StackRadar

CVE-2025-27363

HighKEV

Advisory

Published 11 Mar 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.278
98th percentile
CISA KEV
Listed
since 6 May 2025
Charts affected
614
of 17,787 indexed, latest versions
Container images
575
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: freetype security update

Carried by container images the latest versions of 614 of 17,787 indexed charts deploy, on 575 images.

Affected packageAffected versionsFixed inImages
freetypedeb2.6.1-0.1ubuntu2.3, 2.6.1-0.1ubuntu2.4, 2.8.1-2ubuntu2, 2.8.1-2ubuntu2.1+11 more2.6.1-0.1ubuntu2.5+esm2, 2.8.1-2ubuntu2.2+esm1, 2.10.1-2ubuntu0.4, 2.10.4+dfsg-1+deb11u2+2 more519
freetyperpm2.8-12.el7_6.1, 2.8-14.el7, 2.9.1-4.el8, 2.9.1-4.el8_3.1+3 more0:2.8-15.el7_9.1, 0:2.9.1-5.el8_2.1, 0:2.9.1-6.el8_6.3, 0:2.9.1-7.el8_4+4 more56
OSV records
DEBIAN-CVE-2025-27363RHSA-2025:3382RHSA-2025:3383RHSA-2025:3384RHSA-2025:3385RHSA-2025:3386RHSA-2025:3393RHSA-2025:3395RHSA-2025:3421UBUNTU-CVE-2025-27363DLA-4104-1
Also known as
DSA-5880-1, RHSA-2025:3407, USN-7352-1, USN-7352-2

Charts affected

614 by stars
ChartLatestAffected imagesRadar Score
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
freetype@2.10.4+dfsg-1
2.10.4+dfsg-1+deb11u2

Open the chart page →

2,132
drillwearefrank1.3.61 of 3See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
apache/drill:1.21.11f96558fd292
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2

Open the chart page →

9,397
web-dvwaweb-dvwa1.16.01 of 2See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
gulacedia/web-dvwa-new:v367b467d961ca
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4

Open the chart page →

10,001
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.4

Open the chart page →

14,364
webhookie-allwebhookie0.1.22 of 3See more

webhookie-all webhookie 0.1.2

2 of the 3 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.4
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
freetype@2.9.1-4.el8_3.1
0:2.9.1-7.el8_4

Open the chart page →

28,605
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
freetype@2.10.4+dfsg-1
2.10.4+dfsg-1+deb11u2

Open the chart page →

7,552
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
freetype@2.11.1+dfsg-1ubuntu0.2
2.11.1+dfsg-1ubuntu0.3

Open the chart page →

9,248
wp-gats-helmwordpress-gatsby0.0.11 of 3See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
library/wordpress:6.0.0-php8.0-apache277c6c25980f
freetype@2.10.4+dfsg-1
2.10.4+dfsg-1+deb11u2

Open the chart page →

2,021
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
freetype@2.11.1+dfsg-1ubuntu0.2
2.11.1+dfsg-1ubuntu0.3

Open the chart page →

14,100
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
freetype@2.9.1-4.el8_3.1
0:2.9.1-10.el8_10

Open the chart page →

11,577
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4

Open the chart page →

7,673
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
freetype@2.9.1-9.el8
0:2.9.1-10.el8_10

Open the chart page →

6,016
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-27363.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2

Open the chart page →

1,838

Container images carrying it

575 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
freetype@2.11.1+dfsg-1ubuntu0.2
2.11.1+dfsg-1ubuntu0.3
1
salehmir/jesse:1.10.101afa95f979e9
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
santisbon/evwatcher:latestc4e994ca4540
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1
santisbon/evworker:lateste807283f8d69
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1
santisbon/speedtest:latest8ee3a1697227
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
freetype@2.12.1+dfsg-5+deb12u3
2.12.1+dfsg-5+deb12u4
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1
scrapinghub/splash:3.4.1a5f89bc84606
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2+esm1
1
seafileltd/seafile-mc:9.0.106693911bcc40
freetype@2.10.1-2ubuntu0.2
2.10.1-2ubuntu0.4
1
seafileltd/seafile-mc:9.0.97ac833196f60
freetype@2.10.1-2ubuntu0.2
2.10.1-2ubuntu0.4
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
freetype@2.11.1+dfsg-1ubuntu0.2
2.11.1+dfsg-1ubuntu0.3
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.4
1
seataio/seata-server:latest703b5de7f1a6
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
freetype@2.9.1-4.el8_3.1
0:2.9.1-7.el8_4
1
shamimkuet/nginx:1.0.2b82902a76a04
freetype@2.12.1+dfsg-5+deb12u3
2.12.1+dfsg-5+deb12u4
1
simpleidserver/faaswebsite:0.0.4367218ae760f
freetype@2.10.4+dfsg-1
2.10.4+dfsg-1+deb11u2
1
sismics/docs:v1.10f4b0ef019cf1
freetype@2.8.1-2ubuntu2
2.8.1-2ubuntu2.2+esm1
1
sissbruecker/linkding:1.35.00c5dddf0b37c
freetype@2.12.1+dfsg-5+deb12u3
2.12.1+dfsg-5+deb12u4
1
snipe/snipe-it:v6.0.1455fb7636a98c
freetype@2.10.1-2ubuntu0.2
2.10.1-2ubuntu0.4
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
freetype@2.10.1-2ubuntu0.3
2.10.1-2ubuntu0.4
1
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
socialmediamacroscope/classification_split:0.1.24bfda60829fe
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
socialmediamacroscope/classification_train:0.1.207477060bba8
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
socialmediamacroscope/clowder_list:0.1.051cb17626519
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1
socialmediamacroscope/screen_name_prompt:0.1.2724f3f5702e0
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.4
1
somnathmore/custom-nginx:v2bdfc06cad4ec
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1
sonatype/nexus3:3.58.1586060431b64
freetype@2.9.1-9.el8
0:2.9.1-10.el8_8
1
speckle/speckle-frontend:2.18.11-branch.testing2.88634-335d46982c052441110
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
speckle/speckle-frontend:2.18.12-branch.testing3.88744-f55b341d5f689c9256c
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
speckle/speckle-frontend:2.17.14-branch.testing.72707.921a5f8d9b58995a8b8
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
freetype@2.12.1+dfsg-5+deb12u3
2.12.1+dfsg-5+deb12u4
1
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
freetype@2.12.1+dfsg-5+deb12u3
2.12.1+dfsg-5+deb12u4
1
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
freetype@2.12.1+dfsg-5+deb12u3
2.12.1+dfsg-5+deb12u4
1
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
freetype@2.12.1+dfsg-5+deb12u3
2.12.1+dfsg-5+deb12u4
1
stashapp/stash:latest24dbd7607174
freetype@2.10.1-2ubuntu0.1
2.10.1-2ubuntu0.4
1
stratospire/activityrelay:0.2.3a4c34cb01117
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
substratusai/verba:v0.4.0-baseURL261695be635eb
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1
svtechnmaa/svtech_icingaweb2:v1.0.2a59d0b81dde2
freetype@2.10.4+dfsg-1+deb11u1
2.10.4+dfsg-1+deb11u2
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
freetype@2.12.1+dfsg-5
2.12.1+dfsg-5+deb12u4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.