StackRadar

CVE-2025-8941

High

Advisory

Published 13 Aug 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
19th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,460
of 17,790 indexed, latest versions
Container images
1,353
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,460 of 17,790 indexed charts deploy, on 1,353 images.

Affected packageAffected versionsFixed inImages
pamdeb1.5.2-6, 1.5.2-6+deb12u1, 1.5.2-6+deb12u2, 1.7.0-5+1 moreno fix listed1,289
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.1-4.el8, 1.3.1-8.el8+6 more0:1.1.8-23.el7_9.2, 0:1.3.1-8.el8_2.2, 0:1.3.1-14.el8_4.2, 0:1.3.1-16.el8_6.3+3 more64
OSV records
DEBIAN-CVE-2025-8941RHSA-2025:15101RHSA-2025:15102RHSA-2025:15103RHSA-2025:15104RHSA-2025:15105RHSA-2025:15106RHSA-2025:15107

Charts affected

1,460 by stars
ChartLatestAffected imagesRadar Score
metabasehelmforgeVerified publisher1.2.291 of 3See more

metabase helmforge 1.2.29

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

1,676
middlewarehelmforgeVerified publisher1.2.63 of 4See more

middleware helmforge 1.2.6

3 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pam@1.7.0-5
no fix listed
library/redis:8.10.1298e5b3bc566
pam@1.7.0-5
no fix listed
middlewareeng/middleware:0.3.1747d880812f1
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

9,771
moodlehelmforgeVerified publisher1.1.02 of 2See more

moodle helmforge 1.1.0

2 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pam@1.7.0-5
no fix listed
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

6,206
netboxhelmforgeVerified publisher2.0.12 of 4See more

netbox helmforge 2.0.1

2 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pam@1.7.0-5
no fix listed
library/redis:8.10.1298e5b3bc566
pam@1.7.0-5
no fix listed

Open the chart page →

4,347
nextcloudhelmforgeVerified publisher1.0.03 of 3See more

nextcloud helmforge 1.0.0

3 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nextcloud:34.0.4-apachede4ad9389386
pam@1.7.0-5
no fix listed
library/postgres:18.6-trixie4ef4dbc939d6
pam@1.7.0-5
no fix listed
library/redis:8.10.1298e5b3bc566
pam@1.7.0-5
no fix listed

Open the chart page →

7,211
notediscoveryhelmforgeVerified publisher2.0.11 of 1See more

notediscovery helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
pam@1.7.0-5
no fix listed

Open the chart page →

1,263
opencuthelmforgeVerified publisher1.1.92 of 5See more

opencut helmforge 1.1.9

2 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pam@1.7.0-5
no fix listed
library/redis:8.10.1298e5b3bc566
pam@1.7.0-5
no fix listed

Open the chart page →

3,772
paprahelmforgeVerified publisher1.0.01 of 1See more

papra helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
pam@1.7.0-5
no fix listed

Open the chart page →

2,560
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
pam@1.7.0-5
no fix listed

Open the chart page →

4,819
qdranthelmforgeVerified publisher1.0.51 of 1See more

qdrant helmforge 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.19.112364fe851b9
pam@1.7.0-5
no fix listed

Open the chart page →

829
reactive-resumehelmforgeVerified publisher1.0.02 of 4See more

reactive-resume helmforge 1.0.0

2 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pam@1.7.0-5
no fix listed
ghcr.io/amruthpillai/reactive-resume:v5.3.0c487ec5edcfe
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

3,071
ryothelmforgeVerified publisher1.0.02 of 2See more

ryot helmforge 1.0.0

2 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pam@1.7.0-5
no fix listed
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

6,068
strapihelmforgeVerified publisher2.3.141 of 3See more

strapi helmforge 2.3.14

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

2,084
supersethelmforgeVerified publisher1.3.63 of 5See more

superset helmforge 1.3.6

3 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
pam@1.5.2-6+deb12u2
no fix listed
library/postgres:18.6-trixie4ef4dbc939d6
pam@1.7.0-5
no fix listed
library/redis:8.10.1298e5b3bc566
pam@1.7.0-5
no fix listed

Open the chart page →

5,784
text-embeddings-inferencehelmforgeVerified publisher1.0.01 of 2See more

text-embeddings-inference helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

2,563
twentyhelmforgeVerified publisher1.0.12 of 5See more

twenty helmforge 1.0.1

2 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pam@1.7.0-5
no fix listed
library/redis:8.10.1298e5b3bc566
pam@1.7.0-5
no fix listed

Open the chart page →

3,649
uptime-kumahelmforgeVerified publisher1.5.131 of 1See more

uptime-kuma helmforge 1.5.13

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

30,326
wallabaghelmforgeVerified publisher1.3.61 of 3See more

wallabag helmforge 1.3.6

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

2,784
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

12,680
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latestaefb67e6a7ff
pam@1.7.0-5
no fix listed

Open the chart page →

2,626
openaevhelm-openbasVerified publisher2.0.52 of 7See more

openaev helm-openbas 2.0.5

2 of the 7 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
pam@1.5.2-6+deb12u1
no fix listed
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

7,528
openbashelm-openbasVerified publisher1.8.143 of 7See more

openbas helm-openbas 1.8.14

3 of the 7 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
pam@1.5.2-6+deb12u1
no fix listed
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
pam@1.5.2-6+deb12u1
no fix listed
openbas/caldera-server:5.1.0a277796d9724
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

25,190
steampipehelm-steampipeVerified publisher2.4.11 of 1See more

steampipe helm-steampipe 2.4.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

3,154
my-nginxhelmtaiwo0.1.01 of 1See more

my-nginx helmtaiwo 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,996
home-ha-mockhome-ha-mockVerified publisher2.0.51 of 1See more

home-ha-mock home-ha-mock 2.0.5

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,065
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

16,415
home-security-demohome-security-demoVerified publisher2.0.121 of 3See more

home-security-demo home-security-demo 2.0.12

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,148
paperlesshpVerified publisher0.1.22 of 5See more

paperless hp 0.1.2

2 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
pam@1.7.0-5
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
pam@1.7.0-5
no fix listed

Open the chart page →

26,984
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

3,428
add-crismuxhydraVerified publisher0.9.31 of 1See more

add-crismux hydra 0.9.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/crismux:main673d5229df1f
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,299
hydrahydraVerified publisher0.9.52 of 2See more

hydra hydra 0.9.5

2 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/crismux:main673d5229df1f
pam@1.5.2-6+deb12u2
no fix listed
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

9,084
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

7,785
remove-crismuxhydraVerified publisher0.9.31 of 1See more

remove-crismux hydra 0.9.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/crismux:main673d5229df1f
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,299
nginx-charthyomin-nginx0.1.01 of 1See more

nginx-chart hyomin-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
nginx-charthyun-nginx0.1.01 of 1See more

nginx-chart hyun-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
iam-eks-user-mapperiam-eks-user-mapper1.6.01 of 1See more

iam-eks-user-mapper iam-eks-user-mapper 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/qovery/iam-eks-user-mapper:mainc41e3efc6097
pam@1.7.0-5
no fix listed

Open the chart page →

1,674
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,986
ibm-app-navigatoribm-charts1.0.12 of 5See more

ibm-app-navigator ibm-charts 1.0.1

2 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ibmcom/app-nav-init:1.0.1240ff499eb5b
pam@1.1.8-22.el7
0:1.1.8-23.el7_9.2
ibmcom/app-nav-ui:1.0.1e2a86997b36b
pam@1.1.8-22.el7
0:1.1.8-23.el7_9.2

Open the chart page →

32,906
ibm-business-automation-insights-devibm-charts3.2.06 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

6 of the 6 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ibmcom/bai-admin-dev:19.0.202d882f2836e
pam@1.1.8-22.el7
0:1.1.8-23.el7_9.2
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
pam@1.1.8-22.el7
0:1.1.8-23.el7_9.2
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
pam@1.1.8-22.el7
0:1.1.8-23.el7_9.2
ibmcom/bai-flink-zookeeper-dev:19.0.258548034cf55
pam@1.1.8-22.el7
0:1.1.8-23.el7_9.2
ibmcom/bai-init-dev:19.0.2b138f1eac0b1
pam@1.1.8-22.el7
0:1.1.8-23.el7_9.2
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
pam@1.1.8-22.el7
0:1.1.8-23.el7_9.2

Open the chart page →

39,341
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
pam@1.7.0-5
no fix listed

Open the chart page →

57,759
ibm-object-storage-pluginibm-charts1.1.52 of 2See more

ibm-object-storage-plugin ibm-charts 1.1.5

2 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
pam@1.3.1-8.el8
0:1.3.1-8.el8_2.2
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
pam@1.3.1-8.el8
0:1.3.1-8.el8_2.2

Open the chart page →

12,460
ibm-voice-gateway-devibm-charts3.1.01 of 2See more

ibm-voice-gateway-dev ibm-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
pam@1.1.8-22.el7
0:1.1.8-23.el7_9.2

Open the chart page →

4,503
ibm-ucv-prodibm-helm5.2.62 of 16See more

ibm-ucv-prod ibm-helm 5.2.6

2 of the 16 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/nginx:1.27.1934d1acd5ca8
pam@1.5.2-6+deb12u1
no fix listed
bitnamilegacy/rabbitmq:4.1.2fac502149c40
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

12,161
icegateicegateVerified publisher0.1.13 of 3See more

icegate icegate 0.1.1

3 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/icegatetech/icegate-ingest:0.1.1bae3c441894a
pam@1.5.2-6+deb12u2
no fix listed
ghcr.io/icegatetech/icegate-maintain:0.1.193e85b2b76ee
pam@1.5.2-6+deb12u2
no fix listed
ghcr.io/icegatetech/icegate-query:0.1.17542b4e7fff2
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

4,554
codex-poolericoretechVerified publisher0.8.71 of 1See more

codex-pooler icoretech 0.8.7

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/icoretech/codex-pooler:0.7.81bebc7e4a770
pam@1.7.0-5
no fix listed

Open the chart page →

829
metamcpicoretechVerified publisher0.3.101 of 2See more

metamcp icoretech 0.3.10

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
pam@1.7.0-5
no fix listed

Open the chart page →

1,649
multicaicoretechVerified publisher0.4.431 of 5See more

multica icoretech 0.4.43

1 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
pgvector/pgvector:pg17cf134a767f47
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

2,591
nextjsicoretechVerified publisher1.2.01 of 1See more

nextjs icoretech 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
tolgeeicoretechVerified publisher0.47.01 of 3See more

tolgee icoretech 0.47.0

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:18.369e8582b781c
pam@1.7.0-5
no fix listed

Open the chart page →

2,751

Container images carrying it

1,353 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
pam@1.5.2-6+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
pam@1.5.2-6+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
pam@1.5.2-6+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.