StackRadar

CVE-2025-15468

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
768
of 17,787 indexed, latest versions
Container images
811
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2025-15468 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 768 of 17,787 indexed charts deploy, on 811 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.0-r2, 3.3.1-r0, 3.3.1-r1+18 more3.3.6-r0, 3.5.5-r0, 3.6.1-r0731
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.3-1ubuntu2, 3.5.4-1~deb13u13.5.3-1ubuntu3, 3.5.4-1~deb13u263
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
opensslrpm3.3.5-1.azl33.3.5-31
OSV records
ALPINE-CVE-2025-15468CGA-cfrp-4x8p-ghrrDEBIAN-CVE-2025-15468UBUNTU-CVE-2025-15468AZL-75278
Also known as
CGA-vmpm-7qr6-cwvf, USN-7980-1

Charts affected

768 by stars
ChartLatestAffected imagesRadar Score
ubooquityvhdirkVerified publisher0.1.31 of 1See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

4,302
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
no fix listed

Open the chart page →

9,396
mosquittovicsuferVerified publisher0.1.11 of 1See more

mosquitto vicsufer 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:2.0.2021421af7b32b
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

364
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ghcr.io/colanode/web:latestbcad696f03ee
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

2,077
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
openssl@3.5.2-r0
3.5.5-r0

Open the chart page →

6,470
vote-appvote-appVerified publisher1.0.72 of 6See more

vote-app vote-app 1.0.7

2 of the 6 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
thecloudspark/app-result:1.09a5302cb8312
openssl@3.3.0-r2
3.3.6-r0
thecloudspark/app-vote:1.0c7da7417a86a
openssl@3.3.0-r2
3.3.6-r0

Open the chart page →

3,030
waldur-site-agentwaldur-site-agentVerified publisher1.0.71 of 1See more

waldur-site-agent waldur-site-agent 1.0.7

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
opennode/waldur-site-agent:1.0.76d2e3b97c8d2
openssl@3.3.2-r1
3.3.6-r0

Open the chart page →

534
wallarm-node-nextwallarmVerified publisher0.5.31 of 2See more

wallarm-node-next wallarm 0.5.3

1 of the 2 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
wallarm/node-next:0.5.24314f3d2b918
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

2,408
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

4,985
hazelcastwenerme5.10.31 of 2See more

hazelcast wenerme 5.10.3

1 of the 2 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

2,623
wexa-studiowexa-studio1.2.03 of 15See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.5-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.5-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

14,618
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
dwdraju/alpine-curl-jq:latest83bd9be2b14b
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

6,323
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
openssl@3.3.2-r4
3.3.6-r0

Open the chart page →

1,286
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

1,187
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

789
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed

Open the chart page →

14,172
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

13,197
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-15468.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

9,381

Container images carrying it

811 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
glenndehaan/kube-hook:latest0a7116f48bfe
openssl@3.3.2-r0
3.3.6-r0
1
goccx/go-file-server:latestf4b3ebea0303
openssl@3.3.5-r0
3.3.6-r0
1
goccx/go-file-server-ui:latest784b35910d52
openssl@3.3.2-r0
3.3.6-r0
1
gpappsoft/privacyidea-docker:3.12.2af7841adad26
openssl@3.6.0-r4
3.6.1-r0
1
gradle/build-cache-node:21.25bacbee677a9
openssl@3.3.3-r0
3.3.6-r0
1
grafana/grafana:12.2.22ebef928d7e5
openssl@3.5.4-r0
3.5.5-r0
1
grafana/grafana:12.2.135c41e0fd029
openssl@3.5.4-r0
3.5.5-r0
1
grafana/grafana:11.2.2-security-01464eac539793
openssl@3.3.2-r0
3.3.6-r0
1
grafana/grafana:11.5.15781759b3d27
openssl@3.3.2-r0
3.3.6-r0
1
grafana/grafana:11.6.062d2b9d20a19
openssl@3.3.3-r0
3.3.6-r0
1
grafana/grafana:12.3.070d9599b186c
openssl@3.5.4-r0
3.5.5-r0
1
grafana/grafana:12.2.074144189b384
openssl@3.5.1-r0
3.5.5-r0
1
grafana/grafana:11.5.28b37a2f028f1
openssl@3.3.2-r1
3.3.6-r0
1
grafana/grafana:12.1.1a1701c218024
openssl@3.5.1-r0
3.5.5-r0
1
grafana/grafana:10.4.19a9043254ba16
openssl@3.3.3-r0
3.3.6-r0
1
grafana/grafana:12.0.2b5b59bfc7561
openssl@3.3.3-r0
3.3.6-r0
1
grafana/grafana:12.3.2ba93c9d192e5
openssl@3.5.4-r0
3.5.5-r0
1
grafana/grafana:11.3.1fa801ab6e1ae
openssl@3.3.2-r0
3.3.6-r0
1
grafana/loki:2.9.1035b02acc6765
openssl@3.3.1-r3
3.3.6-r0
1
grafana/oncall:v1.16.5499851658393
openssl@3.3.4-r0
3.3.6-r0
1
grafana/tempo:2.6.0f55a8a1937ff
openssl@3.3.1-r3
3.3.6-r0
1
gresearch/armada-executor:latest393aff4aa8f2
openssl@3.3.3-r0
3.3.6-r0
1
gresearch/armada-lookout:latestf5e3226f1d33
openssl@3.3.3-r0
3.3.6-r0
1
gresearch/armada-lookout-ingester:latest3df14cda1855
openssl@3.3.3-r0
3.3.6-r0
1
gresearch/armada-scheduler:latest6141a6213fcb
openssl@3.3.3-r0
3.3.6-r0
1
gridgain/cloud-connector:2025.5.15ab838d7d3cb
openssl@3.5.4-r0
3.5.5-r0
1
gridgain/community:8.9.11d32d182a0e6a
openssl@3.3.2-r0
3.3.6-r0
1
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
openssl@3.3.2-r0
3.3.6-r0
1
hashicorp/boundary:0.21.037bf86488b74
openssl@3.3.5-r0
3.3.6-r0
1
hashicorp/terraform:1.9.7b77efab1a448
openssl@3.3.2-r0
3.3.6-r0
1
hashicorp/vault:1.19.0bbb7f98dc67d
openssl@3.3.3-r0
3.3.6-r0
1
hashicorp/vault-k8s:1.6.2103a2d817a74
openssl@3.3.3-r0
3.3.6-r0
1
hashicorp/vault-k8s:1.7.2ae3d307658b7
openssl@3.5.4-r0
3.5.5-r0
1
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
openssl@3.3.1-r3
3.3.6-r0
1
hiboxsystems/marge-bot:0.16.0b59f01bc0418
openssl@3.5.1-1+deb13u1
3.5.4-1~deb13u2
1
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
openssl@3.3.3-r0
3.3.6-r0
1
ibmcom/microclimate-theia:lateste17bdccc5030
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed
1
ilum/marquez-web:0.53.2716437a51a6c
openssl@3.5.4-r0
3.5.5-r0
1
ilum/streamlit-example:1.0.0ce5dcdeb22ba
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
instill/console:0.68.54cd70e2df5c6
openssl@3.5.1-r0
3.5.5-r0
1
instill/model-backend:611f0f2e980125e5ba5
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
intelowlproject/intelowl_nginx:v6.6.12f01e79b8064
openssl@3.5.4-r0
3.5.5-r0
1
iomesh/deck:v0.2.0282d6c419ed3
openssl@3.3.1-r3
3.3.6-r0
1
iomesh/deck-plugin-iomesh:v0.2.0df149e4ab39f
openssl@3.3.1-r3
3.3.6-r0
1
ivanjosipovic/ingress-nginx-validate-jwt:1.13.995089339a68ae
openssl@3.3.3-r0
3.3.6-r0
1
ixsystems/truecommand:3.2.019c218455cd2
openssl@3.5.1-1
3.5.4-1~deb13u2
1
jaegertracing/jaeger:2.9.0e128b9adbb29
openssl@3.5.1-r0
3.5.5-r0
1
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
openssl@3.3.2-r0
3.3.6-r0
1
jeboehm/mailserver-filter:5.0.92e756949e537d
openssl@3.3.4-r0
3.3.6-r0
1
jeboehm/mailserver-mda:5.0.92d03fb7bae0a2
openssl@3.3.4-r0
3.3.6-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.