StackRadar

CVE-2020-25659

Medium

Advisory

Published 27 Oct 2020In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.024
83rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
97
of 17,781 indexed, latest versions
Container images
89
deployed by those charts
Fix available
2 of 2
affected packages

RSA decryption vulnerable to Bleichenbacher timing vulnerability

Carried by container images the latest versions of 97 of 17,781 indexed charts deploy, on 89 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+14 more3.2, 3.2.189
python-cryptographydeb2.1.4-1ubuntu1.2, 2.1.4-1ubuntu1.32.1.4-1ubuntu1.44
OSV records
GHSA-hggm-jpg3-v476UBUNTU-CVE-2020-25659PYSEC-2021-62
Also known as
USN-4613-1

Charts affected

97 by stars
ChartLatestAffected imagesRadar Score
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
cryptography@2.7
3.2

Open the chart page →

5,851
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
cryptography@2.6.1
3.2

Open the chart page →

4,515
fadicetic0.3.13 of 25See more

fadi cetic 0.3.1

3 of the 25 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
cryptography@2.7
3.2
ceticasbl/pg-ldap-sync:latest6c0aa7567145
cryptography@2.6.1
3.2
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
cryptography@3.1.1
3.2

Open the chart page →

52,919
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
cryptography@2.6.1
3.2

Open the chart page →

3,555
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
cryptography@2.6.1
3.2

Open the chart page →

3,717
mysql-clusterkfirfer0.0.41 of 1See more

mysql-cluster kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
mysql/mysql-cluster:8.0.20e4ea36622cdd
cryptography@2.8
3.2

Open the chart page →

416
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
cryptography@2.8
3.2

Open the chart page →

4,568
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
3.2

Open the chart page →

7,984
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
cryptography@2.9.2
3.2

Open the chart page →

2,034
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
cryptography@2.9.2
3.2

Open the chart page →

1,848
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
cryptography@2.1.4
3.2

Open the chart page →

11,662
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
cryptography@2.9.2
3.2

Open the chart page →

7,801
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
cryptography@2.6.1
3.2

Open the chart page →

5,079
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
cryptography@3.1.1
3.2

Open the chart page →

3,345
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
cryptography@2.6.1
3.2

Open the chart page →

4,196
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
cryptography@2.3.1
3.2

Open the chart page →

5,104
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
cryptography@2.1.4
3.2

Open the chart page →

13,541
prometheus-pve-exporterstenicVerified publisher0.1.11 of 1See more

prometheus-pve-exporter stenic 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
cryptography@2.9.2
3.2

Open the chart page →

2,469
pghoardwiremindVerified publisher0.8.11 of 1See more

pghoard wiremind 0.8.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
wiremind/pghoard:12-2019-11-264dea42c8166c
cryptography@2.8
3.2

Open the chart page →

2,952
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
3.2
2.1.4-1ubuntu1.4

Open the chart page →

12,007
radosgwananace-chartsVerified publisher0.3.41 of 1See more

radosgw ananace-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
ceph/daemon:latest-nautilus90f30824a96e
cryptography@1.7.2
3.2

Open the chart page →

1,650
snappassappuio1.0.01 of 3See more

snappass appuio 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
samueldg/snappass:latest3987195edbe6
cryptography@2.8
3.2

Open the chart page →

1,488
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
cryptography@2.1.4
3.2

Open the chart page →

3,425
twitter-sentimentazure-sample0.1.02 of 3See more

twitter-sentiment azure-sample 0.1.0

2 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
neilpeterson/get-tweet:v28b645ac1a23e
cryptography@2.2.2
3.2
neilpeterson/process-tweet:latest39ce9f92e899
cryptography@2.2.2
3.2

Open the chart page →

11,833
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
cryptography@2.1.4
3.2

Open the chart page →

22,891
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
cryptography@2.8
3.2

Open the chart page →

2,018
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
cryptography@2.8
3.2

Open the chart page →

2,504
duoauthproxy-radius-simplecaerus0.1.01 of 1See more

duoauthproxy-radius-simple caerus 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
3.2

Open the chart page →

2,974
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
cryptography@2.8
3.2

Open the chart page →

3,891
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
cryptography@2.3.1
3.2

Open the chart page →

2,813
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
cryptography@2.6.1
3.2

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
cryptography@2.6.1
3.2

Open the chart page →

1,310
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
cryptography@2.6.1
3.2

Open the chart page →

1,382
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
cryptography@2.3.1
3.2

Open the chart page →

2,408
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
cryptography@2.3.1
3.2
daskdev/dask-notebook:1.1.0052630f5ca04
cryptography@2.3.1
3.2

Open the chart page →

29,901
prometheus-operatorcloudnativeapp6.4.01 of 7See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
cryptography@2.7
3.2

Open the chart page →

2,954
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
cryptography@2.6.1
3.2

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
cryptography@1.9
3.2

Open the chart page →

5,060
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
cryptography@2.2.2
3.2

Open the chart page →

70,895
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
3.2
2.1.4-1ubuntu1.4

Open the chart page →

14,270
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
cryptography@2.9.2
3.2

Open the chart page →

13,156
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
cryptography@2.5
3.2

Open the chart page →

3,871
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
cryptography@2.7
3.2

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
cryptography@2.7
3.2

Open the chart page →

24,335
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
cryptography@3.1.1
3.2

Open the chart page →

2,264
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
cryptography@2.9.2
3.2

Open the chart page →

4,422
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
3.2

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
3.2

Open the chart page →

10,466
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
cryptography@2.6.1
3.2

Open the chart page →

4,217
dnation-kubernetes-linterdnationcloud0.1.21 of 1See more

dnation-kubernetes-linter dnationcloud 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
cryptography@2.6.1
3.2

Open the chart page →

2,114

Container images carrying it

89 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2
11
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
3.2
3
amancevice/superset:0.35.212a0a9e66550
cryptography@2.7
3.2
2
hjacobs/kube-ops-view:20.4.058221b57d4d2
cryptography@2.9.2
3.2
2
larribas/mlflow:1.9.105ccb0b46bfb
cryptography@2.9.2
3.2
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
cryptography@2.3.1
3.2
2
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
3.2
2
a10networks/acos-prometheus-exporter:latest8dc58d434d71
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
3.2
2.1.4-1ubuntu1.4
1
amancevice/superset:0.28.1c8c04bfe3d66
cryptography@1.9
3.2
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
cryptography@2.9
3.2
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
cryptography@2.9.2
3.2
1
camptocamp/ekorre:0.1.035c91d5fda04
cryptography@2.8
3.2
1
camptocamp/pghoard:10bff736b15623
cryptography@2.3.1
3.2
1
camptocamp/snow-webhook:latest2924b43dbf40
cryptography@2.6.1
3.2
1
ceph/daemon:latest-nautilus90f30824a96e
cryptography@1.7.2
3.2
1
ceticasbl/pg-ldap-sync:latest6c0aa7567145
cryptography@2.6.1
3.2
1
chorss/docker-pgadmin4:4.115c549cacb8ab
cryptography@2.7
3.2
1
cloudve/janis-terminal:latestaf56e77ca587
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
3.2
2.1.4-1ubuntu1.4
1
cloudve/ttyd:latestd79c1c5881c0
cryptography@2.9.2
3.2
1
daskdev/dask:1.1.04ecd7bc35500
cryptography@2.3.1
3.2
1
daskdev/dask-notebook:1.1.0052630f5ca04
cryptography@2.3.1
3.2
1
datadog/agent:7.22.08f20e56b5311
cryptography@2.8
3.2
1
deconzcommunity/deconz:2.12.066541bbb78952
cryptography@2.6.1
3.2
1
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
cryptography@2.6.1
3.2
1
douz/helpdesk:latest4384103d0219
cryptography@2.8
3.2
1
dpage/pgadmin4:4.5a5a656e1d5fd
cryptography@2.6.1
3.2
1
dpage/pgadmin4:4.22b1f00b8163cf
cryptography@2.9.2
3.2
1
drgrove/mtls-server:v0.14.2361721759a2b
cryptography@2.4.2
3.2
1
dysnix/pritunl:v1.29-r819951e3e7a32
cryptography@2.8
3.2
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
cryptography@2.8
3.2
1
esphome/esphome:1.18.03f51ec10e823
cryptography@2.6.1
3.2
1
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
3.2
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cryptography@2.8
3.2
1
galaxy/galaxy-init:v18.010267bad550e6
cryptography@2.2.2
3.2
1
gethue/hue:4.10.05702b2c37ff9
cryptography@2.1.4
3.2
1
getsentry/sentry-kubernetes:latest6ac37974fd2a
cryptography@2.6.1
3.2
1
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
cryptography@3.1.1
3.2
1
jmferrer/azure-devops-agent:latest030f68ec6998
cryptography@2.8
3.2
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
cryptography@3.1.1
3.2
1
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
cryptography@3.1.1
3.2
1
kennethreitz/httpbin:latest599fe5e50731
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.2
3.2
2.1.4-1ubuntu1.4
1
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
cryptography@2.7
3.2
1
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
cryptography@2.6.1
3.2
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
cryptography@2.5
3.2
1
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
cryptography@2.8
3.2
1
linuxserver/deluge:18.04.10ac871624394
cryptography@2.1.4
3.2
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
cryptography@2.1.4
3.2
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
cryptography@2.1.4
3.2
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
cryptography@2.8
3.2
1
lncm/specter-desktop:v0.10.4bca14d04397d
cryptography@3.2
3.2.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.