StackRadar

CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,554
of 17,813 indexed, latest versions
Container images
2,599
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,554 of 17,813 indexed charts deploy, on 2,599 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.12,428
coreutilsrpm8.29-lp151.3.3, 8.29-lp152.4.7, 8.32-32.el9, 8.32-34.el9+7 more0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more155
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.176
OSV records
DEBIAN-CVE-2025-5278RHSA-2026:28911RHSA-2026:33124RLSA-2026:28911UBUNTU-CVE-2025-5278AZL-93060openSUSE-SU-2025:15327-1SUSE-SU-2025:02362-1
Also known as
USN-8697-1

Charts affected

2,554 by stars
ChartLatestAffected imagesRadar Score
changedetection-iozekker6Verified publisher1.102.01 of 1See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.7096dae27b5d6
coreutils@9.1-1
no fix listed

Open the chart page →

2,697
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,956
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
coreutils@8.28-1ubuntu1
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

9,296
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4

Open the chart page →

7,966

Container images carrying it

2,599 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
coreutils@9.1-1
no fix listed
1
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
coreutils@9.1-1
no fix listed
1
ghcr.io/openrelik/openrelik-mediator:latest42efc445b19e
coreutils@9.1-1
no fix listed
1
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
coreutils@9.1-1
no fix listed
1
ghcr.io/openrelik/openrelik-server:latestce1132261523
coreutils@9.1-1
no fix listed
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
coreutils@9.1-1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-chatbot604b1f493c92
coreutils@9.7-3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
coreutils@9.1-1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-mcp81db69cdd0b6
coreutils@9.7-3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
coreutils@9.1-1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
coreutils@9.1-1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-flagd-ui97a3d37e709f
coreutils@9.7-3
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
coreutils@9.1-1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
coreutils@9.1-1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/open-telemetry/demo:3.1.0-load-generatorb130d6cee6cb
coreutils@9.1-1
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
coreutils@9.1-1
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-agentd0f4ae0b32a8
coreutils@9.7-3
no fix listed
1
ghcr.io/open-telemetry/demo:3.1.0-addfd7a4697116
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
ghcr.io/open-telemetry/demo:3.1.0-frontend-proxyfd4da88bfeaa
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4
1
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
coreutils@9.1-1
no fix listed
1
ghcr.io/open-webui/open-terminal:0.13.0-slimdec44673c865
coreutils@9.7-3
no fix listed
1
ghcr.io/open-webui/terminals:latest5d2fd44366a4
coreutils@9.7-3
no fix listed
1
ghcr.io/open-webui/terminals-operator:latest6287ce8be502
coreutils@9.7-3
no fix listed
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
coreutils@9.1-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
coreutils@9.1-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
coreutils@9.7-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
coreutils@9.7-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
coreutils@9.7-3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
coreutils@9.1-1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
coreutils@9.1-1
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.