StackRadar

CVE-2020-25659

Medium

Advisory

Published 27 Oct 2020In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.024
83rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
97
of 17,781 indexed, latest versions
Container images
89
deployed by those charts
Fix available
2 of 2
affected packages

RSA decryption vulnerable to Bleichenbacher timing vulnerability

Carried by container images the latest versions of 97 of 17,781 indexed charts deploy, on 89 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+14 more3.2, 3.2.189
python-cryptographydeb2.1.4-1ubuntu1.2, 2.1.4-1ubuntu1.32.1.4-1ubuntu1.44
OSV records
GHSA-hggm-jpg3-v476UBUNTU-CVE-2020-25659PYSEC-2021-62
Also known as
USN-4613-1

Charts affected

97 by stars
ChartLatestAffected imagesRadar Score
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
cryptography@2.7
3.2

Open the chart page →

5,851
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
cryptography@2.6.1
3.2

Open the chart page →

4,515
fadicetic0.3.13 of 25See more

fadi cetic 0.3.1

3 of the 25 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
cryptography@2.7
3.2
ceticasbl/pg-ldap-sync:latest6c0aa7567145
cryptography@2.6.1
3.2
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
cryptography@3.1.1
3.2

Open the chart page →

52,919
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
cryptography@2.6.1
3.2

Open the chart page →

3,555
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
cryptography@2.6.1
3.2

Open the chart page →

3,717
mysql-clusterkfirfer0.0.41 of 1See more

mysql-cluster kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
mysql/mysql-cluster:8.0.20e4ea36622cdd
cryptography@2.8
3.2

Open the chart page →

416
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
cryptography@2.8
3.2

Open the chart page →

4,568
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
3.2

Open the chart page →

7,984
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
cryptography@2.9.2
3.2

Open the chart page →

2,034
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
cryptography@2.9.2
3.2

Open the chart page →

1,848
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
cryptography@2.1.4
3.2

Open the chart page →

11,662
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
cryptography@2.9.2
3.2

Open the chart page →

7,801
uptime-kumageek-cookbookVerified publisher1.4.21 of 1See more

uptime-kuma geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.17.1a4eab252e5a2
cryptography@2.6.1
3.2

Open the chart page →

5,079
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
cryptography@3.1.1
3.2

Open the chart page →

3,345
uptimekumahelm-l3st86Verified publisher0.1.101 of 1See more

uptimekuma helm-l3st86 0.1.10

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.1396510915e6be
cryptography@2.6.1
3.2

Open the chart page →

4,196
helm-taigamvitale1989-helm-taigaVerified publisher0.2.51 of 2See more

helm-taiga mvitale1989-helm-taiga 0.2.5

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
cryptography@2.3.1
3.2

Open the chart page →

5,104
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
cryptography@2.1.4
3.2

Open the chart page →

13,541
prometheus-pve-exporterstenicVerified publisher0.1.11 of 1See more

prometheus-pve-exporter stenic 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
cryptography@2.9.2
3.2

Open the chart page →

2,469
pghoardwiremindVerified publisher0.8.11 of 1See more

pghoard wiremind 0.8.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
wiremind/pghoard:12-2019-11-264dea42c8166c
cryptography@2.8
3.2

Open the chart page →

2,952
acos-prometheus-exporter-helm-charta10-prometheus-exporter0.1.01 of 1See more

acos-prometheus-exporter-helm-chart a10-prometheus-exporter 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
a10networks/acos-prometheus-exporter:latest8dc58d434d71
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
3.2
2.1.4-1ubuntu1.4

Open the chart page →

12,007
radosgwananace-chartsVerified publisher0.3.41 of 1See more

radosgw ananace-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
ceph/daemon:latest-nautilus90f30824a96e
cryptography@1.7.2
3.2

Open the chart page →

1,650
snappassappuio1.0.01 of 3See more

snappass appuio 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
samueldg/snappass:latest3987195edbe6
cryptography@2.8
3.2

Open the chart page →

1,488
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
cryptography@2.1.4
3.2

Open the chart page →

3,425
twitter-sentimentazure-sample0.1.02 of 3See more

twitter-sentiment azure-sample 0.1.0

2 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
neilpeterson/get-tweet:v28b645ac1a23e
cryptography@2.2.2
3.2
neilpeterson/process-tweet:latest39ce9f92e899
cryptography@2.2.2
3.2

Open the chart page →

11,833
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
cryptography@2.1.4
3.2

Open the chart page →

22,891
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
cryptography@2.8
3.2

Open the chart page →

2,018
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
cryptography@2.8
3.2

Open the chart page →

2,504
duoauthproxy-radius-simplecaerus0.1.01 of 1See more

duoauthproxy-radius-simple caerus 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
3.2

Open the chart page →

2,974
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
cryptography@2.8
3.2

Open the chart page →

3,891
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
cryptography@2.3.1
3.2

Open the chart page →

2,813
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
cryptography@2.6.1
3.2

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
cryptography@2.6.1
3.2

Open the chart page →

1,310
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
cryptography@2.6.1
3.2

Open the chart page →

1,382
check-mkcloudnativeapp0.2.11 of 1See more

check-mk cloudnativeapp 0.2.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
nlmacamp/check_mk:latest5dbb8589f824
cryptography@2.3.1
3.2

Open the chart page →

2,408
daskcloudnativeapp2.2.12 of 2See more

dask cloudnativeapp 2.2.1

2 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
daskdev/dask:1.1.04ecd7bc35500
cryptography@2.3.1
3.2
daskdev/dask-notebook:1.1.0052630f5ca04
cryptography@2.3.1
3.2

Open the chart page →

29,901
prometheus-operatorcloudnativeapp6.4.01 of 7See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
cryptography@2.7
3.2

Open the chart page →

2,954
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
cryptography@2.6.1
3.2

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
cryptography@1.9
3.2

Open the chart page →

5,060
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
cryptography@2.2.2
3.2

Open the chart page →

70,895
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
3.2
2.1.4-1ubuntu1.4

Open the chart page →

14,270
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
cryptography@2.9.2
3.2

Open the chart page →

13,156
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
cryptography@2.5
3.2

Open the chart page →

3,871
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
cryptography@2.7
3.2

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
cryptography@2.7
3.2

Open the chart page →

24,335
kube-web-viewdecayofmind0.0.41 of 1See more

kube-web-view decayofmind 0.0.4

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
cryptography@3.1.1
3.2

Open the chart page →

2,264
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
cryptography@2.9.2
3.2

Open the chart page →

4,422
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
3.2

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
3.2

Open the chart page →

10,466
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
cryptography@2.6.1
3.2

Open the chart page →

4,217
dnation-kubernetes-linterdnationcloud0.1.21 of 1See more

dnation-kubernetes-linter dnationcloud 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
cryptography@2.6.1
3.2

Open the chart page →

2,114

Container images carrying it

89 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
louislam/uptime-kuma:1.22.10b55bcb83a1c
cryptography@2.6.1
3.2
1
louislam/uptime-kuma:13d632903e6af
cryptography@2.6.1
3.2
1
louislam/uptime-kuma:1.23.1396510915e6be
cryptography@2.6.1
3.2
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
cryptography@2.6.1
3.2
1
louislam/uptime-kuma:1.18.5a84767d7934f
cryptography@2.6.1
3.2
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
cryptography@2.6.1
3.2
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
cryptography@3.0
3.2
1
mozilla/syncserver:latest016162bf39d8
cryptography@2.6.1
3.2
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
cryptography@2.3.1
3.2
1
mysql/mysql-cluster:8.0.20e4ea36622cdd
cryptography@2.8
3.2
1
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
cryptography@2.3
3.2
1
neilpeterson/get-tweet:v28b645ac1a23e
cryptography@2.2.2
3.2
1
neilpeterson/osba-storage-demo:latest29d229ab446e
cryptography@2.1.4
3.2
1
neilpeterson/process-tweet:latest39ce9f92e899
cryptography@2.2.2
3.2
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
cryptography@3.1.1
3.2
1
nlmacamp/check_mk:latest5dbb8589f824
cryptography@2.3.1
3.2
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
3.2
2.1.4-1ubuntu1.4
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
cryptography@2.3.1
3.2
1
opendatacube/restcube:latest91870111837c
cryptography@2.7
3.2
1
opendatacube/wms:latest1b90cdf68831
cryptography@2.7
3.2
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
cryptography@2.5
3.2
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
cryptography@2.8
3.2
1
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
cryptography@2.9.2
3.2
1
redash/redash:10.0.0.b503639392753c0376
cryptography@2.8
3.2
1
samueldg/snappass:latest3987195edbe6
cryptography@2.8
3.2
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
cryptography@2.1.4
3.2
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
cryptography@2.1.4
3.2
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
cryptography@2.8
3.2
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
cryptography@2.6.1
3.2
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cryptography@2.5
3.2
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
cryptography@2.9.2
3.2
1
voltha/voltha-cli:1.6.0c4e41e92f046
cryptography@2.4.1
3.2
1
voltha/voltha-netconf:1.6.037f80524c207
cryptography@2.4.1
3.2
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
cryptography@2.4.1
3.2
1
voltha/voltha-tester:1.7.0655c3048a602
cryptography@2.7
3.2
1
voltha/voltha-voltha:1.6.0ff596b62de59
cryptography@2.4.1
3.2
1
wallabag/wallabag:2.4.25e4c26a7fb4a
cryptography@2.9.2
3.2
1
weblate/weblate:3.11.3-182848df56ecd
cryptography@2.8
3.2
1
wiremind/pghoard:12-2019-11-264dea42c8166c
cryptography@2.8
3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.