StackRadar

CVE-2020-25658

Medium

Advisory

Published 12 Nov 2020In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.017
75th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
87
of 17,781 indexed, latest versions
Container images
66
deployed by those charts
Fix available
1 of 2
affected packages

Timing attacks in python-rsa

Carried by container images the latest versions of 87 of 17,781 indexed charts deploy, on 66 images.

Affected packageAffected versionsFixed inImages
rsapypi3.4.2, 4.0, 4.5, 4.64.759
python-rsadeb3.4.2-1, 4.8-1no fix listed9
OSV records
DEBIAN-CVE-2020-25658GHSA-xrx6-fmxq-rjj2UBUNTU-CVE-2020-25658
Also known as
PYSEC-2020-100

Charts affected

87 by stars
ChartLatestAffected imagesRadar Score
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
rsa@4.6
4.7

Open the chart page →

4,423
legendlegend0.1.21 of 1See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
ghcr.io/grofers/legend:0.1d6e901ad0ebd
rsa@4.6
4.7

Open the chart page →

4,067
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.3.065095a82d4a1
rsa@4.6
4.7

Open the chart page →

68,284
mozalert-controllermozilla0.4.01 of 1See more

mozalert-controller mozilla 0.4.0

1 of the 1 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
afrank/mozalert-controller:latestd463c37b08d7
rsa@4.6
4.7

Open the chart page →

2,969
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
rsa@4.0
4.7
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
rsa@4.0
4.7
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
rsa@4.0
4.7

Open the chart page →

88,546
comac-platformopencord0.0.172 of 11See more

comac-platform opencord 0.0.17

2 of the 11 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
rsa@4.0
4.7
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
rsa@4.0
4.7

Open the chart page →

26,211
nem-monitoringopencord1.3.221 of 9See more

nem-monitoring opencord 1.3.22

1 of the 9 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.20af151f677a63
rsa@4.0
4.7

Open the chart page →

4,612
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
rsa@4.0
4.7

Open the chart page →

12,609
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
rsa@4.0
4.7
voltha/voltha-netconf:1.6.037f80524c207
rsa@4.0
4.7
voltha/voltha-ofagent:1.6.09ee8c1f4428c
rsa@4.0
4.7
voltha/voltha-voltha:1.6.0ff596b62de59
rsa@4.0
4.7

Open the chart page →

93,855
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
rsa@4.0
4.7

Open the chart page →

11,151
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
python-rsa@4.8-1
no fix listed

Open the chart page →

15,591
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
rsa@3.4.2
4.7

Open the chart page →

10,466
seldon-core-analyticsseldon1.17.11 of 8See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
rsa@4.0
4.7

Open the chart page →

10,733
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
rsa@4.0
4.7

Open the chart page →

8,694
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,769
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,803
dgbuildersmo-helm-chart6.0.01 of 3See more

dgbuilder smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7

Open the chart page →

28,470
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,769
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

24,776
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7

Open the chart page →

29,220
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

24,776
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7

Open the chart page →

27,477
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7

Open the chart page →

25,769
gar-exportersoftonic0.1.11 of 1See more

gar-exporter softonic 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
softonic/gar-exporter:0.2.1a64d6c0e0ae5
rsa@4.6
4.7

Open the chart page →

2,296
prometheus-operatorstatcan0.2.21 of 7See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
rsa@4.0
4.7

Open the chart page →

12,237
gtmetrix-bqt3n1.0.01 of 1See more

gtmetrix-bq t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
t3nde/gtmetrix-bq:0.2.0d2939e9a719b
rsa@4.0
4.7

Open the chart page →

1,287
jenkinstnh2.7.11 of 2See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
rsa@4.6
4.7

Open the chart page →

4,423
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
python-rsa@4.8-1
no fix listed

Open the chart page →

13,459
ambassadorwenerme6.9.51 of 2See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2020-25658.

Container imageDigestPackageFixed in
datawire/aes:1.14.48588eafe6862
rsa@4.6
4.7

Open the chart page →

4,086

Container images carrying it

66 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
rsa@4.0
4.7
11
oomk8s/readiness-check:2.0.07daa08b81954
rsa@3.4.2
4.7
6
argoproj/argocd:v1.8.1830e86cacefd
rsa@3.4.2
4.7
3
kiwigrid/k8s-sidecar:0.1.193170069ff0976
rsa@4.6
4.7
3
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
rsa@4.0
4.7
3
amancevice/superset:0.35.212a0a9e66550
rsa@4.0
4.7
2
architectminds/aws-kubectl:1.19735e59a1085
rsa@3.4.2
4.7
2
datawire/aes:1.14.48588eafe6862
rsa@4.6
4.7
2
larribas/mlflow:1.9.105ccb0b46bfb
rsa@4.6
4.7
2
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
rsa@4.0
4.7
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
rsa@4.0
4.7
2
weblate/weblate:4.2.2-169c160d37a3c
rsa@4.6
4.7
2
afrank/mozalert-controller:latestd463c37b08d7
rsa@4.6
4.7
1
amancevice/superset:0.28.1c8c04bfe3d66
rsa@4.0
4.7
1
bnjbvr/kresus:0.22.137e216b182c8
python-rsa@4.8-1
no fix listed
1
camptocamp/ekorre:0.1.035c91d5fda04
rsa@3.4.2
4.7
1
camptocamp/pghoard:10bff736b15623
rsa@3.4.2
4.7
1
ceph/daemon:latest-nautilus90f30824a96e
rsa@3.4.2
4.7
1
datadog/agent:7.22.08f20e56b5311
rsa@4.6
4.7
1
datadog/agent:6aad9994de6a7
rsa@4.5
4.7
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
rsa@4.6
4.7
1
datawire/aes:1.13.62beb65062c8b
rsa@4.6
4.7
1
datawire/emissary:2.0.2-ea9716efbdd24b
rsa@4.6
4.7
1
dysnix/pritunl:v1.29-r819951e3e7a32
rsa@4.0
4.7
1
esailors/aws-ecr-http-proxy:1.5.15608ae045fa7
rsa@3.4.2
4.7
1
flagsmith/flagsmith-api:v2.6.0fd58556339a4
rsa@4.6
4.7
1
galaxy/galaxy-init:v18.010267bad550e6
rsa@3.4.2
4.7
1
getsentry/sentry-kubernetes:latest6ac37974fd2a
rsa@4.0
4.7
1
hmdmph/mongo-pod-labeler:1.0.1-alpine79e4a170f3dc
rsa@4.6
4.7
1
hmdmph/redis-pod-labeler:1.0.0-alpine7f1381fe0f3b
rsa@4.6
4.7
1
julb/kubernetes-configmap-sync:1.1.0d7d8836366ad
rsa@4.6
4.7
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
rsa@4.6
4.7
1
kiwigrid/k8s-sidecar:1.1.03e86186656d3
rsa@4.6
4.7
1
kiwigrid/k8s-sidecar:1.3.065095a82d4a1
rsa@4.6
4.7
1
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
rsa@4.0
4.7
1
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
rsa@4.0
4.7
1
kiwigrid/k8s-sidecar:0.1.20af151f677a63
rsa@4.0
4.7
1
kubeaws/kube-spot-termination-notice-handler:1.13.0-1c9cd2ba4373a
rsa@3.4.2
4.7
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
rsa@4.6
4.7
1
mozilla/syncserver:latest016162bf39d8
rsa@4.5
4.7
1
nlmacamp/check_mk:latest5dbb8589f824
rsa@4.0
4.7
1
octoprint/octoprint:1.4.0106c26efcd8a
rsa@4.6
4.7
1
odaniait/aws-kubectl:latest3fff8a8570ec
rsa@3.4.2
4.7
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
rsa@4.0
4.7
1
opendatacube/restcube:latest91870111837c
python-rsa@3.4.2-1
rsa@3.4.2
no fix listed
4.7
1
opendatacube/wms:latest1b90cdf68831
python-rsa@3.4.2-1
rsa@3.4.2
no fix listed
4.7
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
rsa@4.0
4.7
1
softonic/gar-exporter:0.2.1a64d6c0e0ae5
rsa@4.6
4.7
1
t3nde/gtmetrix-bq:0.2.0d2939e9a719b
rsa@4.0
4.7
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
python-rsa@4.8-1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.