StackRadar

CVE-2025-9403

Medium

Advisory

Published 25 Aug 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
318
of 17,781 indexed, latest versions
Container images
245
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 318 of 17,781 indexed charts deploy, on 245 images.

Affected packageAffected versionsFixed inImages
jqdeb1.5+dfsg-1, 1.5+dfsg-1ubuntu0.1, 1.5+dfsg-2, 1.6-1ubuntu0.20.04.1+15 moreno fix listed245
OSV records
DEBIAN-CVE-2025-9403UBUNTU-CVE-2025-9403

Charts affected

318 by stars
ChartLatestAffected imagesRadar Score
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
no fix listed

Open the chart page →

25,769
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

30,687
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

13,646
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

18,756
stateful-data-generatortalhajuikar-helm-charts0.1.21 of 2See more

stateful-data-generator talhajuikar-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

4,860
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
supabase/realtime:latestd3aa0c86c7b3
jq@1.7.1-6+deb13u2
no fix listed

Open the chart page →

9,556
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

20,270
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

10,006
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:7-jammy406a4fdca9fc
jq@1.6-2.1ubuntu3.2
no fix listed

Open the chart page →

7,248
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

4,087
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
jq@1.6-2.1
no fix listed

Open the chart page →

8,607
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
jq@1.6-2.1ubuntu3
no fix listed

Open the chart page →

9,347
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
jq@1.6-2.1ubuntu3
no fix listed

Open the chart page →

13,459
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
jq@1.7.1-3ubuntu0.24.04.1
no fix listed

Open the chart page →

7,628
ciliumvks-helm-chartsVerified publisher1.17.141 of 3See more

cilium vks-helm-charts 1.17.14

1 of the 3 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
jq@1.7.1-3ubuntu0.24.04.1
no fix listed

Open the chart page →

4,046
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
jq@1.7.1-6+deb13u3
no fix listed

Open the chart page →

3,911
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

28,605
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
jq@1.7.1-3ubuntu0.24.04.2
no fix listed

Open the chart page →

13,677

Container images carrying it

245 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
photoprism/photoprism:251130db16ee6b1ba3
jq@1.8.1-3ubuntu1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
jq@1.7.1-3build1
no fix listed
1
project2team4/react:latest3ff031a08887
jq@1.6-1ubuntu0.20.04.1
no fix listed
1
rezachalak/bzen-mongo:1.0.034f694325191
jq@1.6-1ubuntu0.20.04.1
no fix listed
1
robotshop/rs-mongodb:latest119b545823cd
jq@1.6-1ubuntu0.20.04.1
no fix listed
1
ryshe/terraria:latestb1c89f7f359a
jq@1.6-2.1+deb12u1
no fix listed
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
jq@1.6-2.1ubuntu3
no fix listed
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
jq@1.6-2.1ubuntu3
no fix listed
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
jq@1.6-2.1ubuntu3
no fix listed
1
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
jq@1.7.1-3ubuntu0.24.04.1
no fix listed
1
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
jq@1.7.1-3ubuntu0.24.04.1
no fix listed
1
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
jq@1.7.1-3ubuntu0.24.04.1
no fix listed
1
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
jq@1.8.1-4ubuntu2
no fix listed
1
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
jq@1.8.1-4ubuntu2
no fix listed
1
selenium/hub:4.48.0-20260905d47c27474cb4
jq@1.7.1-3ubuntu0.24.04.2
no fix listed
1
selenium/node-chrome:4.48.0-202609055ac71fd8dd1e
jq@1.7.1-3ubuntu0.24.04.2
no fix listed
1
selenium/node-firefox:4.48.0-2026090574a5c1c90f95
jq@1.7.1-3ubuntu0.24.04.2
no fix listed
1
shaowenchen/ops-server:latest315444f703f4
jq@1.6-2.1ubuntu3.1
no fix listed
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
jq@1.6-1ubuntu0.20.04.1
no fix listed
1
supabase/realtime:v2.102.3aa1c92c0cf32
jq@1.6-2.1+deb12u1
no fix listed
1
supabase/realtime:latestd3aa0c86c7b3
jq@1.7.1-6+deb13u2
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
jq@1.6-1ubuntu0.20.04.1
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
jq@1.7.1-6+deb13u2
no fix listed
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
jq@1.7.1-6+deb13u2
no fix listed
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
jq@1.6-2.1ubuntu3
no fix listed
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
jq@1.6-2.1ubuntu3
no fix listed
1
timescale/timescaledb-ha:pg16d7db8f1085a3
jq@1.6-2.1ubuntu3.2
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
jq@1.6-2.1ubuntu3
no fix listed
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
jq@1.6-2.1ubuntu3
no fix listed
1
trueosiris/vrising:latest9356f98ad561
jq@1.6-2.1ubuntu3.2
no fix listed
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
jq@1.6-2.1ubuntu3
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
jq@1.6-2.1
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
jq@1.5+dfsg-2
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
jq@1.7.1-6+deb13u3
no fix listed
1
wiktorn/overpass-api:latest9bb5f4a9b54c
jq@1.6-2.1+deb12u2
no fix listed
1
wolveix/satisfactory-server:v1.9.1199be1064b18
jq@1.6-2.1ubuntu3
no fix listed
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
jq@1.6-2.1ubuntu3
no fix listed
1
ghcr.io/abcdesktopio/mongo:safe8.0c4c1938a973b
jq@1.7.1-3ubuntu0.24.04.2
no fix listed
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
jq@1.6-2.1
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
jq@1.6-2.1
no fix listed
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
jq@1.6-2.1ubuntu3
no fix listed
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
jq@1.6-1ubuntu0.20.04.1
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
jq@1.6-2.1
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
jq@1.6-2.1+deb12u2
no fix listed
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
jq@1.7.1-6+deb13u2
no fix listed
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
jq@1.6-2.1+deb12u1
no fix listed
1
ghcr.io/drakkan/sftpgo:v2.7.46cb60f08fede
jq@1.7.1-6+deb13u2
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
jq@1.6-2.1+deb12u1
no fix listed
1
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
jq@1.7.1-3ubuntu0.24.04.1
no fix listed
1
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
jq@1.7.1-3ubuntu0.24.04.2
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.