CVE-2025-15467

High

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.8; base score, highest
EPSS: 0.482; 99th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,776; of 17,790 indexed, latest versions
Container images: 2,042; deployed by those charts
Fix available: 3 of 4; affected packages

CVE-2025-15467 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 1,776 of 17,790 indexed charts deploy, on 2,042 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+39 more	3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7, 3.0.18-1~deb12u2, 3.5.3-1ubuntu3+1 more	1,099
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more	3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0	931
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
opensslrpm	3.3.5-1.azl3	3.3.5-3	1

OSV records: ALPINE-CVE-2025-15467 CGA-8f29-c4cw-qq97 DEBIAN-CVE-2025-15467 UBUNTU-CVE-2025-15467 AZL-75791
Also known as: CGA-c6p4-q6jv-qjrr, USN-7980-1

Charts affected

1,776 by stars

Chart

Latest

Affected images

Radar Score

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.21
openebs/node-disk-operator :2.1.0	6afe2123c457	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.21

Open the chart page →

10,587

wexa-studiowexa-studio

1.2.0

4 of 15 See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	openssl@3.5.0-r0	3.5.5-r0
temporalio/server :1.29.1	c1e3326b2ce1	openssl@3.5.0-r0	3.5.5-r0
temporalio/ui :2.44.0	0b36e00aad30	openssl@3.5.4-r0	3.5.5-r0

Open the chart page →

15,044

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.21

Open the chart page →

9,320

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	openssl@3.0.18-1~deb12u1	3.0.18-1~deb12u2

Open the chart page →

7,664

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
dwdraju/alpine-curl-jq :latest	83bd9be2b14b	openssl@3.3.1-r3	3.3.6-r0

Open the chart page →

6,326

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2

Open the chart page →

5,559

postgres-operatorwiremind

1.14.0-wiremind0

1 of 1 See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	openssl@3.3.2-r4	3.3.6-r0

Open the chart page →

1,287

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	openssl@3.0.18-1~deb12u1	3.0.18-1~deb12u2

Open the chart page →

2,496

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	openssl@3.0.18-1~deb12u1	3.0.18-1~deb12u2

Open the chart page →

2,136

registrywiremind

0.1.1

1 of 1 See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
ghcr.io/distribution/distribution :3.0.0	4ba3adf47f5c	openssl@3.3.3-r0	3.3.6-r0

Open the chart page →

1,195

silence-operatorwiremind

0.0.8

1 of 1 See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
giantswarm/silence-operator :0.13.0	a6cac55aa2d4	openssl@3.3.3-r0	3.3.6-r0

Open the chart page →

790

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1 openssl@3.0.2-0ubuntu1.16	no fix listed 3.0.2-0ubuntu1.21

Open the chart page →

14,173

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2

Open the chart page →

11,603

oauth2xd

1.0.0

1 of 1 See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
lishimeng/hufu :v1.2.1	3d5752dac834	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

2,008

owlxd

0.5.1

2 of 2 See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
lishimeng/owl-console :v0.11.2	c79a67657baf	openssl@3.0.8-r0	3.0.19-r0
lishimeng/owl-messager :v0.11.2	3d00485e64dc	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

3,882

passportxd

0.2.16

2 of 2 See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
lishimeng/passport :v0.2.16	3e7d05ded625	openssl@3.0.8-r0	3.0.19-r0
lishimeng/passport-profile :v0.2.16	0970dfe5dc8f	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

3,976

tabbyxd

1.0.6

2 of 2 See more

tabby xd 1.0.6

2 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2
lishimeng/tabby :v1.0.4	8145c3dc83c8	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

7,697

treexd

0.1.10

1 of 1 See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
lishimeng/tree :v0.2.8	9b2f8be6c7d3	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

1,998

zooxd

0.4.0

1 of 1 See more

1,955

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
hamzaarshad10/queryfrontend :1.1.5.14	cd359d9a78c3	openssl@3.3.2-r0	3.3.6-r0
hamzaarshad10/querypodpy :1.7	154f38e8668e	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
murtazashah46/helmfile :latest	4d11726cf803	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2

Open the chart page →

13,783

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.7

Open the chart page →

2,142

ygdrassil-monitoringygdrassil

0.4.0

1 of 10 See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
grafana/grafana :11.5.1	5781759b3d27	openssl@3.3.2-r0	3.3.6-r0

Open the chart page →

9,395

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2

Open the chart page →

2,684

zahori-consulzahori

1.0.1

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	openssl@3.0.9-r1	3.0.19-r0
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	openssl@3.0.9-r1	3.0.19-r0

Open the chart page →

5,047

zahori-serverzahori

1.0.1

2 of 2 See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	openssl@3.0.7-r2	3.0.19-r0
zahoriaut/zahori-server :0.1.17	b2de13916f3e	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

5,852

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-15467.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,929

Container images carrying it

2,042 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
valkey/valkey :8.1.4	81db6d39e1bb	openssl@3.5.1-1+deb13u1	3.5.4-1~deb13u2	2
vdiogov/glpi-conteiner :latest	6945f84f0058	openssl@3.0.13-1~deb12u1	3.0.18-1~deb12u2	2
wolveix/satisfactory-server :latest :v1.9.10	e103700ae6ae	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.21	2
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.7	2
ghcr.io/appscode/inbox-server :latest :postgres-latest	536358d7b17e	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.21	2
ghcr.io/appscode/kube-auth-manager :v0.0.1	789692ab9193	openssl@3.0.8-r3	3.0.19-r0	2
ghcr.io/appscode/service-provider :v0.0.2	f6e481386d70	openssl@3.5.4-r0	3.5.5-r0	2
ghcr.io/astriaorg/astria-geth :latest	4249e403225a	openssl@3.5.0-r0	3.5.5-r0	2
ghcr.io/astriaorg/conductor :latest	3ea8164b0eae	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	2
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	openssl@3.3.1-r3	3.3.6-r0	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	nodejs@16.18.0-deb-1nodesource1 openssl@3.0.2-0ubuntu1.6	no fix listed 3.0.2-0ubuntu1.21	2
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	openssl@3.0.7-r0	3.0.19-r0	2
ghcr.io/cosmos/gaia :v25.1.0	f115777d1112	openssl@3.5.0-r0	3.5.5-r0	2
ghcr.io/cross-seed/cross-seed :6.13.3	81afafdd96a5	openssl@3.5.1-r0	3.5.5-r0	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.21	2
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	openssl@3.0.17-1~deb12u3	3.0.18-1~deb12u2	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	openssl@3.0.13-1~deb12u1	3.0.18-1~deb12u2	2
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	openssl@3.5.1-r0	3.5.5-r0	2
ghcr.io/home-operations/readarr :0.4.18 :0.4.18.2805	8f7551205fbd	openssl@3.5.0-r0	3.5.5-r0	2
ghcr.io/immich-app/postgres :14-vectorchord0.4.3-pgvectors0.2.0	bcf63357191b	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2	2
ghcr.io/kiwigrid/k8s-sidecar :1.29.1	42002d66ddb3	openssl@3.3.2-r4	3.3.6-r0	2
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	openssl@3.0.13-r0	3.0.19-r0	2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss :unprivileged-oss-20250331	3db8145349a3	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2	2
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2	2
ghcr.io/nucleuscloud/neosync/app :0.5.41	ca31ec35b829	openssl@3.5.0-r0	3.5.5-r0	2
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2	2
ghcr.io/postgresml/pgcat :main	245f9d2f5f5b	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2	2
ghcr.io/rss3-network/agentdata :0.1.0	fd8d3e6e4cdf	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	openssl@3.0.2-0ubuntu1.2	3.0.2-0ubuntu1.21	2
ghcr.io/smarter-project/home-ha-mock :main	95ee018cf558	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2	2
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	openssl@3.0.8-r0	3.0.19-r0	2
ghcr.io/wg-easy/wg-easy :14	5f26407fd2ed	openssl@3.5.0-r0	3.5.5-r0	2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	openssl@3.5.1-1	3.5.4-1~deb13u2	2
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	2
quay.io/curl/curl :8.16.0	b17b13321678	openssl@3.5.2-r0	3.5.5-r0	2
quay.io/kiwigrid/k8s-sidecar :2.1.2	716b0b33ff2d	openssl@3.5.4-r0	3.5.5-r0	2
quay.io/kiwigrid/k8s-sidecar :1.27.4	f6ed71d0f9f1	openssl@3.3.0-r2	3.3.6-r0	2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra :latest	b1198ea741d1	openssl@3.5.4-r0	3.5.5-r0	2
registry.k8s.io/ingress-nginx/controller :v1.11.8	695d79381ee6	openssl@3.5.0-r0	3.5.5-r0	2
registry.k8s.io/ingress-nginx/controller :v1.12.1	d2fbc4ec70d8	openssl@3.3.3-r0	3.3.6-r0	2
0hlov3/semaphore :v1.0.0	50f874ec096b	openssl@3.0.8-r0	3.0.19-r0	1
1dev/server :11.9.0	cd5b12fe5471	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	1
2martens/configserver :latest	bf1cdb80239d	openssl@3.3.1-r3	3.3.6-r0	1
2martens/timetable :latest	bd1ba6ab84c9	openssl@3.5.1-r0	3.5.5-r0	1
2martens/wahlrecht :latest	ba2c3040dab0	openssl@3.5.1-r0	3.5.5-r0	1
48n6e/camellia-redis-proxy :1.4.0-jdk-21-0.0.1	a6ed886fddfc	openssl@3.0.9-1	3.0.18-1~deb12u2	1
abdullahkhabir/radio :latest	56526d0cc929	openssl@3.0.7-r2	3.0.19-r0	1
abdullahkhawer/simple-elasticsearch-cleaner :2.1.0	28a6c3f7e0a9	openssl@3.3.2-r4	3.3.6-r0	1
abhinavsingh/proxy.py :latest	51adc989fd03	openssl@3.3.3-r0	3.3.6-r0	1