CVE-2025-54410

Medium

Advisory

Published 29 Jul 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.2; base score, highest
EPSS: 0.002; 5th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 451; of 17,781 indexed, latest versions
Container images: 431; deployed by those charts
Fix available: 1 of 2; affected packages

Moby firewalld reload removes bridge network isolation

Carried by container images the latest versions of 451 of 17,781 indexed charts deploy, on 431 images.

Affected package	Affected versions	Fixed in	Images
docker.iodeb	20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b13	no fix listed	2
github.com/docker/dockergolang	v0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+69 more	25.0.13, 28.0.0	429

OSV records: DEBIAN-CVE-2025-54410 GHSA-4vq8-7jfc-9cvp
Also known as: GO-2025-3829

Charts affected

451 by stars

Chart

Latest

Affected images

Radar Score

ygdrassil-monitoringygdrassil

0.4.0

1 of 10 See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-54410.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	github.com/docker/docker@v27.4.1+incompatible	28.0.0

Open the chart page →

9,381

Container images carrying it

431 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/kyverno/kyverno-cli :v1.12.5	832a32779e6d	github.com/docker/docker@v25.0.5+incompatible	25.0.13	1
ghcr.io/kyverno/kyvernopre :v1.7.1	185d2eebc60c	github.com/docker/docker@v20.10.12+incompatible	25.0.13	1
ghcr.io/kyverno/kyvernopre :v1.12.5	63f7eaf5aa8a	github.com/docker/docker@v25.0.5+incompatible	25.0.13	1
ghcr.io/kyverno/reports-controller :v1.12.5	c62e3347611c	github.com/docker/docker@v25.0.5+incompatible	25.0.13	1
ghcr.io/loft-sh/agent :3.2.4	5c109914ff73	github.com/docker/docker@v20.10.21+incompatible	25.0.13	1
ghcr.io/loft-sh/devpod-pro :0.0.0-ci.4-do-not-use	5dfa86b6451f	github.com/docker/docker@v24.0.7+incompatible	25.0.13	1
ghcr.io/loft-sh/loft :0.0.0-ci.14	b69bcdaa8492	github.com/docker/docker@v20.10.21+incompatible	25.0.13	1
ghcr.io/loft-sh/vcluster :0.16.4	84f70425f4dd	github.com/docker/docker@v23.0.0-rc.1+incompatible	25.0.13	1
ghcr.io/loft-sh/vcluster-control-plane :0.0.0-ci.4-do-not-use	45e744fc623f	github.com/docker/docker@v24.0.7+incompatible	25.0.13	1
ghcr.io/loft-sh/vnode-runtime :0.3.3	b065ec5a5239	github.com/docker/docker@v27.1.1+incompatible	28.0.0	1
ghcr.io/m9sweeper/trawler :1.6.0	df917c5a7e54	github.com/docker/docker@v24.0.7+incompatible	25.0.13	1
ghcr.io/manzil-infinity180/deploydefender :ea3ab0bb646cdbeddd1aca483ecf650f9ac0d084	7fbc6855c8b3	github.com/docker/docker@v27.1.1+incompatible	28.0.0	1
ghcr.io/middleware-labs/agent-kube-go :dev	17369c4cd390	github.com/docker/docker@v20.10.22+incompatible	25.0.13	1
ghcr.io/middleware-labs/mw-kube-agent :master	056f0953763d	github.com/docker/docker@v24.0.5+incompatible	25.0.13	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	github.com/docker/docker@v27.3.1+incompatible	28.0.0	1
ghcr.io/mosn/htnn-controller :v0.3.1	c379e66246be	github.com/docker/docker@v25.0.5+incompatible	25.0.13	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.203	5bc5ca66d55a	github.com/docker/docker@v25.0.6+incompatible	25.0.13	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	github.com/docker/docker@v25.0.6+incompatible	25.0.13	1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe :latest	c0c8d53df9f3	github.com/docker/docker@v25.0.6+incompatible	25.0.13	1
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	github.com/docker/docker@v24.0.5+incompatible	25.0.13	1
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	github.com/docker/docker@v24.0.7+incompatible	25.0.13	1
ghcr.io/openfaasltd/pro-builder :0.6.0	6c17297f9098	github.com/docker/docker@v25.0.6+incompatible	25.0.13	1
ghcr.io/parca-dev/parca-agent :v0.28.0	6d6794f45f3e	github.com/docker/docker@v24.0.7+incompatible	25.0.13	1
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	github.com/docker/docker@v27.3.1+incompatible	28.0.0	1
ghcr.io/spiffe/spire-agent :1.6.0	62517726d0c4	github.com/docker/docker@v23.0.1+incompatible	25.0.13	1
ghcr.io/substra/fabric-peer :0.2.4	f681e0343a31	github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible	25.0.13	1
ghcr.io/substra/fabric-tools :0.2.4	3491a0f31c4a	github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible	25.0.13	1
ghcr.io/synapsecns/sanguine/explorer :latest	00131e3d1eaf	github.com/docker/docker@v26.1.3+incompatible	28.0.0	1
ghcr.io/tjm/vault-gcp-secrets :v1.19.5	9f157fe035f1	github.com/docker/docker@v27.2.1+incompatible	28.0.0	1
ghcr.io/traefik/traefik-hub :v2.11.0	322f5f8cc105	github.com/docker/docker@v20.10.21+incompatible	25.0.13	1
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	github.com/docker/docker@v25.0.6+incompatible	25.0.13	1
ghcr.io/warpstreamlabs/bento :1.8.1	21715979aefa	github.com/docker/docker@v27.1.1+incompatible	28.0.0	1
ghcr.io/wundergraph/cosmo/controlplane :0.133.1	49800ff775f3	github.com/docker/docker@v26.1.3+incompatible	28.0.0	1
public.ecr.aws/aktosecurity/keelhq-keel :akto_v1.0.0	1eb61443d68e	github.com/docker/docker@v27.3.1+incompatible	28.0.0	1
public.ecr.aws/aws-observability/aws-otel-collector :v0.43.3	8aa9ea5f67b8	github.com/docker/docker@v27.4.1+incompatible	28.0.0	1
public.ecr.aws/boundless-software/switchblade :release-v0.0.19-lcm	01d8413d5075	github.com/docker/docker@v24.0.7+incompatible	25.0.13	1
public.ecr.aws/n8h5y2v5/rad-security/rad-sbom :v1.1.34	e97e0e7a2088	github.com/docker/docker@v27.1.2+incompatible	28.0.0	1
public.ecr.aws/r3m4q3r9/pleco :0.24.0	651739583336	github.com/docker/docker@v27.2.1+incompatible	28.0.0	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	github.com/docker/docker@v20.10.12+incompatible	25.0.13	1
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	github.com/docker/docker@v25.0.6+incompatible	25.0.13	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	github.com/docker/docker@v20.10.24+incompatible	25.0.13	1
quay.io/argoproj/workflow-controller :v3.5.5	6ab0da144235	github.com/docker/docker@v24.0.0+incompatible	25.0.13	1
quay.io/bentoml/yatai :0.4.6	14b482c1f1b8	github.com/docker/docker@v20.10.14+incompatible	25.0.13	1
quay.io/cloudnativetoolkit/cli-tools :v1.1-v1.8.2	d6fd2a9e3273	github.com/docker/docker@v20.10.3+incompatible	25.0.13	1
quay.io/cloudnativetoolkit/cloud-pak-deployer :latest	13aaae779248	github.com/docker/docker@v20.10.3+incompatible	25.0.13	1
quay.io/eformat/jenkins-agent-graalvm :latest	a3b9a07648b6	github.com/docker/docker@v17.12.0-ce-rc1.0.20200618181300-9dc6525e6118+incompatible	25.0.13	1
quay.io/flomesh/fsm-manager-ubi8 :0.1.8-ubi.6	3590af73f65a	github.com/docker/docker@v20.10.2+incompatible	25.0.13	1
quay.io/geored/spmm-collector-contrib :1.0.0	63baf86a49ac	github.com/docker/docker@v24.0.2+incompatible	25.0.13	1
quay.io/harikube/vcluster-pro :0.32.1	b741efae8d31	github.com/docker/docker@v25.0.6+incompatible	25.0.13	1
quay.io/ibmgaragecloud/cli-tools :v0.15	9663f06adcb1	github.com/docker/docker@v1.4.2-0.20191121165722-d1d5f6476656	25.0.13	1