StackRadar

CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.003
21st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,511
of 17,790 indexed, latest versions
Container images
2,543
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,511 of 17,790 indexed charts deploy, on 2,543 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.12,376
coreutilsrpm8.29-lp151.3.3, 8.32-32.el9, 8.32-34.el9, 8.32-35.el9+6 more0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more155
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.175
OSV records
DEBIAN-CVE-2025-5278RHSA-2026:28911RHSA-2026:33124RLSA-2026:28911UBUNTU-CVE-2025-5278AZL-93060openSUSE-SU-2025:15327-1SUSE-SU-2025:02362-1
Also known as
USN-8697-1

Charts affected

2,511 by stars
ChartLatestAffected imagesRadar Score
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

11,675
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
coreutils@8.25-2ubuntu3~16.04
no fix listed

Open the chart page →

15,340
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

7,944
mariadbmariadbVerified publisher0.4.01 of 1See more

mariadb mariadb 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4

Open the chart page →

2,458
kubecostmesosphere-stable0.37.52 of 9See more

kubecost mesosphere-stable 0.37.5

2 of the 9 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
coreutils@9.1-1
no fix listed
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4

Open the chart page →

17,799
mogenius-operatormogeniusOfficialVerified publisher2.29.01 of 2See more

mogenius-operator mogenius 2.29.0

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
valkey/valkey:9.1.164e361b630ec
coreutils@9.7-3
no fix listed

Open the chart page →

956
mortalgpumortalgpuOfficialVerified publisher1.3.71 of 1See more

mortalgpu mortalgpu 1.3.7

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
quay.io/maxiv/mortalgpu:1.3.7e1c5c194bbf0
coreutils@8.32-39.el9
0:8.32-41.el9_8

Open the chart page →

379
nebraskanebraska3.0.01 of 2See more

nebraska nebraska 3.0.0

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
coreutils@9.1-1
no fix listed

Open the chart page →

4,077
observalobservalVerified publisher1.13.13 of 8See more

observal observal 1.13.1

3 of the 8 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.3810861a2e2d0
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4
library/postgres:16f1c3376c26f2
coreutils@9.7-3
no fix listed
ghcr.io/observal/observal-api:1.13.1153b8b893232
coreutils@9.7-3
no fix listed

Open the chart page →

5,916
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.6.10af7ea052cf21
coreutils@9.1-1
no fix listed

Open the chart page →

5,244
oesopsmxVerified publisher4.0.323 of 25See more

oes opsmx 4.0.32

3 of the 25 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
coreutils@8.25-2ubuntu3~16.04
no fix listed
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
coreutils@9.7-3
no fix listed

Open the chart page →

108,315
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
jbtronics/part-db1:latest5db71f6db59d
coreutils@9.1-1
no fix listed

Open the chart page →

3,344
redispascaliskeVerified publisher2.1.01 of 1See more

redis pascaliske 2.1.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/redis:8.0.3be0a135f1955
coreutils@9.1-1
no fix listed

Open the chart page →

1,869
phpmyadminphpmyadminVerified publisher1.0.31 of 1See more

phpmyadmin phpmyadmin 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apache3a8a8d6b5289
coreutils@9.7-3
no fix listed

Open the chart page →

2,650
prometheus-prefect-exporterprefectVerified publisher2026.8.71410241 of 1See more

prometheus-prefect-exporter prefect 2026.8.7141024

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
prefecthq/prometheus-prefect-exporter:4.0.050d527a190ae
coreutils@9.7-3
no fix listed

Open the chart page →

1,022
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
coreutils@9.1-1
no fix listed

Open the chart page →

5,465
repoflowrepoflow-helm-public0.9.14 of 8See more

repoflow repoflow-helm-public 0.9.1

4 of the 8 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.48.10f6c1c4b957d2
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
library/elasticsearch:8.15.0310b9fc03b06
coreutils@8.30-3ubuntu2
no fix listed
library/postgres:16.24aea012537ed
coreutils@9.1-1
no fix listed
minio/minio:RELEASE.2025-07-23T15-54-02Zd249d1fb6966
coreutils@8.32-39.el9
0:8.32-41.el9_8

Open the chart page →

13,647
nominatimrobjuz6.4.12 of 4See more

nominatim robjuz 6.4.1

2 of the 4 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
coreutils@9.1-1
no fix listed
mediagis/nominatim:5.3.27923a8e67197
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

8,783
rocketmq-clusterrocketmq12.6.02 of 2See more

rocketmq-cluster rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
coreutils@8.32-39.el9
0:8.32-41.el9_8

Open the chart page →

6,400
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

24,566
satisfactory-serversatisfactoryVerified publisher0.1.61 of 1See more

satisfactory-server satisfactory 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.10e103700ae6ae
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4

Open the chart page →

3,469
seldon-core-operatorseldon1.19.01 of 1See more

seldon-core-operator seldon 1.19.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
seldonio/seldon-core-operator:1.19.0544e3bf71bd1
coreutils@8.32-39.el9
0:8.32-41.el9_8

Open the chart page →

860
lldapself-hosters-by-nightVerified publisher0.5.21 of 2See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
coreutils@9.7-3
no fix listed

Open the chart page →

3,423
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
coreutils@9.7-3
no fix listed

Open the chart page →

5,926
kafka-chartsoldevelo-kafka-chart32.4.41 of 1See more

kafka-chart soldevelo-kafka-chart 32.4.4

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
coreutils@9.1-1
no fix listed

Open the chart page →

2,377
miniosolidchartsVerified publisher0.5.01 of 1See more

minio solidcharts 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/coollabsio/minio:RELEASE.2025-10-15T17-29-55Z69b55a1c1c5d
coreutils@8.32-39.el9
0:8.32-41.el9_8

Open the chart page →

1,070
spartanspartan0.9.11 of 1See more

spartan spartan 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

1,849
freeradiusstartechnicaVerified publisher1.2.01 of 1See more

freeradius startechnica 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.2.8af6fd34a5b78
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4

Open the chart page →

5,810
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

15,564
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
coreutils@9.1-1
no fix listed

Open the chart page →

7,075
pretixtechwolf12Verified publisher2026.7.03 of 3See more

pretix techwolf12 2026.7.0

3 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
coreutils@9.7-3
no fix listed
pretix/standalone:2026.7.05df3b7aa852e
coreutils@9.7-3
no fix listed
valkey/valkey:9.1.08e8d64b405ce
coreutils@9.7-3
no fix listed

Open the chart page →

9,894
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
coreutils@9.7-3
no fix listed

Open the chart page →

3,827
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
thmmniii/fbs-core:v1.27.15438517d9fc2
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4

Open the chart page →

28,634
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4

Open the chart page →

10,373
crossplaneupbound-stable2.4.1-up.11 of 5See more

crossplane upbound-stable 2.4.1-up.1

1 of the 5 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
coreutils@9.7-3
no fix listed

Open the chart page →

1,649
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
coreutils@8.28-1ubuntu1
no fix listed

Open the chart page →

18,177
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3

Open the chart page →

4,418
vrijbrpvrijbrpVerified publisher0.1.51 of 5See more

vrijbrp vrijbrp 0.1.5

1 of the 5 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
coreutils@9.7-3
no fix listed

Open the chart page →

8,836
wasmcloud-chartwasmcloud-chartVerified publisher0.7.21 of 2See more

wasmcloud-chart wasmcloud-chart 0.7.2

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
wasmcloud/wasmcloud:0.81.05c7acfe7e8e1
coreutils@9.1-1
no fix listed

Open the chart page →

3,478
argo-cdwenerme10.9.11 of 3See more

argo-cd wenerme 10.9.1

1 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1

Open the chart page →

3,003
wgerwgerOfficialVerified publisher1.0.05 of 8See more

wger wger 1.0.0

5 of the 8 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
journeyapps/powersync-service:latestbf46f66e5dcc
coreutils@9.7-3
no fix listed
library/nginx:stabled5792f71a949
coreutils@9.7-3
no fix listed
library/postgres:15.186eb0add3b77c
coreutils@9.7-3
no fix listed
library/redis:8.8.0234c902a2db4
coreutils@9.7-3
no fix listed
wger/server:2.6997ead43aabd
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

8,634
windmillwindmill4.0.2641 of 3See more

windmill windmill 4.0.264

1 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
coreutils@9.7-3
no fix listed

Open the chart page →

1,649
paperlesszekker6Verified publisher11.8.01 of 1See more

paperless zekker6 11.8.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
coreutils@9.7-3
no fix listed

Open the chart page →

4,651
kubernetes-etcd-backupadfinisVerified publisher1.6.21 of 1See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
coreutils@8.32-39.el9
0:8.32-41.el9_8

Open the chart page →

1,851
paperless-ngxadnoctemVerified publisher0.4.23 of 5See more

paperless-ngx adnoctem 0.4.2

3 of the 5 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4
gotenberg/gotenberg:8.36.087c16b9f3642
coreutils@9.7-3
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
coreutils@9.7-3
no fix listed

Open the chart page →

19,828
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

13,671
agentareaagentareaVerified publisher0.0.184 of 16See more

agentarea agentarea 0.0.18

4 of the 16 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latest9e15e16fa758
coreutils@9.7-3
no fix listed
agentarea/agentarea-mcp-runner:latestd3c209a5d531
coreutils@9.1-1
no fix listed
agentarea/agentarea-worker:latest1e5cb68ee77a
coreutils@9.7-3
no fix listed
valkey/valkey:9.0.1546304417fea
coreutils@9.7-3
no fix listed

Open the chart page →

15,049
akeyless-api-gatewayakeyless-services-helmVerified publisher1.62.231 of 1See more

akeyless-api-gateway akeyless-services-helm 1.62.23

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
akeyless/base:latest759e4289fae8
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

2,411
icat-k8salba-helm-chartsVerified publisher1.1.01 of 4See more

icat-k8s alba-helm-charts 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
payara/server-full:7.2026.2-jdk2531f1253f0cf8
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4

Open the chart page →

3,746
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
coreutils@9.7-3
no fix listed

Open the chart page →

2,626

Container images carrying it

2,543 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
coreutils@9.1-1
no fix listed
1
ghcr.io/stac-utils/stac-fastapi-pgstac:6.4.0fa35b9519abb
coreutils@9.7-3
no fix listed
1
ghcr.io/stac-utils/titiler-pgstac:3.1.0788173c5876d
coreutils@9.7-3
no fix listed
1
ghcr.io/star-whale/server:0.6.158368359c8dd0
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/steadybit/agent:2.4.52bc7b260e44e
coreutils@9.7-3
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
coreutils@9.7-3
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
coreutils@9.7-3
no fix listed
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
1
ghcr.io/streamingfast/substreams-sink-kv:v2.3.026953ec68d5d
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/streamingfast/substreams-sink-noop:v1.4.0d7c43c3135c6
coreutils@8.30-3ubuntu2
no fix listed
1
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
coreutils@9.1-1
no fix listed
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/substra/substra-frontend:1.0.0e230e6ac0722
coreutils@9.1-1
no fix listed
1
ghcr.io/sudo-kraken/3d-printing-cost-calculators:v1.1.1220c5e4e1a3d
coreutils@9.1-1
no fix listed
1
ghcr.io/sudo-kraken/authentik-webfinger-proxy:v1.1.1e1351a977607
coreutils@9.1-1
no fix listed
1
ghcr.io/sudo-kraken/fantasy-dice-chamber:v1.3.299fd4cb0f4fe
coreutils@9.1-1
no fix listed
1
ghcr.io/sudo-kraken/finances-tracker:v1.1.1c73527cde81c
coreutils@9.1-1
no fix listed
1
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
coreutils@9.1-1
no fix listed
1
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/tarampampam/video-dl-bot:1.4.36daa2dc7556b
coreutils@9.7-3
no fix listed
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
coreutils@9.1-1
no fix listed
1
ghcr.io/theduffman85/crowdsec-web-ui:2026.8.3bfadbab9a72c
coreutils@9.7-3
no fix listed
1
ghcr.io/toeverything/affine:0.27.4b649f5ce2384
coreutils@9.1-1
no fix listed
1
ghcr.io/topolvm/pie:0.18.0aa467443e407
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
ghcr.io/trow-registry/trow:0.10.075b7d2dcdb91
coreutils@9.7-3
no fix listed
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
coreutils@9.1-1
no fix listed
1
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
coreutils@9.7-3
no fix listed
1
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
coreutils@9.7-3ubuntu2
coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25
9.7-3ubuntu2.1
9.7-3ubuntu2.1
1
ghcr.io/vinny1892/octantis:latest45459c0910fc
coreutils@9.7-3
no fix listed
1
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
coreutils@9.1-1
no fix listed
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
coreutils@8.32-4.1ubuntu1.1
8.32-4.1ubuntu1.4
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
coreutils@8.32-4.1ubuntu1.1
8.32-4.1ubuntu1.4
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
coreutils@9.1-1
no fix listed
1
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/wekan/ferretdb:latest6cb94aa01999
coreutils@9.7-3
no fix listed
1
ghcr.io/wekan/wekan:v11.83137951e3fb40
coreutils@9.7-3
no fix listed
1
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
coreutils@9.7-3
no fix listed
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
coreutils@9.1-1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
coreutils@9.1-1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.