CVE-2025-48384
HighKEVAdvisory
Published 8 Jul 2025In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.0
- base score, highest
- EPSS
- 0.041
- 90th percentile
- CISA KEV
- Listed
- since 25 Aug 2025
- Charts affected
- 274
- of 17,781 indexed, latest versions
- Container images
- 256
- deployed by those charts
- Fix available
- 4 of 4
- affected packages
Git allows arbitrary code execution through broken config quoting
Carried by container images the latest versions of 274 of 17,781 indexed charts deploy, on 256 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| gitdeb | 1:2.7.4-0ubuntu1.3, 1:2.7.4-0ubuntu1.4, 1:2.7.4-0ubuntu1.6, 1:2.7.4-0ubuntu1.7+29 more | 1:2.7.4-0ubuntu1.10+esm9, 1:2.17.1-1ubuntu0.18+esm2, 1:2.25.1-1ubuntu3.14+esm1, 1:2.34.1-1ubuntu1.13+2 more | 224 |
| gitapk | 2.45.2-r0, 2.45.3-r0, 2.47.1-r0, 2.47.2-r0+1 more | 2.45.4-r0, 2.47.3-r0, 2.49.1-r0 | 24 |
| gitrpm | 1.8.3.1-20.el7, 2.18.4-2.el8_2, 2.27.0-1.el8, 2.31.8-1.el8_6 | 0:1.8.3.1-25.el7_9.1, 0:2.18.4-5.el8_2.1, 0:2.27.0-5.el8_4.1, 0:2.31.8-3.el8_6.1 | 7 |
| gitbitnami | 2.50.0-1 | 2.50.1 | 1 |
- OSV records
- ALPINE-CVE-2025-48384BIT-git-2025-48384DEBIAN-CVE-2025-48384RHSA-2025:11688RHSA-2025:11793RHSA-2025:11800RHSA-2025:11801UBUNTU-CVE-2025-48384
- Also known as
- GHSA-vwqx-4fm8-6qc9, USN-7626-1
Charts affected
274 by stars
Container images carrying it
256 by charts deploying them
A fixed version is listed for 4 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| openproject/ | 88dc1359dfb5 | git | 1:2.39.5-0+deb12u3 | 1 |
| openwhisk/ | c80dba0de3aa | git | 1:2.17.1-1ubuntu0.18+esm2 | 1 |
| phan2410/ | 4a86d138832d | git | 1:2.39.5-0+deb12u3 | 1 |
| prefecthq/ | 1df4b5b6238a | git | 1:2.39.5-0+deb12u3 | 1 |
| psorab/ | 53b68896c4ce | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| redash/ | 00d813437db5 | git | 1:2.39.5-0+deb12u3 | 1 |
| ryuunosukeds3/ | c0398f13e8a9 | git | 1:2.34.1-1ubuntu1.13 | 1 |
| sashafefler/ | f96d7804c0ca | git | 1:2.39.5-0+deb12u3 | 1 |
| scholtz2/ | f12ce1cfb72e | git | 1:2.34.1-1ubuntu1.13 | 1 |
| scholtz2/ | 5aaa5d4ab8b8 | git | 1:2.34.1-1ubuntu1.13 | 1 |
| scholtz2/ | 64966de56d9f | git | 1:2.34.1-1ubuntu1.13 | 1 |
| seafileltd/ | 6693911bcc40 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| seafileltd/ | 70628f29c663 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| seafileltd/ | 7ac833196f60 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| seafileltd/ | d0c66e4621bd | git | 1:2.34.1-1ubuntu1.13 | 1 |
| seafileltd/ | ed0fcda5e6a9 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| seldonio/ | 1d0da98a2d76 | git | 1:2.7.4-0ubuntu1.10+esm9 | 1 |
| seldonio/ | 4e985d2006a8 | git | 0:2.27.0-5.el8_4.1 | 1 |
| sirrend/ | 699e79e3d4e2 | git | 1:2.39.5-0+deb12u3 | 1 |
| sirrend/ | 7ca688c7abf5 | git | 1:2.39.5-0+deb12u3 | 1 |
| snipe/ | 55fb7636a98c | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| socialmediamacroscope/ | 70fb11d4f531 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| socialmediamacroscope/ | 6418f9bdb4d2 | git | 1:2.39.5-0+deb12u3 | 1 |
| socialmediamacroscope/ | b351c21422e6 | git | 1:2.39.5-0+deb12u3 | 1 |
| socialmediamacroscope/ | ca863306314b | git | 1:2.39.5-0+deb12u3 | 1 |
| socialmediamacroscope/ | fa490acac2f8 | git | 1:2.39.5-0+deb12u3 | 1 |
| someblackmagic/ | 6eca64b6b440 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| stackstorm/ | 88235ba70cad | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| stackstorm/ | 6f56d239d280 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| stackstorm/ | 33ecfda16608 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| stackstorm/ | 4e3f8c7ca52d | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| stackstorm/ | f190a6212195 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| stackstorm/ | 259503496ff9 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| stackstorm/ | b1de2055c362 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| stackstorm/ | b1a338f64773 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| stackstorm/ | 1c8904a3bf67 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| stackstorm/ | 1bf35bfaf00c | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| stackstorm/ | 19fdfffdbba8 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| statcan/ | 3921305425b8 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| substratusai/ | 61695be635eb | git | 1:2.39.5-0+deb12u3 | 1 |
| supabase/ | 26d8070c55e9 | git | 1:2.39.5-0+deb12u3 | 1 |
| svtechnmaa/ | a934ffd63d25 | git | 1:2.34.1-1ubuntu1.13 | 1 |
| svtechnmaa/ | 6e368ace0977 | git | 1:2.25.1-1ubuntu3.14+esm1 | 1 |
| sysnet4admin/ | e74b43c7f492 | git | 1:2.39.5-0+deb12u3 | 1 |
| sysnet4admin/ | 5802bfcd7fed | git | 1:2.39.5-0+deb12u3 | 1 |
| teknas09/ | 12a1fa85c4aa | git | 1:2.39.5-0+deb12u3 | 1 |
| tensorflow/ | 1e3172090703 | git | 1:2.7.4-0ubuntu1.10+esm9 | 1 |
| theradius/ | 63ba348546ec | git | 1:2.39.5-0+deb12u3 | 1 |
| thongngo3301/ | a341af5976e3 | git | 1:2.39.5-0+deb12u3 | 1 |
| treskon/ | a475d80e4ecf | git | 1:2.39.5-0+deb12u3 | 1 |