexample:latesta4ad592cea84
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

3,929
serviceexampleservice-example-helm-chart0.1.01 of 4See more

serviceexample service-example-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
pam@1.7.0-5
no fix listed

Open the chart page →

2,277
service-exampleservice-example-jt0.1.11 of 9See more

service-example service-example-jt 0.1.1

1 of the 9 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

7,105
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,934
my-nginx-appsherif-nginx-app0.1.01 of 1See more

my-nginx-app sherif-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
shopwareshopware-storeVerified publisher2.1.21See more

shopware shopware-store 2.1.2

1 container image this version deploys carries CVE-2025-8941.

Container imageDigestPackageFixed in
valkey/valkey:83fbd2e3e4b6e
pam@1.7.0-5
no fix listed

Open the chart page →

—
hedgedocsi-gitops0.12.31 of 2See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.43a82e1f56c8f
pam@1.7.0-5
no fix listed

Open the chart page →

2,610
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

10,972
postgresqlsignoz0.0.21 of 1See more

postgresql signoz 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
pam@1.7.0-5
no fix listed

Open the chart page →

1,638
local-static-provisionersig-storage-local-static-provisioner2.9.01 of 1See more

local-static-provisioner sig-storage-local-static-provisioner 2.9.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,180
counter-dhlsikademo0.3.03 of 3See more

counter-dhl sikademo 0.3.0

3 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
pam@1.7.0-5
no fix listed
ondrejsika/counter:latestd95eaeee2172
pam@1.7.0-5
no fix listed
ghcr.io/ondrejsika/counter-frontend:latestc4166d2eb8eb
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,857
gordy-redissikademo0.1.01 of 1See more

gordy-redis sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
pam@1.7.0-5
no fix listed

Open the chart page →

968
test-hello-worldsikademo0.1.01 of 1See more

test-hello-world sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
pam@1.7.0-5
no fix listed

Open the chart page →

1,164
hello-worldsikalabs0.17.01 of 1See more

hello-world sikalabs 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/sikalabs/hello-world-server:latestcf8538bf6489
pam@1.7.0-5
no fix listed

Open the chart page →

1,164
hello-world-examplesikalabs0.1.31 of 1See more

hello-world-example sikalabs 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
pam@1.7.0-5
no fix listed

Open the chart page →

1,164
kubernetes-dashboard-gatewaysikalabs0.1.01 of 1See more

kubernetes-dashboard-gateway sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
pam@1.7.0-5
no fix listed

Open the chart page →

3,857
simple-websimple-webVerified publisher1.1.11 of 1See more

simple-web simple-web 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,839
bitwardensinextraVerified publisher0.10.21 of 1See more

bitwarden sinextra 0.10.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
pam@1.7.0-5
no fix listed

Open the chart page →

1,756
fluentdsinextraVerified publisher1.4.51 of 1See more

fluentd sinextra 1.4.5

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/fluentd:1.19.33273d13f1e75
pam@1.7.0-5
no fix listed

Open the chart page →

1,098
infisicalsinextraVerified publisher0.6.01 of 1See more

infisical sinextra 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
infisical/infisical:v0.165.602082bf13163
pam@1.7.0-5
no fix listed

Open the chart page →

2,954
pgbouncersinextraVerified publisher0.17.01 of 1See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,815
service-commonsinextraVerified publisher0.3.161 of 1See more

service-common sinextra 0.3.16

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/haproxy:2.8.288baa7d29a27a
pam@1.7.0-5
no fix listed

Open the chart page →

821

Container images carrying it

1,333 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/ghost:5.79.083f7bf209844
pam@1.5.2-6+deb12u1
no fix listed
1
library/golang:latest512690a56605
pam@1.7.0-5
no fix listed
1
library/haproxy:3.4.10f597665a2a6
pam@1.7.0-5
no fix listed
1
library/haproxy:3.1-bookworm49a0a0d6f0b8
pam@1.5.2-6+deb12u1
no fix listed
1
library/haproxy:2.8.288baa7d29a27a
pam@1.7.0-5
no fix listed
1
library/haproxy:2.9.6fc5748ff7c72
pam@1.5.2-6+deb12u1
no fix listed
1
library/httpd:2.4.631ae8051591a5
pam@1.5.2-6+deb12u1
no fix listed
1
library/influxdb:2.8571eb4514977
pam@1.5.2-6+deb12u2
no fix listed
1
library/influxdb:1.12.3-meta8812029260b5
pam@1.5.2-6+deb12u2
no fix listed
1
library/influxdb:1.12.3-datab0f9fc41ed79
pam@1.5.2-6+deb12u2
no fix listed
1
library/influxdb:latestf75e48af0598
pam@1.5.2-6+deb12u2
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
pam@1.5.2-6+deb12u1
no fix listed
1
library/matomo:5.13.0-apache8e6bdd396496
pam@1.7.0-5
no fix listed
1
library/memcached:1.6.4226983a43c918
pam@1.7.0-5
no fix listed
1
library/memcached:1.6.409ae868852d0b
pam@1.7.0-5
no fix listed
1
library/memcached:1.6.40cc523a19da58
pam@1.7.0-5
no fix listed
1
library/memcached:1.6.45dc561d52bb8a
pam@1.7.0-5
no fix listed
1
library/memcached:1.6.42-trixiee2a8683c7fbb
pam@1.7.0-5
no fix listed
1
library/mysql:8.0-debian9382e4f6f7f0
pam@1.5.2-6+deb12u2
no fix listed
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
pam@1.7.0-5
no fix listed
1
library/neo4j:2026.02.25ab4ab0358cf
pam@1.7.0-5
no fix listed
1
library/neo4j:2026.05.06c162e2432f8
pam@1.7.0-5
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
pam@1.5.2-6+deb12u1
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
pam@1.7.0-5
no fix listed
1
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
pam@1.7.0-5
no fix listed
1
library/nextcloud:34.0.4-apachede4ad9389386
pam@1.7.0-5
no fix listed
1
library/nginx:1.27.409369da6b103
pam@1.5.2-6+deb12u1
no fix listed
1
library/nginx:1.291881968aff6f
pam@1.7.0-5
no fix listed
1
library/nginx:1.276784fb0834aa
pam@1.5.2-6+deb12u1
no fix listed
1
library/nginx:1.25.167f9a4f10d14
pam@1.5.2-6
no fix listed
1
library/nginx:1.25.49ff236ed47fe
pam@1.5.2-6+deb12u1
no fix listed
1
library/nginx:1.27.3fb197595ebe7
pam@1.5.2-6+deb12u1
no fix listed
1
library/node:22-bookworm-slim83f487e0a634
pam@1.5.2-6+deb12u2
no fix listed
1
library/node:208f693eaa7e0a
pam@1.5.2-6+deb12u2
no fix listed
1
library/node:latestf5d1cc40abc1
pam@1.7.0-5
no fix listed
1
library/php:8.4-fpm59fa733c9af6
pam@1.7.0-5
no fix listed
1
library/postgres:18.0073e7c8b84e2
pam@1.7.0-5
no fix listed
1
library/postgres:17.4304ab8135187
pam@1.5.2-6+deb12u1
no fix listed
1
library/postgres:18.43a82e1f56c8f
pam@1.7.0-5
no fix listed
1
library/postgres:16.11468e1f126ca5
pam@1.7.0-5
no fix listed
1
library/postgres:16.6557fea37a744
pam@1.5.2-6+deb12u1
no fix listed
1
library/postgres:18.369e8582b781c
pam@1.7.0-5
no fix listed
1
library/postgres:15.186eb0add3b77c
pam@1.7.0-5
no fix listed
1
library/postgres:15.38775adb39f0d
pam@1.5.2-6
no fix listed
1
library/postgres:18.48ff36f3c6637
pam@1.7.0-5
no fix listed
1
library/postgres:18.3a9abf4275f9e
pam@1.7.0-5
no fix listed
1
library/postgres:17.5aadf2c0696f5
pam@1.7.0-5
no fix listed
1
library/postgres:13.12ced3ba927f4c
pam@1.5.2-6+deb12u1
no fix listed
1
library/postgres:15.18-bookworme8db9bd3e9e1
pam@1.5.2-6+deb12u2
no fix listed
1
library/postgres:14.22eba8ddbdd837
pam@1.7.0-5
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.