StackRadar

CVE-2025-69418

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,152
of 17,790 indexed, latest versions
Container images
2,412
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2025-69418 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 2,152 of 17,790 indexed charts deploy, on 2,412 images.

Affected packageAffected versionsFixed inImages
openssldeb1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more1,475
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0931
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
opensslrpm3.3.5-1.azl33.3.5-31
OSV records
ALPINE-CVE-2025-69418CGA-r977-4477-4r8pDEBIAN-CVE-2025-69418UBUNTU-CVE-2025-69418AZL-75272
Also known as
CGA-wm9p-95p7-7xrw, USN-7980-1, USN-7980-2

Charts affected

2,152 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-69418.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm7
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2

Open the chart page →

9,256
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-69418.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,929

Container images carrying it

2,412 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
apache/kafka-native:4.1.09a9d16e60894
openssl@3.5.1-r0
3.5.5-r0
1
apache/nifi-registry:1.27.063b8e3e40742
openssl@3.0.2-0ubuntu1.16
3.0.2-0ubuntu1.21
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.21
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2
1
apachepulsar/pulsar:3.0.79c9947de139d
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.21
1
apachepulsar/pulsar:2.9.0d056c89b7131
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm2
1
apachepulsar/pulsar:2.8.2d538416d5afe
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2
1
apache/ranger:2.7.076c176e8a0e4
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.21
1
apache/rocketmq:5.3.0434d8398f996
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.7
1
apache/rocketmq-exporter:0.0.2c8fb51195444
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.21
1
apache/skywalking-oap-server:9.2.0133d35d2c263
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.21
1
apache/skywalking-oap-server:8.9.1b4ec8c18d079
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2
1
apache/skywalking-ui:9.2.0295f1dc87d98
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.21
1
apache/skywalking-ui:8.9.180530f0308a5
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2
1
apache/superset:4.0.1ab9467fd712c
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
apache/tika:2.9.0.092d055a84e9e
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.21
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
openssl@3.5.1-1
3.5.4-1~deb13u2
1
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
openssl@3.3.2-r0
3.3.6-r0
1
apecloud/gemini-scheduler:0.1.15832d1a9097a
openssl@3.3.1-r3
3.3.6-r0
1
appwrite/console:7.5.7aaa11ceab999
openssl@3.3.3-r0
3.3.6-r0
1
aquasec/tracee:0.24.1cfbbfee972e6
openssl@3.3.5-r0
3.3.6-r0
1
aristidetm/basic-notebook:3.6.5469dbc951224
openssl@3.0.13-1~deb12u1
3.0.18-1~deb12u2
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
openssl@3.0.13-1~deb12u1
3.0.18-1~deb12u2
1
artifacthub/db-migrator:v1.19.02a746b289fcd
openssl@3.3.1-r0
3.3.6-r0
1
artifacthub/hub:v1.19.0111918d8c399
openssl@3.3.1-r0
3.3.6-r0
1
artifacthub/scanner:v1.19.0323d026e78c3
openssl@3.3.1-r0
3.3.6-r0
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
arunvelsriram/utils:latest655ad18fd8d6
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm2
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm2
1
assistiot/identity-manager_db:latest0d3e6d35f168
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
assistiot/location_processing:lateste9bae124095f
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.21
1
assistiot/monitoring_notifying:2.0.068324d0fa5bb
openssl@3.0.8-r3
3.0.19-r0
1
assistiot/open_api_backend:1.1.230812ba93555
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.21
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm2
1
assistiot/smart-orchestrator_cluster:latest4f41e1defe99
openssl@3.0.8-r3
3.0.19-r0
1
assistiot/smart-orchestrator_enabler:latest89f37e88c871
openssl@3.0.8-r3
3.0.19-r0
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
assistiot/smart-orchestrator_repository:latesta8b8dbed04a4
openssl@3.0.8-r3
3.0.19-r0
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
openssl@3.0.9-1
3.0.18-1~deb12u2
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm2
1
atlassian/confluence-server:7.10.03b9222ab32ef
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.21
1
atlassian/jira-software:8.14.037bc46cbec1a
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.21
1
atlassian/jira-software:9.7.264a75aa4ec4e
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1
automatischio/automatisch:0.15.03bace7a12d5f
openssl@3.3.3-r0
3.3.6-r0
1
avaprotocol/ap-avs:1.2.0c430ea5c37d6
openssl@3.0.13-1~deb12u1
3.0.18-1~deb12u2
1
avinash263/pyredis263:latestaa2b8727f1a6
openssl@3.0.9-1
3.0.18-1~deb12u2
1
avzini/web-app:latestf40b30210ed0
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
b3log/siyuan:v3.1.2595c0d129bc19
openssl@3.3.3-r0
3.3.6-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.