StackRadar

CVE-2025-11083

High

Advisory

Published 27 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
403
of 17,781 indexed, latest versions
Container images
380
deployed by those charts
Fix available
4 of 4
affected packages

Red Hat Security Advisory: gcc-toolset-13-binutils security update

Carried by container images the latest versions of 403 of 17,781 indexed charts deploy, on 380 images.

Affected packageAffected versionsFixed inImages
binutilsdeb2.24-5ubuntu3.1, 2.24-5ubuntu14.2, 2.26.1-1ubuntu1~16.04.5, 2.26.1-1ubuntu1~16.04.6+35 more2.24-5ubuntu14.2+esm8, 2.26.1-1ubuntu1~16.04.8+esm14, 2.30-21ubuntu1~18.04.9+esm13, 2.34-6ubuntu1.11+esm2+3 more364
binutilsrpm2.30-73.el8, 2.30-93.el8, 2.30-113.el8, 2.30-117.el8+5 more0:2.30-128.el8_10, 0:2.35.2-67.el9_7.115
gcc-toolset-13-binutilsrpm2.40-21.el90:2.40-21.el9_7.11
binutilsapk2.45-r02.45.1-r01
OSV records
DEBIAN-CVE-2025-11083CGA-hrr6-r28w-hw3cRHSA-2025:23336RHSA-2025:23343RHSA-2025:23382RLSA-2025:23343RLSA-2025:23382UBUNTU-CVE-2025-11083
Also known as
CGA-w9fm-h6gq-qh2c, RHSA-2025:23359, RHSA-2025:23400, RHSA-2026:0343, RHSA-2026:0479, RHSA-2026:0480, RHSA-2026:0481, USN-7919-1

Charts affected

403 by stars
ChartLatestAffected imagesRadar Score
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-11083.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
binutils@2.40-2
no fix listed

Open the chart page →

7,085
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-11083.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
binutils@2.40-2
no fix listed

Open the chart page →

10,001
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-11083.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
binutils@2.44-3
no fix listed

Open the chart page →

5,560

Container images carrying it

380 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
binutils@2.26.1-1ubuntu1~16.04.8
2.26.1-1ubuntu1~16.04.8+esm14
11
library/phpmyadmin:5.2.3-apache:latest3a8a8d6b5289
binutils@2.44-3
no fix listed
7
library/wordpress:7.1.0-apache:latest5a93c470ae82
binutils@2.44-3
no fix listed
6
oomk8s/readiness-check:2.0.07daa08b81954
binutils@2.26.1-1ubuntu1~16.04.6
2.26.1-1ubuntu1~16.04.8+esm14
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
binutils@2.40-2
no fix listed
6
solsson/kafka:latest41e5d8f6f290
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.11+esm2
5
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
binutils@2.40-2
no fix listed
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
binutils@2.26.1-1ubuntu1~16.04.6
2.26.1-1ubuntu1~16.04.8+esm14
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
binutils@2.26.1-1ubuntu1~16.04.8
2.26.1-1ubuntu1~16.04.8+esm14
4
mastercloudapps/planner:v1.2340a950b311b2
binutils@2.38-4ubuntu2.1
2.38-4ubuntu2.10
4
codeurjc/planner:v1.0800cf520c245
binutils@2.38-4ubuntu2.1
2.38-4ubuntu2.10
3
guacamole/guacamole:1.6.0f344085e618b
binutils@2.42-4ubuntu2.5
2.42-4ubuntu2.6
3
jacobalberty/unifi:v10.0.162896c0ab82d33
binutils@2.34-6ubuntu1.11
2.34-6ubuntu1.11+esm2
3
library/node:ltsbe23f54a88d3
binutils@2.40-2
no fix listed
3
localstack/localstack-pro:latest4aef81c53168
binutils@2.44-3
no fix listed
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
binutils@2.40-2
no fix listed
3
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
binutils@2.35.2-63.el9
0:2.35.2-67.el9_7.1
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
binutils@2.40-2
no fix listed
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
binutils@2.44-3
no fix listed
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
binutils@2.44-3
no fix listed
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
binutils@2.40-2
no fix listed
2
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
binutils@2.44-3
no fix listed
2
library/phpmyadmin:5.2.16e75aa8f767c
binutils@2.40-2
no fix listed
2
library/python:3.7eedf63967cdb
binutils@2.40-2
no fix listed
2
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
binutils@2.44-3
no fix listed
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
binutils@2.40-2
no fix listed
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
binutils@2.26.1-1ubuntu1~16.04.8
2.26.1-1ubuntu1~16.04.8+esm14
2
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
binutils@2.44-3
no fix listed
2
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
binutils@2.44-3
no fix listed
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
binutils@2.40-2
no fix listed
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.11+esm2
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
binutils@2.34-6ubuntu1.9
2.34-6ubuntu1.11+esm2
2
uffizzi/controller:latest0344805f267b
binutils@2.40-2
no fix listed
2
vdiogov/glpi-conteiner:latest6945f84f0058
binutils@2.40-2
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
binutils@2.42-4ubuntu2.5
2.42-4ubuntu2.6
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
binutils@2.38-4ubuntu2
2.38-4ubuntu2.10
2
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
binutils@2.40-2
no fix listed
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
binutils@2.40-2
no fix listed
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
binutils@2.38-3ubuntu1
2.38-4ubuntu2.10
2
a10networks/acos-prometheus-exporter:latest8dc58d434d71
binutils@2.30-21ubuntu1~18.04.3
2.30-21ubuntu1~18.04.9+esm13
1
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
binutils@2.44-3
no fix listed
1
aboogie/login_test_backend:new9c41a4483ac8
binutils@2.40-2
no fix listed
1
adamzammit/limesurvey:7.0.15e75e2f455c8d
binutils@2.44-3
no fix listed
1
akaunting/akaunting:3.0.1552811b36ec3a
binutils@2.40-2
no fix listed
1
akeyless/base-rhel:0.0.14ba8900a0061
binutils@2.30-123.el8
0:2.30-128.el8_10
1
allegroai/clearml:2.0.0-613713ae38f7daf
binutils@2.40-2
no fix listed
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
binutils@2.30-21ubuntu1~18.04.7
2.30-21ubuntu1~18.04.9+esm13
1
apache/camel-k:1.10.43bb13d14f64a
binutils@2.30-113.el8
0:2.30-128.el8_10
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
binutils@2.38-4ubuntu2.8
2.38-4ubuntu2.10
1
apachepulsar/pulsar:2.9.0d056c89b7131
binutils@2.34-6ubuntu1.3
2.34-6ubuntu1.11+esm2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.