StackRadar

CVE-2025-8941

High

Advisory

Published 13 Aug 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
19th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,460
of 17,790 indexed, latest versions
Container images
1,353
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,460 of 17,790 indexed charts deploy, on 1,353 images.

Affected packageAffected versionsFixed inImages
pamdeb1.5.2-6, 1.5.2-6+deb12u1, 1.5.2-6+deb12u2, 1.7.0-5+1 moreno fix listed1,289
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.1-4.el8, 1.3.1-8.el8+6 more0:1.1.8-23.el7_9.2, 0:1.3.1-8.el8_2.2, 0:1.3.1-14.el8_4.2, 0:1.3.1-16.el8_6.3+3 more64
OSV records
DEBIAN-CVE-2025-8941RHSA-2025:15101RHSA-2025:15102RHSA-2025:15103RHSA-2025:15104RHSA-2025:15105RHSA-2025:15106RHSA-2025:15107

Charts affected

1,460 by stars
ChartLatestAffected imagesRadar Score
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
pam@1.7.0-5
no fix listed

Open the chart page →

5,899
fluentd-kubernetes-daemonsetnovum-rgi-charts0.1.01 of 1See more

fluentd-kubernetes-daemonset novum-rgi-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1-debian-graylogfda93f768f98
pam@1.7.0-5
no fix listed

Open the chart page →

1,022
nexus2novum-rgi-charts0.1.11 of 1See more

nexus2 novum-rgi-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
sonatype/nexus:oss6bc88b51d4d7
pam@1.1.8-23.el7
0:1.1.8-23.el7_9.2

Open the chart page →

3,220
cloakbrowser-mcpobeoneVerified publisher0.3.11 of 1See more

cloakbrowser-mcp obeone 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

2,297
firecrawlobeoneVerified publisher3.0.43 of 5See more

firecrawl obeone 3.0.4

3 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/firecrawl:2.11.340529f38bab2c3
pam@1.5.2-6+deb12u2
no fix listed
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
pam@1.7.0-5
no fix listed
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

10,060
libretranslateobeoneVerified publisher1.0.71 of 1See more

libretranslate obeone 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
libretranslate/libretranslate:v1.9.61de2d7056bb8
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

2,008
ollamaobeoneVerified publisher0.3.11 of 2See more

ollama obeone 0.3.1

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/obeone/ollama-exporter:latestf43af285c6e0
pam@1.7.0-5
no fix listed

Open the chart page →

1,093
parcelapp-mcpobeoneVerified publisher0.1.01 of 1See more

parcelapp-mcp obeone 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
pam@1.7.0-5
no fix listed

Open the chart page →

865
ocellusaiocellusaiVerified publisher0.1.121 of 2See more

ocellusai ocellusai 0.1.12

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
pam@1.7.0-5
no fix listed

Open the chart page →

1,184
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
pam@1.7.0-5
no fix listed

Open the chart page →

17,134
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
pam@1.7.0-5
no fix listed

Open the chart page →

2,583
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
pam@1.7.0-5
no fix listed

Open the chart page →

2,321
web-chartoje-ktcloudlab0.1.01 of 1See more

web-chart oje-ktcloudlab 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,360
cmsmsoleds-helm-chartsVerified publisher0.1.61 of 1See more

cmsms oleds-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,861
laravel-appoli-the-devVerified publisher2.0.171 of 1See more

laravel-app oli-the-dev 2.0.17

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
serversideup/php:8.5-fpm-nginx8f8c2f010ac5
pam@1.7.0-5
no fix listed

Open the chart page →

2,728
node-appoli-the-devVerified publisher1.0.01 of 1See more

node-app oli-the-dev 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/node:22-bookworm-slim83f487e0a634
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,171
paperless-ngxoli-the-devVerified publisher1.1.11 of 1See more

paperless-ngx oli-the-dev 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
pam@1.7.0-5
no fix listed

Open the chart page →

4,651
cron-jobonechart-slVerified publisher0.73.71 of 1See more

cron-job onechart-sl 0.73.7

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/debian:stable-slim04634311a8d5
pam@1.7.0-5
no fix listed

Open the chart page →

978
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
pam@1.7.0-5
no fix listed

Open the chart page →

1,649
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest473fdffe4e67
pam@1.7.0-5
no fix listed

Open the chart page →

6,392
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
pam@1.5.2-6
no fix listed

Open the chart page →

9,747
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,699
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
pam@1.3.1-14.el8
0:1.3.1-14.el8_4.2

Open the chart page →

18,032
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

11,051
openlit-controlleropenlit0.10.01 of 1See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,377
llm-stackopenproject-helm-chartsVerified publisher1.1.01 of 2See more

llm-stack openproject-helm-charts 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/python:3.12-slim78387bc3881b
pam@1.7.0-5
no fix listed

Open the chart page →

1,992
chatbot-ai-sampleopenshift0.1.62 of 4See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/ai-lab/llamacpp_python:latest70d138997acd
pam@1.5.1-19.el9
0:1.5.1-24.el9_4.1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
pam@1.5.1-19.el9
0:1.5.1-24.el9_4.1

Open the chart page →

19,051
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

7,866
redhat-trusted-application-pipelineopenshift1.0.21 of 2See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
pam@1.5.1-14.el9
0:1.5.1-15.el9_2.2

Open the chart page →

8,643
sohaopensohaVerified publisher0.1.91 of 2See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
pam@1.7.0-5
no fix listed

Open the chart page →

1,781
terminalsopen-webui0.7.02 of 2See more

terminals open-webui 0.7.0

2 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/open-webui/terminals:latest5d2fd44366a4
pam@1.7.0-5
no fix listed
ghcr.io/open-webui/terminals-operator:latest6287ce8be502
pam@1.7.0-5
no fix listed

Open the chart page →

2,046
hiveopstty0.1.91 of 4See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,550
grrosdfir-infrastructureVerified publisher1.0.31 of 5See more

grr osdfir-infrastructure 1.0.3

1 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

11,021
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.08 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

8 of the 40 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/git:latest4b08d0c5af8d
pam@1.5.2-6+deb12u1
no fix listed
chromadb/chroma:1.5.7fc8dc8e11fb2
pam@1.7.0-5
no fix listed
yetiplatform/yeti:2.9.09bcbe2650a14
pam@1.7.0-5
no fix listed
yetiplatform/yeti-frontend:2.9.0873ef15d267b
pam@1.7.0-5
no fix listed
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
pam@1.5.2-6+deb12u1
no fix listed
ghcr.io/openrelik/openrelik-mediator:latest42efc445b19e
pam@1.5.2-6+deb12u2
no fix listed
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
pam@1.5.2-6+deb12u2
no fix listed
ghcr.io/openrelik/openrelik-server:latestce1132261523
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

72,547
yetiosdfir-infrastructureVerified publisher1.0.52 of 4See more

yeti osdfir-infrastructure 1.0.5

2 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
yetiplatform/yeti:latest9c3006cedcca
pam@1.7.0-5
no fix listed
yetiplatform/yeti-frontend:latest709064278c7e
pam@1.7.0-5
no fix listed

Open the chart page →

6,679
webot-container-kit0.1.01 of 1See more

web ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
workerot-container-kit0.1.01 of 1See more

worker ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
lens-metric-proxyowan-charts0.1.01 of 1See more

lens-metric-proxy owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
avap2p-avs0.1.01 of 1See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
avaprotocol/ap-avs:1.2.0c430ea5c37d6
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,327
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

12,440
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
pam@1.5.2-6+deb12u1
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

27,597
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

2,393
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
pam@1.7.0-5
no fix listed

Open the chart page →

3,877
vaultwardenpascaliskeVerified publisher2.0.01 of 1See more

vaultwarden pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
pam@1.7.0-5
no fix listed

Open the chart page →

3,431
examplepauls-helm-charts0.1.21 of 1See more

example pauls-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
kubeconpauls-helm-charts0.1.01 of 1See more

kubecon pauls-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
matomopetbattle11.0.12 of 2See more

matomo petbattle 11.0.1

2 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
pam@1.5.2-6+deb12u1
no fix listed
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

11,101
pet-battle-infrapetbattle1.0.321 of 2See more

pet-battle-infra petbattle 1.0.32

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
pam@1.3.1-14.el8
0:1.3.1-14.el8_4.2

Open the chart page →

15,474
pet-battle-tournamentpetbattle1.0.401 of 3See more

pet-battle-tournament petbattle 1.0.40

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.8bb5e052770e5
pam@1.3.1-14.el8
0:1.3.1-14.el8_4.2

Open the chart page →

15,474

Container images carrying it

1,353 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
pam@1.5.2-6+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
pam@1.5.2-6+deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
pam@1.5.2-6+deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.