CVE-2025-4373

Medium

Advisory

Published 6 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.8; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 255; of 17,781 indexed, latest versions
Container images: 273; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 255 of 17,781 indexed charts deploy, on 273 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+28 more	2.64.6-1~ubuntu20.04.9, 2.72.4-0ubuntu2.5, 2.74.6-2+deb12u7, 2.80.0-6ubuntu3.4	273

OSV records: DEBIAN-CVE-2025-4373 UBUNTU-CVE-2025-4373
Also known as: USN-7532-1

Charts affected

255 by stars

Chart

Latest

Affected images

Radar Score

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9

Open the chart page →

28,605

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.5

Open the chart page →

14,100

Container images carrying it

273 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	glib2.0@2.72.1-1	2.72.4-0ubuntu2.5	1
gcr.io/ml-pipeline/metadata-envoy :2.0.0-alpha.5	e8bc6cf08613	glib2.0@2.48.2-0ubuntu4.8	no fix listed	1
gcr.io/ml-pipeline/metadata-envoy :2.3.0	e8e263a919ff	glib2.0@2.64.6-1~ubuntu20.04.7	2.64.6-1~ubuntu20.04.9	1
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u7	1
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.5	1
ghcr.io/brittonhayes/arma-reforger :latest	6fde1edc0983	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
ghcr.io/camptocamp/tetragon-policy-builder :master	0e99f12bb040	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u7	1
ghcr.io/chaos-mesh/chaos-daemon :v2.7.2	9608d9b51452	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u7	1
ghcr.io/cosmo-workspace/dev-code-server :v0.0.3	16fda01ae58a	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u7	1
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.5	1
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
ghcr.io/edgelesssys/coordinator :v0.5.0	bcd5b8d4c45c	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
ghcr.io/flaresolverr/flaresolverr :v3.4.0	ab535d1fef5d	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u7	1
ghcr.io/graphprotocol/availability-oracle :sha-28312fd	472a25038957	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/jfwenisch/discord-experiencebot :latest	b52ff07f9f0c	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
ghcr.io/jfwenisch/steamcmd-manager :v0.4.5	dab685e668d9	glib2.0@2.80.0-6ubuntu3.2	2.80.0-6ubuntu3.4	1
ghcr.io/jfwenisch/webtools :v0.1.4	4569cae83c70	glib2.0@2.80.0-6ubuntu3.2	2.80.0-6ubuntu3.4	1
ghcr.io/jr0dd/puppeteer :v13.3.2	6047599cd78e	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/k8s-at-home/nzbhydra2 :v3.14.2	ef3670f7e0a8	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.9	1
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	glib2.0@2.72.1-1	2.72.4-0ubuntu2.5	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.9	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/libreconnect/ferriscompany :0.1.0-rc6	ed86db9f0efe	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	glib2.0@2.56.4-0ubuntu0.18.04.8	no fix listed	1
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	glib2.0@2.80.0-6ubuntu3.2	2.80.0-6ubuntu3.4	1
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u7	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	glib2.0@2.80.0-6ubuntu3.2	2.80.0-6ubuntu3.4	1
ghcr.io/nefelim4ag/pingdom-operator :0.0.15	f8c7afdcf439	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u7	1
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	glib2.0@2.74.6-2+deb12u5	2.74.6-2+deb12u7	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1