StackRadar

CVE-2020-25659

Medium

Advisory

Published 27 Oct 2020In the index since 6 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.024
83rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
97
of 17,781 indexed, latest versions
Container images
89
deployed by those charts
Fix available
2 of 2
affected packages

RSA decryption vulnerable to Bleichenbacher timing vulnerability

Carried by container images the latest versions of 97 of 17,781 indexed charts deploy, on 89 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+14 more3.2, 3.2.189
python-cryptographydeb2.1.4-1ubuntu1.2, 2.1.4-1ubuntu1.32.1.4-1ubuntu1.44
OSV records
GHSA-hggm-jpg3-v476UBUNTU-CVE-2020-25659PYSEC-2021-62
Also known as
USN-4613-1

Charts affected

97 by stars
ChartLatestAffected imagesRadar Score
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
cryptography@2.8
3.2

Open the chart page →

4,550
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
cryptography@2.9
3.2

Open the chart page →

11,174
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
cryptography@2.8
3.2

Open the chart page →

5,055
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
cryptography@2.8
3.2

Open the chart page →

14,673
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cryptography@2.8
3.2

Open the chart page →

64,489
kube-ops-viewfluent-operatorVerified publisher0.1.21 of 1See more

kube-ops-view fluent-operator 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
cryptography@2.9.2
3.2

Open the chart page →

1,848
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
cryptography@2.6.1
3.2

Open the chart page →

3,474
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
cryptography@2.1.4
3.2

Open the chart page →

13,551
wallabaggeek-cookbookVerified publisher7.2.01 of 1See more

wallabag geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
wallabag/wallabag:2.4.25e4c26a7fb4a
cryptography@2.9.2
3.2

Open the chart page →

4,358
pgadminhalkeye1.0.01 of 1See more

pgadmin halkeye 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
chorss/docker-pgadmin4:4.115c549cacb8ab
cryptography@2.7
3.2

Open the chart page →

2,555
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
cryptography@2.9.2
3.2

Open the chart page →

4,422
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
3.2

Open the chart page →

7,984
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
cryptography@2.8
3.2

Open the chart page →

3,314
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
cryptography@2.9.2
3.2

Open the chart page →

9,854
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.2
3.2
2.1.4-1ubuntu1.4

Open the chart page →

14,813
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
cryptography@3.2
3.2.1

Open the chart page →

1,850
gitlabkubesphereVerified publisher4.2.31 of 17See more

gitlab kubesphere 4.2.3

1 of the 17 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
cryptography@3.0
3.2

Open the chart page →

38,133
pulsarv2milvus-helm2.7.81 of 4See more

pulsarv2 milvus-helm 2.7.8

1 of the 4 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
cryptography@2.6.1
3.2

Open the chart page →

15,855
mtlsmtls0.3.41 of 1See more

mtls mtls 0.3.4

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
drgrove/mtls-server:v0.14.2361721759a2b
cryptography@2.4.2
3.2

Open the chart page →

1,458
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
elastichq/elasticsearch-hq:latestbb3bd22c2b87
cryptography@2.8
3.2

Open the chart page →

4,911
polyglotncsaVerified publisher0.1.11 of 18See more

polyglot ncsa 0.1.1

1 of the 18 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
cryptography@2.3
3.2

Open the chart page →

55,726
smilencsaVerified publisher1.1.02 of 23See more

smile ncsa 1.1.0

2 of the 23 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
cryptography@2.1.4
3.2
socialmediamacroscope/image_crawler:0.1.2f508216be63c
cryptography@2.1.4
3.2

Open the chart page →

109,294
comacopencord1.0.02 of 9See more

comac opencord 1.0.0

2 of the 9 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
cryptography@2.3.1
3.2
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
cryptography@2.3.1
3.2

Open the chart page →

88,546
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
cryptography@2.3.1
3.2

Open the chart page →

26,211
omec-control-planeopencord0.1.311 of 8See more

omec-control-plane opencord 0.1.31

1 of the 8 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
omecproject/mme-exporter:paging-latestbcc5f19fd676
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
3.2
2.1.4-1ubuntu1.4

Open the chart page →

40,715
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
cryptography@2.7
3.2

Open the chart page →

12,609
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
cryptography@2.4.1
3.2
voltha/voltha-netconf:1.6.037f80524c207
cryptography@2.4.1
3.2
voltha/voltha-ofagent:1.6.09ee8c1f4428c
cryptography@2.4.1
3.2
voltha/voltha-voltha:1.6.0ff596b62de59
cryptography@2.4.1
3.2

Open the chart page →

93,855
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
cryptography@2.5
3.2

Open the chart page →

36,215
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
cryptography@2.8
3.2

Open the chart page →

11,151
argocdromholdings1.8.11 of 3See more

argocd romholdings 1.8.1

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
3.2

Open the chart page →

10,466
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
cryptography@2.6.1
3.2

Open the chart page →

4,744
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
cryptography@2.8
3.2

Open the chart page →

8,694
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,769
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,803
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,769
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

24,776
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

24,776
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2

Open the chart page →

25,769
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
cryptography@2.8
3.2

Open the chart page →

30,687
pgadminstakaterVerified publisher0.1.141 of 1See more

pgadmin stakater 0.1.14

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.5a5a656e1d5fd
cryptography@2.6.1
3.2

Open the chart page →

2,060
datapusherstatcan1.0.01 of 1See more

datapusher statcan 1.0.0

1 of the 1 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
cryptography@3.1.1
3.2

Open the chart page →

3,044
rundecksvtech-public-helm-charts1.0.01 of 2See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2020-25659.

Container imageDigestPackageFixed in
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cryptography@2.5
3.2

Open the chart page →

18,756

Container images carrying it

89 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
3.2
11
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
3.2
3
amancevice/superset:0.35.212a0a9e66550
cryptography@2.7
3.2
2
hjacobs/kube-ops-view:20.4.058221b57d4d2
cryptography@2.9.2
3.2
2
larribas/mlflow:1.9.105ccb0b46bfb
cryptography@2.9.2
3.2
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
cryptography@2.3.1
3.2
2
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
3.2
2
a10networks/acos-prometheus-exporter:latest8dc58d434d71
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
3.2
2.1.4-1ubuntu1.4
1
amancevice/superset:0.28.1c8c04bfe3d66
cryptography@1.9
3.2
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
cryptography@2.9
3.2
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
cryptography@2.9.2
3.2
1
camptocamp/ekorre:0.1.035c91d5fda04
cryptography@2.8
3.2
1
camptocamp/pghoard:10bff736b15623
cryptography@2.3.1
3.2
1
camptocamp/snow-webhook:latest2924b43dbf40
cryptography@2.6.1
3.2
1
ceph/daemon:latest-nautilus90f30824a96e
cryptography@1.7.2
3.2
1
ceticasbl/pg-ldap-sync:latest6c0aa7567145
cryptography@2.6.1
3.2
1
chorss/docker-pgadmin4:4.115c549cacb8ab
cryptography@2.7
3.2
1
cloudve/janis-terminal:latestaf56e77ca587
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.3
3.2
2.1.4-1ubuntu1.4
1
cloudve/ttyd:latestd79c1c5881c0
cryptography@2.9.2
3.2
1
daskdev/dask:1.1.04ecd7bc35500
cryptography@2.3.1
3.2
1
daskdev/dask-notebook:1.1.0052630f5ca04
cryptography@2.3.1
3.2
1
datadog/agent:7.22.08f20e56b5311
cryptography@2.8
3.2
1
deconzcommunity/deconz:2.12.066541bbb78952
cryptography@2.6.1
3.2
1
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
cryptography@2.6.1
3.2
1
douz/helpdesk:latest4384103d0219
cryptography@2.8
3.2
1
dpage/pgadmin4:4.5a5a656e1d5fd
cryptography@2.6.1
3.2
1
dpage/pgadmin4:4.22b1f00b8163cf
cryptography@2.9.2
3.2
1
drgrove/mtls-server:v0.14.2361721759a2b
cryptography@2.4.2
3.2
1
dysnix/pritunl:v1.29-r819951e3e7a32
cryptography@2.8
3.2
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
cryptography@2.8
3.2
1
esphome/esphome:1.18.03f51ec10e823
cryptography@2.6.1
3.2
1
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
3.2
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cryptography@2.8
3.2
1
galaxy/galaxy-init:v18.010267bad550e6
cryptography@2.2.2
3.2
1
gethue/hue:4.10.05702b2c37ff9
cryptography@2.1.4
3.2
1
getsentry/sentry-kubernetes:latest6ac37974fd2a
cryptography@2.6.1
3.2
1
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
cryptography@3.1.1
3.2
1
jmferrer/azure-devops-agent:latest030f68ec6998
cryptography@2.8
3.2
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
cryptography@3.1.1
3.2
1
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
cryptography@3.1.1
3.2
1
kennethreitz/httpbin:latest599fe5e50731
cryptography@2.1.4
python-cryptography@2.1.4-1ubuntu1.2
3.2
2.1.4-1ubuntu1.4
1
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
cryptography@2.7
3.2
1
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
cryptography@2.6.1
3.2
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
cryptography@2.5
3.2
1
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
cryptography@2.8
3.2
1
linuxserver/deluge:18.04.10ac871624394
cryptography@2.1.4
3.2
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
cryptography@2.1.4
3.2
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
cryptography@2.1.4
3.2
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
cryptography@2.8
3.2
1
lncm/specter-desktop:v0.10.4bca14d04397d
cryptography@3.2
3.2.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.