StackRadar

CVE-2025-8941

High

Advisory

Published 13 Aug 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
19th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,460
of 17,790 indexed, latest versions
Container images
1,353
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,460 of 17,790 indexed charts deploy, on 1,353 images.

Affected packageAffected versionsFixed inImages
pamdeb1.5.2-6, 1.5.2-6+deb12u1, 1.5.2-6+deb12u2, 1.7.0-5+1 moreno fix listed1,289
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.1-4.el8, 1.3.1-8.el8+6 more0:1.1.8-23.el7_9.2, 0:1.3.1-8.el8_2.2, 0:1.3.1-14.el8_4.2, 0:1.3.1-16.el8_6.3+3 more64
OSV records
DEBIAN-CVE-2025-8941RHSA-2025:15101RHSA-2025:15102RHSA-2025:15103RHSA-2025:15104RHSA-2025:15105RHSA-2025:15106RHSA-2025:15107

Charts affected

1,460 by stars
ChartLatestAffected imagesRadar Score
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
pam@1.7.0-5
no fix listed

Open the chart page →

5,107
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
pam@1.7.0-5
no fix listed
fireflyiii/data-importer:version-2.2.3ab52bf932546
pam@1.7.0-5
no fix listed

Open the chart page →

10,396
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
pam@1.7.0-5
no fix listed

Open the chart page →

4,897
flask-contactsfirst-idror-chart1.0.12 of 3See more

flask-contacts first-idror-chart 1.0.1

2 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
pam@1.7.0-5
no fix listed
shashkist/flask-contacts-app:latest581de1fd6084
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,789
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

64,668
consent-managerfiware0.1.21 of 1See more

consent-manager fiware 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/wi_stefan/consent-manager:0.0.656399619568b
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,869
onboarding-portalfiware1.4.31 of 1See more

onboarding-portal fiware 1.4.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/seamware/onboarding:0.2.2b406475f9f00
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,511
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
pam@1.7.0-5
no fix listed

Open the chart page →

6,150
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,672
flanksource-uiflanksourceVerified publisher1.4.3181 of 1See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.318891f21df54fb
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,580
mission-controlflanksourceVerified publisher0.1.3362 of 8See more

mission-control flanksource 0.1.336

2 of the 8 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
pam@1.5.2-6+deb12u1
no fix listed
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

8,959
mission-control-ai-assistantflanksourceVerified publisher1.0.121 of 1See more

mission-control-ai-assistant flanksource 1.0.12

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/flanksource/mission-control-ai-assistant:1.0.1229a635cbeeb5
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,315
flask-contactsflask-contacts-generic1.0.12 of 3See more

flask-contacts flask-contacts-generic 1.0.1

2 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
pam@1.7.0-5
no fix listed
shashkist/flask-contacts-app:latest581de1fd6084
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,789
flask-appflask-mysqlVerified publisher1.0.11 of 2See more

flask-app flask-mysql 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,089
fluentd-aggregatorfluentd-aggregatorOfficialVerified publisher1.0.01 of 2See more

fluentd-aggregator fluentd-aggregator 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/fluent/fluentd-aggregator-docker-image:2.1.0ad25916eebbb
pam@1.7.0-5
no fix listed

Open the chart page →

1,765
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

3,544
fr24feederfnzv0.1.21 of 1See more

fr24feeder fnzv 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest917e53402d51
pam@1.7.0-5
no fix listed

Open the chart page →

2,303
mod-z3950folio-org0.1.31 of 1See more

mod-z3950 folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
folioci/mod-z3950:latest2493041ce880
pam@1.7.0-5
no fix listed

Open the chart page →

2,465
ff-testfrankframework0.7.61 of 2See more

ff-test frankframework 0.7.6

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:17-bookworm051f7b7b3abd
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,759
frank2examplefrankframework0.7.41 of 2See more

frank2example frankframework 0.7.4

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:17-bookworm051f7b7b3abd
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,759
changedetection-iogabe565Verified publisher0.12.01 of 2See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:latestecacd9fd0c66
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

2,612
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest000c5ee5ee96
pam@1.7.0-5
no fix listed

Open the chart page →

3,179
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

13,250
guacamolegabibbo970.3.01 of 3See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
pam@1.7.0-5
no fix listed

Open the chart page →

6,437
garge-appgargeVerified publisher0.1.471 of 1See more

garge-app garge 0.1.47

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
sondresjo/garge-app:v1.20.70382ebf9dfc8
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

1,855
factoriogeek-cookbookVerified publisher1.2.21 of 2See more

factorio geek-cookbook 1.2.2

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
factoriotools/factorio:stablec6092b912bd1
pam@1.7.0-5
no fix listed

Open the chart page →

1,459
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

9,150
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

13,077
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
pam@1.7.0-5
no fix listed

Open the chart page →

2,533
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
pam@1.7.0-5
no fix listed

Open the chart page →

8,992
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,735
redisgengxiankun-charts0.2.01 of 1See more

redis gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
pam@1.7.0-5
no fix listed

Open the chart page →

978
genieacsgenieacsVerified publisher0.5.11 of 2See more

genieacs genieacs 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.028244054e1bf
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

4,296
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

9,071
qryn-helmgigapipeVerified publisher0.1.91 of 1See more

qryn-helm gigapipe 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
qxip/qryn:3.2.3977acc9c7a9fd
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,995
redis-uigin0.0.11 of 1See more

redis-ui gin 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
patrikx3/p3x-redis-ui:latestf19eb45b0694
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,074
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/glassflow/glassflow-notifier:v1.0.3d1b0ce10b513
pam@1.7.0-5
no fix listed

Open the chart page →

12,115
pgbouncerglassflowVerified publisher0.1.01 of 1See more

pgbouncer glassflow 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/pgbouncer:1.23.192356da09704
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,279
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
nouchka/sqlite3:latestd183308f201c
pam@1.7.0-5
no fix listed

Open the chart page →

2,634
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
pam@1.7.0-5
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

12,359
goofy-chartgoofy-chart0.1.01 of 1See more

goofy-chart goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,806
googly-logingoogly-login0.1.01 of 2See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
pam@1.7.0-5
no fix listed

Open the chart page →

1,649
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
pam@1.7.0-5
no fix listed

Open the chart page →

22,587
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
pam@1.7.0-5
no fix listed

Open the chart page →

1,656
opentelemetry-demogpg-dev0.33.87 of 27See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
pam@1.5.2-6+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
pam@1.5.2-6+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
pam@1.5.2-6+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
pam@1.5.2-6+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
pam@1.5.2-6+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
pam@1.5.2-6+deb12u1
no fix listed
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

49,362
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

15,797
video-analytics-demo-l4tgpu-operator0.1.31 of 3See more

video-analytics-demo-l4t gpu-operator 0.1.3

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/debian:12.12-slimd5d3f9c23164
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,221
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,301

Container images carrying it

1,353 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
pam@1.5.2-6+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
pam@1.5.2-6+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
pam@1.5.2-6+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.