CVE-2025-13601

High

Advisory

Published 26 Nov 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.7; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 555; of 17,787 indexed, latest versions
Container images: 646; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 555 of 17,787 indexed charts deploy, on 646 images.

Affected package	Affected versions	Fixed in	Images
glib2rpm	2.56.1-2.el7, 2.56.1-4.el7_6, 2.56.1-5.el7, 2.56.1-7.el7+27 more	0:2.56.1-11.el7_9, 0:2.56.4-168.el8_10, 0:2.68.4-18.el9_7.1	329
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+37 more	2.40.2-0ubuntu1.1+esm7, 2.48.2-0ubuntu4.8+esm5, 2.56.4-0ubuntu0.18.04.9+esm5, 2.64.6-1~ubuntu20.04.9+esm1+5 more	317

OSV records: DEBIAN-CVE-2025-13601 RHSA-2026:0936 RHSA-2026:0991 RHSA-2026:1608 RLSA-2026:0936 RLSA-2026:0991 UBUNTU-CVE-2025-13601
Also known as: RHSA-2026:1324, RHSA-2026:1326, RHSA-2026:1465, RHSA-2026:1624, RHSA-2026:1625, RHSA-2026:1626, RHSA-2026:1627, USN-7942-1, USN-7942-2

Charts affected

555 by stars

Chart

Latest

Affected images

Radar Score

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10

Open the chart page →

14,618

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.7

Open the chart page →

14,172

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	glib2@2.56.4-156.el8	0:2.56.4-168.el8_10

Open the chart page →

11,592

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10

Open the chart page →

3,697

Container images carrying it

646 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/maximilianopizarro/neuroface-frontend :v1.4.1	841b70cd1424	glib2@2.68.4-18.el9_7	0:2.68.4-18.el9_7.1	1
quay.io/maximilianopizarro/neuroface-frontend :latest	dcf24040cc77	glib2@2.68.4-18.el9_7	0:2.68.4-18.el9_7.1	1
quay.io/maximilianopizarro/nfl-api-bills :1.0.1	b596a4687bb0	glib2@2.56.4-165.el8_10	0:2.56.4-168.el8_10	1
quay.io/maximilianopizarro/nfl-wallet-api-customers :1.0.1	d50c80a85b35	glib2@2.56.4-165.el8_10	0:2.56.4-168.el8_10	1
quay.io/maximilianopizarro/nfl-wallet-api-raiders :1.0.1	f9c71dc2bc5f	glib2@2.56.4-165.el8_10	0:2.56.4-168.el8_10	1
quay.io/maximilianopizarro/openshift-integration-operator :v0.8.2	d6fc43ac802e	glib2@2.68.4-14.el9_4.1	0:2.68.4-18.el9_7.1	1
quay.io/maximilianopizarro/showroom-docs-mcp :latest	1a6eff92827a	glib2@2.68.4-14.el9_4.1	0:2.68.4-18.el9_7.1	1
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	glib2@2.56.4-156.el8	0:2.56.4-168.el8_10	1
quay.io/mcouliba/quarkus-serverless :1.0	c2851757eca4	glib2@2.56.4-7.el8	0:2.56.4-168.el8_10	1
quay.io/minio/directpv :v4.0.8	4560083eb77d	glib2@2.56.4-161.el8	0:2.56.4-168.el8_10	1
quay.io/minio/mc :RELEASE.2022-10-20T23-26-33Z	50ee58bc9770	glib2@2.56.4-158.el8	0:2.56.4-168.el8_10	1
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	glib2@2.56.4-158.el8	0:2.56.4-168.el8_10	1
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	glib2@2.56.4-158.el8	0:2.56.4-168.el8_10	1
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	glib2@2.56.4-158.el8	0:2.56.4-168.el8_10	1
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	glib2@2.56.4-161.el8	0:2.56.4-168.el8_10	1
quay.io/mongodb/mongodb-enterprise-operator-ubi :1.33.0	b05101723412	glib2@2.68.4-16.el9_6.2	0:2.68.4-18.el9_7.1	1
quay.io/mongodb/mongodb-kubernetes-operator :0.3.0	107a7c73af59	glib2@2.56.4-8.el8	0:2.56.4-168.el8_10	1
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10	1
quay.io/open-cluster-management/kueue-addon :v0.1.4	7f728514fead	glib2@2.68.4-16.el9_6.2	0:2.68.4-18.el9_7.1	1
quay.io/openshift/origin-cli :4.6	6722d5041b47	glib2@2.56.4-8.el8_2.1	0:2.56.4-168.el8_10	1
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	glib2@2.56.4-8.el8_2.1	0:2.56.4-168.el8_10	1
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	glib2@2.56.4-158.el8_6.1	0:2.56.4-168.el8_10	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	glib2.0@2.48.2-0ubuntu4.4	2.48.2-0ubuntu4.8+esm5	1
quay.io/opsmxpublic/ubi8-gate :isd-spin-2025.10.01-5c720954-202511260810	2b3554029737	glib2@2.56.4-167.el8_10	0:2.56.4-168.el8_10	1
quay.io/opsmxpublic/ubi8-oes-audit-client :isd-spin-2025.10.01-cb1bfce-202511261037	32a5b1887eab	glib2@2.56.4-167.el8_10	0:2.56.4-168.el8_10	1
quay.io/opsmxpublic/ubi8-oes-autopilot :isd-spin-2025.10.01-af26a30d4-202511261054	58bd0bcf72f9	glib2@2.56.4-167.el8_10	0:2.56.4-168.el8_10	1
quay.io/opsmxpublic/ubi8-oes-db :v3.0.0	89ee6493af89	glib2@2.56.4-10.el8_4.1	0:2.56.4-168.el8_10	1
quay.io/opsmxpublic/ubi8-oes-platform :isd-spin-2025.10.01-a7c191ec-202511261122	8ed603ab7417	glib2@2.56.4-167.el8_10	0:2.56.4-168.el8_10	1
quay.io/opsmxpublic/ubi8-oes-ui :isd-spin-2025.10.01-e6f6f01-202512100640	5d934bb66884	glib2@2.56.4-167.el8_10	0:2.56.4-168.el8_10	1
quay.io/projectquay/clair :4.9.0	23329c3368e4	glib2@2.56.4-167.el8_10	0:2.56.4-168.el8_10	1
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	glib2@2.68.4-14.el9	0:2.68.4-18.el9_7.1	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	glib2@2.68.4-6.el9	0:2.68.4-18.el9_7.1	1
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	glib2@2.56.4-161.el8	0:2.56.4-168.el8_10	1
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	glib2@2.68.4-14.el9	0:2.68.4-18.el9_7.1	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	glib2@2.56.4-10.el8_4.1	0:2.56.4-168.el8_10	1
quay.io/seamware/consent-facade :0.0.14	be844c750c7e	glib2@2.56.4-165.el8_10	0:2.56.4-168.el8_10	1
quay.io/sshaaf/keycloak-mcp-server :0.4.0	b7e9cba72f8a	glib2@2.68.4-14.el9_4.1	0:2.68.4-18.el9_7.1	1
quay.io/strimzi/operator :0.45.1	58c727cd2e68	glib2@2.68.4-16.el9_6.2	0:2.68.4-18.el9_7.1	1
quay.io/strimzi/operator :0.36.1	e9e03b31007c	glib2@2.56.4-161.el8	0:2.56.4-168.el8_10	1
quay.io/wi_stefan/dss-validation-service :0.0.1	8e928db29ee1	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	glib2@2.56.4-9.el8	0:2.56.4-168.el8_10	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	glib2@2.56.4-156.el8	0:2.56.4-168.el8_10	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.9+esm1	1
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	glib2@2.56.4-156.el8	0:2.56.4-168.el8_10	1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller :2.1.2	301847adfe16	glib2@2.68.4-16.el9	0:2.68.4-18.el9_7.1	1