CVE-2025-52881
HighAdvisory
Published 5 Nov 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.2
- base score, highest
- EPSS
- 0.006
- 45th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 427
- of 17,781 indexed, latest versions
- Container images
- 344
- deployed by those charts
- Fix available
- 9 of 10
- affected packages
Red Hat Security Advisory: container-tools:rhel8 security update
Carried by container images the latest versions of 427 of 17,781 indexed charts deploy, on 344 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| containers-commonrpm | 2:1-64.module+el8.8.0+18571+eed59fc4 | 2:1-82.module+el8.10.0+23820+ae6deecc | 1 |
| criurpm | 3.15-4.module+el8.8.0+19044+f9982fd8 | 0:3.18-5.module+el8.10.0+23820+ae6deecc | 1 |
| fuse-overlayfsrpm | 1.11-1.module+el8.8.0+18634+9a268292 | 0:1.13-1.module+el8.10.0+23820+ae6deecc | 1 |
| libslirprpm | 4.4.0-1.module+el8.8.0+18060+3f21f2cc | 0:4.4.0-2.module+el8.10.0+23820+ae6deecc | 1 |
| runcrpm | 1:1.1.4-1.module+el8.8.0+18060+3f21f2cc | 4:1.2.9-2.module+el8.10.0+23820+ae6deecc | 1 |
| skopeorpm | 2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c | 2:1.14.5-5.module+el8.10.0+23820+ae6deecc | 1 |
| slirp4netnsrpm | 1.2.0-2.module+el8.8.0+18060+3f21f2cc | 0:1.2.3-1.module+el8.10.0+23820+ae6deecc | 1 |
| runcdeb | 1.1.5+ds1-1+deb12u1 | no fix listed | 9 |
| github.com/ | v0.0.0-20161107232042-8779fa57eb4a, v0.0.0-20230719051532-82f18fe0e44a, v0.1.1, v1.0.0-rc2.0.20190611121236-6cc515888830+33 more | 1.2.8 | 277 |
| github.com/ | v1.3.3, v1.8.0, v1.8.2, v1.10.0+5 more | 1.13.0 | 122 |
- OSV records
- DEBIAN-CVE-2025-52881GHSA-cgrx-mc8f-2prmRHSA-2025:23543
- Also known as
- GO-2025-4098
Charts affected
427 by stars
Container images carrying it
344 by charts deploying them
A fixed version is listed for 9 of the 10 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | bb5e052770e5 | github.com/ | 1.2.8 | 2 |
| registry.k8s.io/ | 5b161f051d01 | github.com/ | 1.2.8 | 2 |
| registry.k8s.io/ | b3aba22b1da8 | github.com/ | 1.2.8 | 2 |
| registry.k8s.io/ | d2fbc4ec70d8 | github.com/ | 1.2.8 | 2 |
| registry.k8s.io/ | 99e1ed9fbc8a | github.com/ | 1.13.0 | 2 |
| registry.k8s.io/ | 40adecbe3a40 | github.com/ | 1.13.0 | 2 |
| registry.k8s.io/ | 74a5cf9cfa9f | github.com/ | 1.13.0 | 2 |
| alpine/ | 00ac10bcb759 | github.com/ | 1.2.8 | 1 |
| alpine/ | a41efe02a041 | github.com/ | 1.2.8 | 1 |
| amazon/ | d8ab0eef5074 | github.com/ github.com/ | 1.2.8 1.13.0 | 1 |
| amazon/ | 73b79b02f03a | github.com/ github.com/ | 1.2.8 1.13.0 | 1 |
| amazon/ | e745d1783c93 | github.com/ github.com/ | 1.2.8 1.13.0 | 1 |
| amd64/ | e20a653e0f51 | github.com/ | 1.2.8 | 1 |
| anchore/ | bde9eedf639d | github.com/ github.com/ | 1.2.8 1.13.0 | 1 |
| ankane/ | d3a9d8ac27bb | github.com/ | 1.2.8 | 1 |
| anonaddy/ | 957a95565166 | github.com/ | 1.2.8 | 1 |
| apache/ | 3bb13d14f64a | github.com/ | 1.2.8 | 1 |
| apecloud/ | 5832d1a9097a | github.com/ | 1.13.0 | 1 |
| apecloud/ | c93655ccb2d7 | github.com/ | 1.13.0 | 1 |
| aquasec/ | 6e790e233872 | github.com/ | 1.13.0 | 1 |
| aquasec/ | 944a04445179 | github.com/ github.com/ | 1.2.8 1.13.0 | 1 |
| aquasec/ | 973d0df16189 | github.com/ github.com/ | 1.2.8 1.13.0 | 1 |
| artifacthub/ | 323d026e78c3 | github.com/ | 1.13.0 | 1 |
| artifacthub/ | 6596c8c4d955 | github.com/ | 1.2.8 | 1 |
| assistiot/ | c3adbab6a3e7 | github.com/ | 1.2.8 | 1 |
| assistiot/ | 0aacefac9677 | github.com/ | 1.2.8 | 1 |
| assistiot/ | 6a107f224c34 | github.com/ | 1.2.8 | 1 |
| assistiot/ | 0d3e6d35f168 | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | ac64829e45b3 | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | b6e381ffd6ae | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | cb04e49e6eb1 | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | 15edb5643b73 | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | 78847062532a | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | 43a70df0e7c6 | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | 0f7c8ac484ac | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | 3bb1deeaf9d0 | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | 3e65a6b89e38 | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | 8f7161d8ce19 | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | cf93e2772250 | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | 59293f5206b7 | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | 7788b908dd0d | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | bf01d031ba8c | github.com/ | 1.2.8 | 1 |
| bitnamilegacy/ | dba59d740e13 | github.com/ | 1.2.8 | 1 |
| breton/ | 41b1bb483aa2 | github.com/ | 1.13.0 | 1 |
| btcpayserver/ | e9585b68dc6b | github.com/ | 1.2.8 | 1 |
| conduction/ | 9cfeeb6c7c20 | github.com/ | 1.2.8 | 1 |
| conduction/ | c36094a41369 | github.com/ | 1.2.8 | 1 |
| conduction/ | ece1ab544c57 | github.com/ | 1.2.8 | 1 |
| conduction/ | 25415534d245 | github.com/ | 1.2.8 | 1 |
| conduction/ | 3423845692c1 | github.com/ | 1.2.8 | 1 |