StackRadar

CVE-2020-25659

Medium

Advisory

Published 27 Oct 2020In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.024
83rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
97
of 17,781 indexed, latest versions
Container images
89
deployed by those charts
Fix available
2 of 2
affected packages

RSA decryption vulnerable to Bleichenbacher timing vulnerability

Carried by container images the latest versions of 97 of 17,781 indexed charts deploy, on 89 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+14 more3.2, 3.2.189
python-cryptographydeb2.1.4-1ubuntu1.2, 2.1.4-1ubuntu1.32.1.4-1ubuntu1.44
OSV records
GHSA-hggm-jpg3-v476UBUNTU-CVE-2020-25659PYSEC-2021-62
Also known as
USN-4613-1

Charts affected

97 by stars
ChartLatestAffected imagesRadar Score
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
cryptography@2.8
3.2

Open the chart page →

4,550
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
cryptography@2.9
3.2

Open the chart page →

11,174
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
cryptography@2.8
3.2

Open the chart page →

5,055
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
cryptography@2.8
3.2

Open the chart page →

14,673
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cryptography@2.8
3.2

Open the chart page →

64,489
kube-ops-viewfluent-operatorVerified publisher0.1.21 of 1See more

kube-ops-view fluent-operator 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
cryptography@2.9.2
3.2

Open the chart page →

1,848
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
cryptography@2.6.1
3.2

Open the chart page →

3,474
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
cryptography@2.1.4
3.2

Open the chart page →

13,551
wallabaggeek-cookbookVerified publisher7.2.01 of 1See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
wallabag/wallabag:2.4.25e4c26a7fb4a
cryptography@2.9.2
3.2

Open the chart page →

4,358
pgadminhalkeye1.0.01 of 1See more

pgadmin halkeye 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
chorss/docker-pgadmin4:4.115c549cacb8ab
cryptography@2.7
3.2

Open the chart page →

2,555
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
cryptography@2.9.2
3.2

Open the chart page →

4,422
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
3.2

Open the chart page →

7,984
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
cryptography@2.8
3.2

Open the chart page →

3,314
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
cryptography@2.9.2
3.2

Open the chart page →

9,854
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.2
3.2
2.1.4-1ubuntu1.4

Open the chart page →

14,813
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
cryptography@3.2
3.2.1

Open the chart page →

1,850
gitlabkubesphereVerified publisher4.2.31 of 17See more

gitlab kubesphere 4.2.3

1 of the 17 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
cryptography@3.0
3.2

Open the chart page →

38,133
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
cryptography@2.6.1
3.2

Open the chart page →

15,855
mtlsmtls0.3.41 of 1See more

mtls mtls 0.3.4

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
drgrove/mtls-server:v0.14.2361721759a2b
cryptography@2.4.2
3.2

Open the chart page →

1,458
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
cryptography@2.8
3.2

Open the chart page →

4,911
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
cryptography@2.3
3.2

Open the chart page →

55,726
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
cryptography@2.1.4
3.2
socialmediamacroscope/image_crawler:0.1.2f508216be63c
cryptography@2.1.4
3.2

Open the chart page →

109,294
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
cryptography@2.3.1
3.2
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
cryptography@2.3.1
3.2

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
cryptography@2.3.1
3.2

Open the chart page →

26,211
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
3.2
2.1.4-1ubuntu1.4

Open the chart page →

40,715
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
cryptography@2.7
3.2

Open the chart page →

12,609
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
cryptography@2.4.1
3.2
voltha/voltha-netconf:1.6.037f80524c207
cryptography@2.4.1
3.2
voltha/voltha-ofagent:1.6.09ee8c1f4428c
cryptography@2.4.1
3.2
voltha/voltha-voltha:1.6.0ff596b62de59
cryptography@2.4.1
3.2

Open the chart page →

93,855
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
cryptography@2.5
3.2

Open the chart page →

36,215
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
cryptography@2.8
3.2

Open the chart page →

11,151
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
3.2

Open the chart page →

10,466
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
cryptography@2.6.1
3.2

Open the chart page →

4,744
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
cryptography@2.8
3.2

Open the chart page →

8,694
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,769
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,803
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,769
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

24,776
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

24,776
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,769
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
cryptography@2.8
3.2

Open the chart page →

30,687
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
cryptography@2.6.1
3.2

Open the chart page →

2,060
datapusherstatcan1.0.01 of 1See more

datapusher statcan 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
cryptography@3.1.1
3.2

Open the chart page →

3,044
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cryptography@2.5
3.2

Open the chart page →

18,756

Container images carrying it

89 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
louislam/uptime-kuma:1.22.10b55bcb83a1c
cryptography@2.6.1
3.2
1
louislam/uptime-kuma:13d632903e6af
cryptography@2.6.1
3.2
1
louislam/uptime-kuma:1.23.1396510915e6be
cryptography@2.6.1
3.2
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
cryptography@2.6.1
3.2
1
louislam/uptime-kuma:1.18.5a84767d7934f
cryptography@2.6.1
3.2
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
cryptography@2.6.1
3.2
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
cryptography@3.0
3.2
1
mozilla/syncserver:latest016162bf39d8
cryptography@2.6.1
3.2
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
cryptography@2.3.1
3.2
1
mysql/mysql-cluster:8.0.20e4ea36622cdd
cryptography@2.8
3.2
1
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
cryptography@2.3
3.2
1
neilpeterson/get-tweet:v28b645ac1a23e
cryptography@2.2.2
3.2
1
neilpeterson/osba-storage-demo:latest29d229ab446e
cryptography@2.1.4
3.2
1
neilpeterson/process-tweet:latest39ce9f92e899
cryptography@2.2.2
3.2
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
cryptography@3.1.1
3.2
1
nlmacamp/check_mk:latest5dbb8589f824
cryptography@2.3.1
3.2
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
3.2
2.1.4-1ubuntu1.4
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
cryptography@2.3.1
3.2
1
opendatacube/restcube:latest91870111837c
cryptography@2.7
3.2
1
opendatacube/wms:latest1b90cdf68831
cryptography@2.7
3.2
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
cryptography@2.5
3.2
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
cryptography@2.8
3.2
1
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
cryptography@2.9.2
3.2
1
redash/redash:10.0.0.b503639392753c0376
cryptography@2.8
3.2
1
samueldg/snappass:latest3987195edbe6
cryptography@2.8
3.2
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
cryptography@2.1.4
3.2
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
cryptography@2.1.4
3.2
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
cryptography@2.8
3.2
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
cryptography@2.6.1
3.2
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cryptography@2.5
3.2
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
cryptography@2.9.2
3.2
1
voltha/voltha-cli:1.6.0c4e41e92f046
cryptography@2.4.1
3.2
1
voltha/voltha-netconf:1.6.037f80524c207
cryptography@2.4.1
3.2
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
cryptography@2.4.1
3.2
1
voltha/voltha-tester:1.7.0655c3048a602
cryptography@2.7
3.2
1
voltha/voltha-voltha:1.6.0ff596b62de59
cryptography@2.4.1
3.2
1
wallabag/wallabag:2.4.25e4c26a7fb4a
cryptography@2.9.2
3.2
1
weblate/weblate:3.11.3-182848df56ecd
cryptography@2.8
3.2
1
wiremind/pghoard:12-2019-11-264dea42c8166c
cryptography@2.8
3.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.