StackRadar

CVE-2025-27587

Medium

Advisory

Published 16 Jun 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
801
of 17,787 indexed, latest versions
Container images
879
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 801 of 17,787 indexed charts deploy, on 879 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.9-1, 3.0.11-1~deb12u1, 3.0.11-1~deb12u2, 3.0.13-1~deb12u1+12 moreno fix listed879
OSV records
DEBIAN-CVE-2025-27587

Charts affected

801 by stars
ChartLatestAffected imagesRadar Score
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-27587.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

2,674

Container images carrying it

879 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
hiversh/python:0.1.45-3.13-alpine-microvm63a5ae179a9f
openssl@3.0.20-1~deb12u2
no fix listed
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
openssl@3.0.9-1
no fix listed
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
openssl@3.0.9-1
no fix listed
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
openssl@3.0.9-1
no fix listed
1
improwised/proxysql:master-6b26e59-171765063828940522e8b7
openssl@3.0.11-1~deb12u2
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
openssl@3.0.19-1~deb12u2
no fix listed
1
istio/examples-helloworld-v1:latest328b237e4fb1
openssl@3.0.11-1~deb12u2
no fix listed
1
istio/examples-helloworld-v2:latest0a7f02b2c7c9
openssl@3.0.11-1~deb12u2
no fix listed
1
jaedb/iris:latest048cfbf58d57
openssl@3.0.15-1~deb12u1
no fix listed
1
janzo83/serviceexample:latestfb3c4ac36f3e
openssl@3.0.17-1~deb12u3
no fix listed
1
jbtronics/part-db1:latest5db71f6db59d
openssl@3.0.20-1~deb12u2
no fix listed
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
openssl@3.0.15-1~deb12u1
no fix listed
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
openssl@3.0.13-1~deb12u1
no fix listed
1
jellyfin/jellyfin:10.10.77ae36aab93ef
openssl@3.0.15-1~deb12u1
no fix listed
1
jellyfin/jellyfin:10.10.696b09723b22f
openssl@3.0.15-1~deb12u1
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
openssl@3.0.14-1~deb12u2
no fix listed
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
openssl@3.0.11-1~deb12u2
no fix listed
1
jhaals/yopass:11.17.026873480863b
openssl@3.0.14-1~deb12u2
no fix listed
1
jhaals/yopass:12.5.0916a1cf45d36
openssl@3.0.17-1~deb12u3
no fix listed
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
openssl@3.0.11-1~deb12u2
no fix listed
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
openssl@3.0.15-1~deb12u1
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
openssl@3.0.20-1~deb12u2
no fix listed
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
openssl@3.0.15-1~deb12u1
no fix listed
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
openssl@3.0.15-1~deb12u1
no fix listed
1
kimai/kimai2:2.67.03084f1e5ecdc
openssl@3.0.20-1~deb12u2
no fix listed
1
kinseii/wazuh-agent:4.14.17160eb143728
openssl@3.0.17-1~deb12u3
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
openssl@3.0.11-1~deb12u2
no fix listed
1
kserve/models-web-app:v0.13.073486345a602
openssl@3.0.13-1~deb12u1
no fix listed
1
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
openssl@3.0.14-1~deb12u2
no fix listed
1
kubeflownotebookswg/kfam:v1.9.22060a2ede788
openssl@3.0.14-1~deb12u2
no fix listed
1
kubeflownotebookswg/notebook-controller:v1.9.20f14bd28fdd5
openssl@3.0.14-1~deb12u2
no fix listed
1
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
openssl@3.0.14-1~deb12u2
no fix listed
1
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
openssl@3.0.14-1~deb12u2
no fix listed
1
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
openssl@3.0.14-1~deb12u2
no fix listed
1
kubegems/redis:7.2.5-debian-12-r2870ee3a77add
openssl@3.0.13-1~deb12u1
no fix listed
1
kubeshop/testkube-minio:2025.10d8e1af6aca99
openssl@3.0.20-1~deb12u2
no fix listed
1
kuzwolka/aws9:main1ad759b961b1
openssl@3.0.15-1~deb12u1
no fix listed
1
kuzwolka/aws9:news3e8880fbbb96
openssl@3.0.15-1~deb12u1
no fix listed
1
kuzwolka/aws9:blog4a7707410bf1
openssl@3.0.15-1~deb12u1
no fix listed
1
kuzwolka/aws9:shop84a9d9766345
openssl@3.0.15-1~deb12u1
no fix listed
1
laly9999/node-app:1dd0e503913e1
openssl@3.0.16-1~deb12u1
no fix listed
1
langflowai/langflow-frontend:latest54f67f1961fe
openssl@3.0.18-1~deb12u1
no fix listed
1
langgenius/dify-agent-backend:1.16.1097d3fd27a7b
openssl@3.0.20-1~deb12u2
no fix listed
1
langgenius/dify-agent-local-sandbox:1.16.1bf8027ddccf3
openssl@3.0.20-1~deb12u2
no fix listed
1
langgenius/dify-api:1.0.0066035f93856
openssl@3.0.15-1~deb12u1
no fix listed
1
langgenius/dify-api:1.16.1dcefa5f7c47c
openssl@3.0.20-1~deb12u2
no fix listed
1
langgenius/dify-api:0.6.11fca918260dd6
openssl@3.0.11-1~deb12u2
no fix listed
1
lib42/jackett:latesta55596cda383
openssl@3.0.11-1~deb12u2
no fix listed
1
library/cassandra:4.0093ee8ee5eb2
openssl@3.0.20-1~deb12u2
no fix listed
1
library/couchdb:3.4.22817ad50b5c5
openssl@3.0.15-1~deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.