CVE-2025-9287
CriticalAdvisory
Published 21 Aug 2025In the index since 6 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.1
- base score, highest
- EPSS
- 0.005
- 42nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 80
- of 17,781 indexed, latest versions
- Container images
- 72
- deployed by those charts
- Fix available
- 1 of 1
- affected package
cipher-base is missing type checks, leading to hash rewind and passing on crafted data
Carried by container images the latest versions of 80 of 17,781 indexed charts deploy, on 72 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cipher-basenpm | 1.0.4 | 1.0.5 | 72 |
- OSV records
- GHSA-cpq7-6gpm-g9rc
Charts affected
80 by stars
Container images carrying it
72 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| agoldis/ | 10228ecd353b | cipher-base | 1.0.5 | 2 |
| chatwoot/ | d530ab8c1753 | cipher-base | 1.0.5 | 2 |
| ethersphere/ | 0558799ca992 | cipher-base | 1.0.5 | 2 |
| gjeanmart/ | 926264c8f2d1 | cipher-base | 1.0.5 | 2 |
| gradiant/ | fbd10c017541 | cipher-base | 1.0.5 | 2 |
| krtk6160/ | cc82a694f818 | cipher-base | 1.0.5 | 2 |
| shahanafarooqui/ | e2195188a451 | cipher-base | 1.0.5 | 2 |
| ghcr.io/ | acb40032ad4b | cipher-base | 1.0.5 | 2 |
| quay.io/ | e09967519a1d | cipher-base | 1.0.5 | 2 |
| amazon/ | 5126e2e79a1f | cipher-base | 1.0.5 | 1 |
| amundsendev/ | 69e7915e61c1 | cipher-base | 1.0.5 | 1 |
| arfath29/ | 384b3e377f47 | cipher-base | 1.0.5 | 1 |
| baserow/ | df0c42eb67e8 | cipher-base | 1.0.5 | 1 |
| bicarus/ | dab88659ae3b | cipher-base | 1.0.5 | 1 |
| chatwoot/ | 67ebc751c171 | cipher-base | 1.0.5 | 1 |
| coderaiser/ | b34a9775c7ce | cipher-base | 1.0.5 | 1 |
| codetogether/ | 4348c8a38752 | cipher-base | 1.0.5 | 1 |
| conduction/ | d591f5e6f2a9 | cipher-base | 1.0.5 | 1 |
| daskdev/ | 052630f5ca04 | cipher-base | 1.0.5 | 1 |
| ethereumoptimism/ | e07968a0e686 | cipher-base | 1.0.5 | 1 |
| ethersphere/ | 7624f11a72ad | cipher-base | 1.0.5 | 1 |
| ethersphere/ | 513154aab230 | cipher-base | 1.0.5 | 1 |
| flagsmith/ | df02a29e8b0c | cipher-base | 1.0.5 | 1 |
| gristlabs/ | 6e71b1914a7e | cipher-base | 1.0.5 | 1 |
| henrywhitaker3/ | 47159a940229 | cipher-base | 1.0.5 | 1 |
| hirosystems/ | 9c98b23c1515 | cipher-base | 1.0.5 | 1 |
| hkotel/ | 3c04c0e85039 | cipher-base | 1.0.5 | 1 |
| ibarreche/ | c8970ac1c8dc | cipher-base | 1.0.5 | 1 |
| ibmcom/ | e2a86997b36b | cipher-base | 1.0.5 | 1 |
| interlayhq/ | 423d567d47aa | cipher-base | 1.0.5 | 1 |
| interlayhq/ | 5b2c414307b9 | cipher-base | 1.0.5 | 1 |
| jayfong/ | 163e5d621910 | cipher-base | 1.0.5 | 1 |
| joplin/ | 52af57880c0e | cipher-base | 1.0.5 | 1 |
| joplin/ | b87564ef34e9 | cipher-base | 1.0.5 | 1 |
| keyoxide/ | 96f27a71269d | cipher-base | 1.0.5 | 1 |
| lavandadelpatio/ | 501c3f31e0bc | cipher-base | 1.0.5 | 1 |
| linuxserver/ | b801bbcf6386 | cipher-base | 1.0.5 | 1 |
| lissy93/ | 1991f7be5ed0 | cipher-base | 1.0.5 | 1 |
| lsstsqre/ | 9ded78e7fe03 | cipher-base | 1.0.5 | 1 |
| microcks/ | cb72e46a1b3c | cipher-base | 1.0.5 | 1 |
| misskey/ | e08b7c478093 | cipher-base | 1.0.5 | 1 |
| mozilla/ | 1da6ff5c4895 | cipher-base | 1.0.5 | 1 |
| nightscout/ | 00c3b4833f1b | cipher-base | 1.0.5 | 1 |
| nightscout/ | ad29ca7a4de6 | cipher-base | 1.0.5 | 1 |
| nightscout/ | f604dc4c03ca | cipher-base | 1.0.5 | 1 |
| ondrejsika/ | b1fd497416c8 | cipher-base | 1.0.5 | 1 |
| parithoshj/ | cdca426fea6d | cipher-base | 1.0.5 | 1 |
| penpotapp/ | 5c835ffd87ab | cipher-base | 1.0.5 | 1 |
| phntom/ | 1b9aafbb62e6 | cipher-base | 1.0.5 | 1 |
| rakii8585/ | 026082a515ac | cipher-base | 1.0.5 | 1 |