CVE-2025-3360

Low

Advisory

Published 7 Apr 2025In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.005; 39th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 353; of 17,781 indexed, latest versions
Container images: 384; deployed by those charts
Fix available: 1 of 1; affected package

glib2.0 - security update

Carried by container images the latest versions of 353 of 17,781 indexed charts deploy, on 384 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.56.2-0ubuntu0.18.04.2, 2.56.3-0ubuntu0.18.04.1, 2.56.4-0ubuntu0.18.04.2, 2.56.4-0ubuntu0.18.04.4+33 more	2.56.4-0ubuntu0.18.04.9+esm5, 2.64.6-1~ubuntu20.04.9+esm1, 2.66.8-1+deb11u6, 2.72.4-0ubuntu2.7+2 more	384

OSV records: DEBIAN-CVE-2025-3360 UBUNTU-CVE-2025-3360 DLA-4128-1
Also known as: USN-7942-1, USN-7942-2

Charts affected

353 by stars

Chart

Latest

Affected images

Radar Score

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-3360.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	glib2.0@2.66.8-1	2.66.8-1+deb11u6

Open the chart page →

2,021

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-3360.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.7

Open the chart page →

14,100

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-3360.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	glib2.0@2.66.8-1	2.66.8-1+deb11u6

Open the chart page →

1,838

Container images carrying it

384 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
stackstorm/st2workflowengine :3.8	19fdfffdbba8	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9+esm1	1
stashapp/stash :latest	24dbd7607174	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.9+esm1	1
stashapp/stash-box :latest	a534c8afdf39	glib2.0@2.80.0-6ubuntu3.4	2.80.0-6ubuntu3.6	1
stratospire/activityrelay :0.2.3	a4c34cb01117	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
structurizr/onpremises :2025.11.09	4b5ffb5119c8	glib2.0@2.80.0-6ubuntu3.4	2.80.0-6ubuntu3.6	1
substratusai/verba :v0.4.0-baseURL2	61695be635eb	glib2.0@2.74.6-2	2.74.6-2+deb12u6	1
svtechnmaa/svtech_icingaweb2 :v1.0.2	a59d0b81dde2	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
svtechnmaa/svtech_nagvis :v1.2.1	18394b08e6c3	glib2.0@2.74.6-2	2.74.6-2+deb12u6	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9+esm1	1
tachyongroup/mlflow-deployment-controller-ui :mlflow-controller-0.1.8	f4f7fabe1037	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
teknas09/bird-pod :latest	12a1fa85c4aa	glib2.0@2.74.6-2	2.74.6-2+deb12u6	1
th0th/node-red :4.0.3-debian	d06fa39f7406	glib2.0@2.66.8-1+deb11u4	2.66.8-1+deb11u6	1
thehiveproject/cortex :3.1.7	f4bc64fb8844	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
theradius/loggia :0.4	63ba348546ec	glib2.0@2.74.6-2	2.74.6-2+deb12u6	1
thingsboard/tb-coap-transport :3.4.1	bd45a09d85d9	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
thingsboard/tb-http-transport :3.4.1	a06f53c5e2da	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
thingsboard/tb-mqtt-transport :3.4.1	030f316ce301	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
thingsboard/tb-node :3.4.1	645f43b688f7	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
thingsboard/tb-node :3.6.0	f40a542832c4	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
thongngo3301/stakefish :latest	a341af5976e3	glib2.0@2.74.6-2	2.74.6-2+deb12u6	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	glib2.0@2.72.4-0ubuntu1	2.72.4-0ubuntu2.7	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	glib2.0@2.72.4-0ubuntu1	2.72.4-0ubuntu2.7	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.7	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	glib2.0@2.72.1-1	2.72.4-0ubuntu2.7	1
tksky1/cubeuniverse :0.1alpha	ec7b889f380f	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u6	1
uffizzi/app :latest	66e9e3937c60	glib2.0@2.66.8-1+deb11u3	2.66.8-1+deb11u6	1
vinanrra/7dtd-server :v0.4.4	f9534490bd2b	glib2.0@2.56.4-0ubuntu0.18.04.9	2.56.4-0ubuntu0.18.04.9+esm5	1
vlebediantsev/notes-admin-front :latest	007c6670ff48	glib2.0@2.74.6-2	2.74.6-2+deb12u6	1
vlebediantsev/notes-project-front :latest	945675fd2636	glib2.0@2.74.6-2	2.74.6-2+deb12u6	1
vlebediantsev/registration-ms-front-app-host :latest	54f69d116c50	glib2.0@2.74.6-2	2.74.6-2+deb12u6	1
volkerraschek/postfixadmin :3.3.13	c4f10aebf87b	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
wavefronthq/proxy :9.2	d1064d28f6eb	glib2.0@2.56.4-0ubuntu0.18.04.6	2.56.4-0ubuntu0.18.04.9+esm5	1
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.7	1
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u6	1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u6	1
xtrendence/cryptofolio :V.2.2.0	e6e6612bb94c	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
youssef11gaber10/deployment-ui-react :latest	ba6853e35c60	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	glib2.0@2.72.1-1	2.72.4-0ubuntu2.7	1
gcr.io/ml-pipeline/metadata-envoy :2.3.0	e8e263a919ff	glib2.0@2.64.6-1~ubuntu20.04.7	2.64.6-1~ubuntu20.04.9+esm1	1
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u6	1
gcr.io/ml-pipeline/metadata-writer :2.0.0-alpha.5	ec3ae9f6df47	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
ghcr.io/0xemma/reddark :main	2a115e991894	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u6	1
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.7	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u6	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u6	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u6	1