StackRadar

CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,519
of 17,821 indexed, latest versions
Container images
2,564
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,519 of 17,821 indexed charts deploy, on 2,564 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.12,394
coreutilsrpm8.29-lp151.3.3, 8.29-lp152.4.7, 8.32-32.el9, 8.32-34.el9+7 more0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more154
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.175
OSV records
DEBIAN-CVE-2025-5278RHSA-2026:28911RHSA-2026:33124RLSA-2026:28911UBUNTU-CVE-2025-5278AZL-93060openSUSE-SU-2025:15327-1SUSE-SU-2025:02362-1
Also known as
USN-8697-1

Charts affected

2,519 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,564 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
coreutils@9.1-1
no fix listed
1
ghcr.io/klicktipp/csa-exporter:0.3.12c69513f9d85
coreutils@9.7-3
no fix listed
1
ghcr.io/klicktipp/snds-exporter:v0.2.4a23b389cb3c5
coreutils@9.7-3
no fix listed
1
ghcr.io/kluster-manager/cluster-gateway:v1.12.158bed8d1e7fc
coreutils@8.32-40.el9
0:8.32-41.el9_8
1
ghcr.io/kluster-manager/cluster-gateway-manager:v1.12.1f22cae0e6cf3
coreutils@8.32-40.el9
0:8.32-41.el9_8
1
ghcr.io/kluster-manager/managed-serviceaccount:v0.10.0fc256885915b
coreutils@8.32-39.el9
0:8.32-41.el9_8
1
ghcr.io/kluster-manager/registration-operator:v1.2.00cbced8e6240
coreutils@8.32-39.el9
0:8.32-41.el9_8
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/kubelauncher/cassandrab66aba320083
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/kubelauncher/etcd8ab954711fb9
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/kubelauncher/kafka43e1085cd0a8
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/kubelauncher/keycloakafe3bd73d7cf
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/kubelauncher/kubectl7280594a2f18
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/kubelauncher/mariadbe25056a6ec52
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/kubelauncher/memcachedb599ca6b3ff3
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/kubelauncher/mongodb9bc37ed78a8b
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/kubelauncher/mysqle9609bd50416
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/kubelauncher/openldap8978aa002bc0
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
ghcr.io/kubelauncher/postgresql1a27e11e5925
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/kubelauncher/rabbitmqff5a36a457f1
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/kubelauncher/redisbcd8e9a6224f
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/kubelauncher/zookeeper7826e9caa461
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/kubenetworks/kubevpn:v2.11.93feb9da85270
coreutils@9.1-1
no fix listed
1
ghcr.io/kubevoip/kubevoip:v0.6.841c603a93642
coreutils@9.7-3
no fix listed
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
coreutils@9.7-3
no fix listed
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
coreutils@9.1-1
no fix listed
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
coreutils@9.1-1
no fix listed
1
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
coreutils@9.1-1
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
coreutils@9.1-1
no fix listed
1
ghcr.io/linuxserver/audacity:version-3.0.2cdf203db1e50
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/linuxserver/booksonic:version-1.2677efca1065d
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/linuxserver/code-server:version-v3.11.1a385ba5cb161
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/mariadb:version-110.4.21mariabionic7a94d7e89f52
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/ombi:4.53.50caadf03b804
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4
1
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.