StackRadar

CVE-2025-15469

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
355
of 17,781 indexed, latest versions
Container images
361
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 355 of 17,781 indexed charts deploy, on 361 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+8 more3.5.5-r0, 3.6.1-r0282
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.3-1ubuntu2, 3.5.4-1~deb13u13.5.3-1ubuntu3, 3.5.4-1~deb13u263
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
OSV records
ALPINE-CVE-2025-15469CGA-cxqr-wch6-w4mpDEBIAN-CVE-2025-15469UBUNTU-CVE-2025-15469
Also known as
CGA-h6xg-wcqx-j6v6, USN-7980-1

Charts affected

355 by stars
ChartLatestAffected imagesRadar Score
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
vcnngr/pnfrontend:latest4e4979ab8c41
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

4,768
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
no fix listed

Open the chart page →

9,347
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

4,984
wexa-studiowexa-studio1.2.03 of 15See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.5-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.5-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

14,983
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed

Open the chart page →

14,100

Container images carrying it

361 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
apache/kafka:4.1.0bff074a5d005
openssl@3.5.2-r0
3.5.5-r0
1
apache/kafka-native:4.1.09a9d16e60894
openssl@3.5.1-r0
3.5.5-r0
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
openssl@3.5.1-1
3.5.4-1~deb13u2
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
openssl@3.5.1-1
3.5.4-1~deb13u2
1
beyzkaya/blog-frontend:v1.0.0bf412d75c510
openssl@3.5.0-r0
3.5.5-r0
1
boky/postfix:5.1.0aafc77238423
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
byrnedo/alpine-curl:latest7f0599d553e2
openssl@3.5.4-r0
3.5.5-r0
1
camunda/camunda-bpm-platform:latestbcc5bb0542df
openssl@3.5.1-r0
3.5.5-r0
1
cesanta/docker_auth:1.14.098e0307e0d2d
openssl@3.5.0-r0
3.5.5-r0
1
chainflag/eth-faucet:latestac642796bcb6
openssl@3.5.4-r0
3.5.5-r0
1
chibisafe/chibisafe:latest836467a50792
openssl@3.5.0-r0
3.5.5-r0
1
chibisafe/chibisafe-server:latest3da4fcbc1a18
openssl@3.5.1-r0
3.5.5-r0
1
clowder/clowder2-frontend:2.0.0-beta.4fe97882672ca
openssl@3.5.4-r0
3.5.5-r0
1
copyparty/ac:1.19.200a0a8605062c
openssl@3.5.4-r0
3.5.5-r0
1
cr0hn/ja-shortener:v0.1.414482d0bc4a1
openssl@3.5.1-r0
3.5.5-r0
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
dariomader/twampy:v0.0.2d2f4a8c5e690
openssl@3.2.0-r0
3.6.1-r0
1
datappeal/trino-loadbalancer:sha-950abbae6b5b9fdb2e6d
openssl@3.5.1-r0
3.5.5-r0
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
dgraph/ratel:v25.0.34cae1ff95027
openssl@3.5.4-r0
3.5.5-r0
1
djjudas21/ecowitt-exporter:2.2.073aab45ef10d
openssl@3.5.0-r0
3.5.5-r0
1
djjudas21/liturgical-colour-app:0.7.2954935971d42
openssl@3.5.1-r0
3.5.5-r0
1
djjudas21/nova-exporter:0.0.10e9094580885c
openssl@3.5.1-r0
3.5.5-r0
1
djjudas21/smtp-relay:0.11.0ffd8143952f6
openssl@3.5.4-r0
3.5.5-r0
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
openssl@3.5.1-1
3.5.4-1~deb13u2
1
donetick/donetick:v0.1.60849a43d9e363
openssl@3.5.1-r0
3.5.5-r0
1
dpage/pgadmin4:9.11.050700ac17936
openssl@3.5.4-r0
3.5.5-r0
1
dvdlevanon/kubernetes-database-scaler:v0.0.361e79c1643fe4
openssl@3.5.0-r0
3.5.5-r0
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
openssl@3.5.1-1+deb13u1
3.5.4-1~deb13u2
1
eftechcombr/glpi:php-fpm-12.0.0-rc1f3d0ed01709e
openssl@3.5.4-r0
3.5.5-r0
1
elautoestopista/aeneabot:4.2.1125ba620d528
openssl@3.5.4-r0
3.5.5-r0
1
emqx/emqx:5.8.935b46f7aa7a0
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
openssl@3.5.1-1
3.5.4-1~deb13u2
1
erenozcan17/go_backend:v4.250b4f23422b6
openssl@3.5.1-r0
3.5.5-r0
1
erenozcan17/react_frontend:v4.56e1b14973f9b
openssl@3.5.1-r0
3.5.5-r0
1
erudikaltd/scoold:1.66.0949c56b57e8f
openssl@3.5.4-r0
3.5.5-r0
1
esteban1930/frontend-1:1.8.0f9078279632c
openssl@3.5.1-r0
3.5.5-r0
1
ethereum/client-go:v1.16.532b878e4144a
openssl@3.5.4-r0
3.5.5-r0
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed
1
ethpandaops/xatu-cbt-api:latestf7dec2e07091
openssl@3.5.4-r0
3.5.5-r0
1
evoapicloud/evolution-manager:latestcbfeb314afb9
openssl@3.5.4-r0
3.5.5-r0
1
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
openssl@3.5.1-1
3.5.4-1~deb13u2
1
falcosecurity/falcosidekick:2.32.01976da721518
openssl@3.5.1-r0
3.5.5-r0
1
fallenbagel/jellyseerr:latest4538137bc5af
openssl@3.5.1-r0
3.5.5-r0
1
felipecs8/landing-page:v1db6d44e325a1
openssl@3.5.1-r0
3.5.5-r0
1
ffutop/ddc-ph-kafka-egress:latest319d94c8481a
openssl@3.5.4-r0
3.5.5-r0
1
ffutop/ddc-ph-kafka-ingress:latest15832d4f19be
openssl@3.5.4-r0
3.5.5-r0
1
ffutop/ddc-transport-udp-receive:latest651ca530d787
openssl@3.5.4-r0
3.5.5-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.