StackRadar

CVE-2025-27587

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
801
of 17,787 indexed, latest versions
Container images
879
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 801 of 17,787 indexed charts deploy, on 879 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.9-1, 3.0.11-1~deb12u1, 3.0.11-1~deb12u2, 3.0.13-1~deb12u1+12 moreno fix listed879
OSV records
DEBIAN-CVE-2025-27587

Charts affected

801 by stars
ChartLatestAffected imagesRadar Score
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-27587.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

2,674

Container images carrying it

879 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/dynamic-config-rs/dynamic-config-webhook:v0.3.0f00f02c53f66
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
openssl@3.0.13-1~deb12u1
no fix listed
1
ghcr.io/emissary-ingress/emissary:4.1.04a981156abee
openssl@3.0.20-1~deb12u1
no fix listed
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
openssl@3.0.11-1~deb12u2
no fix listed
1
ghcr.io/ferriskey/ferriskey-api:0.7.228b6adba10f8
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/firecrawl/firecrawl:2.11.33470453d7102cc
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
openssl@3.0.17-1~deb12u3
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
openssl@3.0.17-1~deb12u2
no fix listed
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/gearbox-protocol/safe-watcher:1.2.14e92a4508bee
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/github/github-mcp-server:v1.9.0881b53d6f75f
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
openssl@3.0.20-1~deb12u1
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
openssl@3.0.13-1~deb12u1
no fix listed
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
openssl@3.0.13-1~deb12u1
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
openssl@3.0.18-1~deb12u2
no fix listed
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/icegatetech/icegate-ingest:0.1.1bae3c441894a
openssl@3.0.19-1~deb12u2
no fix listed
1
ghcr.io/icegatetech/icegate-maintain:0.1.193e85b2b76ee
openssl@3.0.19-1~deb12u2
no fix listed
1
ghcr.io/icegatetech/icegate-query:0.1.17542b4e7fff2
openssl@3.0.19-1~deb12u2
no fix listed
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
openssl@3.0.17-1~deb12u2
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
openssl@3.0.17-1~deb12u2
no fix listed
1
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
openssl@3.0.20-1~deb12u1
no fix listed
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
openssl@3.0.16-1~deb12u1
no fix listed
1
ghcr.io/jensholdgaard/ourios:latest3d87d932391d
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/jeremylvln/shulker-operator:0.13.027c55706c126
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/jlclx/runtimeclass-controller:latestb3a87f92a963
openssl@3.0.14-1~deb12u2
no fix listed
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/jossware/node-provider-labeler:v0.8.0f80e85291439
openssl@3.0.13-1~deb12u1
no fix listed
1
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.16bebbda31416
openssl@3.0.16-1~deb12u1
no fix listed
1
ghcr.io/k8snetworkplumbingwg/multus-cni:stableec4e5dfe12b6
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/keiailab/nodevitals:0.8.597107e46f0d3
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
openssl@3.0.11-1~deb12u2
no fix listed
1
ghcr.io/kubedb/kubedb-gitops:v0.14.0c743f8d7a199
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
openssl@3.0.19-1~deb12u2
no fix listed
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
openssl@3.0.9-1
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
openssl@3.0.14-1~deb12u2
no fix listed
1
ghcr.io/linkwarden/linkwarden:v2.16.30664c28a039b
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
openssl@3.0.11-1~deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.