CVE-2025-5278

Medium

Advisory

Published 27 May 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.4; base score, highest
EPSS: 0.003; 22nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,554; of 17,821 indexed, latest versions
Container images: 2,613; deployed by those charts
Fix available: 3 of 3; affected packages

Red Hat Security Advisory: coreutils security update

Carried by container images the latest versions of 2,554 of 17,821 indexed charts deploy, on 2,613 images.

Affected package	Affected versions	Fixed in	Images
coreutilsdeb	8.21-1ubuntu5, 8.21-1ubuntu5.1, 8.21-1ubuntu5.4, 8.25-2ubuntu2+17 more	8.32-4.1ubuntu1.4, 9.4-3ubuntu6.3, 9.7-3ubuntu2.1	2,440
coreutilsrpm	8.29-lp151.3.3, 8.29-lp152.4.7, 8.32-32.el9, 8.32-34.el9+7 more	0:8.32-41.el9_8, 0:9.5-8.el10_2, 8.32-150400.9.9.1, 9.4-7+1 more	155
coreutils-fromdeb	9.5-1ubuntu2+0.0.0~ubuntu24, 9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1	77

OSV records: DEBIAN-CVE-2025-5278 RHSA-2026:28911 RHSA-2026:33124 RLSA-2026:28911 UBUNTU-CVE-2025-5278 AZL-93060 openSUSE-SU-2025:15327-1 SUSE-SU-2025:02362-1
Also known as: USN-8697-1

Charts affected

2,554 by stars

Chart

Latest

Affected images

Radar Score

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	coreutils@9.1-1	no fix listed

Open the chart page →

2,710

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	coreutils@9.7-3	no fix listed

Open the chart page →

1,593

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	coreutils@8.28-1ubuntu1	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	coreutils@8.30-3ubuntu2	no fix listed

Open the chart page →

9,297

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-5278.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4

Open the chart page →

7,966

Container images carrying it

2,613 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
localstack/localstack :latest	4abc29e923e5	coreutils@9.7-3	no fix listed	2
locustio/locust :2.32.2	a0d4b88e42c1	coreutils@9.1-1	no fix listed	2
longhornio/longhorn-manager :v1.2.3	dca34321452c	coreutils@8.30-3ubuntu2	no fix listed	2
louislam/uptime-kuma :2.5.4	917318f9d7be	coreutils@9.1-1	no fix listed	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	coreutils@9.1-1	no fix listed	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	coreutils@9.1-1	no fix listed	2
mbentley/omada-controller :4.3	f4e682274bed	coreutils@8.28-1ubuntu1	no fix listed	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	coreutils@8.30-3ubuntu2	no fix listed	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	coreutils@9.1-1	no fix listed	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	coreutils@9.1-1	no fix listed	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	coreutils@9.1-1	no fix listed	2
nacos/nacos-server :latest	1c191c30c8cd	coreutils@9.7-3ubuntu2 coreutils-from@9.5-1ubuntu2+0.0.0~ubuntu25	9.7-3ubuntu2.1 9.7-3ubuntu2.1	2
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	coreutils@8.28-1ubuntu1	no fix listed	2
nginxinc/nginx-unprivileged :stable	cb92301e719d	coreutils@9.7-3	no fix listed	2
obolnetwork/charon :v1.10.0	278c7e2897b6	coreutils@9.7-3	no fix listed	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	coreutils@8.30-3ubuntu2	no fix listed	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	coreutils@8.25-2ubuntu3~16.04	no fix listed	2
opea/embedding-tei :1.0	5c9639de61c1	coreutils@9.1-1	no fix listed	2
opea/reranking-tei :1.0	e48613afb191	coreutils@9.1-1	no fix listed	2
opea/retriever-redis :1.0	eb746b263705	coreutils@9.1-1	no fix listed	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	coreutils@9.1-1	no fix listed	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	coreutils@9.1-1	no fix listed	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	coreutils@9.1-1	no fix listed	2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	coreutils@9.1-1	no fix listed	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	coreutils@9.1-1	no fix listed	2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	coreutils@9.1-1	no fix listed	2
opencsghq/label-studio :v2.5.0	47e22aa71870	coreutils@9.7-3	no fix listed	2
opendatacube/ows :latest	668cbb41473c	coreutils@9.4-3ubuntu6	9.4-3ubuntu6.3	2
openebs/etcd :3.6.4-debian-12-r0	c86c06f1ce6a	coreutils@9.1-1	no fix listed	2
patrikx3/p3x-redis-ui :latest	f19eb45b0694	coreutils@9.1-1	no fix listed	2
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	coreutils@9.7-3	no fix listed	2
pgvector/pgvector :0.8.6-pg16-bookworm :pg16	ccc6e83d6e35	coreutils@9.1-1	no fix listed	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	coreutils@8.32-4.1ubuntu1	8.32-4.1ubuntu1.4	2
polyaxon/polyaxon-agent :2.17.0	da877a2647fc	coreutils@9.7-3	no fix listed	2
polyaxon/polyaxon-cli :2.17.0	297ed47ed63a	coreutils@9.7-3	no fix listed	2
proxysql/proxysql :3.0.11	0e95d1b7cc32	coreutils@9.7-3	no fix listed	2
qdrant/qdrant :v1.19.1	12364fe851b9	coreutils@9.7-3	no fix listed	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	coreutils@9.1-1	no fix listed	2
quickwit/quickwit :v0.8.2	363ff56ce456	coreutils@9.1-1	no fix listed	2
rajnandan1/kener :3.2.19	30407afca731	coreutils@9.1-1	no fix listed	2
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	coreutils@8.32-4.1ubuntu1.1	8.32-4.1ubuntu1.4	2
redis/redis-stack-server :7.4.0 :7.4.0-v1	72035434f455	coreutils@8.32-4.1ubuntu1.2	8.32-4.1ubuntu1.4	2
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	coreutils@8.32-4.1ubuntu1.2	8.32-4.1ubuntu1.4	2
rotationalio/quarterdeck :0.16.0	0e7ad3a031dc	coreutils@9.1-1	no fix listed	2
safeglobal/safe-config-service :latest	09a5e495c219	coreutils@9.7-3	no fix listed	2
safeglobal/safe-transaction-service :latest	80db836cc5d5	coreutils@9.7-3	no fix listed	2
sigp/lighthouse :v8.1.3	44aa773dcf27	coreutils@8.32-4.1ubuntu1.2	8.32-4.1ubuntu1.4	2
sigp/lighthouse :latest	9a62bb870545	coreutils@8.32-4.1ubuntu1.3	8.32-4.1ubuntu1.4	2
sikalabs/hello-world-server :latest	5f49bf889a64	coreutils@9.7-3	no fix listed	2
smartedge/generic-multi-access-network-virtualization :1.0	4cd63c22ce36	coreutils@8.30-3ubuntu2	no fix listed	2