StackRadar

CVE-2025-8941

High

Advisory

Published 13 Aug 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
19th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,460
of 17,792 indexed, latest versions
Container images
1,348
deployed by those charts
Fix available
1 of 2
affected packages

Red Hat Security Advisory: pam security update

Carried by container images the latest versions of 1,460 of 17,792 indexed charts deploy, on 1,348 images.

Affected packageAffected versionsFixed inImages
pamdeb1.5.2-6, 1.5.2-6+deb12u1, 1.5.2-6+deb12u2, 1.7.0-5+1 moreno fix listed1,284
pamrpm1.1.8-22.el7, 1.1.8-23.el7, 1.3.1-4.el8, 1.3.1-8.el8+6 more0:1.1.8-23.el7_9.2, 0:1.3.1-8.el8_2.2, 0:1.3.1-14.el8_4.2, 0:1.3.1-16.el8_6.3+3 more64
OSV records
DEBIAN-CVE-2025-8941RHSA-2025:15101RHSA-2025:15102RHSA-2025:15103RHSA-2025:15104RHSA-2025:15105RHSA-2025:15106RHSA-2025:15107

Charts affected

1,460 by stars
ChartLatestAffected imagesRadar Score
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,403
varnish-ingress-controllervarnish-ingress-controllerVerified publisher0.5.01 of 1See more

varnish-ingress-controller varnish-ingress-controller 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
mariusm/vingress:0.5.0b3db186c3d72
pam@1.7.0-5
no fix listed

Open the chart page →

2,294
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

5,264
waldurwaldur-chartsVerified publisher8.1.22 of 3See more

waldur waldur-charts 8.1.2

2 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
pam@1.7.0-5
no fix listed
opennode/waldur-mastermind:8.1.24c82b15d9042
pam@1.7.0-5
no fix listed

Open the chart page →

5,017
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
pam@1.7.0-5
no fix listed

Open the chart page →

7,793
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
pam@1.7.0-5
no fix listed

Open the chart page →

8,330
workflows-sinkworkflows-sinkVerified publisher0.16.31 of 1See more

workflows-sink workflows-sink 0.16.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,421
wraftwraft0.1.121 of 9See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
pam@1.3.1-25.el8
0:1.3.1-26.el8_8.2

Open the chart page →

10,165
yugawareyugabyteVerified publisher2026.1.11 of 3See more

yugaware yugabyte 2026.1.1

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:14.22eba8ddbdd837
pam@1.7.0-5
no fix listed

Open the chart page →

2,658
zcash-stackzcashVerified publisher0.4.51 of 2See more

zcash-stack zcash 0.4.5

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
electriccoinco/lightwalletd:v0.5.42ae3a551e111
pam@1.7.0-5
no fix listed

Open the chart page →

2,934
crowdsec-web-uizekker6Verified publisher0.51.01 of 1See more

crowdsec-web-ui zekker6 0.51.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/theduffman85/crowdsec-web-ui:2026.8.3bfadbab9a72c
pam@1.7.0-5
no fix listed

Open the chart page →

1,442
backendzymtraceOfficialVerified publisher26.9.21 of 6See more

backend zymtrace 26.9.2

1 of the 6 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:17.4304ab8135187
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

9,149
abstract-nodeabstract-nodeVerified publisher0.1.491 of 2See more

abstract-node abstract-node 0.1.49

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,581
jenkinsaditisingh-jenkins1.0.01 of 1See more

jenkins aditisingh-jenkins 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
pam@1.7.0-5
no fix listed

Open the chart page →

2,498
gotenbergadnoctemVerified publisher0.5.01 of 1See more

gotenberg adnoctem 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.37.0f29984bd1e22
pam@1.7.0-5
no fix listed

Open the chart page →

5,972
lhciadnoctemVerified publisher0.1.01 of 1See more

lhci adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/adnoctem/lhci:1.0.119553e4b4033
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,279
linkwardenadnoctemVerified publisher0.5.11 of 2See more

linkwarden adnoctem 0.5.1

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

3,855
outlineadnoctemVerified publisher0.1.21 of 1See more

outline adnoctem 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
outlinewiki/outline:1.10.1832051f039b4
pam@1.7.0-5
no fix listed

Open the chart page →

1,246
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

30,398
ahnlich-dbahnlich-dbVerified publisher0.1.11 of 1See more

ahnlich-db ahnlich-db 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/deven96/ahnlich-db:latest45d8b5aab491
pam@1.7.0-5
no fix listed

Open the chart page →

1,609
airbyte-keycloakairbyteVerified publisher0.1.21 of 2See more

airbyte-keycloak airbyte 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
pam@1.7.0-5
no fix listed

Open the chart page →

1,667
pod-sweeperairbyteVerified publisher1.5.11 of 1See more

pod-sweeper airbyte 1.5.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
airbyte/pod-sweeper:1.5.198d2c39d512e
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,974
airbyteairbyte-v2Verified publisher2.3.01 of 10See more

airbyte airbyte-v2 2.3.0

1 of the 10 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.28.2deec511b51c3
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

11,785
aktoakto0.2.02 of 7See more

akto akto 0.2.0

2 of the 7 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
pam@1.3.1-25.el8
0:1.3.1-26.el8_8.2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
pam@1.3.1-25.el8
0:1.3.1-26.el8_8.2

Open the chart page →

13,737
akto-ai-guardrails-v2akto0.3.03 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

3 of the 6 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
pam@1.7.0-5
no fix listed
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
pam@1.7.0-5
no fix listed
aktosecurity/akto-agent-guard-worker:1.1.4666eaffd5362
pam@1.7.0-5
no fix listed

Open the chart page →

9,591
akto-mini-runtimeakto0.7.221 of 3See more

akto-mini-runtime akto 0.7.22

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/redis:latestV8.6.2832d7785830f
pam@1.7.0-5
no fix listed

Open the chart page →

2,845
akto-mini-runtime-shaakto0.7.231 of 3See more

akto-mini-runtime-sha akto 0.7.23

1 of the 3 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/redisdigest-pinned47200b041382
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

3,266
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

6,600
akto-protectionakto0.1.02 of 4See more

akto-protection akto 0.1.0

2 of the 4 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
pam@1.3.1-25.el8
0:1.3.1-26.el8_8.2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
pam@1.3.1-25.el8
0:1.3.1-26.el8_8.2

Open the chart page →

11,296
cliproxyapialekcVerified publisher0.5.31 of 1See more

cliproxyapi alekc 0.5.3

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
eceasy/cli-proxy-api:v7.3.3f9abbf3fa5fe
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

1,126
esphomealekcVerified publisher2.9.01 of 1See more

esphome alekc 2.9.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
esphome/esphome:2026.9.09959730a04c7
pam@1.7.0-5
no fix listed

Open the chart page →

3,196
komodoalekcVerified publisher3.1.01 of 1See more

komodo alekc 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
pam@1.7.0-5
no fix listed

Open the chart page →

1,941
alertigatealertigate0.5.11 of 1See more

alertigate alertigate 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/feresberbeche/alertigate:1.2.1628d49e0e01b
pam@1.7.0-5
no fix listed

Open the chart page →

1,560
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

6,339
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

27,655
tubearchivistalexmorbo-tubearchivistVerified publisher0.1.01 of 2See more

tubearchivist alexmorbo-tubearchivist 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
valkey/valkey:9.0.1546304417fea
pam@1.7.0-5
no fix listed

Open the chart page →

1,681
nginx-sni-proxyalexpressoVerified publisher1.0.21 of 1See more

nginx-sni-proxy alexpresso 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
pam@1.7.0-5
no fix listed

Open the chart page →

1,861
redisalexvanderberkelVerified publisher2.2.01 of 1See more

redis alexvanderberkel 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
library/redis:8.2.15fa2edb1e408
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

1,876
katalogalpineworks0.1.21 of 5See more

katalog alpineworks 0.1.2

1 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

4,542
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
hazelcast/management-center:5.3.2f9d34300d330
pam@1.3.1-25.el8
0:1.3.1-26.el8_8.2

Open the chart page →

28,342
anchore-admission-controlleranchore-charts0.9.01 of 2See more

anchore-admission-controller anchore-charts 0.9.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
cfssl/cfssl:v1.6.5c9018c2ddf0b
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

7,597
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

5,855
stalwartandibraeuVerified publisher1.0.21 of 1See more

stalwart andibraeu 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.1425001929f36a
pam@1.7.0-5
no fix listed

Open the chart page →

1,609
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

7,325
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
pam@1.5.2-6+deb12u2
no fix listed

Open the chart page →

4,055
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
pam@1.7.0-5
no fix listed

Open the chart page →

5,603
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
pam@1.5.2-6+deb12u1
no fix listed
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
pam@1.5.2-6+deb12u1
no fix listed

Open the chart page →

26,070
antigenic-stalwart-helm-chartantigenic-stalwart-helm-chartVerified publisher1.0.51 of 2See more

antigenic-stalwart-helm-chart antigenic-stalwart-helm-chart 1.0.5

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.15.5dcf575db2d53
pam@1.7.0-5
no fix listed

Open the chart page →

1,462
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
pam@1.7.0-5
no fix listed

Open the chart page →

3,275
app-mobilityappmo0.1.01 of 5See more

app-mobility appmo 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-8941.

Container imageDigestPackageFixed in
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
pam@1.3.1-16.el8_6.1
0:1.3.1-16.el8_6.3

Open the chart page →

12,542

Container images carrying it

1,348 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

No deployed image carries CVE-2025-8941.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.