StackRadar

CVE-2025-69418

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,152
of 17,790 indexed, latest versions
Container images
2,412
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2025-69418 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 2,152 of 17,790 indexed charts deploy, on 2,412 images.

Affected packageAffected versionsFixed inImages
openssldeb1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more1,475
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0931
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
opensslrpm3.3.5-1.azl33.3.5-31
OSV records
ALPINE-CVE-2025-69418CGA-r977-4477-4r8pDEBIAN-CVE-2025-69418UBUNTU-CVE-2025-69418AZL-75272
Also known as
CGA-wm9p-95p7-7xrw, USN-7980-1, USN-7980-2

Charts affected

2,152 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-69418.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm7
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2

Open the chart page →

9,256
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-69418.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,929

Container images carrying it

2,412 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
abdullahkhabir/radio:latest56526d0cc929
openssl@3.0.7-r2
3.0.19-r0
1
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
openssl@3.3.2-r4
3.3.6-r0
1
abhinavsingh/proxy.py:latest51adc989fd03
openssl@3.3.3-r0
3.3.6-r0
1
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
openssl@3.3.4-r0
3.3.6-r0
1
aboogie/login_test_backend:new9c41a4483ac8
openssl@3.0.13-1~deb12u1
3.0.18-1~deb12u2
1
adguard/adguardhome:v0.107.65d765078d2140
openssl@3.3.4-r0
3.3.6-r0
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.7
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.7
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm2
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.21
1
aibrix/metadata-service:v0.7.063fb81a64377
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
airbyte/db:2.3.000cc017f0393
openssl@3.5.4-r0
3.5.5-r0
1
airbyte/pod-sweeper:1.5.198d2c39d512e
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
openssl@1.1.1f-1ubuntu2.2
1.1.1f-1ubuntu2.24+esm2
1
akaunting/akaunting:3.0.1552811b36ec3a
openssl@3.0.9-1
3.0.18-1~deb12u2
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
openssl@3.5.1-r0
3.5.5-r0
1
aktosecurity/data-ingestion-service213aded7adc5
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.7
1
alakaganaguathoork/local-business:latest7eb27b0f4a5a
openssl@3.5.4-r0
3.5.5-r0
1
allegroai/clearml:2.0.0-613713ae38f7daf
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
openssl@1.1.1-1ubuntu2.1~18.04.19
1.1.1-1ubuntu2.1~18.04.23+esm7
1
alpine/curl:8.12.08943e8c7e8e4
openssl@3.3.2-r4
3.3.6-r0
1
alpine/git:v2.49.1c0280cf95723
openssl@3.5.4-r0
3.5.5-r0
1
alpine/helm105741fa6621
openssl@3.3.1-r3
3.3.6-r0
1
alpine/helm:4.1.0905a068da431
openssl@3.5.4-r0
3.5.5-r0
1
alpine/k8s:1.31.106dbe6f391eda
openssl@3.5.0-r0
3.5.5-r0
1
alpine/k8s:1.31.137a319b15cfc9
openssl@3.5.1-r0
3.5.5-r0
1
alpine/k8s:1.32.47e1e7d5b7a96
openssl@3.3.3-r0
3.3.6-r0
1
alpine/k8s:1.31.49c4976d47656
openssl@3.3.2-r4
3.3.6-r0
1
alpine/k8s:1.30.2cd560fce90f7
openssl@3.3.1-r0
3.3.6-r0
1
alpine/k8s:1.28.13e5c0b053fed7
openssl@3.3.1-r3
3.3.6-r0
1
alpine/k8s:1.32.3eec354133193
openssl@3.3.3-r0
3.3.6-r0
1
alpine/kubectl:1.33.32c59a3f0726c
openssl@3.5.1-r0
3.5.5-r0
1
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.21
1
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
openssl@3.3.3-r0
3.3.6-r0
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
openssl@3.3.3-r0
3.3.6-r0
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.7
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.21
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.21
1
anguda/ant-media:2.5c435285fc241
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm2
1
ankane/pgvector:v0.5.1d3a9d8ac27bb
openssl@3.0.11-1~deb12u1
3.0.18-1~deb12u2
1
anujdatar/cups:25.07.01685df04a643b
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2
1
apache/activemq-artemis:2.44.00305c26f19ed
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.7
1
apache/activemq-artemis:2.37.0bae523439ee3
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.7
1
apache/airflow:2.8.4-python3.964e58748b6b9
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
openssl@3.0.14-1~deb12u2
3.0.18-1~deb12u2
1
apache/airflow:2.8.1e5560ad0b86e
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.21
1
apache/iotdb:0.13.3-nodeafa47bf1692a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm2
1
apache/kafka:4.1.0bff074a5d005
openssl@3.5.2-r0
3.5.5-r0
1
apache/kafka:3.9.0fbc7d7c428e3
openssl@3.3.2-r1
3.3.6-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.