StackRadar

CVE-2025-52881

High

Advisory

Published 5 Nov 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.006
45th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
427
of 17,781 indexed, latest versions
Container images
344
deployed by those charts
Fix available
9 of 10
affected packages

Red Hat Security Advisory: container-tools:rhel8 security update

Carried by container images the latest versions of 427 of 17,781 indexed charts deploy, on 344 images.

Affected packageAffected versionsFixed inImages
containers-commonrpm2:1-64.module+el8.8.0+18571+eed59fc42:1-82.module+el8.10.0+23820+ae6deecc1
criurpm3.15-4.module+el8.8.0+19044+f9982fd80:3.18-5.module+el8.10.0+23820+ae6deecc1
fuse-overlayfsrpm1.11-1.module+el8.8.0+18634+9a2682920:1.13-1.module+el8.10.0+23820+ae6deecc1
libslirprpm4.4.0-1.module+el8.8.0+18060+3f21f2cc0:4.4.0-2.module+el8.10.0+23820+ae6deecc1
runcrpm1:1.1.4-1.module+el8.8.0+18060+3f21f2cc4:1.2.9-2.module+el8.10.0+23820+ae6deecc1
skopeorpm2:1.11.2-0.2.module+el8.8.0+18251+ad5b274c2:1.14.5-5.module+el8.10.0+23820+ae6deecc1
slirp4netnsrpm1.2.0-2.module+el8.8.0+18060+3f21f2cc0:1.2.3-1.module+el8.10.0+23820+ae6deecc1
runcdeb1.1.5+ds1-1+deb12u1no fix listed9
github.com/opencontainers/runcgolangv0.0.0-20161107232042-8779fa57eb4a, v0.0.0-20230719051532-82f18fe0e44a, v0.1.1, v1.0.0-rc2.0.20190611121236-6cc515888830+33 more1.2.8277
github.com/opencontainers/selinuxgolangv1.3.3, v1.8.0, v1.8.2, v1.10.0+5 more1.13.0122
OSV records
DEBIAN-CVE-2025-52881GHSA-cgrx-mc8f-2prmRHSA-2025:23543
Also known as
GO-2025-4098

Charts affected

427 by stars
ChartLatestAffected imagesRadar Score
ingress-nginx-external-lbsuminhong1.0.01 of 2See more

ingress-nginx-external-lb suminhong 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
github.com/opencontainers/runc@v1.1.12
1.2.8

Open the chart page →

2,094
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

12,655
ingress-nginxsvtech-public-helm-charts1.0.01 of 1See more

ingress-nginx svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.45b161f051d01
github.com/opencontainers/runc@v1.1.9
1.2.8

Open the chart page →

1,480
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

5,841
explorersynapse0.2.162 of 6See more

explorer synapse 0.2.16

2 of the 6 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
yandex/clickhouse-server:latest1cbf75aabe1e
github.com/opencontainers/runc@v1.0.1
1.2.8
ghcr.io/synapsecns/sanguine/explorer:latest00131e3d1eaf
github.com/opencontainers/runc@v1.1.5
1.2.8

Open the chart page →

8,518
taalhuizen-servicetaalhuizen-service1.0.01 of 3See more

taalhuizen-service taalhuizen-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/taalhuizen-service-php:latest04f1b7f0d573
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,480
act-runnertektonops0.1.21 of 2See more

act-runner tektonops 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
library/docker:23.0.6-dindafa5d5134900
github.com/opencontainers/runc@v1.1.7
1.2.8

Open the chart page →

4,212
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

17,461
vehicle-dashboardtest-vehi-dash0.1.01 of 7See more

vehicle-dashboard test-vehi-dash 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
library/mongo:5.0.217c81758cb295
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

20,270
thanhvt27-lab-k8sthanh-vtVerified publisher0.1.41 of 5See more

thanhvt27-lab-k8s thanh-vt 0.1.4

1 of the 5 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
pysga1996/redis:latest3af6d0c7db19
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

4,661
steamcmdthetredevVerified publisher1.0.91 of 1See more

steamcmd thetredev 1.0.9

1 of the 1 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/thetredev/steamcmd:srcds-20240309dbb0f042cb31
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

1,075
harbor-scanner-trivytrivy-operator0.31.21 of 1See more

harbor-scanner-trivy trivy-operator 0.31.2

1 of the 1 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
aquasec/harbor-scanner-trivy:0.31.26e790e233872
github.com/opencontainers/selinux@v1.11.0
1.13.0

Open the chart page →

2,477
trouw-servicetrouw-service1.0.01 of 3See more

trouw-service trouw-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/trouw-service-php:latestf745e2870692
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,510
tfy-inferentia-operatortruefoundryVerified publisher0.2.81 of 3See more

tfy-inferentia-operator truefoundry 0.2.8

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
public.ecr.aws/eks-distro/kubernetes/kube-scheduler:v1.29.14-eks-1-29-lateste7e1db003e6a
github.com/opencontainers/selinux@v1.11.0
1.13.0

Open the chart page →

2,902
phonebook-chartusuladams2Verified publisher0.2.11 of 3See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

3,176
devportalveecode-platform-nextVerified publisher0.1.211 of 1See more

devportal veecode-platform-next 0.1.21

1 of the 1 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
veecode/devportaldigest-pinnedc443520aebf7
github.com/opencontainers/selinux@v1.12.0
1.13.0

Open the chart page →

1,787
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,429
wallarm-ingress-rcwallarmVerified publisher4.8.41 of 2See more

wallarm-ingress-rc wallarm 4.8.4

1 of the 2 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
wallarm/ingress-controller:4.8.0-1a591b9c91570
github.com/opencontainers/runc@v1.1.7
1.2.8

Open the chart page →

2,635
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
github.com/opencontainers/runc@v0.1.1
1.2.8

Open the chart page →

7,552
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/opencontainers/selinux@v1.10.0
1.13.0

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/opencontainers/selinux@v1.10.0
1.13.0

Open the chart page →

11,784
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
github.com/opencontainers/runc@v1.1.0
1.2.8

Open the chart page →

9,248
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/opencontainers/runc@v1.1.5
github.com/opencontainers/selinux@v1.10.0
1.2.8
1.13.0

Open the chart page →

2,022
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-52881.

Container imageDigestPackageFixed in
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
github.com/opencontainers/selinux@v1.11.0
1.13.0

Open the chart page →

9,381

Container images carrying it

344 by charts deploying them

A fixed version is listed for 9 of the 10 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:5.74bc6bc963e6d
github.com/opencontainers/runc@v1.1.0
1.2.8
22
library/mysql:8.0.28fc77d54cacef
github.com/opencontainers/runc@v1.0.1
1.2.8
11
quay.io/prometheus/node-exporter:v1.8.24032c6d5bfd7
github.com/opencontainers/selinux@v1.11.0
1.13.0
9
wurstmeister/kafka:latest2d4bbf9cc83d
github.com/opencontainers/runc@v1.1.0
1.2.8
7
quay.io/devtron/postgres:14.91b594392f7cb
github.com/opencontainers/runc@v1.1.0
1.2.8
6
quay.io/prometheus/node-exporter:v1.10.2337ff1d356b6
github.com/opencontainers/selinux@v1.12.0
1.13.0
6
quay.io/prometheus/node-exporter:v1.8.1fa7fa12a57ef
github.com/opencontainers/selinux@v1.11.0
1.13.0
6
library/redis:5:5.0fc5ecd863862
github.com/opencontainers/runc@v1.0.1
1.2.8
5
hyperledger/fabric-peer:2.46ff36af21eb1
github.com/opencontainers/runc@v1.0.0-rc8
1.2.8
4
hyperledger/fabric-tools:2.4b1194f509085
github.com/opencontainers/runc@v1.0.0-rc8
1.2.8
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
github.com/opencontainers/runc@v1.1.0
1.2.8
4
quay.io/prometheus/node-exporter:v1.5.039c642b2b337
github.com/opencontainers/selinux@v1.10.2
1.13.0
4
quay.io/prometheus/node-exporter:v1.9.1d00a542e409e
github.com/opencontainers/selinux@v1.11.1
1.13.0
4
argoproj/argocd:v1.8.1830e86cacefd
github.com/opencontainers/runc@v0.1.1
1.2.8
3
bitnamilegacy/mongodb:6.0.4-debian-11-r10016dce036593
github.com/opencontainers/runc@v1.1.0
1.2.8
3
library/docker:20.10-dind:20-dindaf96c680a7e1
github.com/opencontainers/runc@v1.1.5
1.2.8
3
library/postgres:14.13162a6ead070
github.com/opencontainers/runc@v1.0.1
1.2.8
3
library/postgres:115d2aa4a7b5f9
github.com/opencontainers/runc@v1.0.1
1.2.8
3
gcr.io/trillian-opensource-ci/db_server2a685a38dd01
github.com/opencontainers/runc@v1.1.0
1.2.8
3
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
github.com/opencontainers/runc@v1.1.5
github.com/opencontainers/selinux@v1.11.0
1.2.8
1.13.0
3
quay.io/prometheus/node-exporter:v1.6.181f94e50ea37
github.com/opencontainers/selinux@v1.11.0
1.13.0
3
registry.k8s.io/ingress-nginx/controller:v1.5.14ba73c697770
github.com/opencontainers/runc@v1.1.4
1.2.8
3
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
github.com/opencontainers/runc@v1.1.7
1.2.8
3
bitnamilegacy/influxdb:2.6.1-debian-11-r18d17df1f9d745
github.com/opencontainers/runc@v1.1.0
1.2.8
2
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
github.com/opencontainers/runc@v1.0.1
1.2.8
2
dmilhdef/missing-container-metrics:v0.21.0fada1a6e7638
github.com/opencontainers/runc@v1.0.0-rc93
github.com/opencontainers/selinux@v1.8.0
1.2.8
1.13.0
2
eqalpha/keydb:latest6537505c4235
github.com/opencontainers/runc@v1.0.1
1.2.8
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
github.com/opencontainers/runc@v1.0.1
1.2.8
2
grafana/alloy:v1.8.17790f6f7fbd8
github.com/opencontainers/runc@v1.2.1
github.com/opencontainers/selinux@v1.11.1
1.2.8
1.13.0
2
k0sproject/k0s:v1.26.0-k0s.0f04635825d51
github.com/opencontainers/runc@v1.1.4
github.com/opencontainers/selinux@v1.10.1
1.2.8
1.13.0
2
library/arangodb:3.11.81e75d74954a4
github.com/opencontainers/runc@v1.1.12
1.2.8
2
library/cassandra:4.1.37cbcec0086ac
github.com/opencontainers/runc@v1.1.0
1.2.8
2
library/influxdb:2.7b8d940ca9376
github.com/opencontainers/runc@v1.1.0
1.2.8
2
library/mariadb:10.8.30abf60f81588
github.com/opencontainers/runc@v1.0.1
1.2.8
2
library/mysql:8.2.0212fe73edca5
github.com/opencontainers/runc@v1.1.0
1.2.8
2
library/postgres:16.109f23e02d766
github.com/opencontainers/runc@v1.1.0
1.2.8
2
library/postgres:9.6caddd35b05cd
github.com/opencontainers/runc@v1.0.1
1.2.8
2
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
github.com/opencontainers/runc@v1.1.12
1.2.8
2
oryd/kratos:v1.0.0d06fc5845f63
github.com/opencontainers/runc@v1.1.5
1.2.8
2
oryd/kratos:v1.3.1fe2428f103a6
github.com/opencontainers/runc@v1.1.14
1.2.8
2
otel/opentelemetry-collector-contrib:0.96.07ef2a2ff46b9
github.com/opencontainers/runc@v1.1.12
github.com/opencontainers/selinux@v1.10.0
1.2.8
1.13.0
2
postgis/postgis:15-3.3a2fc46b52819
github.com/opencontainers/runc@v1.1.0
1.2.8
2
rancher/k3s:v1.26.0-k3s19380f5dbae9a
github.com/opencontainers/runc@v1.1.2
github.com/opencontainers/selinux@v1.10.1
1.2.8
1.13.0
2
uselagoon/docker-host:v3.6.12c89ed939b8b
github.com/opencontainers/selinux@v1.12.0
1.13.0
2
xelalex/dregsy:0.4.3574054e1c417
github.com/opencontainers/runc@v1.1.1
github.com/opencontainers/selinux@v1.10.1
1.2.8
1.13.0
2
yzhou442/equiz:latesta3f7ca69e28d
github.com/opencontainers/runc@v1.0.1
1.2.8
2
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
github.com/opencontainers/runc@v1.1.2
github.com/opencontainers/selinux@v1.10.1
1.2.8
1.13.0
2
public.ecr.aws/ebs-csi-driver/aws-ebs-csi-driver:v1.16.11564359e1e0e
github.com/opencontainers/selinux@v1.10.2
1.13.0
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
github.com/opencontainers/selinux@v1.10.0
1.13.0
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
github.com/opencontainers/runc@v1.0.0-rc9
1.2.8
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.