CVE-2025-4373

Medium

Advisory

Published 6 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.8; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 255; of 17,781 indexed, latest versions
Container images: 273; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 255 of 17,781 indexed charts deploy, on 273 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+28 more	2.64.6-1~ubuntu20.04.9, 2.72.4-0ubuntu2.5, 2.74.6-2+deb12u7, 2.80.0-6ubuntu3.4	273

OSV records: DEBIAN-CVE-2025-4373 UBUNTU-CVE-2025-4373
Also known as: USN-7532-1

Charts affected

255 by stars

Chart

Latest

Affected images

Radar Score

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9

Open the chart page →

28,605

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.5

Open the chart page →

14,100

Container images carrying it

273 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
chetangautamm/repo :sipp.v3	e7f7049e1544	glib2.0@2.64.6-1~ubuntu20.04.1	2.64.6-1~ubuntu20.04.9	1
cheyang/distributed-tf :1.6.0	46cc34755493	glib2.0@2.48.2-0ubuntu1	no fix listed	1
chriseaton/adventureworks :latest	54c3384ce701	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.5	1
ckulka/baikal :0.10.1-nginx	434bdd162247	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u7	1
cloudve/janis-terminal :latest	af56e77ca587	glib2.0@2.56.4-0ubuntu0.18.04.6	no fix listed	1
countly/countly-server :25.05.4	e3c238248f99	glib2.0@2.64.6-1~ubuntu20.04.7	2.64.6-1~ubuntu20.04.9	1
daskdev/dask-notebook :1.1.0	052630f5ca04	glib2.0@2.56.3-0ubuntu0.18.04.1	no fix listed	1
deconzcommunity/deconz :2.29.2	062de2362641	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u7	1
dgraziotin/nginx-webdav-nononsense :1.23.1	38f2de42bed0	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	glib2.0@2.74.6-2+deb12u2	2.74.6-2+deb12u7	1
elastictranscoder/transcoder :627e21dc	b4a0327029e6	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
elastictranscoder/transcoder-handler :627e21dc	5b75d19e2733	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
felipecs8/app-db-connection-test :v1	29e06c9c6385	glib2.0@2.74.6-2+deb12u4	2.74.6-2+deb12u7	1
firefart/requesttracker :5.0.4	0d6249906d8c	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
fiware/biz-ecosystem-logic-proxy :11.20.3	d551a13e8278	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u7	1
gethue/hue :4.10.0	5702b2c37ff9	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
graylog/graylog :6.1.10	19de1aff48c2	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.5	1
haveagitgat/tdarr :2.00.18	1256348872ce	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	glib2.0@2.64.3-1~ubuntu20.04.1	2.64.6-1~ubuntu20.04.9	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9	1
helicone/supabase-migration-runner :v2025.03.05-1	4a913936c97b	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	glib2.0@2.56.4-0ubuntu0.18.04.6	no fix listed	1
hyperledger/fabric-couchdb :0.4.10	c65891b6c237	glib2.0@2.48.2-0ubuntu1	no fix listed	1
inseefrlab/shelly :cloudshell	31f04ca7436b	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.5	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
intel/multimodal-data-visualization-streaming :3.0	1a89327e499b	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
intelowlproject/intelowl :v6.6.1	0b22e547ea6b	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
intel/trusted-certificate-issuer :0.5.0	591a9db4a427	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
jacobalberty/unifi :v7.4.162	b3edc809a3ff	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
jaedb/iris :latest	048cfbf58d57	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u7	1
jakowenko/double-take :1.6.0	b858bac9e32a	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
josh5/unmanic :0.2.6	4d49c4816260	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.5	1
jpgouin/openldap :2.6.9-fix	bfdd0088c776	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u7	1
kennethreitz/httpbin :latest	599fe5e50731	glib2.0@2.56.2-0ubuntu0.18.04.2	no fix listed	1
knspar/phronetis-operator :0.1.6	0c4f0543ee58	glib2.0@2.74.6-2+deb12u2	2.74.6-2+deb12u7	1
laly9999/node-app :1	dd0e503913e1	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u7	1
langgenius/dify-api :0.6.11	fca918260dd6	glib2.0@2.74.6-2+deb12u2	2.74.6-2+deb12u7	1
library/nextcloud :31.0.6-apache	588609d76b21	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u7	1
library/python :3.8	d41127070014	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
library/wordpress :6.4.3-apache	8ae66efb09a2	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
linuxserver/deluge :18.04.1	0ac871624394	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
linuxserver/deluge :version-2.0.3-2201906121747ubuntu18.04.1	2ce561a95e7b	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
linuxserver/jellyfin :10.7.7	2427dde159a2	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
linuxserver/unifi-controller :8.0.24	0ae315a3a456	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9	1
linuxserver/unifi-controller :7.3.83	ab105cc50322	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
livekit/ingress :v1.2.2	1ab01641b366	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.5	1
mbround18/valheim :3.1.0	70bd4da591cd	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.5	1
merlos/zookeeper :3.9.3	a38fc7e09ed7	glib2.0@2.74.6-2+deb12u4	2.74.6-2+deb12u7	1