CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.003; 22nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,507; of 17,803 indexed, latest versions
Container images: 2,535; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,507 of 17,803 indexed charts deploy, on 2,535 images.

Affected package	Affected versions	Fixed in	Images
coreutilsdeb	8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more	8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.1	2,368
coreutilsrpm	8.29-lp151.3.3, 8.32-32.el9, 8.32-34.el9, 8.32-35.el9+6 more	0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more	154
coreutils-fromdeb	9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1	75

OSV records: DEBIAN-CVE-2025-5278 RHSA-2026:28911 RHSA-2026:33124 RLSA-2026:28911 UBUNTU-CVE-2025-5278 AZL-93060 openSUSE-SU-2025:15327-1 SUSE-SU-2025:02362-1
Also known as: USN-8697-1

Charts affected

2,507 by stars

Chart

Latest

Affected images

Radar Score

onyx-stackonyx

0.3.1

1 of 12 See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
onyxdotapp/onyx-backend :latest	473fdffe4e67	coreutils@9.7-3	no fix listed

Open the chart page →

6,697

commonground-gatewayopencatalogi

1.5.3

1 of 7 See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	coreutils@9.1-1	no fix listed

Open the chart page →

9,723

opentickopenchart

0.1.0

1 of 1 See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
library/nginx :1.25.5	a484819eb602	coreutils@9.1-1	no fix listed

Open the chart page →

5,674

jobopen-charts

2.0.0

1 of 1 See more

job open-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
library/ubuntu :latest	2260313b31c8	coreutils@9.7-3ubuntu2 coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1 9.7-3ubuntu2.1

Open the chart page →

753

bbsimopencord

4.8.11

1 of 1 See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
voltha/bbsim :1.16.7	d90403d58016	coreutils@8.28-1ubuntu1	no fix listed

Open the chart page →

3,918

bbsim-sadis-serveropencord

0.3.5

1 of 1 See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
voltha/bbsim-sadis-server :0.4.0	762b272d439e	coreutils@8.28-1ubuntu1	no fix listed

Open the chart page →

3,731

cdn-remoteopencord

0.2.4

2 of 3 See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	coreutils@8.28-1ubuntu1	no fix listed
omecproject/cdn-video-repo :1.0.0	d59ccb138ffb	coreutils@8.25-2ubuntu3~16.04	no fix listed

Open the chart page →

63,720

comacopencord

1.0.0

3 of 9 See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	coreutils@8.25-2ubuntu3~16.04	no fix listed
omecproject/onos-progran :1.0.0	5715e5648aa0	coreutils@8.25-2ubuntu3~16.04	no fix listed
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	coreutils@8.25-2ubuntu3~16.04	no fix listed

Open the chart page →

251,005

comac-cuopencord

0.1.1

1 of 4 See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	coreutils@8.28-1ubuntu1	no fix listed

Open the chart page →

8,187

comac-platformopencord

0.0.17

1 of 11 See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	coreutils@8.25-2ubuntu3~16.04	no fix listed

Open the chart page →

79,687

freeradiusopencord

1.0.4

1 of 1 See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	coreutils@8.28-1ubuntu1	no fix listed

Open the chart page →

15,745

mcord-cdn-remoteopencord

0.1.6

2 of 2 See more

mcord-cdn-remote opencord 0.1.6

2 of the 2 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	coreutils@8.25-2ubuntu3~16.04	no fix listed
woojoong/wowza :latest	ec230db19652	coreutils@8.28-1ubuntu1	no fix listed

Open the chart page →

43,042

mcord-cdn-remote-freeopencord

0.1.3

1 of 1 See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	coreutils@8.25-2ubuntu3~16.04	no fix listed

Open the chart page →

29,517

mcord-control-planeopencord

0.2.2

2 of 5 See more

mcord-control-plane opencord 0.2.2

2 of the 5 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
ngick8stesting/c3po-mme :mwca-mme-debug	8dd6dea45be4	coreutils@8.25-2ubuntu3~16.04	no fix listed
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	coreutils@8.28-1ubuntu1	no fix listed

Open the chart page →

15,929

oaisimopencord

0.1.7

2 of 3 See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	coreutils@8.28-1ubuntu1	no fix listed
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	coreutils@8.28-1ubuntu1	no fix listed

Open the chart page →

14,819

omec-control-planeopencord

0.1.31

5 of 8 See more

omec-control-plane opencord 0.1.31

5 of the 8 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
omecproject/c3po-hss :master-latest	638671ef4842	coreutils@8.25-2ubuntu3~16.04	no fix listed
omecproject/c3po-hssdb :master-latest	28a90cc26716	coreutils@8.30-3ubuntu2	no fix listed
omecproject/mme-exporter :paging-latest	bcc5f19fd676	coreutils@8.28-1ubuntu1	no fix listed
omecproject/ngic-cp :central-cp-multi-upfs-latest	24a389a0a4fe	coreutils@8.28-1ubuntu1	no fix listed
omecproject/openmme :master-latest	64776cb9edb3	coreutils@8.25-2ubuntu3~16.04	no fix listed

Open the chart page →

104,037

onosopencord

3.0.2

1 of 1 See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
onosproject/onos :2.2.1	44914a8d4b3f	coreutils@8.28-1ubuntu1	no fix listed

Open the chart page →

12,942

onos-progranopencord

1.2.7

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	coreutils@8.25-2ubuntu3~16.04	no fix listed

Open the chart page →

94,372

ovspluginopencord

1.0.2

1 of 1 See more

ovsplugin opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
gopinatht/ovs-plugin-installer :latest	632cb2e9c399	coreutils@8.25-2ubuntu3~16.04	no fix listed

Open the chart page →

4,183

ponsimv2opencord

1.2.3

1 of 2 See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
voltha/voltha-tester :1.7.0	655c3048a602	coreutils@8.25-2ubuntu3~16.04	no fix listed

Open the chart page →

65,092

sebaopencord

1.0.0

6 of 17 See more

seba opencord 1.0.0

6 of the 17 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
tpdock/freeradius :2.2.9	3da600c95a49	coreutils@8.25-2ubuntu3~16.04	no fix listed
voltha/voltha-cli :1.6.0	c4e41e92f046	coreutils@8.25-2ubuntu3~16.04	no fix listed
voltha/voltha-envoy :1.6.0	59ab2a00f712	coreutils@8.21-1ubuntu5.4	no fix listed
voltha/voltha-netconf :1.6.0	37f80524c207	coreutils@8.25-2ubuntu3~16.04	no fix listed
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	coreutils@8.25-2ubuntu3~16.04	no fix listed
voltha/voltha-voltha :1.6.0	ff596b62de59	coreutils@8.25-2ubuntu3~16.04	no fix listed

Open the chart page →

356,120

voltha-infraopencord

2.14.0

4 of 10 See more

voltha-infra opencord 2.14.0

4 of the 10 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	coreutils@8.28-1ubuntu1	no fix listed
library/ubuntu :16.04	1f1a2d56de1d	coreutils@8.25-2ubuntu3~16.04	no fix listed
voltha/bbsim-sadis-server :0.3.5	259fc3a03f4e	coreutils@8.28-1ubuntu1	no fix listed
voltha/voltha-onos :5.1.8	e038acb950d3	coreutils@8.28-1ubuntu1	no fix listed

Open the chart page →

41,148

opencost-parquet-exporteropencost

0.3.1

1 of 1 See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	coreutils@9.1-1	no fix listed

Open the chart page →

11,088

dokuopenlit

0.1.4

1 of 3 See more

doku openlit 0.1.4

1 of the 3 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :latest	fa394da808cc	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4

Open the chart page →

1,748

openlitopenlit

1.24.0

1 of 3 See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.4.1	2e6587b81a26	coreutils@8.30-3ubuntu2	no fix listed

Open the chart page →

5,220

openlit-controlleropenlit

0.10.0

1 of 1 See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
ghcr.io/openlit/openlit-controller :0.10.0	165efd4469ea	coreutils@9.1-1	no fix listed

Open the chart page →

1,412

sentinelopennms-helm-charts

0.4.0

1 of 2 See more

sentinel opennms-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
opennms/sentinel :36.0.2	88869082a14f	coreutils@9.5-7.el10	0:9.5-8.el10_2

Open the chart page →

2,087

openpanelopenpanel

0.9.0

1 of 6 See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :25.10.2.65	e019438e1e05	coreutils@8.32-4.1ubuntu1.2	8.32-4.1ubuntu1.4

Open the chart page →

3,477

llm-stackopenproject-helm-charts

1.1.0

2 of 2 See more

llm-stack openproject-helm-charts 1.1.0

2 of the 2 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
apache/apisix :3.16.0-ubuntu	5e47692cac00	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
library/python :3.12-slim	78387bc3881b	coreutils@9.7-3	no fix listed

Open the chart page →

2,032

alquimia-studioopenshift

0.2.0

1 of 1 See more

alquimia-studio openshift 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
alquimiaai/studio :certification	38a1f0341982	coreutils@8.32-39.el9	0:8.32-41.el9_8

Open the chart page →

2,408

bpjstk-serviceopenshift

1.0.0

2 of 6 See more

bpjstk-service openshift 1.0.0

2 of the 6 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
andrianrf/backoffice-be :latest	6036614803d4	coreutils@8.32-34.el9	0:8.32-41.el9_8
andrianrf/iso-server :latest	7da47f525c7d	coreutils@8.32-34.el9	0:8.32-41.el9_8

Open the chart page →

35,089

chatbot-ai-sampleopenshift

0.1.6

2 of 4 See more

chatbot-ai-sample openshift 0.1.6

2 of the 4 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
quay.io/ai-lab/llamacpp_python :latest	70d138997acd	coreutils@8.32-35.el9	0:8.32-41.el9_8
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	coreutils@8.32-35.el9	0:8.32-41.el9_8

Open the chart page →

19,181

exporteropenshift

1.0.47

2 of 3 See more

exporter openshift 1.0.47

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
public.ecr.aws/perfectscale-io/psc-exporter :v1.0.45-redhat	9083e60c38bc	coreutils@8.32-36.el9	0:8.32-41.el9_8
public.ecr.aws/perfectscale-io/ubi9/ubi :9.5	d7c3def9252b	coreutils@8.32-36.el9	0:8.32-41.el9_8

Open the chart page →

13,076

fineractopenshift

0.1.1

2 of 4 See more

fineract openshift 0.1.1

2 of the 4 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
library/mariadb :11.4	611a2fcc5fa7	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
library/nginx :latest	05b8cb60c354	coreutils@9.7-3	no fix listed

Open the chart page →

7,889

kb-cloud-installeropenshift

2.1.35

1 of 1 See more

kb-cloud-installer openshift 2.1.35

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
apecloud/kb-cloud-installer :v2.1.42-certified	98abc64aa985	coreutils@8.32-39.el9	0:8.32-41.el9_8

Open the chart page →

4,234

redhat-trusted-application-pipelineopenshift

1.0.2

1 of 2 See more

redhat-trusted-application-pipeline openshift 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	coreutils@8.32-34.el9	0:8.32-41.el9_8

Open the chart page →

8,687

openshift-integration-operatoropenshift-integration-operator

0.8.2

2 of 2 See more

openshift-integration-operator openshift-integration-operator 0.8.2

2 of the 2 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
quay.io/maximilianopizarro/integration-console-plugin :v0.8.2	270ed23a9afd	coreutils@8.32-40.el9	0:8.32-41.el9_8
quay.io/maximilianopizarro/openshift-integration-operator :v0.8.2	d6fc43ac802e	coreutils@8.32-36.el9	0:8.32-41.el9_8

Open the chart page →

2,080

sohaopensoha

0.1.9

1 of 2 See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	coreutils@9.7-3	no fix listed

Open the chart page →

1,818

open-vpnopenvpn

0.0.1

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	coreutils@8.28-1ubuntu1	no fix listed

Open the chart page →

77,005

terminalsopen-webui

0.7.0

2 of 2 See more

terminals open-webui 0.7.0

2 of the 2 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
ghcr.io/open-webui/terminals :latest	5d2fd44366a4	coreutils@9.7-3	no fix listed
ghcr.io/open-webui/terminals-operator :latest	6287ce8be502	coreutils@9.7-3	no fix listed

Open the chart page →

2,098

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	coreutils@8.28-1ubuntu1	no fix listed

Open the chart page →

97,725

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	coreutils@8.21-1ubuntu5.4	no fix listed

Open the chart page →

26,367

hiveopstty

0.1.9

1 of 4 See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16	233f361c5819	coreutils@9.1-1	no fix listed

Open the chart page →

4,732

grrosdfir-infrastructure

1.0.3

2 of 5 See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	coreutils@8.32-4.1ubuntu1.2	8.32-4.1ubuntu1.4
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	coreutils@9.1-1	no fix listed

Open the chart page →

11,047

osdfir-infrastructureosdfir-infrastructure

2.15.0

25 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

25 of the 40 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
bitnamilegacy/git :latest	4b08d0c5af8d	coreutils@9.1-1	no fix listed
chromadb/chroma :1.5.7	fc8dc8e11fb2	coreutils@9.7-3	no fix listed
library/mariadb :11.3.2	e101f9db3191	coreutils@8.32-4.1ubuntu1.2	8.32-4.1ubuntu1.4
yetiplatform/yeti :2.9.0	9bcbe2650a14	coreutils@9.7-3	no fix listed
yetiplatform/yeti-frontend :2.9.0	873ef15d267b	coreutils@9.7-3	no fix listed
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	coreutils@9.1-1	no fix listed
ghcr.io/openrelik/openrelik-mediator :latest	42efc445b19e	coreutils@9.1-1	no fix listed
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	coreutils@9.1-1	no fix listed
ghcr.io/openrelik/openrelik-server :latest	ce1132261523	coreutils@9.1-1	no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config :latest	1269d3d8d2c2	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-analyzer-logs :latest	b175cc61959a	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-bulkextractor :latest	67498ee2e639	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-capa :latest	71323a4f3fc5	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-chromecreds :latest	76d4fbcc6ff0	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-cloud-logs :latest	a5d7e3cf71d3	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-containers :latest	a6d5abe94706	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-dfindexeddb :latest	31966a825782	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-extraction :latest	ec9fc5864cd5	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-floss :latest	7a331eb83c6a	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-grep :latest	470ff3529746	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-os-creds :latest	7fc7ec101f08	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-plaso :latest	75537ea8c851	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-strings :latest	6e05055b701f	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-timesketch :latest	4cb88b603cdc	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3
ghcr.io/openrelik/openrelik-worker-yara :latest	bd7fbf4505b5	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3

Open the chart page →

184,580

yetiosdfir-infrastructure

1.0.5

2 of 4 See more

yeti osdfir-infrastructure 1.0.5

2 of the 4 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
yetiplatform/yeti :latest	9c3006cedcca	coreutils@9.7-3	no fix listed
yetiplatform/yeti-frontend :latest	709064278c7e	coreutils@9.7-3	no fix listed

Open the chart page →

6,756

fluent-bitot-container-kit

0.0.3

1 of 2 See more

fluent-bit ot-container-kit 0.0.3

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
quay.io/opstree/fluent-bit :5.0.3	391eef5a68ff	coreutils@9.7-3	no fix listed

Open the chart page →

925

webot-container-kit

0.1.0

1 of 1 See more

web ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	coreutils@9.7-3	no fix listed

Open the chart page →

1,879

workerot-container-kit

0.1.0

1 of 1 See more

worker ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
library/nginx :latest	05b8cb60c354	coreutils@9.7-3	no fix listed

Open the chart page →

1,879

lens-metric-proxyowan-charts

0.1.0

1 of 1 See more

lens-metric-proxy owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
library/nginx :stable	d5792f71a949	coreutils@9.7-3	no fix listed

Open the chart page →

1,879

Container images carrying it

2,535 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kubelauncher/memcached	b599ca6b3ff3	coreutils@9.7-3ubuntu2 coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1 9.7-3ubuntu2.1	1
ghcr.io/kubelauncher/mongodb	9bc37ed78a8b	coreutils@9.7-3ubuntu2 coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1 9.7-3ubuntu2.1	1
ghcr.io/kubelauncher/mysql	e9609bd50416	coreutils@9.7-3ubuntu2 coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1 9.7-3ubuntu2.1	1
ghcr.io/kubelauncher/openldap	8978aa002bc0	coreutils@9.4-3ubuntu6.1	9.4-3ubuntu6.3	1
ghcr.io/kubelauncher/postgresql	1a27e11e5925	coreutils@9.7-3ubuntu2 coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1 9.7-3ubuntu2.1	1
ghcr.io/kubelauncher/rabbitmq	ff5a36a457f1	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3	1
ghcr.io/kubelauncher/redis	bcd8e9a6224f	coreutils@9.7-3ubuntu2 coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1 9.7-3ubuntu2.1	1
ghcr.io/kubelauncher/zookeeper	7826e9caa461	coreutils@9.7-3ubuntu2 coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1 9.7-3ubuntu2.1	1
ghcr.io/kubenetworks/kubevpn :v2.11.9	3feb9da85270	coreutils@9.1-1	no fix listed	1
ghcr.io/kubevoip/kubevoip :v0.6.8	41c603a93642	coreutils@9.7-3	no fix listed	1
ghcr.io/kubiyabot/agent-manager :v0.4.13	757bdd779345	coreutils@9.7-3	no fix listed	1
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	coreutils@9.1-1	no fix listed	1
ghcr.io/kvaps/kubefarm-ltsp :v0.13.4	24efef013a53	coreutils@8.30-3ubuntu2	no fix listed	1
ghcr.io/kvaps/opennebula :v5.12.0.4-1	e28e0e7de11b	coreutils@8.30-3ubuntu2	no fix listed	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4	01563adc95fd	coreutils@8.30-3ubuntu2	no fix listed	1
ghcr.io/kvaps/opennebula-exporter :v5.12.0.4-1	2b92df1143b9	coreutils@8.30-3ubuntu2	no fix listed	1
ghcr.io/kvaps/opennebula-flow :v5.12.0.4-1	600221f0f43f	coreutils@8.30-3ubuntu2	no fix listed	1
ghcr.io/kvaps/opennebula-gate :v5.12.0.4-1	a85e03d8bc1d	coreutils@8.30-3ubuntu2	no fix listed	1
ghcr.io/lambdaclass/ethrex :latest	0c7896f060d6	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3	1
ghcr.io/leprechaun/owntracks-exporter :0.1.11-de545066	099e1abd6d08	coreutils@9.1-1	no fix listed	1
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	coreutils@9.4-3ubuntu6	9.4-3ubuntu6.3	1
ghcr.io/libreconnect/ferriscompany :0.1.0-rc6	ed86db9f0efe	coreutils@9.1-1	no fix listed	1
ghcr.io/libretime/icecast :latest	3c98b92e9535	coreutils@9.7-3	no fix listed	1
ghcr.io/linkwarden/linkwarden :v2.16.3	0664c28a039b	coreutils@9.1-1	no fix listed	1
ghcr.io/linuxserver/booksonic-air :version-v2009.1.0	baa4fa9549dc	coreutils@8.28-1ubuntu1	no fix listed	1
ghcr.io/linuxserver/calibre-web :0.6.26	7c0464228f2f	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3	1
ghcr.io/linuxserver/ombi :4.53.5	0caadf03b804	coreutils@9.4-3ubuntu6.2	9.4-3ubuntu6.3	1
ghcr.io/linuxserver/ombi :4.16.12	4c1b67cf39af	coreutils@8.32-4.1ubuntu1	8.32-4.1ubuntu1.4	1
ghcr.io/linuxserver/plex :version-1.41.4.9463-630c9f557	e6d2775e77ec	coreutils@9.4-3ubuntu6	9.4-3ubuntu6.3	1
ghcr.io/linuxserver/resilio-sync :version-2.7.2.1375	605b6d544028	coreutils@8.28-1ubuntu1	no fix listed	1
ghcr.io/litesql/ha :latest	4029479b8ea7	coreutils@9.7-3	no fix listed	1
ghcr.io/litesql/pocketbase-ha :latest	c5b28608958b	coreutils@9.7-3	no fix listed	1
ghcr.io/livepeer/cloudflared-ingress-operator :latest	c179cdcaa050	coreutils@9.7-3	no fix listed	1
ghcr.io/llm-d/llm-d-model-service :v0.0.15	8b99a8104a2f	coreutils@8.32-39.el9	0:8.32-41.el9_8	1
ghcr.io/lloesche/valheim-server :latest	20fde516ce31	coreutils@9.7-3	no fix listed	1
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4	1
ghcr.io/loxilb-io/kube-loxilb :latest	6f65e53e252d	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4	1
ghcr.io/loxilb-io/loxilb :latest	c7ede1bab641	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4	1
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	coreutils@9.1-1	no fix listed	1
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	coreutils@9.4-3ubuntu6	9.4-3ubuntu6.3	1
ghcr.io/maritimeconnectivity/identityregistry :latest	5009fd419742	coreutils@9.7-3ubuntu2 coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1 9.7-3ubuntu2.1	1
ghcr.io/matter-js/matterjs-server :1.4.0	54232d0d3e7d	coreutils@9.7-3	no fix listed	1
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	coreutils@9.1-1	no fix listed	1
ghcr.io/mcp-hangar/mcp-hangar :2.21.0	ee409f91176c	coreutils@9.7-3	no fix listed	1
ghcr.io/mcwarman/backstage-sample-app/app :main	fae3c1f04311	coreutils@9.7-3	no fix listed	1
ghcr.io/mcwarman/backstage-sample-app/backend :main	07aba09a594f	coreutils@9.1-1	no fix listed	1
ghcr.io/mealie-recipes/mealie :v3.24.0	0b08ac3a9f0a	coreutils@9.7-3	no fix listed	1
ghcr.io/mealie-recipes/mealie :v3.2.1	322369a5b748	coreutils@9.7-3	no fix listed	1
ghcr.io/mealie-recipes/mealie :v3.25.1	6066c29eca95	coreutils@9.7-3	no fix listed	1
ghcr.io/mealie-recipes/mealie :v1.4.0	b56da41cf178	coreutils@9.1-1	no fix listed	1