CVE-2025-54410

Medium

Advisory

Published 29 Jul 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.2; base score, highest
EPSS: 0.002; 5th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 451; of 17,781 indexed, latest versions
Container images: 431; deployed by those charts
Fix available: 1 of 2; affected packages

Moby firewalld reload removes bridge network isolation

Carried by container images the latest versions of 451 of 17,781 indexed charts deploy, on 431 images.

Affected package	Affected versions	Fixed in	Images
docker.iodeb	20.10.24+dfsg1-1+deb12u1+b6, 26.1.5+dfsg1-9+b13	no fix listed	2
github.com/docker/dockergolang	v0.0.0-20180620051407-e2593239d949, v0.7.3-0.20190327010347-be7ac8be2ae0, v1.4.2-0.20190924003213-a8608b5b67c7, v1.4.2-0.20191121165722-d1d5f6476656+69 more	25.0.13, 28.0.0	429

OSV records: DEBIAN-CVE-2025-54410 GHSA-4vq8-7jfc-9cvp
Also known as: GO-2025-3829

Charts affected

451 by stars

Chart

Latest

Affected images

Radar Score

ygdrassil-monitoringygdrassil

0.4.0

1 of 10 See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-54410.

Container image	Digest	Package	Fixed in
quay.io/prometheus/prometheus :v3.1.0	6559acbd5d77	github.com/docker/docker@v27.4.1+incompatible	28.0.0

Open the chart page →

9,381

Container images carrying it

431 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
wurstmeister/kafka :latest	2d4bbf9cc83d	github.com/docker/docker@v20.10.3-0.20220121014307-40bb9831756f+incompatible	25.0.13	7
quay.io/devtron/kubectl :latest	2ad610626658	github.com/docker/docker@v20.10.17+incompatible	25.0.13	6
keelhq/keel :latest	73714afb4443	github.com/docker/docker@v27.3.1+incompatible	28.0.0	5
hyperledger/fabric-peer :2.4	6ff36af21eb1	github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible	25.0.13	4
hyperledger/fabric-tools :2.4	b1194f509085	github.com/docker/docker@v20.10.0-beta1.0.20201113105859-b6bfff2a628f+incompatible	25.0.13	4
ghcr.io/loft-sh/vcluster-pro :0.0.0-ci-run.10	ab2e1fa19dd4	github.com/docker/docker@v20.10.21+incompatible	25.0.13	4
quay.io/jetstack/cert-manager-ctl :v1.13.1	c10bde7ff9ad	github.com/docker/docker@v23.0.3+incompatible	25.0.13	4
argoproj/argocd :v1.8.1	830e86cacefd	github.com/docker/docker@v0.7.3-0.20190327010347-be7ac8be2ae0	25.0.13	3
ethpandaops/tracoor :latest	d8514b9f4c59	github.com/docker/docker@v27.1.1+incompatible	28.0.0	3
grafana/promtail :2.4.2	626900031c4e	github.com/docker/docker@v20.10.8+incompatible	25.0.13	3
library/docker :20.10-dind :20-dind	af96c680a7e1	github.com/docker/docker@v23.0.0-rc.1+incompatible	25.0.13	3
prom/prometheus :v3.0.1	565ee8650122	github.com/docker/docker@v27.3.1+incompatible	28.0.0	3
quay.io/argoproj/workflow-controller :v3.4.7	f0c6fba81a24	github.com/docker/docker@v20.10.24+incompatible	25.0.13	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	github.com/docker/docker@v27.1.1+incompatible	28.0.0	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	github.com/docker/docker@v20.10.17+incompatible	25.0.13	3
quay.io/devtron/clair :4.3.6	75fb847ac045	github.com/docker/docker@v20.10.7+incompatible	25.0.13	3
quay.io/devtron/image-scanner :b278f42b-334-11119	88c64b1b6ec8	github.com/docker/docker@v20.10.7+incompatible	25.0.13	3
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	github.com/docker/docker@v24.0.5+incompatible	25.0.13	3
quay.io/prometheus/prometheus :v2.41.0	1a3e9a878e50	github.com/docker/docker@v20.10.21+incompatible	25.0.13	3
quay.io/prometheus/prometheus :v2.55.0	378f4e037035	github.com/docker/docker@v27.2.0+incompatible	28.0.0	3
quay.io/prometheus/prometheus :v2.26.0	38d40a760569	github.com/docker/docker@v20.10.5+incompatible	25.0.13	3
quay.io/prometheus/prometheus :v2.31.1	a8779cfe553e	github.com/docker/docker@v20.10.9+incompatible	25.0.13	3
quay.io/prometheus/prometheus :v2.43.0	f5c29683a301	github.com/docker/docker@v23.0.1+incompatible	25.0.13	3
dmilhdef/missing-container-metrics :v0.21.0	fada1a6e7638	github.com/docker/docker@v1.13.1	25.0.13	2
dtzar/helm-kubectl :3.14.4	55429449408e	github.com/docker/docker@v24.0.9+incompatible	25.0.13	2
grafana/alloy :v1.8.1	7790f6f7fbd8	github.com/docker/docker@v27.5.1+incompatible	28.0.0	2
hashicorp/vault :1.8.3	4db614d40d0e	github.com/docker/docker@v17.12.0-ce-rc1.0.20200309214505-aa6a9891b09c+incompatible	25.0.13	2
hashicorp/vault :1.15.2	6b4e5dadf082	github.com/docker/docker@v24.0.5+incompatible	25.0.13	2
hashicorp/vault :1.12.1	8de4d5f31b38	github.com/docker/docker@v20.10.18+incompatible	25.0.13	2
ilum/api :6.7.3	624fd09528c8	github.com/docker/docker@v25.0.6+incompatible	25.0.13	2
inaccel/daemon :latest	093e1ea90ab8	github.com/docker/docker@v25.0.2+incompatible	25.0.13	2
istio/proxyv2 :1.18.0	757d28c24100	github.com/docker/docker@v23.0.3+incompatible	25.0.13	2
k0sproject/k0s :v1.26.0-k0s.0	f04635825d51	github.com/docker/docker@v20.10.17+incompatible	25.0.13	2
library/arangodb :3.11.8	1e75d74954a4	github.com/docker/docker@v24.0.7+incompatible	25.0.13	2
library/traefik :v2.5	7d5a6ae66572	github.com/docker/docker@v20.10.7+incompatible	25.0.13	2
lightninglabs/lnd :v0.18.3-beta	f86bbec4dfb3	github.com/docker/docker@v24.0.7+incompatible	25.0.13	2
minio/operator :v4.3.7	54393e03f3b2	github.com/docker/docker@v1.4.2-0.20190924003213-a8608b5b67c7	25.0.13	2
oryd/kratos :v1.0.0	d06fc5845f63	github.com/docker/docker@v20.10.24+incompatible	25.0.13	2
oryd/kratos :v1.3.1	fe2428f103a6	github.com/docker/docker@v27.1.1+incompatible	28.0.0	2
otel/opentelemetry-collector-contrib :0.96.0	7ef2a2ff46b9	github.com/docker/docker@v24.0.9+incompatible	25.0.13	2
otel/opentelemetry-collector-k8s :0.111.0	32b3c8296dcc	github.com/docker/docker@v27.0.3+incompatible	28.0.0	2
place1/wg-access-server :v0.4.6	2b2f3ea80ed6	github.com/docker/docker@v1.13.1	25.0.13	2
prom/prometheus :v2.52.0	5c435642ca4d	github.com/docker/docker@v26.0.1+incompatible	28.0.0	2
prom/prometheus :v2.37.9	8176adea328e	github.com/docker/docker@v20.10.24+incompatible	25.0.13	2
prom/prometheus :v2.48.1	a67e5e402ff5	github.com/docker/docker@v24.0.6+incompatible	25.0.13	2
prom/prometheus :v2.21.0	d43417c260e5	github.com/docker/docker@v17.12.0-ce-rc1.0.20200706150819-a40b877fbb9e+incompatible	25.0.13	2
rancher/k3s :v1.26.0-k3s1	9380f5dbae9a	github.com/docker/docker@v20.10.12+incompatible	25.0.13	2
samcm/ethereum-metrics-exporter :0.29.2 :latest	91a2d9a015c1	github.com/docker/docker@v26.1.5+incompatible	28.0.0	2
xelalex/dregsy :0.4.3	574054e1c417	github.com/docker/docker@v20.10.14+incompatible	25.0.13	2
ghcr.io/buoyantio/prometheus :v2.55.1	2659f4c2ebb7	github.com/docker/docker@v27.2.0+incompatible	28.0.0	2