CVE-2025-15467

High

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.482; 99th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,776; of 17,790 indexed, latest versions
Container images: 2,042; deployed by those charts
Fix available: 3 of 4; affected packages

CVE-2025-15467 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 1,776 of 17,790 indexed charts deploy, on 2,042 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+39 more	3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7, 3.0.18-1~deb12u2, 3.5.3-1ubuntu3+1 more	1,099
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more	3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0	931
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
opensslrpm	3.3.5-1.azl3	3.3.5-3	1

OSV records: ALPINE-CVE-2025-15467 CGA-8f29-c4cw-qq97 DEBIAN-CVE-2025-15467 UBUNTU-CVE-2025-15467 AZL-75791
Also known as: CGA-c6p4-q6jv-qjrr, USN-7980-1

Charts affected

1,776 by stars

Chart

Latest

Affected images

Radar Score

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.21
openebs/node-disk-operator :2.1.0	6afe2123c457	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.21

Open the chart page →

10,587

wexa-studiowexa-studio

1.2.0

4 of 15 See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	openssl@3.5.0-r0	3.5.5-r0
temporalio/server :1.29.1	c1e3326b2ce1	openssl@3.5.0-r0	3.5.5-r0
temporalio/ui :2.44.0	0b36e00aad30	openssl@3.5.4-r0	3.5.5-r0

Open the chart page →

15,044

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.21

Open the chart page →

9,320

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	openssl@3.0.18-1~deb12u1	3.0.18-1~deb12u2

Open the chart page →

7,664

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
dwdraju/alpine-curl-jq :latest	83bd9be2b14b	openssl@3.3.1-r3	3.3.6-r0

Open the chart page →

6,326

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2

Open the chart page →

5,559

postgres-operatorwiremind

1.14.0-wiremind0

1 of 1 See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	openssl@3.3.2-r4	3.3.6-r0

Open the chart page →

1,287

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	openssl@3.0.18-1~deb12u1	3.0.18-1~deb12u2

Open the chart page →

2,496

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	openssl@3.0.18-1~deb12u1	3.0.18-1~deb12u2

Open the chart page →

2,136

registrywiremind

0.1.1

1 of 1 See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
ghcr.io/distribution/distribution :3.0.0	4ba3adf47f5c	openssl@3.3.3-r0	3.3.6-r0

Open the chart page →

1,195

silence-operatorwiremind

0.0.8

1 of 1 See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
giantswarm/silence-operator :0.13.0	a6cac55aa2d4	openssl@3.3.3-r0	3.3.6-r0

Open the chart page →

790

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1 openssl@3.0.2-0ubuntu1.16	no fix listed 3.0.2-0ubuntu1.21

Open the chart page →

14,173

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2

Open the chart page →

11,603

oauth2xd

1.0.0

1 of 1 See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
lishimeng/hufu :v1.2.1	3d5752dac834	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

2,008

owlxd

0.5.1

2 of 2 See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
lishimeng/owl-console :v0.11.2	c79a67657baf	openssl@3.0.8-r0	3.0.19-r0
lishimeng/owl-messager :v0.11.2	3d00485e64dc	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

3,882

passportxd

0.2.16

2 of 2 See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
lishimeng/passport :v0.2.16	3e7d05ded625	openssl@3.0.8-r0	3.0.19-r0
lishimeng/passport-profile :v0.2.16	0970dfe5dc8f	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

3,976

tabbyxd

1.0.6

2 of 2 See more

tabby xd 1.0.6

2 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2
lishimeng/tabby :v1.0.4	8145c3dc83c8	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

7,697

treexd

0.1.10

1 of 1 See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
lishimeng/tree :v0.2.8	9b2f8be6c7d3	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

1,998

zooxd

0.4.0

1 of 1 See more

1,955

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
hamzaarshad10/queryfrontend :1.1.5.14	cd359d9a78c3	openssl@3.3.2-r0	3.3.6-r0
hamzaarshad10/querypodpy :1.7	154f38e8668e	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
murtazashah46/helmfile :latest	4d11726cf803	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2

Open the chart page →

13,783

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.7

Open the chart page →

2,142

ygdrassil-monitoringygdrassil

0.4.0

1 of 10 See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
grafana/grafana :11.5.1	5781759b3d27	openssl@3.3.2-r0	3.3.6-r0

Open the chart page →

9,395

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2

Open the chart page →

2,684

zahori-consulzahori

1.0.1

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	openssl@3.0.9-r1	3.0.19-r0
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	openssl@3.0.9-r1	3.0.19-r0

Open the chart page →

5,047

zahori-serverzahori

1.0.1

2 of 2 See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	openssl@3.0.7-r2	3.0.19-r0
zahoriaut/zahori-server :0.1.17	b2de13916f3e	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

5,852

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,929

Container images carrying it

2,042 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
kiwigrid/k8s-sidecar :1.28.0	4166a019eeaf	openssl@3.3.2-r0	3.3.6-r0	3
kiwigrid/k8s-sidecar :1.30.2	cdb361e67b1b	openssl@3.3.3-r0	3.3.6-r0	3
kubegems/kubegems :v1.24.10	a730bcf9322a	openssl@3.5.4-r0	3.5.5-r0	3
library/nginx :1.25 :1.25.5	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2	3
library/postgres :15.7-alpine :15.7-alpine3.20	468d34fefd63	openssl@3.3.1-r3	3.3.6-r0	3
natsio/nats-box :0.19.2	8031d190c7ee	openssl@3.5.4-r0	3.5.5-r0	3
opencsghq/psql :latest	57def8e77d0f	openssl@3.3.2-r4	3.3.6-r0	3
pnnlmiscscripts/anaconda9 :1683907016.7470503-nginx-1	9a2fe06a1472	openssl@3.0.8-r3	3.0.19-r0	3
sigp/lighthouse :latest-amd64	50f66cfebb6d	openssl@3.0.2-0ubuntu1.21	no fix listed	3
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2	3
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	openssl@3.0.9-1	3.0.18-1~deb12u2	3
ghcr.io/huggingface/text-embeddings-inference :cpu-1.5	0502794a4d86	openssl@3.0.13-1~deb12u1	3.0.18-1~deb12u2	3
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	openssl@3.3.3-r0	3.3.6-r0	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.21	3
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	openssl@3.3.2-r4	3.3.6-r0	3
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	openssl@3.3.2-r4	3.3.6-r0	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.21	3
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	openssl@3.3.2-r4	3.3.6-r0	3
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	openssl@3.3.2-r4	3.3.6-r0	3
quay.io/devtron/notifier :9804331c-372-39294	709c7da19c5a	openssl@3.0.17-1~deb12u3	3.0.18-1~deb12u2	3
quay.io/devtron/silver-surfer :e3b9a2f6-1191-38789	9640e2dc4316	openssl@3.0.15-r0	3.0.19-r0	3
agoldis/sorry-cypress-dashboard :2.5.11	e061e5714238	openssl@3.0.8-r3	3.0.19-r0	2
alpine/curl :8.7.1	f0c1b7ca12f6	openssl@3.3.1-r0	3.3.6-r0	2
alpine/git :2.47.2	062a01ad7a0e	openssl@3.3.3-r0	3.3.6-r0	2
amaraiheanacho/nginx-site :latest	5c86fccf5daa	openssl@3.3.3-r0	3.3.6-r0	2
apache/fineract :1.12.1	a83cf1980609	openssl@3.3.4-r0	3.3.6-r0	2
apache/nifi-registry :1.26.0	7cdfd8deec92	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.21	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.7	2
apecloud/apecloud-mcp :0.1.0	94041b080510	openssl@3.5.0-r0	3.5.5-r0	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	openssl@3.3.1-r1	3.3.6-r0	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2	2
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2	2
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2	2
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2	2
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2	2
bitnamilegacy/redis :latest	5927ff3702df	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2	2
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	openssl@3.0.17-1~deb12u1	3.0.18-1~deb12u2	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2	2
clickhouse/clickhouse-server :25.7-alpine	258d43821508	openssl@3.5.4-r0	3.5.5-r0	2
cs3org/wopiserver :v9.4.2	02a9e78757b4	openssl@3.0.8-r0	3.0.19-r0	2
curlimages/curl :8.15.0	4026b29997dc	openssl@3.5.1-r0	3.5.5-r0	2
daniacobext/airports-frontend :latest	9eae4d39fc33	openssl@3.0.9-r1	3.0.19-r0	2
datagrok/grok_connect :latest	f5876d3aebb8	openssl@3.0.2-0ubuntu1.26	no fix listed	2
devopsfaith/krakend :latest	f8bdaa8a1a43	openssl@3.3.3-r0	3.3.6-r0	2
excalidraw/excalidraw :latest	f7ee194addd6	openssl@3.3.3-r0	3.3.6-r0	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	openssl@3.0.9-1	3.0.18-1~deb12u2	2
gradiant/ueransim :3.2.6	015b30d5fa0f	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.21	2
grafana/alloy :v1.8.1	7790f6f7fbd8	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	2
grafana/alloy :v1.12.2	f94b1c82957a	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.7	2