CVE-2025-13601

High

Advisory

Published 26 Nov 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.7; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 555; of 17,787 indexed, latest versions
Container images: 646; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: glib2 security update

Carried by container images the latest versions of 555 of 17,787 indexed charts deploy, on 646 images.

Affected package	Affected versions	Fixed in	Images
glib2rpm	2.56.1-2.el7, 2.56.1-4.el7_6, 2.56.1-5.el7, 2.56.1-7.el7+27 more	0:2.56.1-11.el7_9, 0:2.56.4-168.el8_10, 0:2.68.4-18.el9_7.1	329
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+37 more	2.40.2-0ubuntu1.1+esm7, 2.48.2-0ubuntu4.8+esm5, 2.56.4-0ubuntu0.18.04.9+esm5, 2.64.6-1~ubuntu20.04.9+esm1+5 more	317

OSV records: DEBIAN-CVE-2025-13601 RHSA-2026:0936 RHSA-2026:0991 RHSA-2026:1608 RLSA-2026:0936 RLSA-2026:0991 UBUNTU-CVE-2025-13601
Also known as: RHSA-2026:1324, RHSA-2026:1326, RHSA-2026:1465, RHSA-2026:1624, RHSA-2026:1625, RHSA-2026:1626, RHSA-2026:1627, USN-7942-1, USN-7942-2

Charts affected

555 by stars

Chart

Latest

Affected images

Radar Score

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	glib2@2.56.4-166.el8_10	0:2.56.4-168.el8_10

Open the chart page →

14,618

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.7

Open the chart page →

14,172

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	glib2@2.56.4-156.el8	0:2.56.4-168.el8_10

Open the chart page →

11,592

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10

Open the chart page →

6,016

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-13601.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10

Open the chart page →

3,697

Container images carrying it

646 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
gcr.io/kubecost1/kubecost-modeling :v0.1.22	a461dc5cb96a	glib2@2.68.4-14.el9_4.1	0:2.68.4-18.el9_7.1	1
gcr.io/ml-pipeline/metadata-envoy :2.0.0-alpha.5	e8bc6cf08613	glib2.0@2.48.2-0ubuntu4.8	2.48.2-0ubuntu4.8+esm5	1
gcr.io/ml-pipeline/metadata-envoy :2.3.0	e8e263a919ff	glib2.0@2.64.6-1~ubuntu20.04.7	2.64.6-1~ubuntu20.04.9+esm1	1
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u8	1
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	glib2@2.68.4-16.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/appscode/gotenberg :8.25	f9104080d9a7	glib2.0@2.84.4-3~deb13u1	2.84.4-3~deb13u2	1
ghcr.io/appuio/maxscale-docker :6.4.6	13a01be102b0	glib2@2.56.4-158.el8_6.1	0:2.56.4-168.el8_10	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u8	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u8	1
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.7	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u8	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u8	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u8	1
ghcr.io/chaos-mesh/chaos-daemon :v2.8.0	fb609bc264d9	glib2.0@2.74.6-2+deb12u7	2.74.6-2+deb12u8	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u8	1
ghcr.io/ctron/ditto-operator :0.4.0	61a9bb81b85c	glib2@2.56.4-156.el8	0:2.56.4-168.el8_10	1
ghcr.io/ctron/kubectl :1.25	e37d61b5277c	glib2@2.56.4-161.el8	0:2.56.4-168.el8_10	1
ghcr.io/ctron/streamsheets-base :2.4.0	0cf25ed621e2	glib2@2.56.4-10.el8_4	0:2.56.4-168.el8_10	1
ghcr.io/ctron/streamsheets-gateway :2.4.0	0635f17c9d2c	glib2@2.56.4-10.el8_4	0:2.56.4-168.el8_10	1
ghcr.io/ctron/streamsheets-service-graphs :2.4.0	e34964e336c1	glib2@2.56.4-10.el8_4	0:2.56.4-168.el8_10	1
ghcr.io/ctron/streamsheets-service-machines :2.4.0	0c5a3398d1e4	glib2@2.56.4-10.el8_4	0:2.56.4-168.el8_10	1
ghcr.io/ctron/streamsheets-service-streams :2.4.0	8ba040e79ca0	glib2@2.56.4-10.el8_4	0:2.56.4-168.el8_10	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.7	1
ghcr.io/devops-ia/cp-schema-registry :8.1.1-msk-iam-auth2.3.5	30d1a445acc7	glib2@2.68.4-18.el9_7	0:2.68.4-18.el9_7.1	1
ghcr.io/dfir-iris/iriswebapp_app :v2.4.26	e59ebde55709	glib2.0@2.84.4-3~deb13u1	2.84.4-3~deb13u2	1
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
ghcr.io/drogue-iot/authentication-service :0.11.0	857b137fc7b3	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/coap-endpoint :0.11.0	44790b71aa22	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/command-endpoint :0.11.0	6dce3158b851	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/console-backend :0.11.0	25d229ae5bde	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/console-frontend :0.11.0	558972f9374c	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/database-migration :0.11.0	57072c72a7cd	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/device-management-controller :0.11.0	200aea1a2b42	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/device-management-service :0.11.0	f4a5bfc06a74	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/device-state-service :0.11.0	fbf0738cfc7e	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/drogue-event-source :0.2.1	e2e812a4cf8e	glib2@2.56.4-156.el8	0:2.56.4-168.el8_10	1
ghcr.io/drogue-iot/http-endpoint :0.11.0	b612c18479e0	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/knative-operator :0.11.0	e2d927639f6e	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/mqtt-endpoint :0.11.0	32c6d2f5eab9	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/mqtt-integration :0.11.0	7ac2adb6ca49	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/outbox-controller :0.11.0	1a958edafdb1	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/postgresql-pusher :0.2.1	c6bb121ced90	glib2@2.56.4-156.el8	0:2.56.4-168.el8_10	1
ghcr.io/drogue-iot/test-cert-generator :0.11.0	6ba7e1608286	glib2@2.56.4-159.el8	0:2.56.4-168.el8_10	1
ghcr.io/drogue-iot/topic-strimzi-operator :0.11.0	5253fbf8d04c	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/ttn-operator :0.11.0	7dd5ac80c8f1	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/user-auth-service :0.11.0	adebc40ddf98	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/drogue-iot/websocket-integration :0.11.0	372dcd370945	glib2@2.68.4-5.el9	0:2.68.4-18.el9_7.1	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	glib2.0@2.56.4-0ubuntu0.18.04.8	2.56.4-0ubuntu0.18.04.9+esm5	1
ghcr.io/flaresolverr/flaresolverr :v3.4.0	ab535d1fef5d	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u8	1