StackRadar

CVE-2025-69418

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,150
of 17,792 indexed, latest versions
Container images
2,407
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2025-69418 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 2,150 of 17,792 indexed charts deploy, on 2,407 images.

Affected packageAffected versionsFixed inImages
openssldeb1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more1,471
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0930
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
opensslrpm3.3.5-1.azl33.3.5-31
OSV records
ALPINE-CVE-2025-69418CGA-r977-4477-4r8pDEBIAN-CVE-2025-69418UBUNTU-CVE-2025-69418AZL-75272
Also known as
CGA-wm9p-95p7-7xrw, USN-7980-1, USN-7980-2

Charts affected

2,150 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,407 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ivanjosipovic/ingress-nginx-validate-jwt:1.13.995089339a68ae
openssl@3.3.3-r0
3.3.6-r0
1
ixsystems/truecommand:3.2.019c218455cd2
openssl@3.5.1-1
3.5.4-1~deb13u2
1
jacobalberty/unifi:v7.1.664a3616625dda
openssl@1.1.1-1ubuntu2.1~18.04.17
1.1.1-1ubuntu2.1~18.04.23+esm7
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm7
1
jaedb/iris:latest048cfbf58d57
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
jaegertracing/jaeger:2.9.0e128b9adbb29
openssl@3.5.1-r0
3.5.5-r0
1
jakowenko/double-take:1.6.0b858bac9e32a
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm2
1
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
openssl@3.3.2-r0
3.3.6-r0
1
janzo83/serviceexample:latestfb3c4ac36f3e
openssl@3.0.17-1~deb12u3
3.0.18-1~deb12u2
1
jeboehm/mailserver-filter:5.0.92e756949e537d
openssl@3.3.4-r0
3.3.6-r0
1
jeboehm/mailserver-mda:5.0.92d03fb7bae0a2
openssl@3.3.4-r0
3.3.6-r0
1
jeboehm/mailserver-mta:5.0.925fb2f31c940d
openssl@3.3.4-r0
3.3.6-r0
1
jeboehm/mailserver-virus:5.0.92eb5c1c260d11
openssl@3.3.4-r0
3.3.6-r0
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
openssl@3.5.2-r0
3.5.5-r0
1
jedi132000/nextapp:latestdc2a81e92f23
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm2
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
jellyfin/jellyfin:10.11.6333b64771663
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
openssl@3.0.13-1~deb12u1
3.0.18-1~deb12u2
1
jellyfin/jellyfin:10.10.77ae36aab93ef
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
jellyfin/jellyfin:10.10.696b09723b22f
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
openssl@3.0.14-1~deb12u2
3.0.18-1~deb12u2
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
jhaals/yopass:11.17.026873480863b
openssl@3.0.14-1~deb12u2
3.0.18-1~deb12u2
1
jhaals/yopass:12.5.0916a1cf45d36
openssl@3.0.17-1~deb12u3
3.0.18-1~deb12u2
1
jhidalgo3/hello-kubernetes:1.0.0.1397bf5ddfa8628d79f5
openssl@3.3.2-r0
3.3.6-r0
1
jhipster/jhipster-registry:latest7184525acd4d
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm2
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm2
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
jkroepke/github_exporter:1.8.03d850992786d
openssl@3.5.4-r0
3.5.5-r0
1
jlesage/firefox:v25.03.1055c28defe31
openssl@3.3.2-r5
3.3.6-r0
1
jlesage/handbrake:v24.01.20752dcb72bd1
openssl@3.0.12-r1
3.0.19-r0
1
jonasal/devpi-server:6.17.0-alpineec1eee99a18d
openssl@3.5.4-r0
3.5.5-r0
1
josepht05/nodejs-feb24:latest36cb0c618c94
openssl@3.0.12-r1
3.0.19-r0
1
josepht05/titajo-docker:v1.0.0d94024965d78
openssl@3.0.10-r0
3.0.19-r0
1
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
openssl@3.0.2-0ubuntu1.15
no fix listed
3.0.2-0ubuntu1.21
1
joxit/docker-registry-ui:2.6.0bb5956a6b378
openssl@3.5.4-r0
3.5.5-r0
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm2
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm2
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
openssl@1.1.1f-1ubuntu2
1.1.1f-1ubuntu2.24+esm2
1
justusbunsi/gitea-sonarqube-bot:v0.4.018dd43b470d9
openssl@3.3.2-r1
3.3.6-r0
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.7
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.21
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.21
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.21
1
kaushaln1/helm_node_app:lateste9f2d5dfdba0
openssl@3.3.1-r3
3.3.6-r0
1
kennethreitz/httpbin:latest599fe5e50731
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm7
1
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
openssl@3.3.2-r4
3.3.6-r0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.