StackRadar

CVE-2025-14512

Medium

Advisory

Published 11 Dec 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
304
of 17,781 indexed, latest versions
Container images
317
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 304 of 17,781 indexed charts deploy, on 317 images.

Affected packageAffected versionsFixed inImages
glib2.0deb2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+37 more2.72.4-0ubuntu2.7, 2.74.6-2+deb12u8, 2.80.0-6ubuntu3.6, 2.84.4-3~deb13u2+1 more317
OSV records
DEBIAN-CVE-2025-14512UBUNTU-CVE-2025-14512

Charts affected

304 by stars
ChartLatestAffected imagesRadar Score
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2025-14512.

Container imageDigestPackageFixed in
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
glib2.0@2.64.6-1~ubuntu20.04.6
no fix listed

Open the chart page →

9,130
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-14512.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
glib2.0@2.64.6-1~ubuntu20.04.4
no fix listed

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-14512.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
glib2.0@2.64.6-1~ubuntu20.04.4
no fix listed

Open the chart page →

28,605
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-14512.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
glib2.0@2.72.4-0ubuntu2.3
2.72.4-0ubuntu2.7

Open the chart page →

14,100

Container images carrying it

317 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
stackstorm/st2scheduler:3.8b1de2055c362
glib2.0@2.64.6-1~ubuntu20.04.6
no fix listed
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
glib2.0@2.64.6-1~ubuntu20.04.6
no fix listed
1
stackstorm/st2stream:3.81c8904a3bf67
glib2.0@2.64.6-1~ubuntu20.04.6
no fix listed
1
stackstorm/st2timersengine:3.81bf35bfaf00c
glib2.0@2.64.6-1~ubuntu20.04.6
no fix listed
1
stackstorm/st2workflowengine:3.819fdfffdbba8
glib2.0@2.64.6-1~ubuntu20.04.6
no fix listed
1
stashapp/stash:latest24dbd7607174
glib2.0@2.64.6-1~ubuntu20.04.3
no fix listed
1
stashapp/stash-box:latesta534c8afdf39
glib2.0@2.80.0-6ubuntu3.4
2.80.0-6ubuntu3.6
1
structurizr/onpremises:2025.11.094b5ffb5119c8
glib2.0@2.80.0-6ubuntu3.4
2.80.0-6ubuntu3.6
1
substratusai/verba:v0.4.0-baseURL261695be635eb
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
glib2.0@2.64.6-1~ubuntu20.04.6
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
glib2.0@2.74.6-2+deb12u6
2.74.6-2+deb12u8
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
glib2.0@2.74.6-2+deb12u6
2.74.6-2+deb12u8
1
teknas09/bird-pod:latest12a1fa85c4aa
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
glib2.0@2.48.2-0ubuntu1
no fix listed
1
theradius/loggia:0.463ba348546ec
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
thingsboard/tb-postgres:latest2d17e4e36edc
glib2.0@2.74.6-2+deb12u7
2.74.6-2+deb12u8
1
thongngo3301/stakefish:latesta341af5976e3
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
glib2.0@2.72.4-0ubuntu1
2.72.4-0ubuntu2.7
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
glib2.0@2.72.4-0ubuntu1
2.72.4-0ubuntu2.7
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
glib2.0@2.72.4-0ubuntu2.4
2.72.4-0ubuntu2.7
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
glib2.0@2.72.1-1
2.72.4-0ubuntu2.7
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
glib2.0@2.48.2-0ubuntu1
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
glib2.0@2.74.6-2+deb12u5
2.74.6-2+deb12u8
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
glib2.0@2.74.6-2+deb12u6
2.74.6-2+deb12u8
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
glib2.0@2.56.4-0ubuntu0.18.04.9
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
vlebediantsev/notes-project-front:latest945675fd2636
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
glib2.0@2.74.6-2
2.74.6-2+deb12u8
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
glib2.0@2.64.6-1~ubuntu20.04.4
no fix listed
1
wavefronthq/proxy:9.2d1064d28f6eb
glib2.0@2.56.4-0ubuntu0.18.04.6
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
glib2.0@2.72.4-0ubuntu2.3
2.72.4-0ubuntu2.7
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
glib2.0@2.74.6-2+deb12u3
2.74.6-2+deb12u8
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
glib2.0@2.74.6-2+deb12u3
2.74.6-2+deb12u8
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
glib2.0@2.72.1-1
2.72.4-0ubuntu2.7
1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
glib2.0@2.48.2-0ubuntu4.8
no fix listed
1
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
glib2.0@2.64.6-1~ubuntu20.04.7
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
glib2.0@2.74.6-2+deb12u3
2.74.6-2+deb12u8
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
glib2.0@2.84.4-3~deb13u1
2.84.4-3~deb13u2
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
glib2.0@2.74.6-2+deb12u3
2.74.6-2+deb12u8
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
glib2.0@2.74.6-2+deb12u6
2.74.6-2+deb12u8
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
glib2.0@2.72.4-0ubuntu2.2
2.72.4-0ubuntu2.7
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
glib2.0@2.64.6-1~ubuntu20.04.4
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
glib2.0@2.74.6-2+deb12u3
2.74.6-2+deb12u8
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
glib2.0@2.74.6-2+deb12u5
2.74.6-2+deb12u8
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
glib2.0@2.74.6-2+deb12u5
2.74.6-2+deb12u8
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
glib2.0@2.74.6-2+deb12u7
2.74.6-2+deb12u8
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
glib2.0@2.74.6-2+deb12u5
2.74.6-2+deb12u8
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
glib2.0@2.72.4-0ubuntu2.2
2.72.4-0ubuntu2.7
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
glib2.0@2.84.4-3~deb13u1
2.84.4-3~deb13u2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.