StackRadar

CVE-2025-15468

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
768
of 17,787 indexed, latest versions
Container images
811
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2025-15468 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 768 of 17,787 indexed charts deploy, on 811 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.0-r2, 3.3.1-r0, 3.3.1-r1+18 more3.3.6-r0, 3.5.5-r0, 3.6.1-r0731
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.3-1ubuntu2, 3.5.4-1~deb13u13.5.3-1ubuntu3, 3.5.4-1~deb13u263
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
opensslrpm3.3.5-1.azl33.3.5-31
OSV records
ALPINE-CVE-2025-15468CGA-cfrp-4x8p-ghrrDEBIAN-CVE-2025-15468UBUNTU-CVE-2025-15468AZL-75278
Also known as
CGA-vmpm-7qr6-cwvf, USN-7980-1

Charts affected

768 by stars
ChartLatestAffected imagesRadar Score
cert-manager-cpanel-dns-webhookegebackVerified publisher1.0.61 of 1See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

1,284
heimdallegebackVerified publisher2.0.41 of 1See more

heimdall egeback 2.0.4

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.6.371597f4461e4
openssl@3.3.4-r0
3.3.6-r0

Open the chart page →

1,663
eggybyte-chaineggybyte-hcr1.0.01 of 1See more

eggybyte-chain eggybyte-hcr 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
curlimages/curl:8.15.04026b29997dc
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

806
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
library/node:18-alpine8d6421d663b4
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

2,960
kube-ecp-stackemqx-operator2.5.12 of 16See more

kube-ecp-stack emqx-operator 2.5.1

2 of the 16 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
emqx/ecp-emqx-agent-downloader:2.5.1a8431baa7950
openssl@3.3.2-r0
3.3.6-r0
emqxecp/otelcol:2.5.04c31d9bec846
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

22,845
network-exporterenixVerified publisher0.3.01 of 1See more

network-exporter enix 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
syepes/network_exporter:1.8.000af1691570e
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

1,372
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2

Open the chart page →

7,265
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
alpine/git:v2.49.1c0280cf95723
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

9,383
postgresql-backupeosc-lot-1Verified publisher0.4.21 of 2See more

postgresql-backup eosc-lot-1 0.4.2

1 of the 2 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine3.20468d34fefd63
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

1,467
rommernail-romm1.0.11 of 1See more

romm ernail-romm 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
rommapp/romm:4.4.1b909e95d1aab
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

2,897
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
openssl@3.3.4-r0
3.3.6-r0

Open the chart page →

12,147
eth-faucetethereum-helm-chartsVerified publisher0.1.11 of 1See more

eth-faucet ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
chainflag/eth-faucet:latestac642796bcb6
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,995
rpc-proxyethereum-helm-chartsVerified publisher0.1.21 of 1See more

rpc-proxy ethereum-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ghcr.io/gochain/rpc-proxy/rpc-proxy:latestca01f5ab95f7
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

1,464
xatu-cbt-apiethereum-helm-chartsVerified publisher0.0.131 of 1See more

xatu-cbt-api ethereum-helm-charts 0.0.13

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ethpandaops/xatu-cbt-api:latestf7dec2e07091
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,217
multichain-proxyethersphereVerified publisher0.1.01 of 1See more

multichain-proxy ethersphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ethersphere/multichain-proxy:0.0.261f5419afbcd
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

795
gradle-build-cacheeugen0.1.21 of 1See more

gradle-build-cache eugen 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
gradle/build-cache-node:21.25bacbee677a9
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

345
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2

Open the chart page →

2,897
external-secrets-reloaderexternal-secrets-reloader0.1.01 of 1See more

external-secrets-reloader external-secrets-reloader 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ghcr.io/bensoer/external-secrets-reloader:v0.1.38e31b5a81853
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,031
perliteextrim-helm-chartsVerified publisher0.1.01 of 1See more

perlite extrim-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
extrim/perlite:1.5.99cb7eb5598b6
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

1,439
siyuanextrim-helm-chartsVerified publisher0.1.11 of 2See more

siyuan extrim-helm-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
b3log/siyuan:v3.1.2595c0d129bc19
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

1,247
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.22 of 18See more

farm-observability farm-observability 0.27.2

2 of the 18 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
library/memcached:1.6.39-alpinec8503d4491ed
openssl@3.5.4-r0
3.5.5-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

13,336
quickstartfeatureformVerified publisher0.1.11 of 3See more

quickstart featureform 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
featureformcom/quickstart-loader:latest82396f8fb5e8
openssl@3.3.0-r2
3.3.6-r0

Open the chart page →

3,554
data-diode-connector-egressffutopVerified publisher1.0.03 of 3See more

data-diode-connector-egress ffutop 1.0.0

3 of the 3 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ffutop/ddc-ph-kafka-egress:latest319d94c8481a
openssl@3.5.4-r0
3.5.5-r0
ffutop/ddc-transport-udp-receive:latest651ca530d787
openssl@3.5.4-r0
3.5.5-r0
timberio/vector:0.51.1-alpine2d16ae87ec39
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

2,032
data-diode-connector-ingressffutopVerified publisher1.0.03 of 3See more

data-diode-connector-ingress ffutop 1.0.0

3 of the 3 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ffutop/ddc-ph-kafka-ingress:latest15832d4f19be
openssl@3.5.4-r0
3.5.5-r0
ffutop/ddc-transport-udp-send:latest4222eb5ee847
openssl@3.5.4-r0
3.5.5-r0
timberio/vector:0.51.1-alpine2d16ae87ec39
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

2,032
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

7,691
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
openssl@3.3.4-r0
3.3.6-r0

Open the chart page →

7,848
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
openssl@3.3.2-r5
3.3.6-r0

Open the chart page →

1,394
mission-controlflanksourceVerified publisher0.1.3361 of 8See more

mission-control flanksource 0.1.336

1 of the 8 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
public.ecr.aws/k4y9r6y5/kratos:v25.4.0e8014c6c58b6
openssl@3.3.5-r0
3.3.6-r0

Open the chart page →

8,831
floating-serverfloating-server1.6.31 of 2See more

floating-server floating-server 1.6.3

1 of the 2 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
censedata/floating-server:v1.6.3ebfffb9dd4c0
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

1,452
mod-agreementsfolio-org0.1.321 of 1See more

mod-agreements folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
folioci/mod-agreements:latest29c3f233a498
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

1,874
mod-ldpfolio-org0.1.331 of 1See more

mod-ldp folio-org 0.1.33

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
folioci/mod-ldp:latestb55696fd9065
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

1,938
mod-licensesfolio-org0.1.321 of 1See more

mod-licenses folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
folioci/mod-licenses:latestcfd6109bf477
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

1,760
mod-oafolio-org0.1.21 of 1See more

mod-oa folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
folioci/mod-oa:latestae3b069d4ba5
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

1,733
mod-searchfolio-org0.1.351 of 1See more

mod-search folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
folioci/mod-search:latest44d7ee9acdf6
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

1,531
mod-serials-managementfolio-org0.1.11 of 1See more

mod-serials-management folio-org 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
folioci/mod-serials-management:latest571fa1ffe8c9
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

1,733
mod-service-interactionfolio-org0.1.61 of 1See more

mod-service-interaction folio-org 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
folioci/mod-service-interaction:latestf53c327a48e8
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

1,733
borgmaticgabe565Verified publisher0.10.11 of 1See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
openssl@3.3.2-r4
3.3.6-r0

Open the chart page →

2,437
castsponsorskipgabe565Verified publisher0.8.11 of 1See more

castsponsorskip gabe565 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ghcr.io/gabe565/castsponsorskip:0.8.15f7b4c6dd299
openssl@3.3.2-r4
3.3.6-r0

Open the chart page →

1,229
guacamolegabibbo970.3.01 of 3See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
openssl@3.5.1-1+deb13u1
3.5.4-1~deb13u2

Open the chart page →

6,425
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

2,154
monitoringgaloymoney0.12.211 of 6See more

monitoring galoymoney 0.12.21

1 of the 6 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

5,295
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

2,154
monitoringgaloymoney20.12.211 of 6See more

monitoring galoymoney2 0.12.21

1 of the 6 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

5,295
skypilotgeek-cookbookVerified publisher0.0.12 of 3See more

skypilot geek-cookbook 0.0.1

2 of the 3 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
openssl@3.5.1-1
3.5.4-1~deb13u2
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.5-r0

Open the chart page →

8,955
glassflow-etlglassflowVerified publisher0.5.214 of 16See more

glassflow-etl glassflow 0.5.21

4 of the 16 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
library/nats:2.12.3-alpine88fe8e0e09d6
openssl@3.5.4-r0
3.5.5-r0
natsio/nats-box:0.19.28031d190c7ee
openssl@3.5.4-r0
3.5.5-r0
natsio/nats-server-config-reloader:0.21.110ff229eaf52
openssl@3.5.4-r0
3.5.5-r0
natsio/prometheus-nats-exporter:0.17.326c826662ac8
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

12,072
kube-hookglenndehaanVerified publisher1.0.31 of 1See more

kube-hook glenndehaan 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
glenndehaan/kube-hook:latest0a7116f48bfe
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

923
gnp-stackgnp-stack0.0.53 of 14See more

gnp-stack gnp-stack 0.0.5

3 of the 14 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
openssl@3.5.4-r0
3.5.5-r0
rancher/local-path-provisioner:v0.0.329289da488b07
openssl@3.5.1-r0
3.5.5-r0
quay.io/kiwigrid/k8s-sidecar:1.30.10835d79d8fbae
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

7,662
go-file-servergo-file-server1.0.02 of 2See more

go-file-server go-file-server 1.0.0

2 of the 2 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
goccx/go-file-server:latestf4b3ebea0303
openssl@3.3.5-r0
3.3.6-r0
goccx/go-file-server-ui:latest784b35910d52
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

2,215
opentelemetry-demogpg-dev0.33.87 of 27See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
openssl@3.3.2-r0
3.3.6-r0
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
openssl@3.3.2-r0
3.3.6-r0
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
openssl@3.3.2-r0
3.3.6-r0
ghcr.io/open-telemetry/demo:1.12.0-cartservice89730afa0b5d
openssl@3.3.2-r0
3.3.6-r0
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
openssl@3.3.2-r0
3.3.6-r0
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
openssl@3.3.0-r2
3.3.6-r0
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

47,117
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

4,657

Container images carrying it

811 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/reactiveops/rbac-manager:v1.9.587e3f461446f
openssl@3.5.4-r0
3.5.5-r0
1
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
openssl@3.3.1-r3
3.3.6-r0
1
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
openssl@3.3.3-r0
3.3.6-r0
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
openssl@3.5.1-r0
3.5.5-r0
1
registry.gitlab.com/dyff/dyff-frontend:0.20.152549f52ae53
openssl@3.3.3-r0
3.3.6-r0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
openssl@3.5.1-1
3.5.4-1~deb13u2
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
openssl@3.5.2-r0
3.5.5-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
openssl@3.5.1-r0
3.5.5-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
openssl@3.3.2-r0
3.3.6-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.6-r0
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
openssl@3.5.4-r0
3.5.5-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.