StackRadar

CVE-2025-8941

High

Advisory

Published 13 Aug 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
19th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,437
of 17,792 indexed, latest versions
Container images
1,313
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,437 of 17,792 indexed charts deploy, on 1,313 images.

Affected packageAffected versionsFixed inImages
pamdeb1.5.2-6, 1.5.2-6+deb12u1, 1.5.2-6+deb12u2, 1.7.0-5+1 moreno fix listed1,249
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.1-4.el8, 1.3.1-8.el8+6 more0:1.1.8-23.el7_9.2, 0:1.3.1-8.el8_2.2, 0:1.3.1-14.el8_4.2, 0:1.3.1-16.el8_6.3+3 more64
OSV records
DEBIAN-CVE-2025-8941RHSA-2025:15101RHSA-2025:15102RHSA-2025:15103RHSA-2025:15104RHSA-2025:15105RHSA-2025:15106RHSA-2025:15107

Charts affected

1,437 by stars
ChartLatestAffected imagesRadar Score
supabaseteochenglim0.1.23 of 13See more

supabase teochenglim 0.1.2

3 of the 13 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
supabase/logflare:latest49bfe526f1b4
pam@1.7.0-5
no fix listed
supabase/realtime:latestd3aa0c86c7b3
pam@1.7.0-5
no fix listed
supabase/studio:latest94a2a9d2906e
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

9,795
flask-contactstest-configmap1.0.12 of 3See more

flask-contacts test-configmap 1.0.1

2 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
pam@1.7.0-5
no fix listed
shashkist/flask-contacts-app:latest581de1fd6084
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,789
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
carlosmz87/test_helm_backend:latest8ffa63aa995d
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

11,722
functionstest-helm-chart-hoanganht1k27Verified publisher0.1.11 of 1See more

functions test-helm-chart-hoanganht1k27 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
myfirstcharttest-helm-charts0.2.01 of 1See more

myfirstchart test-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
asrtest-opea1.0.01 of 1See more

asr test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
opea/asr:1.025dd26d9cd09
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,411
chatqnatest-opea1.0.07 of 11See more

chatqna test-opea 1.0.0

7 of the 11 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
pam@1.5.2-6+deb12u1
no fix listed
opea/chatqna:1.038c51b791efa
pam@1.5.2-6+deb12u1
no fix listed
opea/embedding-tei:1.05c9639de61c1
pam@1.5.2-6+deb12u1
no fix listed
opea/llm-tgi:1.00c25aab3f106
pam@1.5.2-6+deb12u1
no fix listed
opea/reranking-tei:1.0e48613afb191
pam@1.5.2-6+deb12u1
no fix listed
opea/retriever-redis:1.0eb746b263705
pam@1.5.2-6+deb12u1
no fix listed
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

39,273
codegentest-opea1.0.04 of 5See more

codegen test-opea 1.0.0

4 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
pam@1.5.2-6+deb12u1
no fix listed
opea/codegen:1.058f91683892d
pam@1.5.2-6+deb12u1
no fix listed
opea/codegen-ui:1.02bee4eb66f3e
pam@1.5.2-6+deb12u1
no fix listed
opea/llm-tgi:1.00c25aab3f106
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

28,944
codetranstest-opea1.0.04 of 5See more

codetrans test-opea 1.0.0

4 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
pam@1.5.2-6+deb12u1
no fix listed
opea/codetrans:1.0e2436483b73d
pam@1.5.2-6+deb12u1
no fix listed
opea/codetrans-ui:1.03ef121f34610
pam@1.5.2-6+deb12u1
no fix listed
opea/llm-tgi:1.00c25aab3f106
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

28,515
docsumtest-opea1.0.04 of 5See more

docsum test-opea 1.0.0

4 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:1.27.1287ff321f9e3
pam@1.5.2-6+deb12u1
no fix listed
opea/docsum:1.03eaa91849512
pam@1.5.2-6+deb12u1
no fix listed
opea/docsum-ui:1.07f854e9bffaf
pam@1.5.2-6+deb12u1
no fix listed
opea/llm-docsum-tgi:1.002f9e8fa5d71
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

28,990
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,203
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,238
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,737
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,002
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,215
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

9,668
teitest-opea1.0.01 of 1See more

tei test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,300
teireranktest-opea1.0.01 of 1See more

teirerank test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,300
ttstest-opea1.0.01 of 1See more

tts test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
opea/tts:1.0257ae94709e9
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,395
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,368
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
pam@1.7.0-5
no fix listed

Open the chart page →

20,378
codeth-chartsVerified publisher0.1.01 of 1See more

code th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
collabora/code:24.04.13.2.101dc4ab83977
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,275
jellyfinth-chartsVerified publisher0.1.01 of 1See more

jellyfin th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.77ae36aab93ef
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,980
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

10,159
thingsboardthingsboardVerified publisher0.1.31 of 12See more

thingsboard thingsboard 0.1.3

1 of the 12 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

25,423
voyagertibuntu1.2.01 of 1See more

voyager tibuntu 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/aeharding/voyager:latest779759172676
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
pam@1.7.0-5
no fix listed

Open the chart page →

4,445
joplintobiassackmann0.1.72 of 2See more

joplin tobiassackmann 0.1.7

2 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
pam@1.5.2-6+deb12u1
no fix listed
joplin/server:latest3f7b852959aa
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

5,574
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
pam@1.7.0-5
no fix listed

Open the chart page →

7,019
test0tohlejezkouska0.1.01 of 2See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

3,318
traefik-external-dns-controllertraefik-external-dns-operator2.2.01 of 1See more

traefik-external-dns-controller traefik-external-dns-operator 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-controller:2.2.08d27ad8b5f73
pam@1.7.0-5
no fix listed

Open the chart page →

1,506
apptreenityVerified publisher0.1.531 of 2See more

app treenity 0.1.53

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
pam@1.7.0-5
no fix listed

Open the chart page →

1,817
treenitytreenityVerified publisher0.1.31 of 4See more

treenity treenity 0.1.3

1 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
pam@1.7.0-5
no fix listed

Open the chart page →

3,365
saleor-appstrieb-work0.6.01 of 5See more

saleor-apps trieb-work 0.6.0

1 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:8.2.2f0957bcaa75f
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

7,018
trowtrow0.13.01 of 1See more

trow trow 0.13.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/trow-registry/trow:0.10.075b7d2dcdb91
pam@1.7.0-5
no fix listed

Open the chart page →

1,291
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

17,396
altinnendata-apptumogroup0.1.171 of 1See more

altinnendata-app tumogroup 0.1.17

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
sondresjo/altinnendata-app:v1.9.1c2707839d8a3
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

1,855
bobby-apitumogroup1.0.11 of 1See more

bobby-api tumogroup 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
sondresjo/bobby-api:latestfe534731909a
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

2,317
nstuning-apptumogroup0.1.181 of 1See more

nstuning-app tumogroup 0.1.18

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
sondresjo/nstuning-app:v1.6.113a6795bf36da
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

1,855
umbrella-chartumbrella-chartVerified publisher0.1.13 of 5See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
hassroutyyoussef/accountservice:latest1f01edf1ee0c
pam@1.5.2-6+deb12u1
no fix listed
hassroutyyoussef/orderservice:latest2fc3d1617928
pam@1.5.2-6+deb12u1
no fix listed
hassroutyyoussef/userservice:lateste0392e2b4a90
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

7,512
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

8,642
miniouninettsigma21.2.01 of 1See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
pam@1.3.1-16.el8_6.1
0:1.3.1-16.el8_6.3

Open the chart page →

4,967
applicationuniversal-helm-chartVerified publisher0.4.31 of 1See more

application universal-helm-chart 0.4.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,849
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,245
opencloudunxwaresVerified publisher0.2.36 of 13See more

opencloud unxwares 0.2.3

6 of the 13 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
pam@1.5.2-6+deb12u1
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
pam@1.5.2-6+deb12u1
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
pam@1.5.2-6+deb12u1
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
pam@1.5.2-6+deb12u1
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
pam@1.5.2-6+deb12u1
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

45,472
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
pam@1.5.2-6
no fix listed

Open the chart page →

14,431
telegram-rebotvcnngrVerified publisher1.0.02 of 3See more

telegram-rebot vcnngr 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
vcnngr/telegram-login:latest1a849a997b6d
pam@1.5.2-6+deb12u1
no fix listed
vcnngr/telegram-rebot:latest30f1f05e57a6
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,060
scrutinyvhdirkVerified publisher0.1.31 of 1See more

scrutiny vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

4,411
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

10,813
bugsinkvictorlane0.3.71 of 2See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
bugsink/bugsink:2ecdd84587746
pam@1.7.0-5
no fix listed

Open the chart page →

4,128

Container images carrying it

1,313 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

No deployed image carries CVE-2025-8941.

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.