CVE-2025-13601

High

Advisory

Published 26 Nov 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.7; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 555; of 17,787 indexed, latest versions
Container images: 646; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 555 of 17,787 indexed charts deploy, on 646 images.

Affected package	Affected versions	Fixed in	Images
glib2rpm	2.56.1-2.el7, 2.56.1-4.el7_6, 2.56.1-5.el7, 2.56.1-7.el7+27 more	0:2.56.1-11.el7_9, 0:2.56.4-168.el8_10, 0:2.68.4-18.el9_7.1	329
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+37 more	2.40.2-0ubuntu1.1+esm7, 2.48.2-0ubuntu4.8+esm5, 2.56.4-0ubuntu0.18.04.9+esm5, 2.64.6-1~ubuntu20.04.9+esm1+5 more	317

OSV records: DEBIAN-CVE-2025-13601 RHSA-2026:0936 RHSA-2026:0991 RHSA-2026:1608 RLSA-2026:0936 RLSA-2026:0991 UBUNTU-CVE-2025-13601
Also known as: RHSA-2026:1324, RHSA-2026:1326, RHSA-2026:1465, RHSA-2026:1624, RHSA-2026:1625, RHSA-2026:1626, RHSA-2026:1627, USN-7942-1, USN-7942-2

Charts affected

555 by stars

Chart

Latest

Affected images

Radar Score

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10

Open the chart page →

14,983

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.7

Open the chart page →

14,100

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	glib2@2.56.4-156.el8	0:2.56.4-168.el8_10

Open the chart page →

11,577

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10

Open the chart page →

3,697

Container images carrying it

646 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
minio/operator :v5.0.9	170b154d2c61	glib2@2.56.4-161.el8	0:2.56.4-168.el8_10	1
minio/operator :v4.1.0	2adc5be088f5	glib2@2.56.4-9.el8	0:2.56.4-168.el8_10	1
mintproject/model-catalog-fastapi :7dd88dc5bf1fe6a6d4703ea0a077afee45cb2561	02260d20a21f	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u8	1
mlikiowa/napcat-docker :latest	1336a777f9a4	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.7	1
moreillon/api-proxy :latest	d7d4a5463525	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u8	1
moreillon/food-manager :latest	e8fd856e593d	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u8	1
moreillon/user-manager-mongoose :v5.0.1	d2ee0423b797	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
muhammedgamal/fp23 :latest	74b4cd69b6fa	glib2.0@2.74.6-2+deb12u2	2.74.6-2+deb12u8	1
muluder/prograncontrollermcord :0.1.8	43b597a93da7	glib2.0@2.48.2-0ubuntu1	2.48.2-0ubuntu4.8+esm5	1
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	glib2.0@2.56.4-0ubuntu0.18.04.2	2.56.4-0ubuntu0.18.04.9+esm5	1
omecproject/mme-exporter :paging-latest	bcc5f19fd676	glib2.0@2.56.4-0ubuntu0.18.04.4	2.56.4-0ubuntu0.18.04.9+esm5	1
omecproject/onos-progran :1.0.0	5715e5648aa0	glib2.0@2.48.2-0ubuntu1	2.48.2-0ubuntu4.8+esm5	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	glib2.0@2.48.2-0ubuntu4.1	2.48.2-0ubuntu4.8+esm5	1
opea/codegen-ui :1.0	2bee4eb66f3e	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
opea/codetrans-ui :1.0	3ef121f34610	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
opea/docsum-ui :1.0	7f854e9bffaf	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
opea/speecht5 :1.0	249afad3d268	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u8	1
opendatacube/explorer :latest	120457ffcd69	glib2.0@2.80.0-6ubuntu3.4	2.80.0-6ubuntu3.6	1
opendatacube/pipelines :wofs-1.22	5d810e8504b8	glib2.0@2.56.3-0ubuntu0.18.04.1	2.56.4-0ubuntu0.18.04.9+esm5	1
opendatacube/restcube :latest	91870111837c	glib2.0@2.56.4-0ubuntu0.18.04.2	2.56.4-0ubuntu0.18.04.9+esm5	1
opendatacube/wms :latest	1b90cdf68831	glib2.0@2.56.4-0ubuntu0.18.04.2	2.56.4-0ubuntu0.18.04.9+esm5	1
opendatacube/wps :latest	80df355a660b	glib2.0@2.72.4-0ubuntu2.5	2.72.4-0ubuntu2.7	1
openelevation/open-elevation :latest	82fb21612e86	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
openkm/openkm-ce :6.3.11	3bc465a7461b	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
openliberty/open-liberty :javaee8-ubi-min	6f9278b8b2cc	glib2@2.56.1-5.el7	0:2.56.1-11.el7_9	1
openliberty/open-liberty :springBoot2-ubi-min	c649524bc428	glib2@2.56.1-5.el7	0:2.56.1-11.el7_9	1
openproject/hocuspocus :release-338001b2	88dc1359dfb5	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u8	1
openthread/otbr :latest	f307f59f6432	glib2.0@2.56.4-0ubuntu0.18.04.9	2.56.4-0ubuntu0.18.04.9+esm5	1
openwhisk/ow-utils :1.0.0	c80dba0de3aa	glib2.0@2.56.4-0ubuntu0.18.04.6	2.56.4-0ubuntu0.18.04.9+esm5	1
opsmx11/issuegen :v2.1.0	5c50ca123d88	glib2.0@2.40.2-0ubuntu1	2.40.2-0ubuntu1.1+esm7	1
owncloud/server :10.15.0	51d9b74fc2a8	glib2.0@2.64.6-1~ubuntu20.04.7	2.64.6-1~ubuntu20.04.9+esm1	1
penpotapp/backend :2.2.1	47853d9bb9dd	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.7	1
penpotapp/exporter :2.2.1	5c835ffd87ab	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.7	1
percona/percona-postgresql-operator :2.8.0	6cce2698d3f5	glib2@2.68.4-18.el9_7	0:2.68.4-18.el9_7.1	1
percona/percona-server-mongodb-operator :1.20.1	d09453ce7886	glib2@2.68.4-16.el9	0:2.68.4-18.el9_7.1	1
percona/percona-xtradb-cluster :8.0.32-24.2	1f978ab8912e	glib2@2.56.4-158.el8_6.1	0:2.56.4-168.el8_10	1
percona/percona-xtradb-cluster-operator :1.14.0	3232ae01d0ff	glib2@2.68.4-11.el9	0:2.68.4-18.el9_7.1	1
phan2410/falcon-asgi-server :0.1.0	4a86d138832d	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u8	1
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.7	1
photoprism/photoprism :220629-jammy	2954334adbda	glib2.0@2.72.1-1	2.72.4-0ubuntu2.7	1
photoprism/photoprism :251130	db16ee6b1ba3	glib2.0@2.86.0-2	2.86.0-2ubuntu0.1	1
photoprism/photoprism :240711-ce	fc6fd632ca74	glib2.0@2.80.0-6ubuntu3.1	2.80.0-6ubuntu3.6	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	glib2@2.56.4-7.el8	0:2.56.4-168.el8_10	1
pnnlmiscscripts/ipmi-exporter :1.2.0-1	81e18992d8e3	glib2@2.56.4-161.el8	0:2.56.4-168.el8_10	1
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	glib2@2.56.4-161.el8	0:2.56.4-168.el8_10	1
project2team4/react :latest	3ff031a08887	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
rancher/hardened-calico :v3.13.3	6d2cd61a338b	glib2@2.56.1-5.el7	0:2.56.1-11.el7_9	1
rancher/hardened-calico :v3.13.3-build20210223	c678c25d47c8	glib2@2.56.1-8.el7	0:2.56.1-11.el7_9	1
rancher/hardened-cni-plugins :v0.9.1-build20210414	be3c1d469bf7	glib2@2.56.1-8.el7	0:2.56.1-11.el7_9	1
rancher/hardened-flannel :v0.13.0-rancher1	42784bb38ed3	glib2@2.56.1-7.el7	0:2.56.1-11.el7_9	1