StackRadar

CVE-2025-9403

Medium

Advisory

Published 25 Aug 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
318
of 17,787 indexed, latest versions
Container images
246
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 318 of 17,787 indexed charts deploy, on 246 images.

Affected packageAffected versionsFixed inImages
jqdeb1.5+dfsg-1, 1.5+dfsg-1ubuntu0.1, 1.5+dfsg-2, 1.6-1ubuntu0.20.04.1+15 moreno fix listed246
OSV records
DEBIAN-CVE-2025-9403UBUNTU-CVE-2025-9403

Charts affected

318 by stars
ChartLatestAffected imagesRadar Score
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
no fix listed

Open the chart page →

25,793
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

30,759
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

13,684
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

18,828
stateful-data-generatortalhajuikar-helm-charts0.1.21 of 2See more

stateful-data-generator talhajuikar-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

4,898
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
supabase/realtime:latestd3aa0c86c7b3
jq@1.7.1-6+deb13u2
no fix listed

Open the chart page →

9,469
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

20,362
owncloudth-chartsVerified publisher0.2.11 of 1See more

owncloud th-charts 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
owncloud/server:10.15.051d9b74fc2a8
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

10,065
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:7-jammy406a4fdca9fc
jq@1.6-2.1ubuntu3.2
no fix listed

Open the chart page →

7,336
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

4,125
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
jq@1.6-2.1
no fix listed

Open the chart page →

8,370
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
jq@1.6-2.1ubuntu3
no fix listed

Open the chart page →

9,396
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
jq@1.6-2.1ubuntu3
no fix listed

Open the chart page →

13,563
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
jq@1.7.1-3ubuntu0.24.04.1
no fix listed

Open the chart page →

7,696
ciliumvks-helm-chartsVerified publisher1.17.141 of 3See more

cilium vks-helm-charts 1.17.14

1 of the 3 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
jq@1.7.1-3ubuntu0.24.04.1
no fix listed

Open the chart page →

4,124
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
jq@1.7.1-6+deb13u3
no fix listed

Open the chart page →

3,906
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
no fix listed

Open the chart page →

28,699
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-9403.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
jq@1.7.1-3ubuntu0.24.04.2
no fix listed

Open the chart page →

13,197

Container images carrying it

246 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/mongo:8:8.3.8:latest5211c51171f5
jq@1.7.1-3ubuntu0.24.04.2
no fix listed
12
oomk8s/readiness-check:2.0.2875814cc853d
jq@1.5+dfsg-1ubuntu0.1
no fix listed
11
library/mongo:5.0.6-focal8e70544b6c76
jq@1.6-1ubuntu0.20.04.1
no fix listed
10
oomk8s/readiness-check:2.0.07daa08b81954
jq@1.5+dfsg-1
no fix listed
6
bitnamilegacy/kubectl:1.29.2c74b703deed2
jq@1.6-2.1
no fix listed
5
library/mongo:4.44be76f674fc4
jq@1.6-1ubuntu0.20.04.1
no fix listed
5
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
jq@1.5+dfsg-1ubuntu0.1
no fix listed
4
library/mongo:5.0-focal5e15a3f014ed
jq@1.6-1ubuntu0.20.04.1
no fix listed
4
library/mongo:4.2.12-bionic628741415fc9
jq@1.5+dfsg-2
no fix listed
4
library/mongo:4.4.66efa05203990
jq@1.5+dfsg-2
no fix listed
4
ghcr.io/linuxserver/plex:latest7f9a1d574958
jq@1.8.1-4ubuntu2
no fix listed
4
bitnamilegacy/kubectl:latestcd354d5b2556
jq@1.6-2.1
no fix listed
3
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
jq@1.6-2.1
no fix listed
3
dgraph/dgraph:v21.12.03b55ea83fffe
jq@1.6-1ubuntu0.20.04.1
no fix listed
3
gchq/hdfs:3.3.35ec58edbb2db
jq@1.7.1-3build1
no fix listed
3
selenium/hub:3.141.5902f251d48d5f
jq@1.6-1ubuntu0.20.04.1
no fix listed
3
quay.io/cilium/cilium:v1.20.1ae9ea21f7427
jq@1.8.1-4ubuntu2
no fix listed
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
jq@1.6-2.1ubuntu3
no fix listed
3
apache/nifi-registry:1.26.07cdfd8deec92
jq@1.6-2.1ubuntu3
no fix listed
2
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
jq@1.7.1-6+deb13u3
no fix listed
2
cribl/cribl:4.19.2044f9a5fac9a
jq@1.7.1-3ubuntu0.24.04.2
no fix listed
2
homebridge/homebridge:latest77c685a40911
jq@1.7.1-3ubuntu0.24.04.2
no fix listed
2
library/mongo:8.0.20098862b1339f
jq@1.7.1-3ubuntu0.24.04.1
no fix listed
2
library/mongo:7.0-jammy:7-jammy406a4fdca9fc
jq@1.6-2.1ubuntu3.2
no fix listed
2
library/mongo:5.041108d183e97
jq@1.6-1ubuntu0.20.04.1
no fix listed
2
library/mongo:4.2.358b25d51baa1
jq@1.5+dfsg-2
no fix listed
2
library/mongo:8.3.981a1c8842a09
jq@1.7.1-3ubuntu0.24.04.2
no fix listed
2
library/mongo:7b096b4cb9269
jq@1.6-2.1ubuntu3.2
no fix listed
2
library/mongo:7.0b6421fd6d1c5
jq@1.6-2.1ubuntu3.2
no fix listed
2
wolveix/satisfactory-server:latest:v1.9.10e103700ae6ae
jq@1.6-2.1ubuntu3.1
no fix listed
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
jq@1.6-2.1+deb12u1
no fix listed
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
jq@1.6-1ubuntu0.20.04.1
no fix listed
1
agentarea/agentarea-mcp-runner:latestd3c209a5d531
jq@1.6-2.1+deb12u2
no fix listed
1
airbyte/pod-sweeper:1.5.198d2c39d512e
jq@1.6-2.1
no fix listed
1
antiantiops/vscode-browser-docker:1.137.0eeff80a99d92
jq@1.7.1-3ubuntu0.24.04.2
no fix listed
1
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
jq@1.7.1-3ubuntu0.24.04.2
no fix listed
1
apache/nifi-registry:1.27.063b8e3e40742
jq@1.6-2.1ubuntu3
no fix listed
1
aristidetm/basic-notebook:3.6.5469dbc951224
jq@1.6-2.1
no fix listed
1
arunvelsriram/utils:latest655ad18fd8d6
jq@1.7.1-3ubuntu0.24.04.1
no fix listed
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
jq@1.6-1ubuntu0.20.04.1
no fix listed
1
atlassian/bamboo:12.1.114af4bb6c8d46
jq@1.7.1-3ubuntu0.24.04.2
no fix listed
1
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
jq@1.7.1-6+deb13u2
no fix listed
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
jq@1.7.1-6+deb13u1
no fix listed
1
bitnamilegacy/kubectl:1.301249fc292e84
jq@1.6-2.1
no fix listed
1
bitnamilegacy/kubectl:1.3164614ef8290f
jq@1.6-2.1
no fix listed
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
jq@1.6-2.1
no fix listed
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
jq@1.6-2.1
no fix listed
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
jq@1.6-2.1
no fix listed
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
jq@1.6-2.1
no fix listed
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
jq@1.6-2.1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.