StackRadar

CVE-2025-13601

High

Advisory

Published 26 Nov 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.7
base score, highest
EPSS
0.003
25th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
553
of 17,787 indexed, latest versions
Container images
644
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 553 of 17,787 indexed charts deploy, on 644 images.

Affected packageAffected versionsFixed inImages
glib2rpm2.56.1-2.el7, 2.56.1-4.el7_6, 2.56.1-5.el7, 2.56.1-7.el7+27 more0:2.56.1-11.el7_9, 0:2.56.4-168.el8_10, 0:2.68.4-18.el9_7.1327
glib2.0deb2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+37 more2.40.2-0ubuntu1.1+esm7, 2.48.2-0ubuntu4.8+esm5, 2.56.4-0ubuntu0.18.04.9+esm5, 2.64.6-1~ubuntu20.04.9+esm1+5 more317
OSV records
DEBIAN-CVE-2025-13601RHSA-2026:0936RHSA-2026:0991RHSA-2026:1608RLSA-2026:0936RLSA-2026:0991UBUNTU-CVE-2025-13601
Also known as
RHSA-2026:1324, RHSA-2026:1326, RHSA-2026:1465, RHSA-2026:1624, RHSA-2026:1625, RHSA-2026:1626, RHSA-2026:1627, USN-7942-1, USN-7942-2

Charts affected

553 by stars
ChartLatestAffected imagesRadar Score
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-13601.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
glib2@2.56.4-156.el8
0:2.56.4-168.el8_10

Open the chart page →

11,577
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-13601.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
glib2@2.56.4-159.el8
0:2.56.4-168.el8_10

Open the chart page →

6,016
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-13601.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
glib2@2.56.4-159.el8
0:2.56.4-168.el8_10

Open the chart page →

3,697

Container images carrying it

644 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
glib2@2.56.1-5.el7
0:2.56.1-11.el7_9
1
ibmcom/websphere-liberty:javaee8-ubi-min28ae40e05980
glib2@2.56.1-5.el7
0:2.56.1-11.el7_9
1
inseefrlab/shelly:cloudshell31f04ca7436b
glib2.0@2.72.4-0ubuntu2.2
2.72.4-0ubuntu2.7
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
glib2.0@2.64.6-1~ubuntu20.04.4
2.64.6-1~ubuntu20.04.9+esm1
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
glib2.0@2.64.6-1~ubuntu20.04.4
2.64.6-1~ubuntu20.04.9+esm1
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
intel/trusted-certificate-issuer:0.5.0591a9db4a427
glib2.0@2.64.6-1~ubuntu20.04.4
2.64.6-1~ubuntu20.04.9+esm1
1
ispras/svacer:11-2-042aa9fa9f189
glib2.0@2.72.4-0ubuntu2.5
2.72.4-0ubuntu2.7
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
glib2.0@2.56.4-0ubuntu0.18.04.9
2.56.4-0ubuntu0.18.04.9+esm5
1
jaedb/iris:latest048cfbf58d57
glib2.0@2.74.6-2+deb12u5
2.74.6-2+deb12u8
1
jakowenko/double-take:1.6.0b858bac9e32a
glib2.0@2.64.6-1~ubuntu20.04.4
2.64.6-1~ubuntu20.04.9+esm1
1
josh5/unmanic:0.2.64d49c4816260
glib2.0@2.72.4-0ubuntu2.2
2.72.4-0ubuntu2.7
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
glib2.0@2.74.6-2+deb12u5
2.74.6-2+deb12u8
1
kennethreitz/httpbin:latest599fe5e50731
glib2.0@2.56.2-0ubuntu0.18.04.2
2.56.4-0ubuntu0.18.04.9+esm5
1
kinseii/wazuh-agent:4.14.17160eb143728
glib2.0@2.74.6-2+deb12u7
2.74.6-2+deb12u8
1
knspar/phronetis-operator:0.1.60c4f0543ee58
glib2.0@2.74.6-2+deb12u2
2.74.6-2+deb12u8
1
kubedex/helm-controller:v1.0.14f1008c51ef9
glib2@2.56.1-4.el7_6
0:2.56.1-11.el7_9
1
kubeflow/model-registry:v0.2.95783f6db428f
glib2@2.56.4-162.el8
0:2.56.4-168.el8_10
1
kuberay/operator:v1.0.04e6ac8a3a2c4
glib2@2.56.4-161.el8
0:2.56.4-168.el8_10
1
laly9999/node-app:1dd0e503913e1
glib2.0@2.74.6-2+deb12u6
2.74.6-2+deb12u8
1
langgenius/dify-api:0.6.11fca918260dd6
glib2.0@2.74.6-2+deb12u2
2.74.6-2+deb12u8
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
glib2.0@2.80.0-6ubuntu3.5
2.80.0-6ubuntu3.6
1
library/logstash:9.1.233eae14f0867
glib2@2.68.4-16.el9_6.2
0:2.68.4-18.el9_7.1
1
library/nextcloud:31.0.6-apache588609d76b21
glib2.0@2.74.6-2+deb12u6
2.74.6-2+deb12u8
1
library/nextcloud:31.0.10-apacheb7faa1653c39
glib2.0@2.84.4-3~deb13u1
2.84.4-3~deb13u2
1
library/python:3.8d41127070014
glib2.0@2.74.6-2+deb12u3
2.74.6-2+deb12u8
1
library/python:3.9da5aee29682d
glib2.0@2.84.4-3~deb13u1
2.84.4-3~deb13u2
1
library/wordpress:6.4.3-apache8ae66efb09a2
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
library/wordpress:php8.1-apachef73396626d2f
glib2.0@2.84.4-3~deb13u1
2.84.4-3~deb13u2
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
glib2.0@2.56.4-0ubuntu0.18.04.8
2.56.4-0ubuntu0.18.04.9+esm5
1
linuxserver/calibre-web:0.6.24241009026e6f
glib2.0@2.80.0-6ubuntu3.4
2.80.0-6ubuntu3.6
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
glib2.0@2.64.6-1~ubuntu20.04.4
2.64.6-1~ubuntu20.04.9+esm1
1
linuxserver/deluge:18.04.10ac871624394
glib2.0@2.56.4-0ubuntu0.18.04.9
2.56.4-0ubuntu0.18.04.9+esm5
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
glib2.0@2.56.4-0ubuntu0.18.04.8
2.56.4-0ubuntu0.18.04.9+esm5
1
linuxserver/jellyfin:10.7.72427dde159a2
glib2.0@2.64.6-1~ubuntu20.04.4
2.64.6-1~ubuntu20.04.9+esm1
1
linuxserver/unifi-controller:8.0.240ae315a3a456
glib2.0@2.64.6-1~ubuntu20.04.6
2.64.6-1~ubuntu20.04.9+esm1
1
linuxserver/unifi-controller:7.3.83ab105cc50322
glib2.0@2.64.6-1~ubuntu20.04.4
2.64.6-1~ubuntu20.04.9+esm1
1
livekit/ingress:v1.2.21ab01641b366
glib2.0@2.72.4-0ubuntu2.2
2.72.4-0ubuntu2.7
1
louislam/uptime-kuma:2.0.24c364ef96aad
glib2.0@2.74.6-2+deb12u7
2.74.6-2+deb12u8
1
mariadb/maxscale:23.02.256c5e0908148
glib2@2.56.4-161.el8
0:2.56.4-168.el8_10
1
mbround18/valheim:3.1.070bd4da591cd
glib2.0@2.72.4-0ubuntu2.4
2.72.4-0ubuntu2.7
1
merlos/zookeeper:3.9.3a38fc7e09ed7
glib2.0@2.74.6-2+deb12u4
2.74.6-2+deb12u8
1
minio/kes:v0.22.255f3aef5803e
glib2@2.56.4-159.el8
0:2.56.4-168.el8_10
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
glib2@2.56.4-8.el8
0:2.56.4-168.el8_10
1
minio/mc:RELEASE.2022-05-09T04-08-26Z4b415310d8d0
glib2@2.56.4-156.el8
0:2.56.4-168.el8_10
1
minio/mc:RELEASE.2023-02-28T00-12-59Zc631532a394e
glib2@2.56.4-159.el8
0:2.56.4-168.el8_10
1
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
glib2@2.56.4-156.el8
0:2.56.4-168.el8_10
1
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
glib2@2.56.4-159.el8
0:2.56.4-168.el8_10
1
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
glib2@2.56.4-158.el8
0:2.56.4-168.el8_10
1
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
glib2@2.56.4-159.el8
0:2.56.4-168.el8_10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.