CVE-2025-3360

Low

Advisory

Published 7 Apr 2025In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.005; 39th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 353; of 17,781 indexed, latest versions
Container images: 384; deployed by those charts
Fix available: 1 of 1; affected package

glib2.0 - security update

Carried by container images the latest versions of 353 of 17,781 indexed charts deploy, on 384 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.56.2-0ubuntu0.18.04.2, 2.56.3-0ubuntu0.18.04.1, 2.56.4-0ubuntu0.18.04.2, 2.56.4-0ubuntu0.18.04.4+33 more	2.56.4-0ubuntu0.18.04.9+esm5, 2.64.6-1~ubuntu20.04.9+esm1, 2.66.8-1+deb11u6, 2.72.4-0ubuntu2.7+2 more	384

OSV records: DEBIAN-CVE-2025-3360 UBUNTU-CVE-2025-3360 DLA-4128-1
Also known as: USN-7942-1, USN-7942-2

Charts affected

353 by stars

Chart

Latest

Affected images

Radar Score

wp-gats-helmwordpress-gatsby

0.0.1

1 of 3 See more

wp-gats-helm wordpress-gatsby 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-3360.

Container image	Digest	Package	Fixed in
library/wordpress :6.0.0-php8.0-apache	277c6c25980f	glib2.0@2.66.8-1	2.66.8-1+deb11u6

Open the chart page →

2,021

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-3360.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.7

Open the chart page →

14,100

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-3360.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	glib2.0@2.66.8-1	2.66.8-1+deb11u6

Open the chart page →

1,838

Container images carrying it

384 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/codingducksrl/wordpress :6.0.2	3113c0960507	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u6	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.7	1
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	glib2.0@2.74.6-2	2.74.6-2+deb12u6	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	glib2.0@2.56.4-0ubuntu0.18.04.8	2.56.4-0ubuntu0.18.04.9+esm5	1
ghcr.io/facebook/threatexchange/hma :1.0.17	84d09c6b75a7	glib2.0@2.66.8-1+deb11u5	2.66.8-1+deb11u6	1
ghcr.io/flaresolverr/flaresolverr :v3.3.16	088412db1051	glib2.0@2.66.8-1+deb11u1	2.66.8-1+deb11u6	1
ghcr.io/flaresolverr/flaresolverr :v3.3.21	f104ee51e512	glib2.0@2.66.8-1+deb11u3	2.66.8-1+deb11u6	1
ghcr.io/graphprotocol/availability-oracle :sha-28312fd	472a25038957	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u6	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/jfwenisch/discord-experiencebot :latest	b52ff07f9f0c	glib2.0@2.56.4-0ubuntu0.18.04.9	2.56.4-0ubuntu0.18.04.9+esm5	1
ghcr.io/jfwenisch/steamcmd-manager :v0.4.5	dab685e668d9	glib2.0@2.80.0-6ubuntu3.2	2.80.0-6ubuntu3.6	1
ghcr.io/jfwenisch/webtools :v0.1.4	4569cae83c70	glib2.0@2.80.0-6ubuntu3.2	2.80.0-6ubuntu3.6	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	glib2.0@2.72.1-1	2.72.4-0ubuntu2.7	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/kamu-data/kamu-api-server :0.89.0	4ed7a896dd2b	glib2.0@2.64.6-1~ubuntu20.04.9	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/leoquote/tinyproxy_exporter :master	6b4103d88dbb	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
ghcr.io/libreconnect/ferriscompany :0.1.0-rc6	ed86db9f0efe	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u6	1
ghcr.io/libretime/libretime-legacy :latest	35b4531189c2	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
ghcr.io/linuxoid69/motion :4.7.0-0.1.0	f0f000c3fc47	glib2.0@2.66.8-1+deb11u5	2.66.8-1+deb11u6	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	glib2.0@2.56.4-0ubuntu0.18.04.8	2.56.4-0ubuntu0.18.04.9+esm5	1
ghcr.io/lsst-sqre/strimzi-registry-operator :0.6.0	7e25f7048aff	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	glib2.0@2.80.0-6ubuntu3.2	2.80.0-6ubuntu3.6	1
ghcr.io/mastodon/mastodon :v4.1.2	6b18e6d0eda4	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u6	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	glib2.0@2.80.0-6ubuntu3.2	2.80.0-6ubuntu3.6	1
ghcr.io/nathanvaughn/webtrees :2.0.19	69423a100fab	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
ghcr.io/navikt/mock-oauth2-server :2.1.10	65d4ed47ce09	glib2.0@2.66.8-1+deb11u4	2.66.8-1+deb11u6	1
ghcr.io/nefelim4ag/pingdom-operator :0.0.15	f8c7afdcf439	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u6	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u6	1
ghcr.io/open-telemetry/demo :1.12.0-frauddetectionservice	77cefdab4d5c	glib2.0@2.66.8-1+deb11u4	2.66.8-1+deb11u6	1
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u6	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9+esm1	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u6	1
ghcr.io/paperless-ngx/paperless-ngx :1.8.0	9bbc9a90641e	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	glib2.0@2.74.6-2	2.74.6-2+deb12u6	1
ghcr.io/remla23-team17/app :1.0.0	5816dbddf47d	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
ghcr.io/remla23-team17/model-service :1.0.0	aa59fe2c4f6a	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
ghcr.io/rivals-space/rivals-mastodon :1.6.1	43b23d55e4be	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1
ghcr.io/rodg/nodecg-base :latest	31be4bf87070	glib2.0@2.66.8-1	2.66.8-1+deb11u6	1