StackRadar

CVE-2025-8961

Medium

Advisory

Published 14 Aug 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
351
of 17,781 indexed, latest versions
Container images
355
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 351 of 17,781 indexed charts deploy, on 355 images.

Affected packageAffected versionsFixed inImages
tiffdeb4.0.3-7ubuntu0.9, 4.0.6-1ubuntu0.2, 4.0.6-1ubuntu0.4, 4.0.6-1ubuntu0.5+37 more4.0.3-7ubuntu0.11+esm16, 4.0.6-1ubuntu0.8+esm19, 4.0.9-5ubuntu0.10+esm9, 4.1.0+git191117-2ubuntu0.20.04.14+esm2+3 more324
tiffapk4.7.0-r04.7.1-r031
OSV records
ALPINE-CVE-2025-8961DEBIAN-CVE-2025-8961UBUNTU-CVE-2025-8961
Also known as
USN-7783-1

Charts affected

351 by stars
ChartLatestAffected imagesRadar Score
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
tiff@4.3.0-6ubuntu0.10
4.3.0-6ubuntu0.12

Open the chart page →

12,397
nginx-php-fpmkokuwa0.1.41 of 2See more

nginx-php-fpm kokuwa 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
tiff@4.7.0-r0
4.7.1-r0

Open the chart page →

1,838
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

20,403
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
tiff@4.7.0-r0
4.7.1-r0

Open the chart page →

4,095
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
tiff@4.1.0+git191117-2ubuntu0.20.04.2
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

12,422
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.14+esm2
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.14+esm2
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.14+esm2
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.14+esm2
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

113,791
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

3,544
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
tiff@4.5.0-6+deb12u3
no fix listed

Open the chart page →

3,980
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

35,050
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
tiff@4.5.0-6+deb12u3
no fix listed

Open the chart page →

7,201
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

6,136
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

5,734
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

13,738
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

5,039
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
tiff@4.5.0-6
no fix listed
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

14,838
opsopsVerified publisher1.2.01 of 2See more

ops ops 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
shaowenchen/ops-server:latest315444f703f4
tiff@4.3.0-6ubuntu0.11
4.3.0-6ubuntu0.12

Open the chart page →

8,939
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
tiff@4.7.0-r0
4.7.1-r0

Open the chart page →

2,278
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

31,844
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
tiff@4.3.0-6ubuntu0.10
4.3.0-6ubuntu0.12

Open the chart page →

7,405
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
tiff@4.7.0-r0
4.7.1-r0

Open the chart page →

6,639
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

5,482
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
tiff@4.5.0-6+deb12u3
no fix listed

Open the chart page →

7,740
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

5,315
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
tiff@4.0.9-5ubuntu0.4
4.0.9-5ubuntu0.10+esm9

Open the chart page →

13,541
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
tiff@4.5.0-6+deb12u1
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

30,234
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
tiff@4.5.0-6+deb12u3
no fix listed

Open the chart page →

38,107
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
tiff@4.7.0-r0
4.7.1-r0

Open the chart page →

5,213
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

16,449
smarter-demosmarterOfficialVerified publisher0.1.52 of 7See more

smarter-demo smarter 0.1.5

2 of the 7 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
tiff@4.1.0+git191117-2ubuntu0.20.04.5
4.1.0+git191117-2ubuntu0.20.04.14+esm2
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
tiff@4.1.0+git191117-2ubuntu0.20.04.5
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

45,832
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

5,676
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

10,380
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

12,581
tdarrvhdirkVerified publisher5.0.52 of 2See more

tdarr vhdirk 5.0.5

2 of the 2 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
haveagitgat/tdarr_node:2.17.013ff0913202dd
tiff@4.1.0+git191117-2ubuntu0.20.04.9
4.1.0+git191117-2ubuntu0.20.04.14+esm2
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
tiff@4.1.0+git191117-2ubuntu0.20.04.3
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

26,657
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

2,595
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
tiff@4.7.0-r0
4.7.1-r0

Open the chart page →

10,323
uptime-kumaadnoctemVerified publisher0.4.11 of 1See more

uptime-kuma adnoctem 0.4.1

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

30,028
flaresolverralexmorbo-flaresolverrVerified publisher0.2.01 of 1See more

flaresolverr alexmorbo-flaresolverr 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
flaresolverr/flaresolverr:v3.5.0139dfee1c6f8
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

27,274
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

5,817
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

7,239
games-on-whalesangelnu2.0.03 of 7See more

games-on-whales angelnu 2.0.0

3 of the 7 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
tiff@4.3.0-6ubuntu0.10
4.3.0-6ubuntu0.12
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.14+esm2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

42,126
inbox-uiappscodeVerified publisher2026.9.111 of 1See more

inbox-ui appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/appscode/inbox-ui:0.0.5ae3b0e29daaa
tiff@4.7.0-r0
4.7.1-r0

Open the chart page →

840
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
tiff@4.7.0-3
4.7.0-3+deb13u1

Open the chart page →

7,489
dltkvassist-iot-data-integrity-verification0.2.02 of 9See more

dltkv assist-iot-data-integrity-verification 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
tiff@4.0.6-1ubuntu0.4
4.0.6-1ubuntu0.8+esm19
hyperledger/fabric-couchdb:0.4.15f6c724592abf
tiff@4.0.6-1ubuntu0.6
4.0.6-1ubuntu0.8+esm19

Open the chart page →

77,706
dltflassist-iot-dlt-based-fl0.2.02 of 9See more

dltfl assist-iot-dlt-based-fl 0.2.0

2 of the 9 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
tiff@4.0.6-1ubuntu0.4
4.0.6-1ubuntu0.8+esm19
hyperledger/fabric-couchdb:0.4.15f6c724592abf
tiff@4.0.6-1ubuntu0.6
4.0.6-1ubuntu0.8+esm19

Open the chart page →

77,706
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
tiff@4.3.0-6ubuntu0.7
4.3.0-6ubuntu0.12

Open the chart page →

18,277
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
tiff@4.5.0-6
no fix listed

Open the chart page →

45,363
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
tiff@4.1.0+git191117-2ubuntu0.20.04.12
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

13,913
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
tiff@4.3.0-6ubuntu0.4
4.3.0-6ubuntu0.12
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

32,501
webappavzi-webapp0.1.01 of 1See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
avzini/web-app:latestf40b30210ed0
tiff@4.5.0-6
no fix listed

Open the chart page →

6,297
aws9helmaws9helm0.1.04 of 4See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
kuzwolka/aws9:main1ad759b961b1
tiff@4.5.0-6+deb12u2
no fix listed
kuzwolka/aws9:news3e8880fbbb96
tiff@4.5.0-6+deb12u2
no fix listed
kuzwolka/aws9:blog4a7707410bf1
tiff@4.5.0-6+deb12u2
no fix listed
kuzwolka/aws9:shop84a9d9766345
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

18,344

Container images carrying it

355 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/mittwald/kube-httpcache:stable2169032c5840
tiff@4.5.0-6+deb12u2
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
tiff@4.0.6-1ubuntu0.6
4.0.6-1ubuntu0.8+esm19
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
tiff@4.5.0-6
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
tiff@4.5.0-6+deb12u4
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
tiff@4.5.0-6+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.