StackRadar

CVE-2025-13601

High

Advisory

Published 26 Nov 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.7
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
555
of 17,787 indexed, latest versions
Container images
646
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 555 of 17,787 indexed charts deploy, on 646 images.

Affected packageAffected versionsFixed inImages
glib2rpm2.56.1-2.el7, 2.56.1-4.el7_6, 2.56.1-5.el7, 2.56.1-7.el7+27 more0:2.56.1-11.el7_9, 0:2.56.4-168.el8_10, 0:2.68.4-18.el9_7.1329
glib2.0deb2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+37 more2.40.2-0ubuntu1.1+esm7, 2.48.2-0ubuntu4.8+esm5, 2.56.4-0ubuntu0.18.04.9+esm5, 2.64.6-1~ubuntu20.04.9+esm1+5 more317
OSV records
DEBIAN-CVE-2025-13601RHSA-2026:0936RHSA-2026:0991RHSA-2026:1608RLSA-2026:0936RLSA-2026:0991UBUNTU-CVE-2025-13601
Also known as
RHSA-2026:1324, RHSA-2026:1326, RHSA-2026:1465, RHSA-2026:1624, RHSA-2026:1625, RHSA-2026:1626, RHSA-2026:1627, USN-7942-1, USN-7942-2

Charts affected

555 by stars
ChartLatestAffected imagesRadar Score
wexa-studiowexa-studio1.2.01 of 15See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-13601.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.9.05ee4bd681085
glib2@2.56.4-166.el8_10
0:2.56.4-168.el8_10

Open the chart page →

14,618
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-13601.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
glib2.0@2.72.4-0ubuntu2.3
2.72.4-0ubuntu2.7

Open the chart page →

14,172
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-13601.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
glib2@2.56.4-156.el8
0:2.56.4-168.el8_10

Open the chart page →

11,592
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-13601.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
glib2@2.56.4-159.el8
0:2.56.4-168.el8_10

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-13601.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
glib2@2.56.4-159.el8
0:2.56.4-168.el8_10

Open the chart page →

3,697

Container images carrying it

646 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
glib2.0@2.64.6-1~ubuntu20.04.4
2.64.6-1~ubuntu20.04.9+esm1
1
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
glib2.0@2.64.6-1~ubuntu20.04.4
2.64.6-1~ubuntu20.04.9+esm1
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
glib2.0@2.64.6-1~ubuntu20.04.4
2.64.6-1~ubuntu20.04.9+esm1
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
glib2.0@2.80.0-6ubuntu3.4
2.80.0-6ubuntu3.6
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
glib2.0@2.80.0-6ubuntu3.4
2.80.0-6ubuntu3.6
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
glib2.0@2.80.0-6ubuntu3.4
2.80.0-6ubuntu3.6
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
glib2.0@2.80.0-6ubuntu3.4
2.80.0-6ubuntu3.6
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
glib2.0@2.64.6-1~ubuntu20.04.8
2.64.6-1~ubuntu20.04.9+esm1
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
glib2.0@2.64.6-1~ubuntu20.04.8
2.64.6-1~ubuntu20.04.9+esm1
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
glib2.0@2.72.4-0ubuntu2.2
2.72.4-0ubuntu2.7
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
glib2.0@2.72.4-0ubuntu2.2
2.72.4-0ubuntu2.7
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
glib2.0@2.72.4-0ubuntu2.4
2.72.4-0ubuntu2.7
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
glib2.0@2.56.4-0ubuntu0.18.04.9
2.56.4-0ubuntu0.18.04.9+esm5
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
glib2.0@2.74.6-2+deb12u4
2.74.6-2+deb12u8
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
glib2.0@2.74.6-2+deb12u4
2.74.6-2+deb12u8
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
glib2.0@2.56.4-0ubuntu0.18.04.9
2.56.4-0ubuntu0.18.04.9+esm5
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
glib2.0@2.64.6-1~ubuntu20.04.4
2.64.6-1~ubuntu20.04.9+esm1
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
glib2.0@2.56.4-0ubuntu0.18.04.9
2.56.4-0ubuntu0.18.04.9+esm5
1
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.0-1-ubi99026dbbf280d
glib2@2.68.4-16.el9_6.2
0:2.68.4-18.el9_7.1
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
glib2.0@2.74.6-2+deb12u3
2.74.6-2+deb12u8
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
glib2.0@2.74.6-2+deb12u2
2.74.6-2+deb12u8
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
public.ecr.aws/perfectscale-io/kube-state-metrics:4.1.14-redhat849e235e2d3e
glib2@2.56.4-165.el8_10
0:2.56.4-168.el8_10
1
public.ecr.aws/perfectscale-io/psc-exporter:v1.0.45-redhat9083e60c38bc
glib2@2.68.4-14.el9_4.1
0:2.68.4-18.el9_7.1
1
public.ecr.aws/perfectscale-io/ubi9/ubi:9.5d7c3def9252b
glib2@2.68.4-14.el9_4.1
0:2.68.4-18.el9_7.1
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
glib2.0@2.64.6-1~ubuntu20.04.3
2.64.6-1~ubuntu20.04.9+esm1
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
public.ecr.aws/v0r6c2e2/hive-metastore:latest794b3bff9510
glib2@2.68.4-14.el9_4.1
0:2.68.4-18.el9_7.1
1
public.ecr.aws/v0r6c2e2/trino:latestc265156b00d1
glib2@2.68.4-14.el9_4.1
0:2.68.4-18.el9_7.1
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
glib2@2.68.4-14.el9_4.1
0:2.68.4-18.el9_7.1
1
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
glib2@2.56.4-161.el8
0:2.56.4-168.el8_10
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
glib2@2.56.4-161.el8
0:2.56.4-168.el8_10
1
quay.io/backube/scribe:0.2.0cdefc81c6b2e
glib2@2.56.4-9.el8
0:2.56.4-168.el8_10
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
glib2@2.56.4-161.el8
0:2.56.4-168.el8_10
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
glib2@2.56.4-10.el8_4
0:2.56.4-168.el8_10
1
quay.io/eclipse/che-operator:7.122.0d752a1c2a7b7
glib2@2.56.4-165.el8_10
0:2.56.4-168.el8_10
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
glib2@2.56.4-10.el8_4.1
0:2.56.4-168.el8_10
1
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
glib2@2.68.4-14.el9_4.1
0:2.68.4-18.el9_7.1
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
glib2.0@2.56.4-0ubuntu0.18.04.9
2.56.4-0ubuntu0.18.04.9+esm5
1
quay.io/fiware/apollo:0.0.1055330b1b60c1
glib2@2.56.4-158.el8
0:2.56.4-168.el8_10
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
glib2@2.56.4-156.el8
0:2.56.4-168.el8_10
1
quay.io/fiware/contract-management:3.3.122bcfcf874451
glib2@2.56.4-165.el8_10
0:2.56.4-168.el8_10
1
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
glib2@2.56.4-165.el8_10
0:2.56.4-168.el8_10
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
glib2@2.56.4-158.el8
0:2.56.4-168.el8_10
1
quay.io/fiware/orion-ld:1.10.0b7ee7569a9a8
glib2@2.56.4-166.el8_10
0:2.56.4-168.el8_10
1
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
glib2@2.56.4-10.el8_4.1
0:2.56.4-168.el8_10
1
quay.io/fiware/tmforum-account:1.18.06b25aac03414
glib2@2.56.4-166.el8_10
0:2.56.4-168.el8_10
1
quay.io/fiware/tmforum-agreement:1.18.081e7025dc16d
glib2@2.56.4-166.el8_10
0:2.56.4-168.el8_10
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.