StackRadar

CVE-2025-27587

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
794
of 17,790 indexed, latest versions
Container images
870
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 794 of 17,790 indexed charts deploy, on 870 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.9-1, 3.0.11-1~deb12u1, 3.0.11-1~deb12u2, 3.0.13-1~deb12u1+12 moreno fix listed870
OSV records
DEBIAN-CVE-2025-27587

Charts affected

794 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

870 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
openssl@3.0.16-1~deb12u1
no fix listed
1
fluent/fluent-bit:4.0.4ca08b7d2df5b
openssl@3.0.16-1~deb12u1
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
openssl@3.0.17-1~deb12u3
no fix listed
1
fosrl/pangolin:latest83a55f933b4d
openssl@3.0.20-1~deb12u2
no fix listed
1
freedom98/flask:k3.0d7ce1533f297
openssl@3.0.15-1~deb12u1
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
openssl@3.0.15-1~deb12u1
no fix listed
1
geopython/pycsw:3.0.0-beta284662ea6b78b
openssl@3.0.17-1~deb12u3
no fix listed
1
getsentry/relay:24.10.0ba7bf9163219
openssl@3.0.14-1~deb12u2
no fix listed
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
openssl@3.0.20-1~deb12u1
no fix listed
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
openssl@3.0.9-1
no fix listed
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
openssl@3.0.9-1
no fix listed
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
openssl@3.0.9-1
no fix listed
1
grafana/fluent-plugin-loki:latest8a3882e8c28b
openssl@3.0.16-1~deb12u1
no fix listed
1
grafana/mcp-grafana:0.14.042f541f22063
openssl@3.0.19-1~deb12u2
no fix listed
1
grafana/mcp-grafana:1.4.2f87fa67a561f
openssl@3.0.20-1~deb12u2
no fix listed
1
graphprotocol/graph-node:latestb0436347fb24
openssl@3.0.20-1~deb12u2
no fix listed
1
graphprotocol/graph-node:v0.37.0f4452cdedd68
openssl@3.0.15-1~deb12u1
no fix listed
1
greenkube/greenkube:0.3.00c01932282a4
openssl@3.0.20-1~deb12u2
no fix listed
1
growthbook/growthbook:5.0.1f53ead646b5f
openssl@3.0.20-1~deb12u2
no fix listed
1
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
openssl@3.0.14-1~deb12u2
no fix listed
1
gulacedia/web-dvwa-new:v367b467d961ca
openssl@3.0.9-1
no fix listed
1
hamidyousefi93/saam-test:latestc34f071f6ed0
openssl@3.0.11-1~deb12u2
no fix listed
1
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
openssl@3.0.14-1~deb12u2
no fix listed
1
hamzaarshad10/querypodpy:1.7154f38e8668e
openssl@3.0.14-1~deb12u2
no fix listed
1
hansehe/locust:1.1.0bc8e45262bc4
openssl@3.0.15-1~deb12u1
no fix listed
1
haohanyang/compass-web:0.5.054f2112602ee
openssl@3.0.20-1~deb12u1
no fix listed
1
haohanyang/compass-web:0.5.1f4f8fe4e21f1
openssl@3.0.20-1~deb12u2
no fix listed
1
hassroutyyoussef/accountservice:latest1f01edf1ee0c
openssl@3.0.15-1~deb12u1
no fix listed
1
hassroutyyoussef/orderservice:latest2fc3d1617928
openssl@3.0.15-1~deb12u1
no fix listed
1
hassroutyyoussef/userservice:lateste0392e2b4a90
openssl@3.0.15-1~deb12u1
no fix listed
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
openssl@3.0.15-1~deb12u1
no fix listed
1
hazegoodlife/haaze:milksite8d4c63169e14
openssl@3.0.15-1~deb12u1
no fix listed
1
headscale/headscale:0.25.1a7a8ae9616bb
openssl@3.0.15-1~deb12u1
no fix listed
1
headscale/headscale:0.27.1cd37b3001857
openssl@3.0.17-1~deb12u3
no fix listed
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
openssl@3.0.13-1~deb12u1
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
openssl@3.0.9-1
no fix listed
1
hiboxsystems/marge-bot:0.14.0dcffb926e563
openssl@3.0.11-1~deb12u2
no fix listed
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
openssl@3.0.17-1~deb12u3
no fix listed
1
hiversh/antigravity:0.1.45-microvm0e36d98402bc
openssl@3.0.20-1~deb12u2
no fix listed
1
hiversh/browser:0.1.45-microvmb5048c6342ce
openssl@3.0.20-1~deb12u2
no fix listed
1
hiversh/claude:0.1.45-microvm2fbf9f264498
openssl@3.0.20-1~deb12u2
no fix listed
1
hiversh/codex:0.1.45-microvm4f43130f51e5
openssl@3.0.20-1~deb12u2
no fix listed
1
hiversh/controller:0.1.45b0b85f8942c7
openssl@3.0.20-1~deb12u2
no fix listed
1
hiversh/copilot:0.1.45-microvm50c07b84f298
openssl@3.0.20-1~deb12u2
no fix listed
1
hiversh/node:0.1.45-alpine-microvm836a37641941
openssl@3.0.20-1~deb12u2
no fix listed
1
hiversh/openclaw:0.1.45-microvm958b7ebb4eb4
openssl@3.0.20-1~deb12u2
no fix listed
1
hiversh/python:0.1.45-3.13-alpine-microvm63a5ae179a9f
openssl@3.0.20-1~deb12u2
no fix listed
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
openssl@3.0.9-1
no fix listed
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
openssl@3.0.9-1
no fix listed
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
openssl@3.0.9-1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.