StackRadar

CVE-2025-52881

High

Advisory

Published 5 Nov 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
427
of 17,781 indexed, latest versions
Container images
344
deployed by those charts
Fix available
9 of 10
affected packages

Red Hat Security Advisory: container-tools:rhel8 security update

Carried by container images the latest versions of 427 of 17,781 indexed charts deploy, on 344 images.

Affected packageAffected versionsFixed inImages
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-82.module+el8.10.0+23820+ae6deecc1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+23820+ae6deecc1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+23820+ae6deecc1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+23820+ae6deecc1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc4:1.2.9-2.module+el8.10.0+23820+ae6deecc1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.5-5.module+el8.10.0+23820+ae6deecc1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+23820+ae6deecc1
runcdeb1.1.5+ds1-1+deb12u1no fix listed9
github.com/opencontainers/runcgolangv0.0.0-20161107232042-8779fa57eb4a, v0.0.0-20230719051532-82f18fe0e44a, v0.1.1, v1.0.0-rc2.0.20190611121236-6cc515888830+33 more1.2.8277
github.com/opencontainers/selinuxgolangv1.3.3, v1.8.0, v1.8.2, v1.10.0+5 more1.13.0122
OSV records
DEBIAN-CVE-2025-52881GHSA-cgrx-mc8f-2prmRHSA-2025:23543
Also known as
GO-2025-4098

Charts affected

427 by stars
ChartLatestAffected imagesRadar Score
ingress-nginx-external-lbsuminhong1.0.01 of 2See more

ingress-nginx-external-lb suminhong 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
github.com/opencontainers/runc@v1.1.12
1.2.8

Open the chart page →

2,094
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

12,655
ingress-nginxsvtech-public-helm-charts1.0.01 of 1See more

ingress-nginx svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.45b161f051d01
github.com/opencontainers/runc@v1.1.9
1.2.8

Open the chart page →

1,480
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

5,841
explorersynapse0.2.162 of 6See more

explorer synapse 0.2.16

2 of the 6 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
yandex/clickhouse-server:latest1cbf75aabe1e
github.com/opencontainers/runc@v1.0.1
1.2.8
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
github.com/opencontainers/runc@v1.1.5
1.2.8

Open the chart page →

8,518
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,480
act-runnertektonops0.1.21 of 2See more

act-runner tektonops 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
library/docker:23.0.6-dindafa5d5134900
github.com/opencontainers/runc@v1.1.7
1.2.8

Open the chart page →

4,212
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

17,461
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

20,270
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
pysga1996/redis:latest3af6d0c7db19
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

4,661
steamcmdthetredevVerified publisher1.0.91 of 1See more

steamcmd thetredev 1.0.9

1 of the 1 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

1,075
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/opencontainers/selinux@v1.11.0
1.13.0

Open the chart page →

2,477
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,510
tfy-inferentia-operatortruefoundryVerified publisher0.2.81 of 3See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
github.com/opencontainers/selinux@v1.11.0
1.13.0

Open the chart page →

2,902
phonebook-chartusuladams2Verified publisher0.2.11 of 3See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

3,176
devportalveecode-platform-nextVerified publisher0.1.211 of 1See more

devportal veecode-platform-next 0.1.21

1 of the 1 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinnedc443520aebf7
github.com/opencontainers/selinux@v1.12.0
1.13.0

Open the chart page →

1,787
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,429
wallarm-ingress-rcwallarmVerified publisher4.8.41 of 2See more

wallarm-ingress-rc wallarm 4.8.4

1 of the 2 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
wallarm/ingress-controller:4.8.0-1a591b9c91570
github.com/opencontainers/runc@v1.1.7
1.2.8

Open the chart page →

2,635
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,552
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/opencontainers/selinux@v1.10.0
1.13.0

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/opencontainers/selinux@v1.10.0
1.13.0

Open the chart page →

11,784
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

9,248
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/opencontainers/runc@v1.1.5
github.com/opencontainers/selinux@v1.10.0
1.2.8
1.13.0

Open the chart page →

2,022
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
github.com/opencontainers/selinux@v1.11.0
1.13.0

Open the chart page →

9,381

Container images carrying it

344 by charts deploying them

A fixed version is listed for 9 of the 10 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/conductionnl/digispoof-interface-php:latest03aba499950f
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/eav-component-php:latest24bbca4a52a8
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/education-component-php:latestda6b05a1a601
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/eherkenning-ui-php:latestdeed102b4255
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/grafregistratiecomponent-php:latest35225eaa87ab
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/instemmingservice-php:latest4ffe222b3e3a
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/landelijketabellencatalogus-php:latest26d91dcbba56
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/loggingcomponent-php:latest834b8e1af290
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/logicservice-php:latest72aae2080595
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/medewerkercatalogus-php:latest1ea5412bed26
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/memo-component-php:latestef77f4c089a1
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/notification-component-php:latestcd9656e6bc2c
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/ocatiecatalogus-php:latestc22764cbfa97
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/orderregistratiecomponent-php:latestd17257e4fa27
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/procestypecatalogus-php:latest956c4fb64796
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/productenendienstencatalogus-php:latest7242da105081
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/proto-component-commonground-php:latesteb36ead1954e
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/review-component-php:latestafe623824b82
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/user-component-php:latest198db44fabb5
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/waardepapieren-balie-php:latestf36c423cd259
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/waardepapieren-php:latestb2666ffcbad8
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/waardepapieren-register-php:latest9affab218351
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/opencontainers/runc@v0.1.1
1.2.8
1
ghcr.io/dysnix/bitnami/mongodb:4.4.11-debian-10-r5073116e61007
github.com/opencontainers/runc@v1.0.1
1.2.8
1
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
github.com/opencontainers/runc@v1.1.10
github.com/opencontainers/selinux@v1.11.0
1.2.8
1.13.0
1
ghcr.io/jaconi-io/koptimize:1.2.5aca1bbd609b6
github.com/opencontainers/selinux@v1.10.0
1.13.0
1
ghcr.io/keptn/scheduler:v0.8.20f7d277bb2b2
github.com/opencontainers/selinux@v1.10.0
1.13.0
1
ghcr.io/kgma74/dockyard:0.4.0b40439329191
github.com/opencontainers/selinux@v1.11.0
1.13.0
1
ghcr.io/kluster-manager/multicluster-controlplane:latest6de40f528be9
github.com/opencontainers/selinux@v1.11.0
1.13.0
1
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
github.com/opencontainers/selinux@v1.11.1
1.13.0
1
ghcr.io/loft-sh/devpod-pro:0.0.0-ci.4-do-not-use5dfa86b6451f
github.com/opencontainers/runc@v1.1.7
github.com/opencontainers/selinux@v1.11.0
1.2.8
1.13.0
1
ghcr.io/loft-sh/vcluster-control-plane:0.0.0-ci.4-do-not-use45e744fc623f
github.com/opencontainers/runc@v1.1.7
github.com/opencontainers/selinux@v1.11.0
1.2.8
1.13.0
1
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
github.com/opencontainers/selinux@v1.12.0
1.13.0
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
github.com/opencontainers/runc@v1.1.5
github.com/opencontainers/selinux@v1.11.0
1.2.8
1.13.0
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
github.com/opencontainers/selinux@v1.11.0
1.13.0
1
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
github.com/opencontainers/runc@v1.2.4
github.com/opencontainers/selinux@v1.11.0
1.2.8
1.13.0
1
ghcr.io/parca-dev/parca-agent:v0.42.0adc0eeb4dd05
github.com/opencontainers/selinux@v1.12.0
1.13.0
1
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins:19f19457ae7cec86457b0411543a3cf21dd9f95a8edc39be1e22
github.com/opencontainers/selinux@v1.12.0
1.13.0
1
ghcr.io/substra/fabric-peer:0.2.4f681e0343a31
github.com/opencontainers/runc@v1.0.0-rc8
1.2.8
1
ghcr.io/substra/fabric-tools:0.2.43491a0f31c4a
github.com/opencontainers/runc@v1.0.0-rc8
1.2.8
1
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
github.com/opencontainers/runc@v1.1.5
1.2.8
1
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
github.com/opencontainers/runc@v1.1.0
1.2.8
1
ghcr.io/warpstreamlabs/bento:1.8.121715979aefa
github.com/opencontainers/runc@v1.1.12
1.2.8
1
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
github.com/opencontainers/runc@v1.1.0
1.2.8
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.