StackRadar

CVE-2025-11187

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
0.047
91st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
355
of 17,781 indexed, latest versions
Container images
361
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 355 of 17,781 indexed charts deploy, on 361 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+8 more3.5.5-r0, 3.6.1-r0282
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.3-1ubuntu2, 3.5.4-1~deb13u13.5.3-1ubuntu3, 3.5.4-1~deb13u263
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
OSV records
ALPINE-CVE-2025-11187CGA-2mq2-wcqq-gj8wDEBIAN-CVE-2025-11187UBUNTU-CVE-2025-11187
Also known as
CGA-826m-52gp-hm9m, USN-7980-1

Charts affected

355 by stars
ChartLatestAffected imagesRadar Score
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-11187.

Container imageDigestPackageFixed in
vcnngr/pnfrontend:latest4e4979ab8c41
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

4,768
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-11187.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
no fix listed

Open the chart page →

9,347
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-11187.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

4,984
wexa-studiowexa-studio1.2.03 of 15See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2025-11187.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.5-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.5-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

14,983
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-11187.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed

Open the chart page →

14,100

Container images carrying it

361 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.5-r0
13
curlimages/curl:8.17.0935d9100e9ba
openssl@3.5.4-r0
3.5.5-r0
6
alpine/kubectl:1.34.18413f8890d19
openssl@3.5.4-r0
3.5.5-r0
5
library/memcached:1.6.39-alpinec8503d4491ed
openssl@3.5.4-r0
3.5.5-r0
5
artifacthub/postgres:latest4fd34fa635cc
openssl@3.5.1-1
3.5.4-1~deb13u2
4
library/postgres:134689940c6838
openssl@3.5.1-1+deb13u1
3.5.4-1~deb13u2
4
library/rabbitmq:3.13-management-alpine:3-management-alpine606d8c0d6b3c
openssl@3.5.4-r0
3.5.5-r0
4
curlimages/curl:8.18.0d94d07ba9e7d
openssl@3.5.4-r0
3.5.5-r0
3
jaegertracing/all-in-one:latestab6f1a1f0fb4
openssl@3.5.4-r0
3.5.5-r0
3
natsio/nats-box:0.19.28031d190c7ee
openssl@3.5.4-r0
3.5.5-r0
3
apecloud/apecloud-mcp:0.1.094041b080510
openssl@3.5.0-r0
3.5.5-r0
2
clickhouse/clickhouse-server:25.7-alpine258d43821508
openssl@3.5.4-r0
3.5.5-r0
2
curlimages/curl:8.15.04026b29997dc
openssl@3.5.1-r0
3.5.5-r0
2
grafana/grafana:12.3.12175aaa91c96
openssl@3.5.4-r0
3.5.5-r0
2
kiwigrid/k8s-sidecar:1.30.98c06e1ba643a
openssl@3.5.1-r0
3.5.5-r0
2
library/postgres:18.06f3e42ad37de
openssl@3.5.1-1+deb13u1
3.5.4-1~deb13u2
2
library/postgres:13-alpinefb9065b6e3e2
openssl@3.5.4-r0
3.5.5-r0
2
library/wordpress:6.8.3-apache:6.8-apache30bff39330d1
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
2
mesosphere/kubectl:v1.35.0-alpineea01a9387771
openssl@3.5.4-r0
3.5.5-r0
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
openssl@3.5.1-r0
3.5.5-r0
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
openssl@3.5.4-r0
3.5.5-r0
2
natsio/nats-server-config-reloader:0.21.110ff229eaf52
openssl@3.5.4-r0
3.5.5-r0
2
timberio/vector:0.51.1-alpine2d16ae87ec39
openssl@3.5.4-r0
3.5.5-r0
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
nodejs@16.14.2-deb-1nodesource1
no fix listed
2
valkey/valkey:9.0.1546304417fea
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
2
valkey/valkey:8.1.481db6d39e1bb
openssl@3.5.1-1+deb13u1
3.5.4-1~deb13u2
2
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
openssl@3.5.4-r0
3.5.5-r0
2
ghcr.io/astriaorg/astria-geth:latest4249e403225a
openssl@3.5.0-r0
3.5.5-r0
2
ghcr.io/codingducksrl/laravel:8.15be52524664c
nodejs@16.18.0-deb-1nodesource1
no fix listed
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
openssl@3.5.0-r0
3.5.5-r0
2
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
openssl@3.5.1-r0
3.5.5-r0
2
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
openssl@3.5.1-r0
3.5.5-r0
2
ghcr.io/home-operations/readarr:0.4.18:0.4.18.28058f7551205fbd
openssl@3.5.0-r0
3.5.5-r0
2
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
openssl@3.5.0-r0
3.5.5-r0
2
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
openssl@3.5.0-r0
3.5.5-r0
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
openssl@3.5.1-1
3.5.4-1~deb13u2
2
quay.io/curl/curl:8.16.0b17b13321678
openssl@3.5.2-r0
3.5.5-r0
2
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
openssl@3.5.4-r0
3.5.5-r0
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
openssl@3.5.4-r0
3.5.5-r0
2
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.5-r0
2
2martens/timetable:latestbd1ba6ab84c9
openssl@3.5.1-r0
3.5.5-r0
1
2martens/wahlrecht:latestba2c3040dab0
openssl@3.5.1-r0
3.5.5-r0
1
airbyte/db:2.2.03b6985a0ce75
openssl@3.5.4-r0
3.5.5-r0
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
openssl@3.5.1-r0
3.5.5-r0
1
alakaganaguathoork/local-business:latest7eb27b0f4a5a
openssl@3.5.4-r0
3.5.5-r0
1
alpine/git:v2.49.1c0280cf95723
openssl@3.5.4-r0
3.5.5-r0
1
alpine/helm:4.1.0905a068da431
openssl@3.5.4-r0
3.5.5-r0
1
alpine/k8s:1.31.106dbe6f391eda
openssl@3.5.0-r0
3.5.5-r0
1
alpine/k8s:1.31.137a319b15cfc9
openssl@3.5.1-r0
3.5.5-r0
1
alpine/kubectl:1.33.32c59a3f0726c
openssl@3.5.1-r0
3.5.5-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.