StackRadar

CVE-2025-69418

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,152
of 17,790 indexed, latest versions
Container images
2,412
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2025-69418 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 2,152 of 17,790 indexed charts deploy, on 2,412 images.

Affected packageAffected versionsFixed inImages
openssldeb1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more1,475
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0931
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
opensslrpm3.3.5-1.azl33.3.5-31
OSV records
ALPINE-CVE-2025-69418CGA-r977-4477-4r8pDEBIAN-CVE-2025-69418UBUNTU-CVE-2025-69418AZL-75272
Also known as
CGA-wm9p-95p7-7xrw, USN-7980-1, USN-7980-2

Charts affected

2,152 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-69418.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm7
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2

Open the chart page →

9,256
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-69418.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,929

Container images carrying it

2,412 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:8.13561c1f8f99f2
openssl@3.3.2-r0
3.3.6-r0
1
dragonflyoss/client:v0.1.82edf3e921f4e0
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
dragonflyoss/manager:v2.1.49c3ef7f10698d
openssl@3.0.12-r4
3.0.19-r0
1
dragonflyoss/scheduler:v2.1.49523785c77787
openssl@3.0.12-r4
3.0.19-r0
1
dremio/dremio-oss:24.1.080ed2e3b7c43
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.21
1
drpcorg/dshackle:0.54.08858fae1859d
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.21
1
dserio83/velero-api:0.3.16b3d9115fee2
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2
1
dserio83/velero-watchdog:0.1.8d5deae589229
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
openssl@3.0.8-r0
3.0.19-r0
1
duck1123/cert-downloader:latest0e29f19fa67c
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.21
1
duck1123/dinsro:latest9568c5961d5d
openssl@3.3.2-r4
3.3.6-r0
1
duck1123/lnd-fileserver:latest9d6fb247b714
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.21
1
durellirsd/security-smells-api:v17398aca4fc2e
openssl@3.3.0-r2
3.3.6-r0
1
dvdlevanon/kubernetes-database-scaler:v0.0.361e79c1643fe4
openssl@3.5.0-r0
3.5.5-r0
1
dwdraju/alpine-curl-jq:latest83bd9be2b14b
openssl@3.3.1-r3
3.3.6-r0
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
openssl@3.5.1-1+deb13u1
3.5.4-1~deb13u2
1
eftechcombr/glpi:nginx-12.0.0-rc1372f0bd43e15
openssl@3.3.3-r0
3.3.6-r0
1
eftechcombr/glpi:php-fpm-12.0.0-rc1f3d0ed01709e
openssl@3.5.4-r0
3.5.5-r0
1
elastic/apm-server:7.17.6c7a1c63257d0
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm2
1
elastictranscoder/media:627e21dc963ab3858c6b
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm7
1
elastictranscoder/media-storage:f6d861a026208b8c2359
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm7
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm7
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm7
1
elautoestopista/aeneabot:4.2.1125ba620d528
openssl@3.5.4-r0
3.5.5-r0
1
elautoestopista/raponchi:0.3.0b6f74db9fc81
openssl@3.3.0-r2
3.3.6-r0
1
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm2
1
emqx/ecp-emqx-agent-downloader:2.5.1a8431baa7950
openssl@3.3.2-r0
3.3.6-r0
1
emqxecp/otelcol:2.5.04c31d9bec846
openssl@3.3.2-r0
3.3.6-r0
1
emqx/ecp-ui:2.5.1e33e9816f147
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
emqx/emqx:5.8.935b46f7aa7a0
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
enclavenetworks/enclave:latest0a99759300d1
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm2
1
engrmth/bnkr:2.1.06d8464e6f0e8
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24+esm2
1
envoyproxy/envoy:v1.30.92956bd9de830
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.21
1
envoyproxy/envoy:v1.38.4447f857a0146
openssl@3.0.2-0ubuntu1.29
no fix listed
1
envoyproxy/envoy:v1.33.056da5afd7df3
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.21
1
envoyproxy/envoy:v1.31-latestcaa5b411be16
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.21
1
envoyproxy/envoy:v1.34-latestcfc0678bc03c
openssl@3.0.2-0ubuntu1.23
no fix listed
1
envoyproxy/envoy:v1.30.1e596fda6a0ce
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.21
1
envoyproxy/envoy:v1.18.2e8b37c1d7578
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm7
1
envoyproxy/ratelimit:a90e0e5d5966cbc14d5d
openssl@3.3.3-r0
3.3.6-r0
1
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm7
1
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
openssl@3.5.1-1
3.5.4-1~deb13u2
1
erenozcan17/go_backend:v4.250b4f23422b6
openssl@3.5.1-r0
3.5.5-r0
1
erenozcan17/react_frontend:v4.56e1b14973f9b
openssl@3.5.1-r0
3.5.5-r0
1
erigontech/erigon:v2.61.288706754b627
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
erudikaltd/scoold:1.66.0949c56b57e8f
openssl@3.5.4-r0
3.5.5-r0
1
esphome/esphome:2024.3.09ab8cc88b28c
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.