StackRadar

CVE-2025-69228

High

Advisory

Published 5 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
119
of 17,781 indexed, latest versions
Container images
123
deployed by those charts
Fix available
1 of 2
affected packages

AIOHTTP vulnerable to denial of service through large payloads

Carried by container images the latest versions of 119 of 17,781 indexed charts deploy, on 123 images.

Affected packageAffected versionsFixed inImages
aiohttppypi3.4.4, 3.5.4, 3.6.2, 3.7.1+29 more3.13.3123
python-aiohttpdeb3.8.4-1no fix listed1
OSV records
DEBIAN-CVE-2025-69228GHSA-6jhg-hg63-jvvf
Also known as
PYSEC-2026-1100

Charts affected

119 by stars
ChartLatestAffected imagesRadar Score
asrtest-opea1.0.01 of 1See more

asr test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/asr:1.025dd26d9cd09
aiohttp@3.10.5
3.13.3

Open the chart page →

4,393
chatqnatest-opea1.0.05 of 11See more

chatqna test-opea 1.0.0

5 of the 11 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
aiohttp@3.10.5
3.13.3
opea/embedding-tei:1.05c9639de61c1
aiohttp@3.10.5
3.13.3
opea/llm-tgi:1.00c25aab3f106
aiohttp@3.10.5
3.13.3
opea/reranking-tei:1.0e48613afb191
aiohttp@3.10.5
3.13.3
opea/retriever-redis:1.0eb746b263705
aiohttp@3.10.5
3.13.3

Open the chart page →

39,090
codegentest-opea1.0.02 of 5See more

codegen test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
aiohttp@3.10.5
3.13.3
opea/llm-tgi:1.00c25aab3f106
aiohttp@3.10.5
3.13.3

Open the chart page →

28,814
codetranstest-opea1.0.02 of 5See more

codetrans test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
aiohttp@3.10.5
3.13.3
opea/llm-tgi:1.00c25aab3f106
aiohttp@3.10.5
3.13.3

Open the chart page →

28,385
docsumtest-opea1.0.02 of 5See more

docsum test-opea 1.0.0

2 of the 5 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
aiohttp@3.10.5
3.13.3
opea/llm-docsum-tgi:1.002f9e8fa5d71
aiohttp@3.10.5
3.13.3

Open the chart page →

28,858
embedding-usvctest-opea1.0.01 of 1See more

embedding-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/embedding-tei:1.05c9639de61c1
aiohttp@3.10.5
3.13.3

Open the chart page →

5,185
guardrails-usvctest-opea1.0.01 of 1See more

guardrails-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/guardrails-tgi:1.0262c6048aab8
aiohttp@3.10.5
3.13.3

Open the chart page →

5,221
llm-uservicetest-opea1.0.01 of 1See more

llm-uservice test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/llm-tgi:1.00c25aab3f106
aiohttp@3.10.5
3.13.3

Open the chart page →

4,720
reranking-usvctest-opea1.0.01 of 1See more

reranking-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/reranking-tei:1.0e48613afb191
aiohttp@3.10.5
3.13.3

Open the chart page →

4,985
retriever-usvctest-opea1.0.01 of 1See more

retriever-usvc test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/retriever-redis:1.0eb746b263705
aiohttp@3.10.5
3.13.3

Open the chart page →

5,198
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
aiohttp@3.10.5
3.13.3

Open the chart page →

9,616
ttstest-opea1.0.01 of 1See more

tts test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/tts:1.0257ae94709e9
aiohttp@3.10.5
3.13.3

Open the chart page →

4,377
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
aiohttp@3.10.5
3.13.3

Open the chart page →

5,350
kasa-exporterth-chartsVerified publisher0.1.01 of 1See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
thelande/kasa_exporter:v0.2.3a1fdb8baa152
aiohttp@3.9.5
3.13.3

Open the chart page →

1,515
traefik-external-dns-operatortraefik-external-dns-operator1.0.11 of 1See more

traefik-external-dns-operator traefik-external-dns-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
aiohttp@3.11.14
3.13.3

Open the chart page →

1,083
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
aiohttp@3.8.1
3.13.3

Open the chart page →

8,607
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
aiohttp@3.7.4
3.13.3

Open the chart page →

11,119
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
aiohttp@3.8.1
3.13.3

Open the chart page →

3,118
grafana-matrix-forwarderzloi-space1.0.01 of 2See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-69228.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
aiohttp@3.8.1
3.13.3

Open the chart page →

1,636

Container images carrying it

123 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
opea/llm-tgi:1.00c25aab3f106
aiohttp@3.10.5
3.13.3
4
quay.io/devtron/ai-agent:0.0.16545dac92173
aiohttp@3.10.10
3.13.3
3
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
aiohttp@3.8.1
3.13.3
2
opea/embedding-tei:1.05c9639de61c1
aiohttp@3.10.5
3.13.3
2
opea/reranking-tei:1.0e48613afb191
aiohttp@3.10.5
3.13.3
2
opea/retriever-redis:1.0eb746b263705
aiohttp@3.10.5
3.13.3
2
vdiogov/glpi-conteiner:latest6945f84f0058
aiohttp@3.8.4
python-aiohttp@3.8.4-1
3.13.3
no fix listed
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
aiohttp@3.11.13
3.13.3
2
acockburn/appdaemon:4.0.83a93281d7e94
aiohttp@3.7.4
3.13.3
1
alerta/alerta-web:8.5.04786b9eaa606
aiohttp@3.8.0
3.13.3
1
apache/airflow:2.8.4-python3.964e58748b6b9
aiohttp@3.9.3
3.13.3
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
aiohttp@3.10.5
3.13.3
1
apache/airflow:2.8.1e5560ad0b86e
aiohttp@3.9.1
3.13.3
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
aiohttp@3.7.4
3.13.3
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
aiohttp@3.11.16
3.13.3
1
aristidetm/basic-notebook:3.6.5469dbc951224
aiohttp@3.9.5
3.13.3
1
aristidetm/k8s-hub:3.3.7ccb516cb8474
aiohttp@3.9.3
3.13.3
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
aiohttp@3.7.4
3.13.3
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
aiohttp@3.9.3
3.13.3
1
baserow/backend:1.31.1e0b3c8130b91
aiohttp@3.9.5
3.13.3
1
baserow/baserow:1.30.1df0c42eb67e8
aiohttp@3.9.5
3.13.3
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
aiohttp@3.13.2
3.13.3
1
ciuse99/suggestarr:v1.0.20d72768245ef5
aiohttp@3.11.12
3.13.3
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
aiohttp@3.11.10
3.13.3
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
aiohttp@3.11.10
3.13.3
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
aiohttp@3.11.10
3.13.3
1
codaprotocol/buildkite-exporter:0.2.137c68e67a401
aiohttp@3.7.3
3.13.3
1
cznic/knot-resolver:v6.4.2fe71c5214fdc
aiohttp@3.11.16
3.13.3
1
datamate/seafile-professional:11.0.202dd66b722464
aiohttp@3.12.15
3.13.3
1
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
aiohttp@3.4.4
3.13.3
1
devopstales/trivy-operator:2.575136aa7a26e
aiohttp@3.8.3
3.13.3
1
dserio83/velero-api:0.3.16b3d9115fee2
aiohttp@3.12.12
3.13.3
1
evk02/mlflow:2.2.1ef6ff257ef35
aiohttp@3.8.4
3.13.3
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
aiohttp@3.8.3
3.13.3
1
flag5/clustersecret:0.0.94ad5748bfcc6
aiohttp@3.8.1
3.13.3
1
galaxy/cloudman-server:lateste5c265fe9fcd
aiohttp@3.8.1
3.13.3
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
aiohttp@3.11.18
3.13.3
1
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
aiohttp@3.10.3
3.13.3
1
halkeye/slack-resurrect:v0.1.477b05e95fdb5
aiohttp@3.5.4
3.13.3
1
hayk96/alerta-web:9.0.486377705e9e3
aiohttp@3.10.5
3.13.3
1
hhyo/archery:v1.9.11aa41843419e
aiohttp@3.8.3
3.13.3
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
aiohttp@3.8.4
3.13.3
1
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
aiohttp@3.6.2
3.13.3
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
aiohttp@3.8.5
3.13.3
1
homeassistant/home-assistant:2023.12.48d000332b09b
aiohttp@3.9.1
3.13.3
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
aiohttp@3.7.4
3.13.3
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
aiohttp@3.8.5
3.13.3
1
knspar/phronetis-operator:0.1.60c4f0543ee58
aiohttp@3.12.13
3.13.3
1
langgenius/dify-api:1.0.0066035f93856
aiohttp@3.11.12
3.13.3
1
langgenius/dify-api:0.6.11fca918260dd6
aiohttp@3.9.5
3.13.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.