CVE-2025-26465
MediumAdvisory
Published 18 Feb 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.8
- base score, highest
- EPSS
- 0.077
- 94th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 307
- of 17,781 indexed, latest versions
- Container images
- 306
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
Red Hat Security Advisory: openssh security update
Carried by container images the latest versions of 307 of 17,781 indexed charts deploy, on 306 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensshdeb | 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4, 1:7.2p2-4ubuntu2.6, 1:7.2p2-4ubuntu2.7+34 more | 1:7.2p2-4ubuntu2.10+esm7, 1:7.6p1-4ubuntu0.7+esm4, 1:8.2p1-4ubuntu0.12, 1:8.2p1-4ubuntu0.fips.0.12+5 more | 265 |
| opensshapk | 9.3_p1-r3, 9.3_p2-r0, 9.3_p2-r1, 9.3_p2-r2+5 more | 9.3_p2-r3, 9.6_p1-r2, 9.7_p1-r5, 9.9_p2-r0 | 28 |
| opensshrpm | 8.0p1-4.el8_1, 8.0p1-6.el8_4.2, 8.0p1-9.el8, 8.0p1-15.el8_6.3+5 more | 0:8.0p1-26.el8_10, 0:8.7p1-38.el9_4.5, 0:8.7p1-45.el9 | 13 |
- OSV records
- ALPINE-CVE-2025-26465DEBIAN-CVE-2025-26465RHSA-2025:16823RHSA-2025:3837RHSA-2025:6993UBUNTU-CVE-2025-26465DLA-4057-1
- Also known as
- DSA-5868-1, USN-7270-1, USN-7270-2
Charts affected
307 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| tfy-distributortruefoundryVerified publisher | 0.0.1 | 1 of 4See more | 17,323 |
| demo-backendv2flyVerified publisher | 0.0.3 | 1 of 1See more | 14,358 |
| vinyl-lib-chartvinyl-libVerified publisher | 0.1.0 | 1 of 1See more | 3,392 |
| drillwearefrank | 1.3.6 | 1 of 3See more | 9,397 |
| marge-botwiremindVerified publisher | 1.4.4 | 1 of 1See more | 5,542 |
| playwright-synthetic-monitoringwork-adventure | 1.0.1 | 1 of 1See more | 14,100 |
| enterprise-gatewayzeet | 3.2.2 | 1 of 2See more | 1,838 |
Container images carrying it
306 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | 6ba82beff18e | openssh | 0:8.0p1-26.el8_10 | 1 |
| quay.io/ | b1a054613715 | openssh | 1:8.4p1-5+deb11u4 | 1 |
| quay.io/ | e0d9b93dbf2b | openssh | 1:9.2p1-2+deb12u5 | 1 |
| registry.gitlab.com/ | 22c33d693fe2 | openssh | 1:8.4p1-5+deb11u4 | 1 |
| registry.k8s.io/ | 6fa9042f6128 | openssh | 1:8.4p1-5+deb11u4 | 1 |
| registry.k8s.io/ | fd9722fd02e3 | openssh | 1:9.2p1-2+deb12u5 | 1 |