StackRadar

CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,519
of 17,821 indexed, latest versions
Container images
2,564
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,519 of 17,821 indexed charts deploy, on 2,564 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.12,394
coreutilsrpm8.29-lp151.3.3, 8.29-lp152.4.7, 8.32-32.el9, 8.32-34.el9+7 more0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more154
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.175
OSV records
DEBIAN-CVE-2025-5278RHSA-2026:28911RHSA-2026:33124RLSA-2026:28911UBUNTU-CVE-2025-5278AZL-93060openSUSE-SU-2025:15327-1SUSE-SU-2025:02362-1
Also known as
USN-8697-1

Charts affected

2,519 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,564 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
cubejs/cubestore:v1.5.334ac523a9bab
coreutils@9.1-1
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
coreutils@9.7-3
no fix listed
1
cyfershepard/jellystat:1.1.11c4e2dfa8bddf
coreutils@9.1-1
no fix listed
1
cznic/knot-resolver:v6.4.24ad2e1894b78
coreutils@9.7-3
no fix listed
1
dachichang/basic-auth-s3-nginx:1.0.07ccac90a935e
coreutils@9.1-1
no fix listed
1
daedalusproject/base_kubectl:latest6f72b5119eda
coreutils@8.30-3ubuntu2
no fix listed
1
dagster/dagster-celery-k8s:1.13.230505973033e1
coreutils@9.7-3
no fix listed
1
dagster/dagster-cloud-agent:1.13.2322036fc83927
coreutils@9.7-3
no fix listed
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
coreutils@9.1-1
no fix listed
1
dannielkil/book-frontend:latest937993927694
coreutils@9.1-1
no fix listed
1
darthsim/imgproxy:v3.30.13b709e4a0e5e
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
darthsim/imgproxy:v3.26476cb08c816a
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
daskdev/dask-notebook:1.1.0052630f5ca04
coreutils@8.28-1ubuntu1
no fix listed
1
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
coreutils@8.28-1ubuntu1
no fix listed
1
datadog/agent:6aad9994de6a7
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
datafuselabs/databend-meta:v1.2.279ba877ee6cb4d
coreutils@9.1-1
no fix listed
1
datafuselabs/databend-query:v1.2.279a936843b85b4
coreutils@9.1-1
no fix listed
1
datalayers/datalayers:v2.2.1017b292079239
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
datalust/seq:5.0.832-pre9c731bb207a6
coreutils@8.25-2ubuntu3~16.04
no fix listed
1
datalust/seq-input-gelf:3.0.441-x643de34aed5642
coreutils@8.30-3ubuntu2
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
dbgate/dbgate:7.2.3f2dc7423ea88
coreutils@9.1-1
no fix listed
1
dblaci/ubuntu-ssh-rsync:20231020eea697611af4
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4
1
ddosify/alaz:v0.12.0ea602056d9ce
coreutils@9.1-1
no fix listed
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
coreutils@9.1-1
no fix listed
1
ddosify/selfhosted_backend:3.2.93c11e3182652
coreutils@9.1-1
no fix listed
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
coreutils@9.1-1
no fix listed
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
coreutils@9.1-1
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
coreutils@9.1-1
no fix listed
1
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4
1
defactops/defactops-backend:1.0.2307b663c0092a
coreutils@9.1-1
no fix listed
1
defectdojo/defectdojo-django:3.3.100c597abdbb535
coreutils@9.7-3
no fix listed
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
coreutils@9.7-3
no fix listed
1
dellcloud/category:distributed02fc234353a9
coreutils@8.30-3ubuntu2
no fix listed
1
dellcloud/pages:1.04d2eb25b9225
coreutils@8.30-3ubuntu2
no fix listed
1
dellnoantechnp/cloudeye-exporter:v2.0.316873356c882d
coreutils@9.1-1
no fix listed
1
dellnoantechnp/dingtalk-bot:v1.0.1034000bbcad5
coreutils@9.7-3
no fix listed
1
dependencytrack/apiserver:4.14.21ba4f004e1ec
coreutils@9.7-3
no fix listed
1
dependencytrack/apiserver:latestf1da63ed610a
coreutils@9.7-3
no fix listed
1
dessalines/lemmy:0.19.2079e9f02c286c
coreutils@9.1-1
no fix listed
1
dessalines/lemmy-ui:0.19.20ee4c620d8e93
coreutils@9.7-3
no fix listed
1
devopsgoofy/k8s-platform:latestad865312099f
coreutils@9.1-1
no fix listed
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
coreutils@9.1-1
no fix listed
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
coreutils@8.30-3ubuntu2
no fix listed
1
diygod/rsshub:latest22845ada2f14
coreutils@9.7-3
no fix listed
1
diygod/rsshub:2025-11-097a6312cac0d5
coreutils@9.1-1
no fix listed
1
djjudas21/alertify:0.1.0ba22be670c37
coreutils@9.1-1
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.