StackRadar

CVE-2025-11083

High

Advisory

Published 27 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
403
of 17,781 indexed, latest versions
Container images
380
deployed by those charts
Fix available
4 of 4
affected packages

Red Hat Security Advisory: gcc-toolset-13-binutils security update

Carried by container images the latest versions of 403 of 17,781 indexed charts deploy, on 380 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+35 more2.24-5ubuntu14.2+esm8, 2.26.1-1ubuntu1~16.04.8+esm14, 2.30-21ubuntu1~18.04.9+esm13, 2.34-6ubuntu1.11+esm2+3 more364
binutilsrpm2.30-73.el8, 2.30-93.el8, 2.30-113.el8, 2.30-117.el8+5 more0:2.30-128.el8_10, 0:2.35.2-67.el9_7.115
gcc-toolset-13-binutilsrpm2.40-21.el90:2.40-21.el9_7.11
binutilsapk2.45-r02.45.1-r01
OSV records
DEBIAN-CVE-2025-11083CGA-hrr6-r28w-hw3cRHSA-2025:23336RHSA-2025:23343RHSA-2025:23382RLSA-2025:23343RLSA-2025:23382UBUNTU-CVE-2025-11083
Also known as
CGA-w9fm-h6gq-qh2c, RHSA-2025:23359, RHSA-2025:23400, RHSA-2026:0343, RHSA-2026:0479, RHSA-2026:0480, RHSA-2026:0481, USN-7919-1

Charts affected

403 by stars
ChartLatestAffected imagesRadar Score
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-11083.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
binutils@2.40-2
no fix listed

Open the chart page →

7,085
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-11083.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
binutils@2.40-2
no fix listed

Open the chart page →

10,001
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-11083.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
binutils@2.44-3
no fix listed

Open the chart page →

5,560

Container images carrying it

380 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
vlebediantsev/notes-admin-front:latest007c6670ff48
binutils@2.40-2
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
binutils@2.40-2
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
binutils@2.40-2
no fix listed
1
voltha/voltha-envoy:1.6.059ab2a00f712
binutils@2.24-5ubuntu14.2
2.24-5ubuntu14.2+esm8
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
binutils@2.44-3
no fix listed
1
wistefan/mvf:lateste0887302b2d8
binutils@2.38-4ubuntu2
2.38-4ubuntu2.10
1
xeladock/mysql_dns:latest4baf531453f1
binutils@2.38-3ubuntu1
2.38-4ubuntu2.10
1
xeotek/kadeck:4.2.94c6b04d9ce55
binutils@2.34-6ubuntu1.4
2.34-6ubuntu1.11+esm2
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
binutils@2.40-2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
binutils@2.40-2
no fix listed
1
yetiplatform/yeti:2.9.09bcbe2650a14
binutils@2.44-3
no fix listed
1
yetiplatform/yeti:latest9c3006cedcca
binutils@2.44-3
no fix listed
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
binutils@2.30-21ubuntu1~18.04.2
2.30-21ubuntu1~18.04.9+esm13
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
binutils@2.40-2
no fix listed
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
binutils@2.30-117.el8
0:2.30-128.el8_10
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
binutils@2.40-2
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
binutils@2.40-2
no fix listed
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
binutils@2.45-r0
2.45.1-r0
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
binutils@2.34-6ubuntu1.4
2.34-6ubuntu1.11+esm2
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
binutils@2.40-2
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
binutils@2.40-2
no fix listed
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
binutils@2.38-4ubuntu2.4
2.38-4ubuntu2.10
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
binutils@2.40-2
no fix listed
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
binutils@2.44-3
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
binutils@2.44-3
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
binutils@2.40-2
no fix listed
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
binutils@2.44-3
no fix listed
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
binutils@2.40-2
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
binutils@2.44-3
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
binutils@2.40-2
no fix listed
1
ghcr.io/esphome/esphome:latest000c5ee5ee96
binutils@2.44-3
no fix listed
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
binutils@2.40-2
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
binutils@2.40-2
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.11+esm2
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
binutils@2.38-3ubuntu1
2.38-4ubuntu2.10
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
binutils@2.34-6ubuntu1.11
2.34-6ubuntu1.11+esm2
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
binutils@2.44-3
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
binutils@2.40-2
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
binutils@2.42-4ubuntu2.5
2.42-4ubuntu2.6
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
binutils@2.40-2
no fix listed
1
ghcr.io/monicahq/monica-next:main8be69156acbb
binutils@2.44-3
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
binutils@2.40-2
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
binutils@2.40-2
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-mcp654f860148ba
binutils@2.44-3
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-chatbot66ba53497f1f
binutils@2.44-3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
binutils@2.40-2
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-agentdf5ee05e23e3
binutils@2.44-3
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.11+esm2
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
binutils@2.40-2
no fix listed
1
ghcr.io/securo-finance/securo-backend:0.15.162e030110745
binutils@2.44-3
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.