StackRadar

CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,528
of 17,821 indexed, latest versions
Container images
2,572
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,528 of 17,821 indexed charts deploy, on 2,572 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.12,402
coreutilsrpm8.29-lp151.3.3, 8.29-lp152.4.7, 8.32-32.el9, 8.32-34.el9+7 more0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more154
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.175
OSV records
DEBIAN-CVE-2025-5278RHSA-2026:28911RHSA-2026:33124RLSA-2026:28911UBUNTU-CVE-2025-5278AZL-93060openSUSE-SU-2025:15327-1SUSE-SU-2025:02362-1
Also known as
USN-8697-1

Charts affected

2,528 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,572 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/mariadb:version-110.4.21mariabionic7a94d7e89f52
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/ombi:4.53.50caadf03b804
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4
1
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/litesql/ha:latest7376ffffc1a2
coreutils@9.7-3
no fix listed
1
ghcr.io/litesql/pocketbase-ha:latestc5b28608958b
coreutils@9.7-3
no fix listed
1
ghcr.io/livepeer/cloudflared-ingress-operator:latestc179cdcaa050
coreutils@9.7-3
no fix listed
1
ghcr.io/llm-d/llm-d-model-service:v0.0.158b99a8104a2f
coreutils@8.32-39.el9
0:8.32-41.el9_8
1
ghcr.io/lloesche/valheim-server:latestc885aa902faf
coreutils@9.7-3
no fix listed
1
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4
1
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
coreutils@9.1-1
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/maritimeconnectivity/identityregistry:latest5009fd419742
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
coreutils@9.7-3
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
coreutils@9.1-1
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
coreutils@9.7-3
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
coreutils@9.1-1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
coreutils@9.7-3
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
coreutils@9.7-3
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
coreutils@9.7-3
no fix listed
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
coreutils@9.1-1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
coreutils@9.7-3
no fix listed
1
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
coreutils@8.32-39.el9
0:8.32-41.el9_8
1
ghcr.io/microboxlabs/miot-harness:0.1.0d548e9ae4b84
coreutils@9.7-3
no fix listed
1
ghcr.io/microboxlabs/miot-srv:latest5796553b41ae
coreutils@8.32-39.el9
0:8.32-41.el9_8
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
coreutils@9.7-3
no fix listed
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
coreutils@9.1-1
no fix listed
1
ghcr.io/mollyim/mollysocket:1.7.1c675622546a4
coreutils@9.1-1
no fix listed
1
ghcr.io/monicahq/monica-next:main8be69156acbb
coreutils@9.7-3
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
coreutils@9.7-3
no fix listed
1
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
coreutils@9.1-1
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
coreutils@9.1-1
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
coreutils@9.7-3
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.