StackRadar

CVE-2025-4575

Medium

Advisory

Published 22 May 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
30th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
46
of 17,781 indexed, latest versions
Container images
44
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 46 of 17,781 indexed charts deploy, on 44 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+3 more3.5.1-r044
OSV records
ALPINE-CVE-2025-4575CGA-c5j7-p289-63q6
Also known as
CGA-g5rv-mjg4-m8pr, CGA-m454-q539-fg8c, CGA-qx25-h6f8-5pm7

Charts affected

46 by stars
ChartLatestAffected imagesRadar Score
nacosygqygq2Verified publisher2.1.101 of 4See more

nacos ygqygq2 2.1.10

1 of the 4 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
nacos/nacos-server:v3.0.20e951a1d07bb
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

4,983
syftopenmined0.9.52 of 6See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
openssl@3.4.1-r0
3.5.1-r0
openmined/syft-frontend:0.9.5d11524a3854a
openssl@3.4.1-r0
3.5.1-r0

Open the chart page →

17,245
lxcfs-on-kuberneteslxcfs-on-kubernetes0.2.72 of 2See more

lxcfs-on-kubernetes lxcfs-on-kubernetes 0.2.7

2 of the 2 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
openssl@3.5.0-r0
3.5.1-r0
ghcr.io/cndoit18/lxcfs-manager:latest6bb61ded2625
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

2,085
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

5,852
agentareaagentareaVerified publisher0.0.181 of 16See more

agentarea agentarea 0.0.18

1 of the 16 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
temporalio/auto-setup:1.29.15b3502a3b685
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

14,914
readarrk8s-home-lab-repo7.2.11 of 1See more

readarr k8s-home-lab-repo 7.2.1

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.188f7551205fbd
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,099
chibisafel4gVerified publisher0.1.11 of 3See more

chibisafe l4g 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
chibisafe/chibisafe:latest836467a50792
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

5,654
octopuso7studios-octopus-helm-chartsOfficialVerified publisher1.2.31 of 5See more

octopus o7studios-octopus-helm-charts 1.2.3

1 of the 5 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
natsio/nats-box:0.18.0abdc9f9f0120
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

6,091
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

6,873
patchworkpatchworkVerified publisher0.8.61 of 2See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/patchwork:mainc01e018bced4
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

2,083
readarrpree-helm-chartsVerified publisher1.17.11 of 1See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.18.28058f7551205fbd
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,099
backendzymtraceOfficialVerified publisher26.9.11 of 6See more

backend zymtrace 26.9.1

1 of the 6 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

10,323
evm-rollupastria4.1.01 of 2See more

evm-rollup astria 4.1.0

1 of the 2 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

3,980
evm-stackastria5.0.31 of 2See more

evm-stack astria 5.0.3

1 of the 2 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astria-geth:latest4249e403225a
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

3,980
syslog-portalbryopsida0.3.11 of 1See more

syslog-portal bryopsida 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,306
ecowitt-exporterdjjudas21Verified publisher2.2.21 of 1See more

ecowitt-exporter djjudas21 2.2.2

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
djjudas21/ecowitt-exporter:2.2.073aab45ef10d
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,006
docker-authdocker-auth1.14.01 of 1See more

docker-auth docker-auth 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.14.098e0307e0d2d
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,506
dumpstoredumpstore0.1.12 of 2See more

dumpstore dumpstore 0.1.1

2 of the 2 container images this version deploys carry CVE-2025-4575.

Open the chart page →

4,251
kubernetes-database-scalerdvdlevanonVerified publisher0.1.21 of 1See more

kubernetes-database-scaler dvdlevanon 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
dvdlevanon/kubernetes-database-scaler:v0.0.361e79c1643fe4
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,022
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

8,923
twampyhelm-charts-darox0.0.21 of 1See more

twampy helm-charts-darox 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
dariomader/twampy:v0.0.2d2f4a8c5e690
openssl@3.2.0-r0
3.5.1-r0

Open the chart page →

2,057
interplexk8sgptVerified publisher1.1.01 of 1See more

interplex k8sgpt 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/interplex-ai/interplex:v1.1.041b0dd0d55b2
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

744
beetsk8s-home-lab-repo3.1.11 of 1See more

beets k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

2,733
apecloud-mcpkubeblocksVerified publisher0.1.01 of 1See more

apecloud-mcp kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
apecloud/apecloud-mcp:0.1.094041b080510
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,106
apelcoud-mcpkubeblocksVerified publisher0.1.01 of 1See more

apelcoud-mcp kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
apecloud/apecloud-mcp:0.1.094041b080510
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,106
livekit-serverlivekit-server1.9.01 of 1See more

livekit-server livekit-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
livekit/livekit-server:v1.9.03602a85840d5
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,552
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
beyzkaya/blog-frontend:v1.0.0bf412d75c510
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

13,010
neosyncneosyncVerified publisher0.5.411 of 3See more

neosync neosync 0.5.41

1 of the 3 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

7,184
appneosync-appVerified publisher0.5.411 of 1See more

app neosync-app 0.5.41

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,569
wireguardnicklasfrahm-wireguard0.2.01 of 1See more

wireguard nicklasfrahm-wireguard 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,157
cosmoshub-rpcnodeifyVerified publisher1.0.71 of 2See more

cosmoshub-rpc nodeify 1.0.7

1 of the 2 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

2,006
cosmos-nodenodeifyVerified publisher2.6.01 of 2See more

cosmos-node nodeify 2.6.0

1 of the 2 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

2,006
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

17,070
pro-builderopenfaas0.6.131 of 2See more

pro-builder openfaas 0.6.13

1 of the 2 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

2,726
opslevelopslevelVerified publisher2025.1.221 of 10See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
replicated/replicated-sdk:1.0.0-beta.318751b4963250
openssl@3.3.2-r2
3.5.1-r0

Open the chart page →

5,554
kubecostradar-baseVerified publisher1.0.02 of 7See more

kubecost radar-base 1.0.0

2 of the 7 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
gcr.io/kubecost1/frontend:prod-2.6.3a535f7de024b
openssl@3.4.1-r0
3.5.1-r0
gcr.io/kubecost1/kubecost-network-costs:v0.17.6ab6a54c53fd8
openssl@3.3.2-r0
3.5.1-r0

Open the chart page →

9,355
memosrm3lVerified publisher0.1.11 of 1See more

memos rm3l 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
neosmemo/memos:0.24c6defc2dfb98
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,614
wg-easyrm3lVerified publisher0.2.01 of 1See more

wg-easy rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,157
kubewatchrobusta3.5.01 of 1See more

kubewatch robusta 3.5.0

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
robustadev/kubewatch:v2.9.00457a51e36e8
openssl@3.3.2-r0
3.5.1-r0

Open the chart page →

1,766
nvme-exporterschichtelVerified publisher0.1.61 of 1See more

nvme-exporter schichtel 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,071
restic-serverschoolguys-helmcharts0.3.11 of 1See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
restic/rest-server:0.14.0d2aff06f47eb
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

2,257
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

7,708
tabixsinextraVerified publisher0.2.21 of 1See more

tabix sinextra 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/tabix:22.05.17a6e3e996a4ae
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

1,249
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
gcr.io/kubecost1/frontend:prod-2.5.5991c1465c658
openssl@3.4.1-r2
3.5.1-r0

Open the chart page →

7,901
giropops-senhas-prdtechpreta0.1.01 of 2See more

giropops-senhas-prd techpreta 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
nataliagranato/redis:v1.0.052bd9b79a8f2
openssl@3.3.1-r4
3.5.1-r0

Open the chart page →

913
wexa-studiowexa-studio1.2.02 of 15See more

wexa-studio wexa-studio 1.2.0

2 of the 15 container images this version deploys carry CVE-2025-4575.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.1-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.1-r0

Open the chart page →

14,983

Container images carrying it

44 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
apecloud/apecloud-mcp:0.1.094041b080510
openssl@3.5.0-r0
3.5.1-r0
2
ghcr.io/astriaorg/astria-geth:latest4249e403225a
openssl@3.5.0-r0
3.5.1-r0
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
openssl@3.5.0-r0
3.5.1-r0
2
ghcr.io/home-operations/readarr:0.4.18:0.4.18.28058f7551205fbd
openssl@3.5.0-r0
3.5.1-r0
2
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
openssl@3.5.0-r0
3.5.1-r0
2
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
openssl@3.5.0-r0
3.5.1-r0
2
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.1-r0
2
alpine/k8s:1.31.106dbe6f391eda
openssl@3.5.0-r0
3.5.1-r0
1
beyzkaya/blog-frontend:v1.0.0bf412d75c510
openssl@3.5.0-r0
3.5.1-r0
1
cesanta/docker_auth:1.14.098e0307e0d2d
openssl@3.5.0-r0
3.5.1-r0
1
chibisafe/chibisafe:latest836467a50792
openssl@3.5.0-r0
3.5.1-r0
1
dariomader/twampy:v0.0.2d2f4a8c5e690
openssl@3.2.0-r0
3.5.1-r0
1
djjudas21/ecowitt-exporter:2.2.073aab45ef10d
openssl@3.5.0-r0
3.5.1-r0
1
dvdlevanon/kubernetes-database-scaler:v0.0.361e79c1643fe4
openssl@3.5.0-r0
3.5.1-r0
1
livekit/livekit-server:v1.9.03602a85840d5
openssl@3.5.0-r0
3.5.1-r0
1
nacos/nacos-server:v3.0.20e951a1d07bb
openssl@3.5.0-r0
3.5.1-r0
1
nataliagranato/redis:v1.0.052bd9b79a8f2
openssl@3.3.1-r4
3.5.1-r0
1
natsio/nats-box:0.18.0abdc9f9f0120
openssl@3.5.0-r0
3.5.1-r0
1
neosmemo/memos:0.24c6defc2dfb98
openssl@3.5.0-r0
3.5.1-r0
1
openmined/syft-backend:0.9.5b72f74a68b32
openssl@3.4.1-r0
3.5.1-r0
1
openmined/syft-frontend:0.9.5d11524a3854a
openssl@3.4.1-r0
3.5.1-r0
1
replicated/replicated-sdk:1.0.0-beta.318751b4963250
openssl@3.3.2-r2
3.5.1-r0
1
restic/rest-server:0.14.0d2aff06f47eb
openssl@3.5.0-r0
3.5.1-r0
1
robustadev/kubewatch:v2.9.00457a51e36e8
openssl@3.3.2-r0
3.5.1-r0
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.1-r0
1
temporalio/auto-setup:1.29.15b3502a3b685
openssl@3.5.0-r0
3.5.1-r0
1
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.1-r0
1
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
openssl@3.5.0-r0
3.5.1-r0
1
gcr.io/kubecost1/frontend:prod-2.5.5991c1465c658
openssl@3.4.1-r2
3.5.1-r0
1
gcr.io/kubecost1/frontend:prod-2.6.3a535f7de024b
openssl@3.4.1-r0
3.5.1-r0
1
gcr.io/kubecost1/kubecost-network-costs:v0.17.6ab6a54c53fd8
openssl@3.3.2-r0
3.5.1-r0
1
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
openssl@3.5.0-r0
3.5.1-r0
1
ghcr.io/bryopsida/patchwork:mainc01e018bced4
openssl@3.5.0-r0
3.5.1-r0
1
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
openssl@3.5.0-r0
3.5.1-r0
1
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
openssl@3.5.0-r0
3.5.1-r0
1
ghcr.io/cndoit18/lxcfs-manager:latest6bb61ded2625
openssl@3.5.0-r0
3.5.1-r0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
openssl@3.5.0-r0
3.5.1-r0
1
ghcr.io/interplex-ai/interplex:v1.1.041b0dd0d55b2
openssl@3.5.0-r0
3.5.1-r0
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
openssl@3.5.0-r0
3.5.1-r0
1
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
openssl@3.5.0-r0
3.5.1-r0
1
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
openssl@3.5.0-r0
3.5.1-r0
1
ghcr.io/sergelogvinov/tabix:22.05.17a6e3e996a4ae
openssl@3.5.0-r0
3.5.1-r0
1
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
openssl@3.5.0-r0
3.5.1-r0
1
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.1e951adf792cd
openssl@3.5.0-r0
3.5.1-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.