StackRadar

CVE-2025-27587

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
801
of 17,787 indexed, latest versions
Container images
879
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 801 of 17,787 indexed charts deploy, on 879 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.9-1, 3.0.11-1~deb12u1, 3.0.11-1~deb12u2, 3.0.13-1~deb12u1+12 moreno fix listed879
OSV records
DEBIAN-CVE-2025-27587

Charts affected

801 by stars
ChartLatestAffected imagesRadar Score
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-27587.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

2,674

Container images carrying it

879 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
openssl@3.0.17-1~deb12u2
no fix listed
2
ghcr.io/lissy93/web-check:latesta4e021c0f6a9
openssl@3.0.20-1~deb12u2
no fix listed
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
openssl@3.0.14-1~deb12u2
no fix listed
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
openssl@3.0.16-1~deb12u1
no fix listed
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
openssl@3.0.16-1~deb12u1
no fix listed
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
openssl@3.0.11-1~deb12u2
no fix listed
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
openssl@3.0.15-1~deb12u1
no fix listed
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
openssl@3.0.15-1~deb12u1
no fix listed
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
openssl@3.0.18-1~deb12u2
no fix listed
2
public.ecr.aws/gravitational/tbot-distroless:18.11.04ba5ace31fea
openssl@3.0.20-1~deb12u2
no fix listed
2
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
openssl@3.0.20-1~deb12u2
no fix listed
2
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
openssl@3.0.9-1
no fix listed
1
aboogie/login_test_backend:new9c41a4483ac8
openssl@3.0.13-1~deb12u1
no fix listed
1
agentarea/agentarea-mcp-runner:latestd3c209a5d531
openssl@3.0.20-1~deb12u2
no fix listed
1
aibrix/gateway-plugins:v0.7.05b93ea4c753a
openssl@3.0.20-1~deb12u2
no fix listed
1
aibrix/metadata-service:v0.7.063fb81a64377
openssl@3.0.15-1~deb12u1
no fix listed
1
airbyte/manifest-server:7.23.73b3a670af168
openssl@3.0.20-1~deb12u2
no fix listed
1
airbyte/pod-sweeper:1.5.198d2c39d512e
openssl@3.0.15-1~deb12u1
no fix listed
1
akaunting/akaunting:3.0.1552811b36ec3a
openssl@3.0.9-1
no fix listed
1
alazidis/stornx:1.1.1602d4f7f090c
openssl@3.0.18-1~deb12u2
no fix listed
1
allegroai/clearml:2.0.0-613713ae38f7daf
openssl@3.0.15-1~deb12u1
no fix listed
1
ankane/pgvector:v0.5.1d3a9d8ac27bb
openssl@3.0.11-1~deb12u1
no fix listed
1
anujdatar/cups:25.07.01685df04a643b
openssl@3.0.16-1~deb12u1
no fix listed
1
apache/airflow:2.8.4-python3.964e58748b6b9
openssl@3.0.11-1~deb12u2
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
openssl@3.0.14-1~deb12u2
no fix listed
1
apache/airflow:2.8.1e5560ad0b86e
openssl@3.0.11-1~deb12u2
no fix listed
1
apache/superset:4.0.1ab9467fd712c
openssl@3.0.11-1~deb12u2
no fix listed
1
archivebox/archivebox:0.7.41a5a37331091
openssl@3.0.20-1~deb12u1
no fix listed
1
aristidetm/basic-notebook:3.6.5469dbc951224
openssl@3.0.13-1~deb12u1
no fix listed
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
openssl@3.0.13-1~deb12u1
no fix listed
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
openssl@3.0.11-1~deb12u2
no fix listed
1
assistiot/identity-manager_db:latest0d3e6d35f168
openssl@3.0.11-1~deb12u2
no fix listed
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
openssl@3.0.11-1~deb12u2
no fix listed
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
openssl@3.0.11-1~deb12u2
no fix listed
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
openssl@3.0.9-1
no fix listed
1
avaprotocol/ap-avs:1.2.0c430ea5c37d6
openssl@3.0.13-1~deb12u1
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
openssl@3.0.9-1
no fix listed
1
avzini/web-app:latestf40b30210ed0
openssl@3.0.11-1~deb12u2
no fix listed
1
baserow/backend:1.31.1e0b3c8130b91
openssl@3.0.15-1~deb12u1
no fix listed
1
baserow/baserow:1.30.1df0c42eb67e8
openssl@3.0.15-1~deb12u1
no fix listed
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
openssl@3.0.16-1~deb12u1
no fix listed
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
openssl@3.0.13-1~deb12u1
no fix listed
1
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
openssl@3.0.17-1~deb12u2
no fix listed
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
openssl@3.0.11-1~deb12u2
no fix listed
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/git:latest4b08d0c5af8d
openssl@3.0.16-1~deb12u1
no fix listed
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
openssl@3.0.15-1~deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.