CVE-2025-13601

High

Advisory

Published 26 Nov 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.7; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 555; of 17,787 indexed, latest versions
Container images: 646; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 555 of 17,787 indexed charts deploy, on 646 images.

Affected package	Affected versions	Fixed in	Images
glib2rpm	2.56.1-2.el7, 2.56.1-4.el7_6, 2.56.1-5.el7, 2.56.1-7.el7+27 more	0:2.56.1-11.el7_9, 0:2.56.4-168.el8_10, 0:2.68.4-18.el9_7.1	329
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+37 more	2.40.2-0ubuntu1.1+esm7, 2.48.2-0ubuntu4.8+esm5, 2.56.4-0ubuntu0.18.04.9+esm5, 2.64.6-1~ubuntu20.04.9+esm1+5 more	317

OSV records: DEBIAN-CVE-2025-13601 RHSA-2026:0936 RHSA-2026:0991 RHSA-2026:1608 RLSA-2026:0936 RLSA-2026:0991 UBUNTU-CVE-2025-13601
Also known as: RHSA-2026:1324, RHSA-2026:1326, RHSA-2026:1465, RHSA-2026:1624, RHSA-2026:1625, RHSA-2026:1626, RHSA-2026:1627, USN-7942-1, USN-7942-2

Charts affected

555 by stars

Chart

Latest

Affected images

Radar Score

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10

Open the chart page →

14,618

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.7

Open the chart page →

14,172

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	glib2@2.56.4-156.el8	0:2.56.4-168.el8_10

Open the chart page →

11,592

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10

Open the chart page →

3,697

Container images carrying it

646 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/fiware/tmforum-customer-bill-management :1.18.0	dee901f1f75d	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-customer-management :1.18.0	d3519cebecd0	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-party-catalog :1.18.0	7d6969a7393a	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-party-role :1.18.0	52db89f17863	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-product-catalog :1.18.0	e409338726da	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-product-inventory :1.18.0	3a5d6dd30f1d	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-product-ordering-management :1.18.0	42c81c291f6f	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-quote :1.18.0	d9ca3a334352	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-resource-catalog :1.18.0	b0d853627c59	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-resource-function-activation :1.18.0	62a5acb63fd1	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-resource-inventory :1.18.0	553b4a47730b	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-resource-order-management :1.18.0	dd1778ad6203	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-service-catalog :1.18.0	74b0fad9e155	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-service-inventory :1.18.0	4be54e8cb5c0	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-service-order-management :1.18.0	d2091785d544	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-software-management :1.18.0	1b74a2f7ba67	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/tmforum-usage-management :1.18.0	42f190c42926	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/fiware/trusted-issuers-list :0.9.1	3c886ce5c056	glib2@2.68.4-16.el9_6.2	0:2.68.4-18.el9_7.1	1
quay.io/fiware/trusted-issuers-registry :0.11.1	a8a9ec461034	glib2@2.56.4-158.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/flomesh-console-ubi8 :0.70.0-30	ce6938ff6709	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/fsm-bootstrap-ubi8 :0.1.8-ubi.6	e6d7afb1a4bf	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/fsm-ingress-pipy-ubi8 :0.1.8-ubi.6	fce990dece01	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/osm-edge-bootstrap-ubi8 :1.2.1	e048bc7a17c2	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/osm-edge-controller-ubi8 :1.2.1	674f45865af1	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/osm-edge-crds-ubi8 :1.2.1	c3bc5e7a70e6	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/osm-edge-injector-ubi8 :1.2.1	8e9c39c34e89	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/osm-edge-preinstall-ubi8 :1.2.1	f94282a9cfec	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/pipy-repo-ubi8 :0.70.0-46	9912fdf6c183	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/pipy-ubi8 :0.50.0-88	24352dca6672	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/pipy-ubi8 :0.70.0-46	35d87a381432	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/flomesh/toolbox-ubi8 :1.2.0	1f5e3161cb84	glib2@2.56.4-162.el8	0:2.56.4-168.el8_10	1
quay.io/galexrt/dellhw_exporter :v2.0.0-rc.1	8a1361fa38c1	glib2@2.68.4-14.el9_4.1	0:2.68.4-18.el9_7.1	1
quay.io/hpestorage/cosi-driver :v2.0.0	a4d2667f2b6e	glib2@2.68.4-14.el9_4.1	0:2.68.4-18.el9_7.1	1
quay.io/hpestorage/filex-csi-driver :2.6.4	b7f960bbf472	glib2@2.68.4-18.el9_7	0:2.68.4-18.el9_7.1	1
quay.io/hpestorage/filex-csi-init :2.6.4	2d867eefb233	glib2@2.68.4-14.el9_4.1	0:2.68.4-18.el9_7.1	1
quay.io/ibmgaragecloud/developer-dashboard :v1.4.4	7a4b9fedc724	glib2@2.56.4-8.el8	0:2.56.4-168.el8_10	1
quay.io/icdh/core-dump-handler :v9.0.0	cc79b9e2a1c8	glib2@2.56.4-165.el8_10	0:2.56.4-168.el8_10	1
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	glib2@2.56.4-10.el8_4	0:2.56.4-168.el8_10	1
quay.io/keycloak/keycloak :20.0.1	8830f76112b6	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/keycloak/keycloak-operator :19.0.3-legacy	09d52508fee9	glib2@2.56.4-158.el8	0:2.56.4-168.el8_10	1
quay.io/keycloak/keycloak-operator :19.0.2-legacy	15fa0ed662b1	glib2@2.56.4-158.el8	0:2.56.4-168.el8_10	1
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	glib2@2.56.4-156.el8	0:2.56.4-168.el8_10	1
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/konveyor/move2kube-ui :latest	ec6ab507c5da	glib2@2.56.4-165.el8_10	0:2.56.4-168.el8_10	1
quay.io/kubevirt/kubemacpool :v0.45.0	eebb65b8a12c	glib2@2.68.4-14.el9_4.1	0:2.68.4-18.el9_7.1	1
quay.io/manusa/kubernetes_mcp_server :v0.0.47	150f76e844d9	glib2@2.68.4-16.el9_6.2	0:2.68.4-18.el9_7.1	1
quay.io/maximilianopizarro/neuralbank-backend :latest	a53899fcfc01	glib2@2.68.4-18.el9_7	0:2.68.4-18.el9_7.1	1
quay.io/maximilianopizarro/neuralbank-frontend :latest	5f4572ef6d6f	glib2@2.68.4-18.el9_7	0:2.68.4-18.el9_7.1	1