CVE-2025-4373

Medium

Advisory

Published 6 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.8; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 255; of 17,781 indexed, latest versions
Container images: 273; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 255 of 17,781 indexed charts deploy, on 273 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+28 more	2.64.6-1~ubuntu20.04.9, 2.72.4-0ubuntu2.5, 2.74.6-2+deb12u7, 2.80.0-6ubuntu3.4	273

OSV records: DEBIAN-CVE-2025-4373 UBUNTU-CVE-2025-4373
Also known as: USN-7532-1

Charts affected

255 by stars

Chart

Latest

Affected images

Radar Score

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9

Open the chart page →

28,605

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.5

Open the chart page →

14,100

Container images carrying it

273 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	glib2.0@2.64.6-1~ubuntu20.04.8	2.64.6-1~ubuntu20.04.9	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	glib2.0@2.64.6-1~ubuntu20.04.8	2.64.6-1~ubuntu20.04.9	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.5	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.5	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	glib2.0@2.72.4-0ubuntu2.4	2.72.4-0ubuntu2.5	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	glib2.0@2.74.6-2+deb12u4	2.74.6-2+deb12u7	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	glib2.0@2.74.6-2+deb12u4	2.74.6-2+deb12u7	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	glib2.0@2.74.6-2+deb12u2	2.74.6-2+deb12u7	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.9	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	glib2.0@2.48.2-0ubuntu4.4	no fix listed	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.9	1