StackRadar

CVE-2025-66199

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
35th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
767
of 17,790 indexed, latest versions
Container images
810
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2025-66199 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 767 of 17,790 indexed charts deploy, on 810 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.0-r2, 3.3.1-r0, 3.3.1-r1+18 more3.3.6-r0, 3.5.5-r0, 3.6.1-r0730
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.3-1ubuntu2, 3.5.4-1~deb13u13.5.3-1ubuntu3, 3.5.4-1~deb13u263
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
opensslrpm3.3.5-1.azl33.3.5-31
OSV records
ALPINE-CVE-2025-66199CGA-8724-74qp-7vp4DEBIAN-CVE-2025-66199UBUNTU-CVE-2025-66199AZL-75284
Also known as
CGA-r9pq-2w3x-64gx, USN-7980-1

Charts affected

767 by stars
ChartLatestAffected imagesRadar Score
kube-prometheus-stacksoftonic81.5.12 of 6See more

kube-prometheus-stack softonic 81.5.1

2 of the 6 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
openssl@3.5.4-r0
3.5.5-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

4,989
rclonesoftonic2.1.01 of 1See more

rclone softonic 2.1.0

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

1,680
flowssqream-chartsVerified publisher0.6.21 of 3See more

flows sqream-charts 0.6.2

1 of the 3 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
alpine/curl:8.7.1f0c1b7ca12f6
openssl@3.3.1-r0
3.3.6-r0

Open the chart page →

655
umbrellasqream-chartsVerified publisher0.1.811 of 18See more

umbrella sqream-charts 0.1.81

1 of the 18 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
alpine/curl:8.7.1f0c1b7ca12f6
openssl@3.3.1-r0
3.3.6-r0

Open the chart page →

655
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
ncsa/checks:main0b738bbc8d70
openssl@3.5.1-1
3.5.4-1~deb13u2

Open the chart page →

67,262
mev-booststakewise1.7.41 of 1See more

mev-boost stakewise 1.7.4

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
flashbots/mev-boost:1.8.07c486b5789da
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

1,260
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
openssl@3.5.1-1+deb13u1
3.5.4-1~deb13u2

Open the chart page →

4,326
lingosubstratusVerified publisher0.2.11 of 1See more

lingo substratus 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
ghcr.io/substratusai/lingo:v0.2.12c807cd41ed4
openssl@3.3.1-r0
3.3.6-r0

Open the chart page →

1,482
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2

Open the chart page →

3,410
prowlarrsudo-kraken-prowlarrVerified publisher3.2.11 of 1See more

prowlarr sudo-kraken-prowlarr 3.2.1

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
ghcr.io/home-operations/prowlarr:2.3.01a8a4b11972b
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

878
slack-emoji-makersuminhong0.1.01 of 1See more

slack-emoji-maker suminhong 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
honglab/slack-emoji-maker:v0.0.1ca075a926fe1
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

1,654
languagetool-serverszpadel-chartsVerified publisher0.4.01 of 1See more

languagetool-server szpadel-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
ghcr.io/szpadel/languagetool-server:6.568fdab22b2a9
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

809
giropops-senhas-prdtechpreta0.1.01 of 2See more

giropops-senhas-prd techpreta 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
nataliagranato/redis:v1.0.052bd9b79a8f2
openssl@3.3.1-r4
3.6.1-r0

Open the chart page →

913
mrasiftech-thinker1.0.41 of 1See more

mrasif tech-thinker 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
mrasif/mrasif.in:v4.6.0375a1ed8fdc0
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

2,044
drl-exportertektonops0.1.31 of 1See more

drl-exporter tektonops 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
khaliq/drl-exporter:latestf63cf53166f8
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

883
ipup-dynutektonops0.1.11 of 1See more

ipup-dynu tektonops 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
tektonops/ipup-dynu:latestc2198746cf8f
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

863
pingmetektonops0.1.21 of 1See more

pingme tektonops 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
khaliq/pingme:v0.2.749f96888d2ab
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,254
helm-testtest-helm-artifacthubVerified publisher1.0.01 of 2See more

helm-test test-helm-artifacthub 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
carlosmz87/test_helm_frontend:latest79f4b528f42a
openssl@3.3.2-r1
3.3.6-r0

Open the chart page →

11,722
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
opea/chatqna-conversation-ui:1.002d5674ca863
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

39,273
chatqna-uitest-opea0.9.01 of 1See more

chatqna-ui test-opea 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
opea/chatqna-conversation-ui:v0.9bdb9ec215872
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

922
uitest-opea1.0.01 of 1See more

ui test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
opea/chatqna-conversation-ui:1.002d5674ca863
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

755
kasa-exporterth-chartsVerified publisher0.1.01 of 1See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
thelande/kasa_exporter:v0.2.3a1fdb8baa152
openssl@3.3.0-r2
3.3.6-r0

Open the chart page →

1,515
local-path-provisionerth-chartsVerified publisher0.0.291 of 1See more

local-path-provisioner th-charts 0.0.29

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.299bebefa0b908
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

1,300
openmeteo-exporterth-chartsVerified publisher0.1.61 of 1See more

openmeteo-exporter th-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
thelande/openmeteo_exporter:v1.0.77e9072ace15f
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

1,381
prusa-exporterth-chartsVerified publisher0.3.01 of 1See more

prusa-exporter th-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
pubeldev/prusa_exporter:2.0.01091665a020a
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

907
todolist-charttodolist-chart0.1.73 of 10See more

todolist-chart todolist-chart 0.1.7

3 of the 10 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
openssl@3.5.1-1
3.5.4-1~deb13u2
erenozcan17/go_backend:v4.250b4f23422b6
openssl@3.5.1-r0
3.5.5-r0
erenozcan17/react_frontend:v4.56e1b14973f9b
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

7,019
togglr-backendtogglrVerified publisher1.0.01 of 1See more

togglr-backend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

3,225
togglr-frontendtogglrVerified publisher1.0.01 of 1See more

togglr-frontend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
gdrocha/togglr-frontend:1.0.0ffbc1571c234
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,110
token-servertoken-server1.0.91 of 1See more

token-server token-server 1.0.9

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
udhos/token-server:1.0.9728013f2fac1
openssl@3.5.2-r0
3.5.5-r0

Open the chart page →

1,246
traefik-external-dns-operatortraefik-external-dns-operator1.0.11 of 1See more

traefik-external-dns-operator traefik-external-dns-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

1,083
traefik-secrets-exportertraefik-secrets-exporter0.0.21 of 1See more

traefik-secrets-exporter traefik-secrets-exporter 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,676
trident-protect-bxp-previewtrident-protect100.2511.0-bxp-preview1 of 3See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

1 of the 3 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v1.0.058b9fac358bd
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

2,191
saleor-appstrieb-work0.6.03 of 5See more

saleor-apps trieb-work 0.6.0

3 of the 5 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
openssl@3.3.3-r0
3.3.6-r0
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
openssl@3.3.3-r0
3.3.6-r0
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

7,018
traceetrivy-operator0.24.11 of 1See more

tracee trivy-operator 0.24.1

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
aquasec/tracee:0.24.1cfbbfee972e6
openssl@3.3.5-r0
3.3.6-r0

Open the chart page →

1,083
trivy-webhook-elasticsearchtrivy-webhook-elasticsearch0.1.41 of 1See more

trivy-webhook-elasticsearch trivy-webhook-elasticsearch 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
ghcr.io/lbi22/trivy-webhook-elasticsearch:v0.1.4b51b824e4f19
openssl@3.3.2-r1
3.3.6-r0

Open the chart page →

755
tfy-grafanatruefoundryVerified publisher0.1.211 of 3See more

tfy-grafana truefoundry 0.1.21

1 of the 3 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,064
tfy-logstruefoundryVerified publisher0.1.211 of 3See more

tfy-logs truefoundry 0.1.21

1 of the 3 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/timberio/vector:v0.50.05833723de9e4
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,034
tfy-lokitruefoundryVerified publisher0.1.61 of 2See more

tfy-loki truefoundry 0.1.6

1 of the 2 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
grafana/loki:2.9.1035b02acc6765
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

2,827
truefoundry-monitoringtruefoundryVerified publisher0.1.62 of 8See more

truefoundry-monitoring truefoundry 0.1.6

2 of the 8 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
openssl@3.5.4-r0
3.5.5-r0
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

4,544
configservertwomartensVerified publisher0.2.01 of 1See more

configserver twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
2martens/configserver:latestbf1cdb80239d
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

2,147
timetabletwomartensVerified publisher0.2.01 of 1See more

timetable twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
2martens/timetable:latestbd1ba6ab84c9
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

1,530
wahlrechttwomartensVerified publisher0.3.01 of 1See more

wahlrecht twomartens 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
2martens/wahlrecht:latestba2c3040dab0
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

1,693
deep-learning-toolsuninettsigma29.1.21 of 3See more

deep-learning-tools uninettsigma2 9.1.2

1 of the 3 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
library/nginx:1.29.3-alpineb3c656d55d7a
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,568
unleash-proxyunleash0.8.121 of 1See more

unleash-proxy unleash 0.8.12

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
unleashorg/unleash-proxy:v1.4.82538f89e2685
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

929
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

45,472
proxyv2flyVerified publisher0.0.61 of 1See more

proxy v2fly 0.0.6

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
v2fly/v2fly-core:latestd06727b221fe
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,434
vault-raft-snapshot-agentvault-raft-snapshot-agentVerified publisher0.6.91 of 1See more

vault-raft-snapshot-agent vault-raft-snapshot-agent 0.6.9

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
ghcr.io/argelbargel/vault-raft-snapshot-agent:v0.12.5345174727a2b
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

1,121
evolution-apivcnngrVerified publisher1.0.01 of 5See more

evolution-api vcnngr 1.0.0

1 of the 5 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
evoapicloud/evolution-manager:latestcbfeb314afb9
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

3,752
simple-prima-notavcnngrVerified publisher0.5.33 of 4See more

simple-prima-nota vcnngr 0.5.3

3 of the 4 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
openssl@3.3.3-r0
3.3.6-r0
vcnngr/pnbackend:latesteaf44ad0ad1f
openssl@3.3.3-r0
3.3.6-r0
vcnngr/pnfrontend:latest4e4979ab8c41
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

4,770
ubooquityvhdirkVerified publisher0.1.31 of 1See more

ubooquity vhdirk 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-66199.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

4,304

Container images carrying it

810 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
openssl@3.3.1-r3
3.3.6-r0
1
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
openssl@3.3.3-r0
3.3.6-r0
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
openssl@3.5.1-r0
3.5.5-r0
1
registry.gitlab.com/dyff/dyff-frontend:0.20.2481be0beaafe
openssl@3.3.3-r0
3.3.6-r0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
openssl@3.5.1-1
3.5.4-1~deb13u2
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
openssl@3.5.2-r0
3.5.5-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
openssl@3.5.1-r0
3.5.5-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
openssl@3.3.2-r0
3.3.6-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.6-r0
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
openssl@3.5.4-r0
3.5.5-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.