CVE-2025-15281

High

Advisory

Published 20 Jan 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,570; of 17,803 indexed, latest versions
Container images: 1,701; deployed by those charts
Fix available: 3 of 4; affected packages

CVE-2025-15281 affecting package glibc for versions less than 2.38-18

Carried by container images the latest versions of 1,570 of 17,803 indexed charts deploy, on 1,701 images.

Affected package	Affected versions	Fixed in	Images
glibcdeb	2.23-0ubuntu5, 2.23-0ubuntu7, 2.23-0ubuntu9, 2.23-0ubuntu10+49 more	2.23-0ubuntu11.3+esm9, 2.27-3ubuntu1.6+esm6, 2.31-0ubuntu9.18+esm1, 2.35-0ubuntu3.13+4 more	1,674
glibcapk	2.37-r6, 2.38-r6, 2.39-r7, 2.40-r1+6 more	2.42-r7	19
eglibcdeb	2.19-0ubuntu6.3, 2.19-0ubuntu6.6, 2.19-0ubuntu6.13, 2.19-0ubuntu6.14+1 more	no fix listed	7
glibcrpm	2.38-16.azl3	2.38-18	1

OSV records: CGA-57jc-36hq-46xf DEBIAN-CVE-2025-15281 UBUNTU-CVE-2025-15281 AZL-74819
Also known as: CGA-g8jh-2h2x-q44c, USN-8005-1

Charts affected

1,570 by stars

Chart

Latest

Affected images

Radar Score

apisixwenerme

2.17.0

1 of 3 See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
bitnamilegacy/etcd :latest	99b408c15272	glibc@2.36-9+deb12u10	2.36-9+deb12u14

Open the chart page →

3,136

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
istio/kubectl :1.5.10	dbb7726d1bf0	glibc@2.27-3ubuntu1.2	2.27-3ubuntu1.6+esm6

Open the chart page →

10,879

giteawenerme

12.7.0

3 of 4 See more

gitea wenerme 12.7.0

3 of the 4 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	glibc@2.36-9+deb12u10	2.36-9+deb12u14
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	glibc@2.36-9+deb12u10	2.36-9+deb12u14
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	glibc@2.36-9+deb12u10	2.36-9+deb12u14

Open the chart page →

8,915

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.18+esm1

Open the chart page →

15,310

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.13
openebs/node-disk-operator :2.1.0	6afe2123c457	glibc@2.35-0ubuntu3.1	2.35-0ubuntu3.13

Open the chart page →

10,602

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	glibc@2.36-9+deb12u3	2.36-9+deb12u14

Open the chart page →

15,056

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	glibc@2.35-0ubuntu3.5	2.35-0ubuntu3.13

Open the chart page →

9,340

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	glibc@2.36-9+deb12u10	2.36-9+deb12u14
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	glibc@2.36-9+deb12u13	2.36-9+deb12u14

Open the chart page →

7,687

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	glibc@2.31-0ubuntu9.17	2.31-0ubuntu9.18+esm1

Open the chart page →

6,336

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	glibc@2.36-9+deb12u3	2.36-9+deb12u14

Open the chart page →

5,566

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	glibc@2.36-9+deb12u13	2.36-9+deb12u14

Open the chart page →

2,500

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	glibc@2.36-9+deb12u13	2.36-9+deb12u14

Open the chart page →

2,143

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glibc@2.35-0ubuntu3.8	2.35-0ubuntu3.13

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	glibc@2.36-9+deb12u9	2.36-9+deb12u14

Open the chart page →

11,622

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	glibc@2.36-9+deb12u7	2.36-9+deb12u14

Open the chart page →

7,714

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	glibc@2.36-9+deb12u8	2.36-9+deb12u14
hamzaarshad10/querypodpy :1.7	154f38e8668e	glibc@2.36-9+deb12u8	2.36-9+deb12u14
murtazashah46/helmfile :latest	4d11726cf803	glibc@2.36-9+deb12u8	2.36-9+deb12u14

Open the chart page →

13,813

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	glibc@2.39-0ubuntu8.1	2.39-0ubuntu8.7

Open the chart page →

2,152

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	glibc@2.36-9+deb12u4	2.36-9+deb12u14

Open the chart page →

2,692

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	glibc@2.27-3ubuntu1.6	2.27-3ubuntu1.6+esm6

Open the chart page →

2,474

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-15281.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	glibc@2.27-3ubuntu1.4	2.27-3ubuntu1.6+esm6
yandex/clickhouse-server :21.3.20	4eccfffb01d7	glibc@2.31-0ubuntu9.2	2.31-0ubuntu9.18+esm1

Open the chart page →

9,272

Container images carrying it

1,701 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	glibc@2.36-9+deb12u10	2.36-9+deb12u14	1