CVE-2025-9165

Low

Advisory

Published 19 Aug 2025In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 2.5; base score, highest
EPSS: 0.002; 12th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 351; of 17,781 indexed, latest versions
Container images: 355; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 351 of 17,781 indexed charts deploy, on 355 images.

Affected package	Affected versions	Fixed in	Images
tiffdeb	4.0.3-7ubuntu0.9, 4.0.6-1ubuntu0.2, 4.0.6-1ubuntu0.4, 4.0.6-1ubuntu0.5+37 more	4.0.3-7ubuntu0.11+esm16, 4.0.6-1ubuntu0.8+esm19, 4.0.9-5ubuntu0.10+esm9, 4.1.0+git191117-2ubuntu0.20.04.14+esm2+3 more	324
tiffapk	4.7.0-r0	4.7.1-r0	31

OSV records: ALPINE-CVE-2025-9165 DEBIAN-CVE-2025-9165 UBUNTU-CVE-2025-9165
Also known as: USN-7783-1

Charts affected

351 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-9165.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	tiff@4.5.0-6+deb12u1	no fix listed

Open the chart page →

7,673

Container images carrying it

355 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
flaresolverr/flaresolverr :latest :v3.5.0	139dfee1c6f8	tiff@4.5.0-6+deb12u4	no fix listed	5
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	tiff@4.0.6-1ubuntu0.4	4.0.6-1ubuntu0.8+esm19	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	tiff@4.0.6-1ubuntu0.6	4.0.6-1ubuntu0.8+esm19	4
library/nginx :1.27.1	287ff321f9e3	tiff@4.5.0-6+deb12u1	no fix listed	4
ciscolabs/rtsp-client :latest	a7b60ec88285	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.14+esm2	3
ciscolabs/rtsp-server :latest	b59fc10bb821	tiff@4.1.0+git191117-2ubuntu0.20.04.5	4.1.0+git191117-2ubuntu0.20.04.14+esm2	3
library/nginx :1.25 :1.25.5	a484819eb602	tiff@4.5.0-6+deb12u1	no fix listed	3
library/node :lts	be23f54a88d3	tiff@4.5.0-6+deb12u4	no fix listed	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	tiff@4.0.6-1ubuntu0.5	4.0.6-1ubuntu0.8+esm19	3
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	tiff@4.5.0-6	no fix listed	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	tiff@4.5.0-6+deb12u1	no fix listed	3
quay.io/devtron/notifier :9804331c-372-39294	709c7da19c5a	tiff@4.5.0-6+deb12u3	no fix listed	3
apache/tika :2.9.2.1-full	ae0b86d3c4d0	tiff@4.5.1+git230720-4ubuntu2	4.5.1+git230720-4ubuntu2.4	2
excalidraw/excalidraw :latest	f7ee194addd6	tiff@4.7.0-r0	4.7.1-r0	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	tiff@4.5.0-6	no fix listed	2
library/nginx :1.27.0	98f8ec75657d	tiff@4.5.0-6+deb12u1	no fix listed	2
library/python :3.7	eedf63967cdb	tiff@4.5.0-6	no fix listed	2
louislam/uptime-kuma :2.5.4	917318f9d7be	tiff@4.5.0-6+deb12u4	no fix listed	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	tiff@4.5.0-6+deb12u4	no fix listed	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	tiff@4.5.0-6+deb12u4	no fix listed	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	tiff@4.5.0-6+deb12u1	no fix listed	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	tiff@4.5.0-6	no fix listed	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	tiff@4.5.0-6	no fix listed	2
nginxinc/nginx-unprivileged :1.27-alpine	65e3e85dbaed	tiff@4.7.0-r0	4.7.1-r0	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	tiff@4.5.0-6+deb12u2	no fix listed	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	tiff@4.5.0-6+deb12u2	no fix listed	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	tiff@4.5.0-6+deb12u2	no fix listed	2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	tiff@4.5.0-6+deb12u2	no fix listed	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	tiff@4.5.0-6+deb12u2	no fix listed	2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	tiff@4.5.0-6+deb12u2	no fix listed	2
opendatacube/ows :latest	668cbb41473c	tiff@4.5.1+git230720-4ubuntu2.2	4.5.1+git230720-4ubuntu2.4	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	tiff@4.5.0-6+deb12u1	no fix listed	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	tiff@4.5.1+git230720-4ubuntu2.2	4.5.1+git230720-4ubuntu2.4	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	tiff@4.3.0-6ubuntu0.1	4.3.0-6ubuntu0.12	2
ghcr.io/dgtlmoon/changedetection.io :0.60.4	7bb6963b730d	tiff@4.5.0-6+deb12u4	no fix listed	2
ghcr.io/dgtlmoon/changedetection.io :0.60.3 :latest	ecacd9fd0c66	tiff@4.5.0-6+deb12u4	no fix listed	2
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	tiff@4.5.0-6+deb12u3	no fix listed	2
ghcr.io/flaresolverr/flaresolverr :v3.5.2	c80ae007ce2c	tiff@4.5.0-6+deb12u4	no fix listed	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.14+esm2	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.14+esm2	2
ghcr.io/lissy93/web-check :latest	a4e021c0f6a9	tiff@4.5.0-6+deb12u4	no fix listed	2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss :unprivileged-oss-20250331	3db8145349a3	tiff@4.5.0-6+deb12u1	no fix listed	2
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	tiff@4.5.0-6+deb12u3	no fix listed	2
5200710/hadoop :3.2.3-java8	092d3088a5fb	tiff@4.1.0+git191117-2ubuntu0.20.04.11	4.1.0+git191117-2ubuntu0.20.04.14+esm2	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	tiff@4.1.0+git191117-2ubuntu0.20.04.1	4.1.0+git191117-2ubuntu0.20.04.14+esm2	1
akaunting/akaunting :3.0.15	52811b36ec3a	tiff@4.5.0-6	no fix listed	1
allegroai/clearml :2.0.0-613	713ae38f7daf	tiff@4.5.0-6+deb12u1	no fix listed	1
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	tiff@4.3.0-6ubuntu0.10	4.3.0-6ubuntu0.12	1
anujdatar/cups :25.07.01	685df04a643b	tiff@4.5.0-6+deb12u2	no fix listed	1
archivebox/archivebox :0.7.4	1a5a37331091	tiff@4.5.0-6+deb12u4	no fix listed	1