CVE-2025-15278

High

Advisory

Published 31 Dec 2025In the index since 8 Sept 2026

The matching OSV records carry no description.

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
fontforgedeb	1:20201107~dfsg-4+deb11u1build0.22.04.1, 1:20230101~dfsg-1.1build1	no fix listed	2

2 by stars

Chart

Latest

Affected images

Radar Score

penpotkubitodev

1 of the 5 container images this version deploys carry CVE-2025-15278.

Container image	Digest	Package	Fixed in
penpotapp/backend :2.2.1	47853d9bb9dd	fontforge@1:20201107~dfsg-4+deb11u1build0.22.04.1	no fix listed

16,877

1 of the 1 container images this version deploys carry CVE-2025-15278.

Container image	Digest	Package	Fixed in
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	fontforge@1:20230101~dfsg-1.1build1	no fix listed

6,207

2 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
penpotapp/backend :2.2.1	47853d9bb9dd	fontforge@1:20201107~dfsg-4+deb11u1build0.22.04.1	no fix listed	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	fontforge@1:20230101~dfsg-1.1build1	no fix listed	1