cAdvisor analyzes resource usage and performance characteristics of running containers.

cAdvisor

Docker is a set of platform-as-a-service products that use OS-level virtualization to deliver software in packages called containers.

Docker

Terraform is a tool for safely and efficiently building, combining, and launching infrastructure. From physical servers to containers to SaaS products, Terraform can create and compose all the components necessary to run any service or application.

Terraform Community

HashiCorp's Vault secures, stores, and controls access to tokens, passwords, certificates, API keys, and other sensitive resources in modern data centers. For each resource, Vault handles leasing, revocation, rolling, and auditing.

HashiCorp Vault

Prometheus is an open-source monitoring system with a dimensional data model, flexible query language, efficient time series database, and modern alerting approach.

Prometheus

Helm helps you manage Kubernetes applications. Helm Charts help you define, install, and upgrade even the most complex Kubernetes application. Charts are easy to create, version, share, and publish—so start using Helm and stop the copy-and-paste madness.

Helm

Amazon CloudWatch monitors your Amazon Web Services (AWS) resources and the applications you run on AWS in real time. You can use CloudWatch to collect and track metrics, which are the variables you can measure for your resources and applications.

Amazon CloudWatch Agent

Mkcert is a simple, zero-config tool to make locally trusted development certificates with any names you'd like.

Mkcert

MinIO is a high-performance object storage that is API compatible with Amazon S3 cloud storage service. Use MinIO to build high-performance infrastructure for machine learning, analytics, and application data workloads.

MinIO

SOPS is an editor of encrypted files that supports YAML, JSON, ENV, INI, and BINARY formats and encrypts with AWS KMS, GCP KMS, Azure Key Vault, and PGP.

SOPS

Atlantis is an application for automating Terraform via pull requests. It is deployed as a standalone application into your infrastructure.

Atlantis

Wolfi is a community Linux OS designed for the container and cloud-native era; it is a Linux distribution based on Alpine.

Wolfi

Chainguard is a Linux distribution based on Alpine. It's the commercial version of the Wolfi distro.

Chainguard

Golang, or Go, is an open-source programming language developed by Google.

Golang

Splunk OpenTelemetry Collector is an observability tool that gathers, processes, and exports telemetry data from diverse sources such as applications and infrastructure. It provides a consistent method for collecting telemetry data across a range of systems with built-in support for popular wire formats and integrations. The collector is part of the larger OpenTelemetry project, enabling organizations to increase visibility and monitor their environments effectively.

Splunk OpenTelemetry Collector

Grafana Tempo is a distributed tracing backend that is optimized for high-scale and high-cardinality tracing data. It provides a scalable and efficient way to collect, store, and analyze tracing information, enabling insights into the performance and behavior of distributed applications.

Grafana Tempo

Thanos is an open-source project that extends the functionality of the Prometheus monitoring system by adding features like high availability and long-term historical data storage. Built to meet the requirements of scalability and reliability, Thanos allows seamless access to Prometheus data across different databases. It also uses a highly efficient compression algorithm, resulting in cost-effective storage.

Thanos

The NVIDIA Container Toolkit is a set of libraries that provide capabilities for leveraging the full potentials of NVIDIA GPUs within containers. It allows GPU-accelerated applications to be defined as Docker containers, functioning as a lightweight, stand-alone, executable package.

NVIDIA Container Toolkit

MinimOS is a minimalist operating system designed for simplicity and efficiency. It aims to provide only essential functionalities, making it lightweight and suitable for resource-constrained environments. MinimOS is often used in embedded systems or as a base for custom operating system development.

MinimOS

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Linux Debian

Alpine Linux is a Linux distribution based on musl and BusyBox, designed for security, simplicity, and resource efficiency.

Linux Alpine

Echo is a secure, minimal Linux OS built vulnerability-free. It is fully compatible across environments and continuously patched - making it a clean, dependable base layer for modern applications. Echo is used by organizations focused on security and reliability, including those with compliance or FIPS requirements.

Echo

An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. For example a constraint that excludes the subdomain test.example.com does not prevent a leaf certificate from claiming the SAN *.example.com.

CVE ID	Severity	Score	Technologies	Component name	CISA KEV exploit	Has fix	Published date
CVE-2025-65637	HIGH	7.5	cAdvisor	aws-flb-cloudwatch	No	Yes	Dec 04, 2025
CVE-2025-61729	HIGH	7.5	cAdvisor	nrdot-collector-k8s	No	Yes	Dec 02, 2025
CVE-2025-61727	MEDIUM	6.5	cAdvisor	k6-fips	No	Yes	Dec 03, 2025
CVE-2025-58181	MEDIUM	5.3	cAdvisor	secrets-store-csi-driver-fips	No	Yes	Nov 19, 2025
CVE-2025-47914	MEDIUM	5.3	cAdvisor	kube-state-metrics-fips	No	Yes	Nov 19, 2025

CVE-2025-61727:
cAdvisor vulnerability analysis and mitigation

6.5

Related cAdvisor vulnerabilities:

Benchmark your Cloud Security Posture

Additional Wiz resources

Cloud Vulnerability DB

Cloud Threat Landscape

PEACH

Ready to see Wiz in action?

CVE-2025-61727: cAdvisor vulnerability analysis and mitigation