StackRadar

CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,519
of 17,821 indexed, latest versions
Container images
2,564
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,519 of 17,821 indexed charts deploy, on 2,564 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.12,394
coreutilsrpm8.29-lp151.3.3, 8.29-lp152.4.7, 8.32-32.el9, 8.32-34.el9+7 more0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more154
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.175
OSV records
DEBIAN-CVE-2025-5278RHSA-2026:28911RHSA-2026:33124RLSA-2026:28911UBUNTU-CVE-2025-5278AZL-93060openSUSE-SU-2025:15327-1SUSE-SU-2025:02362-1
Also known as
USN-8697-1

Charts affected

2,519 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,564 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
gotson/komga:0.99.49b15ea6bfc30
coreutils@8.28-1ubuntu1
no fix listed
1
gradiant/open5gs-dbctl:0.10.3332031245fce
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
grafana/agent:v0.44.23364714a2f64
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
grafana/alloy:v1.5.101a63f4e032c
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
grafana/alloy:v1.4.306bdcbb51fc2
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
grafana/alloy:v1.18.10f4434c92b3e
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
grafana/alloy:v1.18.0491b0578c049
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
grafana/alloy:v1.16.384b76d56c594
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
grafana/alloy:v1.11.38c7256f412fe
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
grafana/alloy:v1.19.2b8ec653c4423
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
grafana/alloy:v1.14.0f50931848bd8
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
grafana/beyla:1.3.336d07f8d276e
coreutils@9.1-1
no fix listed
1
grafana/mcp-grafana:1.5.107c6614a8f8b
coreutils@9.1-1
no fix listed
1
grafana/mcp-grafana:0.14.042f541f22063
coreutils@9.1-1
no fix listed
1
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
coreutils@8.32-39.el9
0:8.32-41.el9_8
1
grafana/promtail:3.5.165bfae480b57
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
grafana/promtail:3.6.18dcfdf466da0
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
graphprotocol/graph-node:latestb0436347fb24
coreutils@9.1-1
no fix listed
1
graphprotocol/graph-node:v0.37.0f4452cdedd68
coreutils@9.1-1
no fix listed
1
graylog/graylog:6.1.1019de1aff48c2
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
graylog/graylog-enterprise:7.1.88a1f641cd7aa
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
greenkube/greenkube:0.3.00c01932282a4
coreutils@9.1-1
no fix listed
1
grpl/grapple-cli:0.2.127c00aafee6629
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
guacamole/guacamole:1.5.50f62f6d17ab3
coreutils@8.32-4.1ubuntu1.1
8.32-4.1ubuntu1.4
1
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
coreutils@9.1-1
no fix listed
1
gulacedia/web-dvwa-new:v367b467d961ca
coreutils@9.1-1
no fix listed
1
hamidyousefi93/saam-test:latestc34f071f6ed0
coreutils@9.1-1
no fix listed
1
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
coreutils@8.32-39.el9
0:8.32-41.el9_8
1
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
coreutils@9.1-1
no fix listed
1
hamzaarshad10/querypodpy:1.7154f38e8668e
coreutils@9.1-1
no fix listed
1
hansehe/locust:1.1.0bc8e45262bc4
coreutils@9.1-1
no fix listed
1
haohanyang/compass-web:0.5.054f2112602ee
coreutils@9.1-1
no fix listed
1
haohanyang/compass-web:0.1.1e3952b14ae8e
coreutils@9.1-1
no fix listed
1
haohanyang/compass-web:0.5.1f4f8fe4e21f1
coreutils@9.1-1
no fix listed
1
hassroutyyoussef/accountservice:latest1f01edf1ee0c
coreutils@9.1-1
no fix listed
1
hassroutyyoussef/orderservice:latest2fc3d1617928
coreutils@9.1-1
no fix listed
1
hassroutyyoussef/userservice:lateste0392e2b4a90
coreutils@9.1-1
no fix listed
1
hasura/graphql-engine:v2.34.0-ce0111b0204136
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4
1
hasura/graphql-engine:v2.48.10f6c1c4b957d2
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
haugene/transmission-openvpn:4.0059216cfae4b
coreutils@8.30-3ubuntu2
no fix listed
1
haveagitgat/tdarr:2.00.181256348872ce
coreutils@8.30-3ubuntu2
no fix listed
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
coreutils@8.30-3ubuntu2
no fix listed
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
coreutils@8.30-3ubuntu2
no fix listed
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
coreutils@9.1-1
no fix listed
1
hazegoodlife/haaze:milksite8d4c63169e14
coreutils@9.1-1
no fix listed
1
headwindmdm/hmdm:0.1.93550b4840840
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4
1
healthchecks/healthchecks:latestaa08a61b0dcf
coreutils@9.7-3
no fix listed
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
coreutils@9.1-1
no fix listed
1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
coreutils@8.30-3ubuntu2
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
coreutils@9.1-1
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.