StackRadar

CVE-2020-25658

Medium

Advisory

Published 12 Nov 2020In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.017
75th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
87
of 17,781 indexed, latest versions
Container images
66
deployed by those charts
Fix available
1 of 2
affected packages

Timing attacks in python-rsa

Carried by container images the latest versions of 87 of 17,781 indexed charts deploy, on 66 images.

Affected packageAffected versionsFixed inImages
rsapypi3.4.2, 4.0, 4.5, 4.64.759
python-rsadeb3.4.2-1, 4.8-1no fix listed9
OSV records
DEBIAN-CVE-2020-25658GHSA-xrx6-fmxq-rjj2UBUNTU-CVE-2020-25658
Also known as
PYSEC-2020-100

Charts affected

87 by stars
ChartLatestAffected imagesRadar Score
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
rsa@4.6
4.7

Open the chart page →

4,423
legendlegend0.1.21 of 1See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
ghcr.io/grofers/legend:0.1d6e901ad0ebd
rsa@4.6
4.7

Open the chart page →

4,067
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.3.065095a82d4a1
rsa@4.6
4.7

Open the chart page →

68,284
mozalert-controllermozilla0.4.01 of 1See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
afrank/mozalert-controller:latestd463c37b08d7
rsa@4.6
4.7

Open the chart page →

2,969
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
rsa@4.0
4.7
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
rsa@4.0
4.7
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
rsa@4.0
4.7

Open the chart page →

88,546
comac-platformopencord0.0.172 of 11See more

comac-platform opencord 0.0.17

2 of the 11 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
rsa@4.0
4.7
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
rsa@4.0
4.7

Open the chart page →

26,211
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.20af151f677a63
rsa@4.0
4.7

Open the chart page →

4,612
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
rsa@4.0
4.7

Open the chart page →

12,609
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
rsa@4.0
4.7
voltha/voltha-netconf:1.6.037f80524c207
rsa@4.0
4.7
voltha/voltha-ofagent:1.6.09ee8c1f4428c
rsa@4.0
4.7
voltha/voltha-voltha:1.6.0ff596b62de59
rsa@4.0
4.7

Open the chart page →

93,855
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
rsa@4.0
4.7

Open the chart page →

11,151
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
python-rsa@4.8-1
no fix listed

Open the chart page →

15,591
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
rsa@3.4.2
4.7

Open the chart page →

10,466
seldon-core-analyticsseldon1.17.11 of 8See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
rsa@4.0
4.7

Open the chart page →

10,733
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
rsa@4.0
4.7

Open the chart page →

8,694
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,769
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,803
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7

Open the chart page →

28,470
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,769
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

24,776
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7

Open the chart page →

29,220
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

24,776
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7

Open the chart page →

27,477
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,769
gar-exportersoftonic0.1.11 of 1See more

gar-exporter softonic 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
softonic/gar-exporter:0.2.1a64d6c0e0ae5
rsa@4.6
4.7

Open the chart page →

2,296
prometheus-operatorstatcan0.2.21 of 7See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
rsa@4.0
4.7

Open the chart page →

12,237
gtmetrix-bqt3n1.0.01 of 1See more

gtmetrix-bq t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
t3nde/gtmetrix-bq:0.2.0d2939e9a719b
rsa@4.0
4.7

Open the chart page →

1,287
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
rsa@4.6
4.7

Open the chart page →

4,423
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
python-rsa@4.8-1
no fix listed

Open the chart page →

13,459
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
rsa@4.6
4.7

Open the chart page →

4,086

Container images carrying it

66 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
python-rsa@4.8-1
no fix listed
1
timescale/timescaledb-ha:pg16d7db8f1085a3
python-rsa@4.8-1
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
python-rsa@4.8-1
no fix listed
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
python-rsa@4.8-1
no fix listed
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
python-rsa@4.8-1
no fix listed
1
voltha/voltha-cli:1.6.0c4e41e92f046
rsa@4.0
4.7
1
voltha/voltha-netconf:1.6.037f80524c207
rsa@4.0
4.7
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
rsa@4.0
4.7
1
voltha/voltha-tester:1.7.0655c3048a602
rsa@4.0
4.7
1
voltha/voltha-voltha:1.6.0ff596b62de59
rsa@4.0
4.7
1
weblate/weblate:3.11.3-182848df56ecd
rsa@4.0
4.7
1
wiremind/pghoard:12-2019-11-264dea42c8166c
rsa@3.4.2
4.7
1
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
rsa@4.6
4.7
1
gcr.io/spinnaker-marketplace/halyard:1.32.00ee5f968d2ab
rsa@3.4.2
4.7
1
ghcr.io/alexanderbabel/database-s3-backup:1.3.33191b771a6f2
rsa@4.5
4.7
1
ghcr.io/grofers/legend:0.1d6e901ad0ebd
rsa@4.6
4.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.