CVE-2025-4373

Medium

Advisory

Published 6 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.8; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 255; of 17,781 indexed, latest versions
Container images: 273; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 255 of 17,781 indexed charts deploy, on 273 images.

Affected package	Affected versions	Fixed in	Images
glib2.0deb	2.40.2-0ubuntu1, 2.48.2-0ubuntu1, 2.48.2-0ubuntu4.1, 2.48.2-0ubuntu4.4+28 more	2.64.6-1~ubuntu20.04.9, 2.72.4-0ubuntu2.5, 2.74.6-2+deb12u7, 2.80.0-6ubuntu3.4	273

OSV records: DEBIAN-CVE-2025-4373 UBUNTU-CVE-2025-4373
Also known as: USN-7532-1

Charts affected

255 by stars

Chart

Latest

Affected images

Radar Score

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9

Open the chart page →

9,130

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9

Open the chart page →

9,130

webhookiewebhookie

0.1.2

1 of 1 See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9

Open the chart page →

14,364

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9

Open the chart page →

28,605

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-4373.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	glib2.0@2.72.4-0ubuntu2.3	2.72.4-0ubuntu2.5

Open the chart page →

14,100

Container images carrying it

273 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	glib2.0@2.48.2-0ubuntu1	no fix listed	4
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	glib2.0@2.48.2-0ubuntu4.1	no fix listed	4
ciscolabs/rtsp-client :latest	a7b60ec88285	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	3
ciscolabs/rtsp-server :latest	b59fc10bb821	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	glib2.0@2.48.2-0ubuntu4.1	no fix listed	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	3
apache/tika :2.9.2.1-full	ae0b86d3c4d0	glib2.0@2.80.0-6ubuntu3.1	2.80.0-6ubuntu3.4	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	glib2.0@2.74.6-2	2.74.6-2+deb12u7	2
hookiesolutions/webhookie :latest	0629694246ba	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	2
library/python :3.7	eedf63967cdb	glib2.0@2.74.6-2	2.74.6-2+deb12u7	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	glib2.0@2.74.6-2	2.74.6-2+deb12u7	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	glib2.0@2.48.2-0ubuntu4.1	no fix listed	2
opendatacube/ows :latest	668cbb41473c	glib2.0@2.80.0-6ubuntu3.2	2.80.0-6ubuntu3.4	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	glib2.0@2.74.6-2+deb12u2	2.74.6-2+deb12u7	2
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.5	2
speckle/speckle-preview-service :2.18.11-branch.testing2.88634-335d469 :2.18.12-branch.testing3.88744-f55b341	4bd113093583	glib2.0@2.74.6-2	2.74.6-2+deb12u7	2
wurstmeister/zookeeper :latest	7a7fd44a7210	glib2.0@2.40.2-0ubuntu1	no fix listed	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	glib2.0@2.72.1-1	2.72.4-0ubuntu2.5	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	glib2.0@2.72.1-1	2.72.4-0ubuntu2.5	2
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	2
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9	2
1dev/server :11.9.0	cd5b12fe5471	glib2.0@2.80.0-6ubuntu3.2	2.80.0-6ubuntu3.4	1
5200710/hadoop :3.2.3-java8	092d3088a5fb	glib2.0@2.64.6-1~ubuntu20.04.6	2.64.6-1~ubuntu20.04.9	1
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	glib2.0@2.56.4-0ubuntu0.18.04.6	no fix listed	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	glib2.0@2.64.3-1~ubuntu20.04.1	2.64.6-1~ubuntu20.04.9	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	glib2.0@2.64.6-1~ubuntu20.04.3	2.64.6-1~ubuntu20.04.9	1
akaunting/akaunting :3.0.15	52811b36ec3a	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	glib2.0@2.56.4-0ubuntu0.18.04.9	no fix listed	1
andrewgolikov55/intel-gpu-exporter :latest	fcc001b61c0e	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.5	1
anguda/ant-media :2.5	c435285fc241	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
anujdatar/cups :25.07.01	685df04a643b	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u7	1
apache/druid :29.0.1	0cef139b6bf1	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
apachepulsar/pulsar :2.9.0	d056c89b7131	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
apachepulsar/pulsar :2.8.2	d538416d5afe	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
apache/tika :2.9.0.0	92d055a84e9e	glib2.0@2.72.4-0ubuntu2.2	2.72.4-0ubuntu2.5	1
aristidetm/basic-notebook :3.6.5	469dbc951224	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	glib2.0@2.64.6-1~ubuntu20.04.7	2.64.6-1~ubuntu20.04.9	1
avinash263/pyredis263 :latest	aa2b8727f1a6	glib2.0@2.74.6-2	2.74.6-2+deb12u7	1
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u7	1
bitnamilegacy/matomo :5.3.2-debian-12-r13	f02c000c54b1	glib2.0@2.74.6-2+deb12u6	2.74.6-2+deb12u7	1
bitnamilegacy/openldap :2.6.8-debian-12-r1	6e412c178ef9	glib2.0@2.74.6-2+deb12u2	2.74.6-2+deb12u7	1
bnjbvr/kresus :0.22.1	37e216b182c8	glib2.0@2.74.6-2+deb12u4	2.74.6-2+deb12u7	1
browserless/chrome :1.48.0-chrome-stable	c81ae5585b47	glib2.0@2.64.6-1~ubuntu20.04.4	2.64.6-1~ubuntu20.04.9	1
carlosmz87/test_helm_backend :latest	8ffa63aa995d	glib2.0@2.74.6-2+deb12u4	2.74.6-2+deb12u7	1
castopod/castopod :1.12.10	1fd37280cbb2	glib2.0@2.74.6-2+deb12u3	2.74.6-2+deb12u7	1