StackRadar

CVE-2025-69418

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,155
of 17,805 indexed, latest versions
Container images
2,401
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2025-69418 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 2,155 of 17,805 indexed charts deploy, on 2,401 images.

Affected packageAffected versionsFixed inImages
openssldeb1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more1,466
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0929
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
opensslrpm3.3.5-1.azl33.3.5-31
OSV records
ALPINE-CVE-2025-69418CGA-r977-4477-4r8pDEBIAN-CVE-2025-69418UBUNTU-CVE-2025-69418AZL-75272
Also known as
CGA-wm9p-95p7-7xrw, USN-7980-1, USN-7980-2

Charts affected

2,155 by stars
ChartLatestAffected imagesRadar Score
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-69418.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
openssl@3.0.9-r1
3.0.19-r0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
openssl@3.0.9-r1
3.0.19-r0

Open the chart page →

5,076
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-69418.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm7

Open the chart page →

2,477
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-69418.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.19-r0
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

5,842
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-69418.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm7
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2

Open the chart page →

9,280
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-69418.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,949

Container images carrying it

2,401 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
platzio/backend:v0.6.5d5e5972f344b
openssl@3.5.1-r0
3.5.5-r0
1
platzio/frontend:v0.6.073083749b46a
openssl@3.5.1-r0
3.5.5-r0
1
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2
1
pmoscode/excalidraw:v0.18.08ee61554699c
openssl@3.5.4-r0
3.5.5-r0
1
pnnlmiscscripts/k8s-node-image9:1.28.15-nginx-72b91d6a46e06
openssl@3.3.2-r0
3.3.6-r0
1
pnnlmiscscripts/k8s-node-image9:1.25.16-nginx-772c202c43c0aa
openssl@3.3.2-r0
3.3.6-r0
1
pnnlmiscscripts/k8s-node-image9:1.24.17-nginx-882c8dc938b2f9
openssl@3.3.2-r0
3.3.6-r0
1
pnnlmiscscripts/k8s-node-image9:1.27.16-nginx-306e1a36d646a3
openssl@3.3.2-r0
3.3.6-r0
1
pnnlmiscscripts/k8s-node-image9:1.23.17-nginx-3479ada675515f
openssl@3.0.10-r0
3.0.19-r0
1
pnnlmiscscripts/k8s-node-image9:1.26.15-nginx-579785e5b82334
openssl@3.3.2-r0
3.3.6-r0
1
pnnlmiscscripts/k8s-node-image9:1.22.17-nginx-34b85e437ae261
openssl@3.0.10-r0
3.0.19-r0
1
pnnlmiscscripts/k8s-node-image9:1.31.7-nginx-7e3e189d9d519
openssl@3.3.3-r0
3.3.6-r0
1
pnnlmiscscripts/k8s-node-image9:1.30.11-nginx-7f9297eea817d
openssl@3.3.3-r0
3.3.6-r0
1
pnnlmiscscripts/k8s-node-image9:1.21.14-nginx-33fa8f5906d36a
openssl@3.0.10-r0
3.0.19-r0
1
pnnlmiscscripts/k8s-node-image9:1.29.10-nginx-7fcd82530bc8b
openssl@3.3.2-r0
3.3.6-r0
1
pococze/python-hello-elos:2.0.07a1aab425e51
openssl@3.0.14-1~deb12u2
3.0.18-1~deb12u2
1
postgis/postgis:17-3.4-alpine5a1dbedac34e
openssl@3.3.2-r0
3.3.6-r0
1
pozetroninc/keydb:v6.0.1653ae64f29da8
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm7
1
praravind1801/helmimages:3.0.0f29d637b9ce1
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
openssl@3.0.13-1~deb12u1
3.0.18-1~deb12u2
1
prodrigestivill/postgres-backup-local:12-alpine-8d72d2d6ed2afadc326
openssl@3.0.8-r3
3.0.19-r0
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
openssl@3.5.1-1
3.5.4-1~deb13u2
1
project2team4/react:latest3ff031a08887
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm2
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.7
1
promzeus/redis-sentinel-gateway:v182f6d56e280b
openssl@3.0.14-1~deb12u2
3.0.18-1~deb12u2
1
proxysql/proxysql:2.7.3a4d6c35c2949
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
pschichtel/mindustry-server:v145.1b543e9c2d371
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.21
1
psono/psono-server:5.0.03b974b43ea03
openssl@3.3.2-r0
3.3.6-r0
1
psorab/elibrary:latest53b68896c4ce
openssl@1.1.1f-1ubuntu2.18
1.1.1f-1ubuntu2.24+esm2
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm2
1
pubeldev/prusa_exporter:2.0.01091665a020a
openssl@3.5.4-r0
3.5.5-r0
1
pumejlab/nodejs-webapp:latestf563eabcb819
openssl@3.0.10-r0
3.0.19-r0
1
puppet/puppet-agent:7.14.00b6fd9a6b7da
openssl@1.1.1-1ubuntu2.1~18.04.15
1.1.1-1ubuntu2.1~18.04.23+esm7
1
pypiserver/pypiserver:v2.4.1e935e19433ef
openssl@3.3.3-r0
3.3.6-r0
1
pysga1996/python-redis-web:latestfdeec30ad482
openssl@3.0.8-r3
3.0.19-r0
1
qdrant/qdrant:v1.7.45f2a56b95266
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
qdrant/qdrant:v1.4.166ee661d5241
openssl@3.0.9-1
3.0.18-1~deb12u2
1
qmcgaw/gluetun:v3.40.02b42bfa04675
openssl@3.3.2-r1
3.3.6-r0
1
quickwit/quickwit:v0.8.1d29332bdadcc
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
qumine/minecraft-server:v0.1.15c0b650d51132
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.21
1
rabeh/apibootspring:1.0941007b6946e
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.21
1
radarbase/radar-push-endpoint:0.4.0e1758508e033
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1
radondb/clickhouse-server:v21.1.3.32-stable4732df471073
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm7
1
rahulbhiwagade122/desishowbiz:latest08490b70998c
openssl@3.5.4-r0
3.5.5-r0
1
rancher/local-path-provisioner:v0.0.329289da488b07
openssl@3.5.1-r0
3.5.5-r0
1
rancher/local-path-provisioner:v0.0.309b9148811700
openssl@3.3.2-r0
3.3.6-r0
1
razorbladex401/dayz:latest6a4d79248e7d
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.21
1
reaper99/recipya:v1.2.27f7ec3aeb88c
openssl@3.3.2-r4
3.3.6-r0
1
redash/redash:25.8.000d813437db5
openssl@3.0.17-1~deb12u1
3.0.18-1~deb12u2
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.