CVE-2025-14512

Medium

Advisory

Published 11 Dec 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 304; of 17,781 indexed, latest versions
Container images: 317; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 304 of 17,781 indexed charts deploy, on 317 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+37 more	2.72.4-0ubuntu2.7, 2.74.6-2+deb12u8, 2.80.0-6ubuntu3.6, 2.84.4-3~deb13u2+1 more	317

OSV records: DEBIAN-CVE-2025-14512 UBUNTU-CVE-2025-14512

Charts affected

304 by stars

Chart

Latest

Affected images

Radar Score

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2025-14512.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	no fix listed

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-14512.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-14512.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed

Open the chart page →

28,605

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-14512.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.7

Open the chart page →

14,100

Container images carrying it

317 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	glib2.0@2.74.6-2+deb12u4	2.74.6-2+deb12u8	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	glib2.0@2.74.6-2+deb12u4	2.74.6-2+deb12u8	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	glib2.0@2.64.6-1~ubuntu20.04.4	no fix listed	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u8	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	glib2.0@2.74.6-2+deb12u2	2.74.6-2+deb12u8	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	glib2.0@2.64.6-1~ubuntu20.04.3	no fix listed	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	glib2.0@2.48.2-0ubuntu4.4	no fix listed	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	glib2.0@2.74.6-2	2.74.6-2+deb12u8	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	glib2.0@2.64.6-1~ubuntu20.04.3	no fix listed	1