StackRadar

CVE-2025-8941

High

Advisory

Published 13 Aug 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
19th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,460
of 17,792 indexed, latest versions
Container images
1,348
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,460 of 17,792 indexed charts deploy, on 1,348 images.

Affected packageAffected versionsFixed inImages
pamdeb1.5.2-6, 1.5.2-6+deb12u1, 1.5.2-6+deb12u2, 1.7.0-5+1 moreno fix listed1,284
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.1-4.el8, 1.3.1-8.el8+6 more0:1.1.8-23.el7_9.2, 0:1.3.1-8.el8_2.2, 0:1.3.1-14.el8_4.2, 0:1.3.1-16.el8_6.3+3 more64
OSV records
DEBIAN-CVE-2025-8941RHSA-2025:15101RHSA-2025:15102RHSA-2025:15103RHSA-2025:15104RHSA-2025:15105RHSA-2025:15106RHSA-2025:15107

Charts affected

1,460 by stars
ChartLatestAffected imagesRadar Score
flaresolverrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

27,655
tenantsbrbarmex-tenant2.0.01 of 1See more

tenants brbarmex-tenant 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,861
tautullibryanalves0.1.01 of 1See more

tautulli bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
tautulli/tautulli:latest670e68dd9efc
pam@1.7.0-5
no fix listed

Open the chart page →

1,930
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

14,576
nginx-chartbtrepoVerified publisher0.1.01 of 1See more

nginx-chart btrepo 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,861
gotenbergbysamioVerified publisher0.2.01 of 1See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8-chromiuma40f92d7419a
pam@1.7.0-5
no fix listed

Open the chart page →

9,365
rediscagriekinVerified publisher1.5.21 of 2See more

redis cagriekin 1.5.2

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:8.8.1-trixie3eafabb4c93f
pam@1.7.0-5
no fix listed

Open the chart page →

1,401
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
calltelemetry/web:0.8.1-rc7205d13269e350
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

10,672
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
pam@1.5.2-6
no fix listed

Open the chart page →

8,042
geoservercamptocamp20.0.31 of 12See more

geoserver camptocamp2 0.0.3

1 of the 12 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

88,699
httpd-ldapauth-proxycamptocamp31.0.21 of 1See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/httpd:2.4.631ae8051591a5
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,351
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,079
pgbouncer-tlscamptocamp32.3.02 of 2See more

pgbouncer-tls camptocamp3 2.3.0

2 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/haproxy:3.2de601ccc9a79
pam@1.7.0-5
no fix listed
ghcr.io/camptocamp/pgbouncer:latest19dc5663cac4
pam@1.7.0-5
no fix listed

Open the chart page →

1,924
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

10,862
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

14,199
castai-hibernatecastaiVerified publisher0.2.121 of 1See more

castai-hibernate castai 0.2.12

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
castai/hibernate:v0.14da62858c8381
pam@1.7.0-5
no fix listed

Open the chart page →

1,176
catalyst-agentscatalyst-agents0.1.331 of 18See more

catalyst-agents catalyst-agents 0.1.33

1 of the 18 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.369b1d3c09cfa
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

17,127
getoutlinecfi20171.2.02 of 4See more

getoutline cfi2017 1.2.0

2 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.06f3e42ad37de
pam@1.7.0-5
no fix listed
library/redis:8.2.3d31852005202
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,484
opencvecfi20170.1.25 of 7See more

opencve cfi2017 0.1.2

5 of the 7 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:trixie05b8cb60c354
pam@1.7.0-5
no fix listed
library/postgres:18.06f3e42ad37de
pam@1.7.0-5
no fix listed
library/redis:7.2-bookworm74566c6910d1
pam@1.5.2-6+deb12u2
no fix listed
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
pam@1.5.2-6+deb12u1
no fix listed
ghcr.io/cfi2017/opencve-web:3.0.06961eab190a2
pam@1.7.0-5
no fix listed

Open the chart page →

15,522
nginx-chartchanhk10.1.01 of 1See more

nginx-chart chanhk1 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,861
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
pam@1.7.0-5
no fix listed

Open the chart page →

4,453
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
pam@1.7.0-5
no fix listed

Open the chart page →

7,530
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,873
kitchenowlchart-kitchenowl0.1.121 of 2See more

kitchenowl chart-kitchenowl 0.1.12

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
pam@1.7.0-5
no fix listed

Open the chart page →

4,837
calibre-webcharts-derwitt-devVerified publisher1.1.21 of 1See more

calibre-web charts-derwitt-dev 1.1.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

4,951
home-assistant-otbrcharts-derwitt-devVerified publisher2.1.41 of 1See more

home-assistant-otbr charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/homeassistant-otbr:4.2.5282f840612d9
pam@1.7.0-5
no fix listed

Open the chart page →

2,316
paperless-ngxcharts-derwitt-devVerified publisher2.1.41 of 1See more

paperless-ngx charts-derwitt-dev 2.1.4

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
pam@1.7.0-5
no fix listed

Open the chart page →

4,664
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,068
mysqld-exporterchoerodon0.1.01 of 1See more

mysqld-exporter choerodon 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
pam@1.7.0-5
no fix listed

Open the chart page →

1,861
mcp-for-argocdchristianhuthVerified publisher2.0.01 of 1See more

mcp-for-argocd christianhuth 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,976
polrchristianhuthVerified publisher4.3.01 of 2See more

polr christianhuth 4.3.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,996
proxysqlchristianhuthVerified publisher3.1.11 of 1See more

proxysql christianhuth 3.1.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
proxysql/proxysql:3.0.110e95d1b7cc32
pam@1.7.0-5
no fix listed

Open the chart page →

1,294
timetaggerchristianhuthVerified publisher2.2.01 of 1See more

timetagger christianhuth 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,983
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

7,125
tor-proxychronicleVerified publisher0.1.01 of 1See more

tor-proxy chronicle 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
btcpayserver/tor:0.4.8.10e9585b68dc6b
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,358
zksyncchronicleVerified publisher0.1.02 of 2See more

zksync chronicle 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
pam@1.7.0-5
no fix listed
matterlabs/external-node:v24.0.06cbfea4c694a
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

6,052
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

12,075
helmchartclouddrove1.4.01 of 1See more

helmchart clouddrove 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,861
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/redis-cluster:7.4.3-debian-12-r0a53d023fdfaf
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

21,064
postgresqlcloudnativeapp5.0.01 of 2See more

postgresql cloudnativeapp 5.0.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnami/minideb:latestab4d5b45116e
pam@1.7.0-5
no fix listed

Open the chart page →

836
rundeckcloudnativeapp0.1.01 of 2See more

rundeck cloudnativeapp 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
pam@1.7.0-5
no fix listed

Open the chart page →

23,721
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
pam@1.3.1-25.el8
0:1.3.1-26.el8_8.2

Open the chart page →

25,515
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
pam@1.3.1-8.el8
0:1.3.1-8.el8_2.2

Open the chart page →

25,811
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad1 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

1 of the 6 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

18,400
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnami/minideb:latestab4d5b45116e
pam@1.7.0-5
no fix listed

Open the chart page →

12,224
galaxycloudve6.8.61 of 3See more

galaxy cloudve 6.8.6

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
pam@1.7.0-5
no fix listed

Open the chart page →

5,610
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

10,599
postgresqlcloudve4.0.01 of 2See more

postgresql cloudve 4.0.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnami/minideb:latest835e5f8392c3
pam@1.7.0-5
no fix listed

Open the chart page →

836
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

6,181
authentikcluster-deploy0.2.01 of 1See more

authentik cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
pam@1.7.0-5
no fix listed

Open the chart page →

2,527

Container images carrying it

1,348 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

No deployed image carries CVE-2025-8941.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.