StackRadar

CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.4
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,519
of 17,821 indexed, latest versions
Container images
2,564
deployed by those charts
Fix available
3 of 3
affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,519 of 17,821 indexed charts deploy, on 2,564 images.

Affected packageAffected versionsFixed inImages
coreutilsdeb8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.12,394
coreutilsrpm8.29-lp151.3.3, 8.29-lp152.4.7, 8.32-32.el9, 8.32-34.el9+7 more0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more154
coreutils-fromdeb9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu259.7-3ubuntu2.175
OSV records
DEBIAN-CVE-2025-5278RHSA-2026:28911RHSA-2026:33124RLSA-2026:28911UBUNTU-CVE-2025-5278AZL-93060openSUSE-SU-2025:15327-1SUSE-SU-2025:02362-1
Also known as
USN-8697-1

Charts affected

2,519 by stars
ChartLatestAffected imagesRadar Score
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
coreutils@9.7-3
no fix listed

Open the chart page →

3,523
rundeckdwardu-helm-charts0.3.42 of 2See more

rundeck dwardu-helm-charts 0.3.4

2 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
coreutils@9.7-3
no fix listed
rundeck/rundeck:3.2.74d64fe56f767
coreutils@8.25-2ubuntu3~16.04
no fix listed

Open the chart page →

19,999
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
coreutils@9.1-1
no fix listed

Open the chart page →

9,455
base-consensusdysnixVerified publisher0.2.01 of 1See more

base-consensus dysnix 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

1,781
bitcoinddysnixVerified publisher0.4.31 of 2See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3

Open the chart page →

2,000
gcp-local-ssd-raiddysnixVerified publisher0.1.71 of 2See more

gcp-local-ssd-raid dysnix 0.1.7

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
coreutils@9.1-1
no fix listed

Open the chart page →

2,443
rethdysnixVerified publisher0.0.111 of 2See more

reth dysnix 0.0.11

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v2.2.0505fca5e87d6
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

1,095
aerios-k8s-shimeclipse-aeriosVerified publisher1.0.01 of 1See more

aerios-k8s-shim eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
coreutils@9.7-3
no fix listed

Open the chart page →

1,506
hlo-allocatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-allocator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
coreutils@9.7-3
no fix listed

Open the chart page →

1,557
hlo-data-aggregatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-data-aggregator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
coreutils@9.7-3
no fix listed

Open the chart page →

1,716
hlo-deployment-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-deployment-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
coreutils@9.7-3
no fix listed

Open the chart page →

1,726
hlo-fe-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-fe-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
coreutils@9.7-3
no fix listed

Open the chart page →

1,716
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
coreutils@9.1-1
no fix listed

Open the chart page →

4,690
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
coreutils@9.7-3
no fix listed

Open the chart page →

13,756
orion-ldeclipse-aeriosVerified publisher1.0.01 of 2See more

orion-ld eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/mongo:7.0.12ae1cf99fa7bf
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4

Open the chart page →

9,829
redpandaeclipse-aeriosVerified publisher5.7.81 of 4See more

redpanda eclipse-aerios 5.7.8

1 of the 4 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
redpandadata/redpanda:latest468bd13a9f2b
coreutils@9.7-3
no fix listed

Open the chart page →

1,620
self-awarenesseclipse-aeriosVerified publisher1.4.41 of 2See more

self-awareness eclipse-aerios 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
coreutils@9.7-3
no fix listed

Open the chart page →

2,275
self-orchestratoreclipse-aeriosVerified publisher1.2.01 of 1See more

self-orchestrator eclipse-aerios 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
eclipseaerios/self-orchestrator:1.2.08b123bec5679
coreutils@9.1-1
no fix listed

Open the chart page →

2,444
trustmanagereclipse-aeriosVerified publisher1.0.01 of 1See more

trustmanager eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
coreutils@9.7-3
no fix listed

Open the chart page →

1,969
marblerunedgelesssysVerified publisher1.9.21 of 1See more

marblerun edgelesssys 1.9.2

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4

Open the chart page →

1,873
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
coreutils@8.28-1ubuntu1
no fix listed

Open the chart page →

11,042
pagesedgwarepages1.0.02 of 3See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
coreutils@8.30-3ubuntu2
no fix listed
flyway/flyway:6.4.422d97ceb0c47
coreutils@8.28-1ubuntu1
no fix listed

Open the chart page →

20,285
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

5,178
vaultwardenedudip0.11.01 of 1See more

vaultwarden edudip 0.11.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
coreutils@9.7-3
no fix listed

Open the chart page →

2,084
esphomeegebackVerified publisher2.0.251 of 1See more

esphome egeback 2.0.25

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
esphome/esphome:2026.7.44866347cb5b4
coreutils@9.7-3
no fix listed

Open the chart page →

3,242
teslamateegebackVerified publisher2.1.91 of 1See more

teslamate egeback 2.1.9

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
teslamate/teslamate:4.1.1cc87082e7d67
coreutils@9.7-3
no fix listed

Open the chart page →

1,056
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

7,480
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
coreutils@9.1-1
no fix listed

Open the chart page →

30,832
egressgatewayegressgateway0.6.92 of 2See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3
ghcr.io/spidernet-io/egressgateway-controller:v0.6.99deda7b68c34
coreutils@9.4-3ubuntu6
9.4-3ubuntu6.3

Open the chart page →

4,004
eg-universal-agent-operatoreg-universal-agent-operatorVerified publisher0.0.51 of 1See more

eg-universal-agent-operator eg-universal-agent-operator 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
eginnovations/universal-agent-operator:0.0.11b8e3e26dca1b
coreutils@8.32-39.el9
0:8.32-41.el9_8

Open the chart page →

581
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
coreutils@8.28-1ubuntu1
no fix listed

Open the chart page →

8,069
postgresqleks-storageclass0.1.01 of 1See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
coreutils@9.7-3
no fix listed

Open the chart page →

1,699
netobserv-flowelastiflowVerified publisher0.11.01 of 1See more

netobserv-flow elastiflow 0.11.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
elastiflow/flow-collector:7.26.0fee67842e16b
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

1,519
seafileeleksbai0.1.13 of 3See more

seafile eleksbai 0.1.1

3 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/mariadb:10.692e50059ea0a
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4
library/memcached:1.675c93cc91e76
coreutils@9.7-3
no fix listed
seafileltd/seafile-mc:9.0.106693911bcc40
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

92,653
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/logstash:9.1.233eae14f0867
coreutils@8.32-39.el9
0:8.32-41.el9_8

Open the chart page →

3,177
rabbitmqemberstackVerified publisher1.0.211 of 1See more

rabbitmq emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/rabbitmq:managementffd1b50c522a
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

1,068
redisemberstackVerified publisher1.0.211 of 1See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/redis:8.0.2b43d2dcbbdb1
coreutils@9.1-1
no fix listed

Open the chart page →

2,023
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

10,672
kube-ecp-stackemqx-operator2.5.13 of 16See more

kube-ecp-stack emqx-operator 2.5.1

3 of the 16 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
datalayers/datalayers:v2.2.1017b292079239
coreutils@8.32-4.1ubuntu1.2
8.32-4.1ubuntu1.4
emqx/ecp-ui:2.5.1e33e9816f147
coreutils@9.1-1
no fix listed
library/telegraf:1.27507a3eecf809
coreutils@9.1-1
no fix listed

Open the chart page →

24,075
enclaveenclave0.1.11 of 1See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
enclavenetworks/enclave:latest0a99759300d1
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

2,762
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
coreutils@9.1-1
no fix listed

Open the chart page →

6,219
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
coreutils@9.1-1
no fix listed

Open the chart page →

4,005
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
coreutils@8.32-4.1ubuntu1.3
8.32-4.1ubuntu1.4

Open the chart page →

2,174
backbone-helm-chartenmeshed-backboneVerified publisher7.2.11 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.1

1 of the 7 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
coreutils@9.4-3ubuntu6.2
9.4-3ubuntu6.3

Open the chart page →

3,934
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
coreutils@8.30-3ubuntu2
no fix listed

Open the chart page →

5,173
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
coreutils@9.7-3
no fix listed

Open the chart page →

1,956
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
coreutils@9.7-3
no fix listed

Open the chart page →

7,466
eolicplantseolicplantsVerified publisher0.1.03 of 7See more

eolicplants eolicplants 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
coreutils@8.28-1ubuntu1
no fix listed
library/rabbitmq:3-managemente582c0bc7766
coreutils@9.4-3ubuntu6.1
9.4-3ubuntu6.3
oscarsotosanchez/weatherservice:v1.0911ec961d10b
coreutils@8.28-1ubuntu1
no fix listed

Open the chart page →

27,477
eoloPlanteolo-plannerVerified publisher0.1.04 of 7See more

eoloPlant eolo-planner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
coreutils@8.28-1ubuntu1
no fix listed
library/mongo:5.0-focal5e15a3f014ed
coreutils@8.30-3ubuntu2
no fix listed
library/rabbitmq:3.11-managementc3f70098e01d
coreutils@8.32-4.1ubuntu1.1
8.32-4.1ubuntu1.4
mastercloudapps/planner:v1.2340a950b311b2
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4

Open the chart page →

27,879
eoloplannereoloplannerVerified publisher0.1.04 of 7See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-5278.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
coreutils@8.32-4.1ubuntu1
8.32-4.1ubuntu1.4
codeurjc/toposervice:v1.09fb4c11e6a49
coreutils@8.28-1ubuntu1
no fix listed
library/mongo:5.0.6-focal8e70544b6c76
coreutils@8.30-3ubuntu2
no fix listed
library/rabbitmq:3.9-management8a279e9396a8
coreutils@8.32-4.1ubuntu1.1
8.32-4.1ubuntu1.4

Open the chart page →

32,551

Container images carrying it

2,564 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
coreutils@8.32-39.el9
0:8.32-41.el9_8
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
coreutils@8.32-39.el9
0:8.32-41.el9_8
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
coreutils@9.1-1
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
coreutils@9.1-1
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.26.78b9a78d101a1
coreutils@9.1-1
no fix listed
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
coreutils@9.1-1
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
coreutils@9.7-3
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
coreutils@9.1-1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
coreutils@9.1-1
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
coreutils@9.1-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
coreutils@9.1-1
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
coreutils@9.1-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
coreutils@9.1-1
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
coreutils@9.1-1
no fix listed
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.