StackRadar

CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,554
of 17,821 indexed, latest versions
Container images
2,613
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,554 of 17,821 indexed charts deploy, on 2,613 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.12,440
coreutilsrpm8.29-lp151.3.3, 8.29-lp152.4.7, 8.32-32.el9, 8.32-34.el9+7 more0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more155
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.177
OSV records
DEBIAN-CVE-2025-5278RHSA-2026:28911RHSA-2026:33124RLSA-2026:28911UBUNTU-CVE-2025-5278AZL-93060openSUSE-SU-2025:15327-1SUSE-SU-2025:02362-1
Also known as
USN-8697-1

Charts affected

2,554 by stars
ChartLatestAffected imagesRadar Score
changedetection-iozekker6Verified publisher1.102.01 of 1See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.7096dae27b5d6
coreutils@9.1-1
no fix listed

Open the chart page →

2,710
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
coreutils@9.7-3
no fix listed

Open the chart page →

1,593
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
coreutils@8.28-1ubuntu1
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

9,297
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4

Open the chart page →

7,966

Container images carrying it

2,613 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/vinny1892/octantis:latest45459c0910fc
coreutils@9.7-3
no fix listed
1
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
coreutils@9.1-1
no fix listed
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
coreutils@8.32-4.1ubuntu1.1
8.32-4.1ubuntu1.4
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
coreutils@8.32-4.1ubuntu1.1
8.32-4.1ubuntu1.4
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
coreutils@9.1-1
no fix listed
1
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
ghcr.io/wekan/ferretdb:latestebed9a5eaae0
coreutils@9.7-3
no fix listed
1
ghcr.io/wekan/wekan:v11.90078ca230c0df
coreutils@9.7-3
no fix listed
1
ghcr.io/wgbh-mla/chowda:main86ab9effd1a5
coreutils@9.7-3
no fix listed
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
coreutils@9.1-1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
coreutils@9.1-1
no fix listed
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
coreutils@9.1-1
no fix listed
1
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
coreutils@9.1-1
no fix listed
1
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
coreutils@9.1-1
no fix listed
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
coreutils@9.1-1
no fix listed
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
coreutils@9.1-1
no fix listed
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.5282f840612d9
coreutils@9.7-3
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
coreutils@9.1-1
no fix listed
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
coreutils@8.28-1ubuntu1
no fix listed
1
ghcr.io/wolveix/satisfactory-server:v1.9.10e0f2f8c97598
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
coreutils@9.1-1
no fix listed
1
ghcr.io/wrenix/autopush-rs/autoconnect:1.84.285f93ced88b2
coreutils@9.1-1
no fix listed
1
ghcr.io/wrenix/autopush-rs/autoendpoint:1.84.2d95e9a124eed
coreutils@9.1-1
no fix listed
1
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
coreutils@9.1-1
no fix listed
1
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
coreutils@8.32-39.el9
0:8.32-41.el9_8
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
coreutils@9.1-1
no fix listed
1
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
coreutils@9.7-3
no fix listed
1
ghcr.io/yourls/yourls:1.10.67550ff86b15f
coreutils@9.7-3
no fix listed
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
coreutils@9.1-1
no fix listed
1
ghcr.io/zammad/zammad:7.1.3-0014ce435c77651e
coreutils@9.7-3
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
coreutils@9.1-1
no fix listed
1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
coreutils@9.1-1
no fix listed
1
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
coreutils@9.1-1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
coreutils@9.1-1
no fix listed
1
ghcr.io/zystem-io/zymtrace-pub-gateway:26.9.2ae9ae0925ff8
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
1
mcr.microsoft.com/acstor/local-csi-driver:v0.3.0f9af53a79fd1
coreutils@9.4-6.azl3
9.4-7
1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
coreutils@8.30-3ubuntu2
no fix listed
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
coreutils@8.28-1ubuntu1
no fix listed
1
mcr.microsoft.com/mssql/server:2022-latest4402d880dd4c
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
coreutils@8.30-3ubuntu2
no fix listed
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
coreutils@8.28-1ubuntu1
no fix listed
1
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.15.059b9d0348428
coreutils@9.4-6.azl3
9.4-7
1
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver:v1.5.65f91243cfd60
coreutils@9.4-6.azl3
9.4-7
1
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds:v1.5.6cb0112636dc4
coreutils@9.4-6.azl3
9.4-7
1
mcr.microsoft.com/oss/v2/nvidia/k8s-device-plugin:v0.18.2-125a4e52c87bb9
coreutils@9.4-6.azl3
9.4-7
1
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
coreutils@9.1-1
no fix listed
1
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
coreutils@9.1-1
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.