StackRadar

CVE-2025-7345

High

Advisory

Published 8 Jul 2025In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.012
65th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
207
of 17,781 indexed, latest versions
Container images
221
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: gdk-pixbuf2 security update

Carried by container images the latest versions of 207 of 17,781 indexed charts deploy, on 221 images.

Affected packageAffected versionsFixed inImages
gdk-pixbufdeb2.32.2-1ubuntu1.4, 2.32.2-1ubuntu1.5, 2.32.2-1ubuntu1.6, 2.36.11-2+15 more2.32.2-1ubuntu1.6+esm2, 2.36.11-2ubuntu0.1~esm2, 2.40.0+dfsg-3ubuntu0.5+esm1, 2.42.2+dfsg-1+deb11u4+3 more206
gdk-pixbuf2rpm2.36.12-3.el7, 2.36.12-5.el8, 2.36.12-6.el8_10, 2.42.6-4.el9_40:2.36.12-4.el7_9, 0:2.36.12-7.el8_10, 0:2.42.6-6.el9_615
OSV records
DEBIAN-CVE-2025-7345RHSA-2025:12841RHSA-2025:13315RHSA-2025:14683UBUNTU-CVE-2025-7345DLA-4344-1
Also known as
RHSA-2025:14574, RHSA-2025:14585, RHSA-2025:14618, RHSA-2025:14647, USN-7662-1

Charts affected

207 by stars
ChartLatestAffected imagesRadar Score
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3

Open the chart page →

14,358
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3

Open the chart page →

10,795
vinyl-lib-chartvinyl-libVerified publisher0.1.01 of 1See more

vinyl-lib-chart vinyl-lib 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
kporwit/vinyl_lib_app:v0.1.1217de0302218
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4

Open the chart page →

3,392
apiwbstack0.36.01 of 1See more

api wbstack 0.36.0

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
ghcr.io/wbstack/api:8x.9.11eee94f9f7a53
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4

Open the chart page →

2,019
mediawikiwbstack0.14.01 of 1See more

mediawiki wbstack 0.14.0

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
ghcr.io/wbstack/mediawiki:1.37-7.4-20220621-fp-beta-0c3012c8a34b4
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4

Open the chart page →

2,132
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
gdk-pixbuf@2.42.8+dfsg-1ubuntu0.3
2.42.8+dfsg-1ubuntu0.4

Open the chart page →

14,100
enterprise-gatewayzeet3.2.21 of 2See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2025-7345.

Container imageDigestPackageFixed in
elyra/kernel-image-puller:3.2.2c922f1f1646a
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4

Open the chart page →

1,838

Container images carrying it

221 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
gdk-pixbuf@2.32.2-1ubuntu1.4
2.32.2-1ubuntu1.6+esm2
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
gdk-pixbuf@2.32.2-1ubuntu1.5
2.32.2-1ubuntu1.6+esm2
4
ciscolabs/rtsp-client:latesta7b60ec88285
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.4
2.40.0+dfsg-3ubuntu0.5+esm1
3
ciscolabs/rtsp-server:latestb59fc10bb821
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.4
2.40.0+dfsg-3ubuntu0.5+esm1
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
gdk-pixbuf@2.32.2-1ubuntu1.5
2.32.2-1ubuntu1.6+esm2
3
quay.io/devtron/ai-agent:0.0.16545dac92173
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
gdk-pixbuf@2.42.10+dfsg-1+deb12u2
2.42.10+dfsg-1+deb12u3
3
gjeanmart/safe-ganache-node:latest926264c8f2d1
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
2
library/python:3.7eedf63967cdb
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
2
pecan/bety:5.4.1f825d480cd62
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
2
yzhou442/equiz:latesta3f7ca69e28d
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
gdk-pixbuf@2.42.10+dfsg-3ubuntu3.1
2.42.10+dfsg-3ubuntu3.2
2
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
gdk-pixbuf@2.42.10+dfsg-1+deb12u2
2.42.10+dfsg-1+deb12u3
2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.2
2.40.0+dfsg-3ubuntu0.5+esm1
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.2
2.40.0+dfsg-3ubuntu0.5+esm1
2
5200710/hadoop:3.2.3-java8092d3088a5fb
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.4
2.40.0+dfsg-3ubuntu0.5+esm1
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.2
2.40.0+dfsg-3ubuntu0.5+esm1
1
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
gdk-pixbuf@2.42.8+dfsg-1ubuntu0.3
2.42.8+dfsg-1ubuntu0.4
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4
1
archish27/python-fastapi-postgres:latest6610071a2101
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4
1
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.4
2.40.0+dfsg-3ubuntu0.5+esm1
1
avinash263/pyredis263:latestaa2b8727f1a6
gdk-pixbuf@2.42.10+dfsg-1+b1
2.42.10+dfsg-1+deb12u3
1
azhar008/flaskapplication:latesta1e827b0adea
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
bnjbvr/kresus:0.22.137e216b182c8
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.2
2.40.0+dfsg-3ubuntu0.5+esm1
1
buntha/mlflow:2.1.1154542cc3083
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
castopod/castopod:1.12.101fd37280cbb2
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
cheyang/distributed-tf:1.6.046cc34755493
gdk-pixbuf@2.32.2-1ubuntu1.4
2.32.2-1ubuntu1.6+esm2
1
codetogether/codetogether:latest4348c8a38752
gdk-pixbuf2@2.42.6-4.el9_4
0:2.42.6-6.el9_6
1
countly/api:25.05.4f4cc7447c4f5
gdk-pixbuf@2.42.2+dfsg-1+deb11u2
2.42.2+dfsg-1+deb11u4
1
countly/countly-server:25.05.4e3c238248f99
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.5
2.40.0+dfsg-3ubuntu0.5+esm1
1
danuk/telegram-sender:0.0.1026560388070
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
deconzcommunity/deconz:2.29.2062de2362641
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
douz/helpdesk:latest4384103d0219
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
gdk-pixbuf@2.36.11-2
2.36.11-2ubuntu0.1~esm2
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
gdk-pixbuf@2.36.11-2
2.36.11-2ubuntu0.1~esm2
1
elyra/kernel-image-puller:3.2.2c922f1f1646a
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
erlangsolutions/wombatoam:4.1.284680c990147a
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
gdk-pixbuf@2.42.2+dfsg-1+deb11u1
2.42.2+dfsg-1+deb11u4
1
fanzynoodle/smeejas:0.0.15f9916c1a287
gdk-pixbuf@2.42.2+dfsg-1
2.42.2+dfsg-1+deb11u4
1
felipecs8/app-db-connection-test:v129e06c9c6385
gdk-pixbuf@2.42.10+dfsg-1+deb12u1
2.42.10+dfsg-1+deb12u3
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
gdk-pixbuf@2.40.0+dfsg-3ubuntu0.5
2.40.0+dfsg-3ubuntu0.5+esm1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.