CVE-2025-14512

Medium

Advisory

Published 11 Dec 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 304; of 17,781 indexed, latest versions
Container images: 317; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 304 of 17,781 indexed charts deploy, on 317 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+37 more	2.72.4-0ubuntu2.7, 2.74.6-2+deb12u8, 2.80.0-6ubuntu3.6, 2.84.4-3~deb13u2+1 more	317

OSV records: DEBIAN-CVE-2025-14512 UBUNTU-CVE-2025-14512

Charts affected

304 by stars

Chart

Latest

Affected images

Radar Score

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2025-14512.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	no fix listed

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-14512.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-14512.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed

Open the chart page →

28,605

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-14512.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.7

Open the chart page →

14,100

Container images carrying it

317 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u8	1
bitnamilegacy/matomo :5.3.2-debian-12-r13	f02c000c54b1	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u8	1
bitnamilegacy/openldap :2.6.8-debian-12-r1	6e412c178ef9	glib2.0@2.74.6-2+deb12u2	2.74.6-2+deb12u8	1
bnjbvr/kresus :0.22.1	37e216b182c8	glib2.0@2.74.6-2+deb12u4	2.74.6-2+deb12u8	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
carlosmz87/test_helm_backend :latest	8ffa63aa995d	glib2.0@2.74.6-2+deb12u4	2.74.6-2+deb12u8	1
castopod/castopod :1.12.10	1fd37280cbb2	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u8	1
chetangautamm/repo :sipp.v3	e7f7049e1544	glib2.0@2.64.6-1~ubuntu20.04.1	no fix listed	1
cheyang/distributed-tf :1.6.0	46cc34755493	glib2.0@2.48.2-0ubuntu1	no fix listed	1
chriseaton/adventureworks :latest	54c3384ce701	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.7	1
ckulka/baikal :0.10.1-nginx	434bdd162247	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u8	1
cloudve/janis-terminal :latest	af56e77ca587	glib2.0@2.56.4-0ubuntu0.18.04.6	no fix listed	1
countly/countly-server :25.05.4	e3c238248f99	glib2.0@2.64.6-1~ubuntu20.04.7	no fix listed	1
daskdev/dask-notebook :1.1.0	052630f5ca04	glib2.0@2.56.3-0ubuntu0.18.04.1	no fix listed	1
datamate/seafile-professional :11.0.20	2dd66b722464	glib2.0@2.72.4-0ubuntu2.6	2.72.4-0ubuntu2.7	1
deconzcommunity/deconz :2.29.2	062de2362641	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u8	1
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
dokuwiki/dokuwiki :2025-05-14a	f08ecfdda239	glib2.0@2.84.3-1	2.84.4-3~deb13u2	1
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	glib2.0@2.64.6-1~ubuntu20.04.9	no fix listed	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	glib2.0@2.74.6-2+deb12u2	2.74.6-2+deb12u8	1
eclipseaerios/iota-messages-api :latest	e7f5ba0bc64d	glib2.0@2.84.4-3~deb13u1	2.84.4-3~deb13u2	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
felipecs8/app-db-connection-test :v1	29e06c9c6385	glib2.0@2.74.6-2+deb12u4	2.74.6-2+deb12u8	1
firefart/requesttracker :5.0.4	0d6249906d8c	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	glib2.0@2.64.6-1~ubuntu20.04.9	no fix listed	1
fiware/biz-ecosystem-logic-proxy :11.20.3	d551a13e8278	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u8	1
fluent/fluent-bit :4.0-debug	e76397ef3983	glib2.0@2.74.6-2+deb12u7	2.74.6-2+deb12u8	1
gethue/hue :4.10.0	5702b2c37ff9	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
gethue/hue :latest	7d5c1b9f8a79	glib2.0@2.72.4-0ubuntu2.5	2.72.4-0ubuntu2.7	1
graylog/graylog :6.1.10	19de1aff48c2	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.7	1
haveagitgat/tdarr :2.00.18	1256348872ce	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	glib2.0@2.64.3-1~ubuntu20.04.1	no fix listed	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	glib2.0@2.64.6-1~ubuntu20.04.6	no fix listed	1
helicone/supabase-migration-runner :v2025.03.05-1	4a913936c97b	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	glib2.0@2.56.4-0ubuntu0.18.04.6	no fix listed	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	glib2.0@2.48.2-0ubuntu1	no fix listed	1
inseefrlab/shelly :cloudshell	31f04ca7436b	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.7	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
intelowlproject/intelowl :v6.6.1	0b22e547ea6b	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
intel/trusted-certificate-issuer :0.5.0	591a9db4a427	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
ispras/svacer :11-2-0	42aa9fa9f189	glib2.0@2.72.4-0ubuntu2.5	2.72.4-0ubuntu2.7	1
jacobalberty/unifi :v7.4.162	b3edc809a3ff	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
jaedb/iris :latest	048cfbf58d57	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u8	1
jakowenko/double-take :1.6.0	b858bac9e32a	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
josh5/unmanic :0.2.6	4d49c4816260	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.7	1
jpgouin/openldap :2.6.9-fix	bfdd0088c776	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u8	1
kennethreitz/httpbin :latest	599fe5e50731	glib2.0@2.56.2-0ubuntu0.18.04.2	no fix listed	1
kinseii/wazuh-agent :4.14.1	7160eb143728	glib2.0@2.74.6-2+deb12u7	2.74.6-2+deb12u8	1