StackRadar

CVE-2025-8961

Medium

Advisory

Published 14 Aug 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
351
of 17,781 indexed, latest versions
Container images
355
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 351 of 17,781 indexed charts deploy, on 355 images.

Affected packageAffected versionsFixed inImages
tiffdeb4.0.3-7ubuntu0.9, 4.0.6-1ubuntu0.2, 4.0.6-1ubuntu0.4, 4.0.6-1ubuntu0.5+37 more4.0.3-7ubuntu0.11+esm16, 4.0.6-1ubuntu0.8+esm19, 4.0.9-5ubuntu0.10+esm9, 4.1.0+git191117-2ubuntu0.20.04.14+esm2+3 more324
tiffapk4.7.0-r04.7.1-r031
OSV records
ALPINE-CVE-2025-8961DEBIAN-CVE-2025-8961UBUNTU-CVE-2025-8961
Also known as
USN-7783-1

Charts affected

351 by stars
ChartLatestAffected imagesRadar Score
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

12,127
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

4,456
beeport-uiethersphereVerified publisher0.76.21 of 3See more

beeport-ui ethersphere 0.76.2

1 of the 3 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

7,368
multichain-uiethersphereVerified publisher0.73.11 of 3See more

multichain-ui ethersphere 0.73.1

1 of the 3 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

7,368
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
tiff@4.3.0-6ubuntu0.2
4.3.0-6ubuntu0.12

Open the chart page →

4,920
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
tiff@4.1.0+git191117-2ubuntu0.20.04.3
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

20,933
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

10,741
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
tiff@4.7.0-r0
4.7.1-r0

Open the chart page →

7,691
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
tiff@4.7.0-r0
4.7.1-r0

Open the chart page →

1,395
business-api-ecosystemfiware1.1.02 of 4See more

business-api-ecosystem fiware 1.1.0

2 of the 4 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
tiff@4.1.0+git191117-2ubuntu0.20.04.14
4.1.0+git191117-2ubuntu0.20.04.14+esm2
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

64,489
dump1090fnzv0.2.81 of 1See more

dump1090 fnzv 0.2.8

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
fnzv/dump1090:latestb3079b95c336
tiff@4.3.0-6ubuntu0.7
4.3.0-6ubuntu0.12

Open the chart page →

4,077
changedetection-iogabe565Verified publisher0.12.01 of 2See more

changedetection-io gabe565 0.12.0

1 of the 2 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:latestecacd9fd0c66
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

2,595
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
tiff@4.5.0-6
no fix listed

Open the chart page →

13,241
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

18,230
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
tiff@4.0.9-5ubuntu0.4
4.0.9-5ubuntu0.10+esm9

Open the chart page →

19,215
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
tiff@4.0.9-5ubuntu0.4
4.0.9-5ubuntu0.10+esm9

Open the chart page →

13,551
icinga2geek-cookbookVerified publisher4.2.01 of 1See more

icinga2 geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
jordan/icinga2:latestf75025fe8ea8
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

9,077
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

14,283
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

12,958
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
tiff@4.1.0+git191117-2ubuntu0.20.04.3
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

27,949
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
tiff@4.3.0-6
4.3.0-6ubuntu0.12

Open the chart page →

19,503
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
tiff@4.1.0+git191117-2ubuntu0.20.04.2
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

15,730
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
tiff@4.1.0+git191117-2ubuntu0.20.04.1
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

24,293
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
tiff@4.0.9-5ubuntu0.4
4.0.9-5ubuntu0.10+esm9

Open the chart page →

26,944
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
tiff@4.1.0+git191117-2ubuntu0.20.04.3
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

17,929
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

49,025
web-checkhajowielandVerified publisher1.0.11 of 1See more

web-check hajowieland 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

9,047
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
tiff@4.3.0-6ubuntu0.10
4.3.0-6ubuntu0.12

Open the chart page →

9,096
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
tiff@4.5.0-6
no fix listed

Open the chart page →

24,995
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

5,839
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
tiff@4.0.9-5ubuntu0.9
4.0.9-5ubuntu0.10+esm9

Open the chart page →

10,627
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
tiff@4.7.0-r0
4.7.1-r0

Open the chart page →

4,647
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

9,122
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

7,633
changedetectionhelmforgeVerified publisher1.1.151 of 1See more

changedetection helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.3ecacd9fd0c66
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

2,595
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
tiff@4.1.0+git191117-2ubuntu0.20.04.13
4.1.0+git191117-2ubuntu0.20.04.14+esm2

Open the chart page →

18,813
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

6,022
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

6,103
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
tiff@4.5.0-6+deb12u4
no fix listed

Open the chart page →

30,099
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

12,607
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

25,017
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
tiff@4.3.0-6ubuntu0.10
4.3.0-6ubuntu0.12

Open the chart page →

6,015
samplehelmapphelmtraining3.0.01 of 1See more

samplehelmapp helmtraining 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
praravind1801/helmimages:3.0.0f29d637b9ce1
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

5,973
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
tiff@4.3.0-6ubuntu0.7
4.3.0-6ubuntu0.12

Open the chart page →

14,290
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
tiff@4.5.0-6+deb12u1
no fix listed

Open the chart page →

16,384
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-frontend:2.15.2dc6384d10cc8
tiff@4.7.0-r0
4.7.1-r0

Open the chart page →

3,407
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
tiff@4.5.0-6+deb12u3
no fix listed

Open the chart page →

9,011
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
tiff@4.5.0-6+deb12u3
no fix listed

Open the chart page →

7,733
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-8961.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
tiff@4.5.0-6+deb12u2
no fix listed

Open the chart page →

11,812

Container images carrying it

355 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/mittwald/kube-httpcache:stable2169032c5840
tiff@4.5.0-6+deb12u2
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
tiff@4.0.6-1ubuntu0.6
4.0.6-1ubuntu0.8+esm19
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
tiff@4.5.0-6
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
tiff@4.5.0-6+deb12u4
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
tiff@4.5.0-6+deb12u4
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.