StackRadar

CVE-2025-7345

High

Advisory

Published 8 Jul 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.012
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
207
of 17,781 indexed, latest versions
Container images
221
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: gdk-pixbuf2 security update

Carried by container images the latest versions of 207 of 17,781 indexed charts deploy, on 221 images.

Affected packageAffected versionsFixed inImages
gdk-pixbufdeb2.32.2-1ubuntu1.4, 2.32.2-1ubuntu1.5, 2.32.2-1ubuntu1.6, 2.36.11-2+15 more2.32.2-1ubuntu1.6+esm2, 2.36.11-2ubuntu0.1~esm2, 2.40.0+dfsg-3ubuntu0.5+esm1, 2.42.2+dfsg-1+deb11u4+3 more206
gdk-pixbuf2rpm2.36.12-3.el7, 2.36.12-5.el8, 2.36.12-6.el8_10, 2.42.6-4.el9_40:2.36.12-4.el7_9, 0:2.36.12-7.el8_10, 0:2.42.6-6.el9_615
OSV records
DEBIAN-CVE-2025-7345RHSA-2025:12841RHSA-2025:13315RHSA-2025:14683UBUNTU-CVE-2025-7345DLA-4344-1
Also known as
RHSA-2025:14574, RHSA-2025:14585, RHSA-2025:14618, RHSA-2025:14647, USN-7662-1

Charts affected

207 by stars
ChartLatestAffected imagesRadar Score
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3

Open the chart page →

14,358
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3

Open the chart page →

10,795
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4

Open the chart page →

3,392
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4

Open the chart page →

2,132
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
gdk-pixbuf@2.42.8+dfsg-1ubuntu0.3
2.42.8+dfsg-1ubuntu0.4

Open the chart page →

14,100
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4

Open the chart page →

1,838

Container images carrying it

221 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
theradius/loggia:0.463ba348546ec
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
1
thongngo3301/stakefish:latesta341af5976e3
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
gdk-pixbuf@2.32.2-1ubuntu1.4
2.32.2-1ubuntu1.6+esm2
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
vlebediantsev/notes-admin-front:latest007c6670ff48
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
1
vlebediantsev/notes-project-front:latest945675fd2636
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
gdk-pixbuf@2.42.8+dfsg-1ubuntu0.3
2.42.8+dfsg-1ubuntu0.4
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
gdk-pixbuf@2.42.8+dfsg-1
2.42.8+dfsg-1ubuntu0.4
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
ghcr.io/0xemma/reddark:main2a115e991894
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
gdk-pixbuf@2.42.10+dfsg-1+deb12u2
2.42.10+dfsg-1+deb12u3
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
1
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
gdk-pixbuf@2.42.2+dfsg-1+deb11u2
2.42.2+dfsg-1+deb11u4
1
ghcr.io/flaresolverr/flaresolverr:v3.3.16088412db1051
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
gdk-pixbuf@2.42.10+dfsg-1+deb12u2
2.42.10+dfsg-1+deb12u3
1
ghcr.io/flaresolverr/flaresolverr:v3.3.21f104ee51e512
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
gdk-pixbuf2@2.36.12-5.el8
0:2.36.12-7.el8_10
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
gdk-pixbuf@2.42.10+dfsg-3ubuntu3.1
2.42.10+dfsg-3ubuntu3.2
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
gdk-pixbuf@2.42.10+dfsg-3ubuntu3.1
2.42.10+dfsg-3ubuntu3.2
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.2
2.40.0+dfsg-3ubuntu0.5+esm1
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.2
2.40.0+dfsg-3ubuntu0.5+esm1
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.2
2.40.0+dfsg-3ubuntu0.5+esm1
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.2
2.40.0+dfsg-3ubuntu0.5+esm1
1
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
ghcr.io/libretime/libretime-analyzer:latest3d5e236216ad
gdk-pixbuf@2.42.2+dfsg-1+deb11u3
2.42.2+dfsg-1+deb11u4
1
ghcr.io/libretime/libretime-playout:latest71a8706531aa
gdk-pixbuf@2.42.2+dfsg-1+deb11u3
2.42.2+dfsg-1+deb11u4
1
ghcr.io/linuxoid69/motion:4.7.0-0.1.0f0f000c3fc47
gdk-pixbuf@2.42.2+dfsg-1+deb11u2
2.42.2+dfsg-1+deb11u4
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
gdk-pixbuf@2.36.11-2
2.36.11-2ubuntu0.1~esm2
1
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.2
2.40.0+dfsg-3ubuntu0.5+esm1
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
1
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.