StackRadar

CVE-2025-15469

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
360
of 17,787 indexed, latest versions
Container images
366
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 360 of 17,787 indexed charts deploy, on 366 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+8 more3.5.5-r0, 3.6.1-r0287
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.3-1ubuntu2, 3.5.4-1~deb13u13.5.3-1ubuntu3, 3.5.4-1~deb13u263
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
OSV records
ALPINE-CVE-2025-15469CGA-cxqr-wch6-w4mpDEBIAN-CVE-2025-15469UBUNTU-CVE-2025-15469
Also known as
CGA-h6xg-wcqx-j6v6, USN-7980-1

Charts affected

360 by stars
ChartLatestAffected imagesRadar Score
wahlrechttwomartensVerified publisher0.3.01 of 1See more

wahlrecht twomartens 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
2martens/wahlrecht:latestba2c3040dab0
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

1,689
deep-learning-toolsuninettsigma29.1.21 of 3See more

deep-learning-tools uninettsigma2 9.1.2

1 of the 3 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
library/nginx:1.29.3-alpineb3c656d55d7a
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,567
proxyv2flyVerified publisher0.0.61 of 1See more

proxy v2fly 0.0.6

1 of the 1 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
v2fly/v2fly-core:latestd06727b221fe
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,426
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
evoapicloud/evolution-manager:latestcbfeb314afb9
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

3,746
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
vcnngr/pnfrontend:latest4e4979ab8c41
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

4,768
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
no fix listed

Open the chart page →

9,347
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
openssl@3.5.2-r0
3.5.5-r0

Open the chart page →

athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

4,984
wexa-studiowexa-studio1.2.03 of 15See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.5-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.5-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

14,983
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-15469.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed

Open the chart page →

14,100

Container images carrying it

366 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
platzio/backend:v0.6.5d5e5972f344b
openssl@3.5.1-r0
3.5.5-r0
1
platzio/frontend:v0.6.073083749b46a
openssl@3.5.1-r0
3.5.5-r0
1
pmoscode/excalidraw:v0.18.08ee61554699c
openssl@3.5.4-r0
3.5.5-r0
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
openssl@3.5.1-1
3.5.4-1~deb13u2
1
pubeldev/prusa_exporter:2.0.01091665a020a
openssl@3.5.4-r0
3.5.5-r0
1
rahulbhiwagade122/desishowbiz:latest08490b70998c
openssl@3.5.4-r0
3.5.5-r0
1
rancher/local-path-provisioner:v0.0.329289da488b07
openssl@3.5.1-r0
3.5.5-r0
1
replicated/replicated-sdk:1.0.0-beta.318751b4963250
openssl@3.3.2-r2
3.6.1-r0
1
restic/rest-server:0.14.0d2aff06f47eb
openssl@3.5.0-r0
3.5.5-r0
1
robustadev/kubewatch:v2.9.00457a51e36e8
openssl@3.3.2-r0
3.6.1-r0
1
rommapp/romm:4.4.1b909e95d1aab
openssl@3.5.4-r0
3.5.5-r0
1
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
openssl@3.5.4-r0
3.5.5-r0
1
rqlite/rqlite:9.1.37b992a526eee
openssl@3.5.4-r0
3.5.5-r0
1
rustfs/rustfs:1.0.0-alpha.738e467b32af3f
openssl@3.5.4-r0
3.5.5-r0
1
seyiogunniran/my-nginx:1.03a0ed39e5830
openssl@3.5.1-r0
3.5.5-r0
1
syepes/network_exporter:1.8.000af1691570e
openssl@3.5.1-r0
3.5.5-r0
1
sysnet4admin/colosseum-rwd:log74ded2d92f07
openssl@3.5.1-1+deb13u1
3.5.4-1~deb13u2
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.5-r0
1
temporalio/auto-setup:1.29.15b3502a3b685
openssl@3.5.0-r0
3.5.5-r0
1
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.5-r0
1
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.5-r0
1
thelande/openmeteo_exporter:v1.0.77e9072ace15f
openssl@3.5.1-r0
3.5.5-r0
1
thmmniii/fbs-collab:v1.27.15d389e3c5ce6
openssl@3.5.1-r0
3.5.5-r0
1
thmmniii/fbs-qcm-backend:v1.27.1afbe511e5c24
openssl@3.5.1-r0
3.5.5-r0
1
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
openssl@3.5.1-r0
3.5.5-r0
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
nodejs@7.10.1-2nodesource1~xenial1
no fix listed
1
udhos/apiping:1.5.041ab9bae6f3b
openssl@3.5.4-r0
3.5.5-r0
1
udhos/gateboard:1.12.53acc0e7599bf
openssl@3.5.4-r0
3.5.5-r0
1
udhos/gateboard-discovery:1.9.55567c9363c4c
openssl@3.5.4-r0
3.5.5-r0
1
udhos/token-server:1.0.9728013f2fac1
openssl@3.5.2-r0
3.5.5-r0
1
uptrace/uptrace:2.0.234a02c3b2d12
openssl@3.5.4-r0
3.5.5-r0
1
v2fly/v2fly-core:latestd06727b221fe
openssl@3.5.4-r0
3.5.5-r0
1
vabene1111/recipes:2.3.50f8d061895e9
openssl@3.5.4-r0
3.5.5-r0
1
vcnngr/pnfrontend:latest4e4979ab8c41
openssl@3.5.1-r0
3.5.5-r0
1
versity/versitygw:v1.1.0f730e0dbc1ef
openssl@3.5.4-r0
3.5.5-r0
1
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
openssl@3.5.0-r0
3.5.5-r0
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nodejs@16.19.1-deb-1nodesource1
no fix listed
1
volcanosh/vc-controller-manager:v1.12.13815883c32f6
openssl@3.5.0-r0
3.5.5-r0
1
volcanosh/vc-scheduler:v1.12.1b24ea8af2d16
openssl@3.5.0-r0
3.5.5-r0
1
volcanosh/vc-webhook-manager:v1.12.1f8b50088a732
openssl@3.5.0-r0
3.5.5-r0
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed
1
ymuski/geo-checker:5.0.05ba7fd8c7bdc
openssl@3.5.4-r0
3.5.5-r0
1
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
openssl@3.5.1-r0
3.5.5-r0
1
gcr.io/kubecost1/frontend:prod-2.5.5991c1465c658
openssl@3.4.1-r2
3.6.1-r0
1
gcr.io/kubecost1/frontend:prod-2.6.3a535f7de024b
openssl@3.4.1-r0
3.6.1-r0
1
gcr.io/kubecost1/kubecost-network-costs:v0.17.6ab6a54c53fd8
openssl@3.3.2-r0
3.6.1-r0
1
gcr.io/spotinst-artifacts/spot-ocean-metric-exporter:1.0.5ae57b62291aa
openssl@3.5.1-r0
3.5.5-r0
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
openssl@3.5.4-r0
3.5.5-r0
1
ghcr.io/alekc/samba-docker:v1.1.0cc9a028d9c43
openssl@3.5.4-r0
3.5.5-r0
1
ghcr.io/appscode/acerproxy:v0.2.021de3771fdd5
openssl@3.5.4-r0
3.5.5-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.