CVE-2025-69419
HighAdvisory
Published 27 Jan 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.4
- base score, highest
- EPSS
- 0.006
- 46th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,303
- of 17,790 indexed, latest versions
- Container images
- 2,633
- deployed by those charts
- Fix available
- 3 of 4
- affected packages
Red Hat Security Advisory: openssl security update
Carried by container images the latest versions of 2,303 of 17,790 indexed charts deploy, on 2,633 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openssldeb | 1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more | 1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more | 1,475 |
| opensslapk | 3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more | 3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0 | 931 |
| opensslrpm | 1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+15 more | 1:1.1.1k-15.el8_6, 1:1.1.1k-15.el8_10, 3.3.5-3 | 222 |
| nodejsdeb | 4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more | no fix listed | 16 |
- OSV records
- ALPINE-CVE-2025-69419CGA-pcvw-2j52-6586DEBIAN-CVE-2025-69419RHSA-2026:3042RLSA-2026:3042UBUNTU-CVE-2025-69419AZL-75290
- Also known as
- CGA-pww6-v8cf-x32w, RHSA-2026:3364, RHSA-2026:3437, RHSA-2026:4163, RHSA-2026:4214, USN-7980-1, USN-7980-2
Charts affected
2,303 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| traefik-errorspascaliskeVerified publisher | 4.0.0 | 1 of 1See more | 1,272 |
| unboundpascaliskeVerified publisher | 2.0.0 | 1 of 1See more | 1,958 |
| uptime-kumapascaliskeVerified publisher | 3.0.0 | 1 of 1See more | 6,918 |
| patch-operatorpatch-operator | 0.1.11 | 1 of 2See more | 7,840 |
| patchworkpatchworkVerified publisher | 0.8.6 | 1 of 2See more | 2,084 |
| pbuf-registrypbuf-registry | 0.4.1 | 2 of 2See more | 1,948 |
| fahclientpcktdmp | 2.6.0 | 1 of 2See more | 4,735 |
| phpipamphpipam-helmVerified publisher | 1.0.12 | 2 of 3See more | 3,778 |
| spring-boot-api-apppiominVerified publisher | 0.3.11 | 1 of 1See more | 7,622 |
| portraitportraitVerified publisher | 0.2.13 | 2 of 8See more | 32,033 |
| readarrpree-helm-chartsVerified publisher | 1.17.1 | 1 of 1See more | 1,099 |
| privacyideaprivacyidea | 1.0.6 | 2 of 2See more | 5,490 |
| prometheus-sql-exporterprometheus-communityVerified publisher | 0.5.0 | 1 of 1See more | 1,207 |
| psa-restricted-patcherpsa-restricted-patcherVerified publisher | 0.10.1 | 1 of 1See more | 1,402 |
| pumejwebapppumejnodejswebapp | 0.1.0 | 1 of 1See more | 1,165 |
| pzserverpzserver | 0.1.17 | 1 of 2See more | 3,224 |
| qrcode-generatorqrcode-generatorVerified publisher | 0.1.0 | 1 of 1See more | 1,884 |
| minecraft-serverqumine | 0.1.1500 | 1 of 1See more | 6,868 |
| rabbitmqrabbitmq-magefleet | 1.2.0 | 1 of 1See more | 2,815 |
| rclonercloneVerified publisher | 2.2.0 | 1 of 1See more | 1,680 |
| napcatredish101Verified publisher | 0.1.3 | 1 of 1See more | 7,474 |
| redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher | 1.0.2 | 1 of 1See more | 2,675 |
| reportportalreportportal-ioOfficialVerified publisher | 26.8.12 | 1 of 15See more | 11,993 |
| reservation-appreservation-app | 1.0.9 | 1 of 4See more | 6,640 |
| resurfaceresurfaceioVerified publisher | 3.9.0 | 1 of 3See more | 7,489 |
| atuinrm3lVerified publisher | 0.11.0 | 1 of 3See more | 6,570 |
| dev-feedrm3lVerified publisher | 3.1.2 | 1 of 3See more | 9,913 |
| mac-ouirm3lVerified publisher | 1.25.0 | 1 of 1See more | 1,975 |
| service-names-port-numbersrm3lVerified publisher | 0.26.1 | 1 of 1See more | 10,165 |
| elasticsearchromanow-helm-chartsVerified publisher | 1.7.1 | 1 of 2See more | 6,089 |
| fluent-bitromanow-helm-chartsVerified publisher | 1.7.3 | 1 of 1See more | 7,814 |
| kibanaromanow-helm-chartsVerified publisher | 1.7.1 | 1 of 1See more | 6,921 |
| kube-state-metricsromanow-helm-chartsVerified publisher | 1.7.2 | 1 of 1See more | 2,684 |
| logstashromanow-helm-chartsVerified publisher | 1.5.0 | 1 of 1See more | 7,570 |
| routehub-client-hubroutehub-helm | 1.0.0 | 2 of 3See more | 13,018 |
| jellyseerrrtomik-helm-chartsVerified publisher | 0.0.1 | 1 of 1See more | 2,824 |
| mealiertomik-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 3,952 |
| baikalrubxkubeVerified publisher | 1.3.1 | 1 of 1See more | 5,332 |
| delugerubxkubeVerified publisher | 1.2.1 | 1 of 1See more | 13,558 |
| kyoorubxkubeVerified publisher | 0.1.10 | 6 of 9See more | 30,428 |
| conference-appsalaboy | 1.0.0 | 3 of 7See more | 11,031 |
| devpisb-helm-charts | 0.3.0 | 1 of 1See more | 924 |
| uptime-kumasb-helm-charts | 0.4.0 | 1 of 1See more | 38,166 |
| schemaheroschemahero | 1.4.0 | 1 of 1See more | 2,184 |
| iopsciencemeshVerified publisher | 0.4.0 | 1 of 2See more | 4,060 |
| karakeepself-hosters-by-nightVerified publisher | 2.5.1 | 1 of 1See more | 5,220 |
| sentry-k8ssentry-k8sVerified publisher | 1.4.1 | 4 of 11See more | 16,599 |
| seq-input-gelfseq-input-gelfVerified publisher | 0.3.1 | 1 of 2See more | 3,555 |
| vuiseriohub | 1.0.6 | 2 of 3See more | 11,578 |
| scaffoldsigstoreVerified publisher | 0.6.115 | 2 of 15See more | 7,686 |
Container images carrying it
2,633 by charts deploying them
A fixed version is listed for 3 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| mziyabo/ | 3067dce17983 | openssl | 3.3.6-r0 | 1 |
| n8nio/ | 8b39ed5a2de9 | openssl | 3.3.6-r0 | 1 |
| n8nio/ | ed16e560c40e | openssl | 3.5.5-r0 | 1 |
| nacos/ | 0e951a1d07bb | openssl | 3.5.5-r0 | 1 |
| nacos/ | 30a39cb0c54d | openssl | 3.3.6-r0 | 1 |
| nataliagranato/ | 52bd9b79a8f2 | openssl | 3.6.1-r0 | 1 |
| natsio/ | 59cf2e949181 | openssl | 3.0.19-r0 | 1 |
| natsio/ | abdc9f9f0120 | openssl | 3.5.5-r0 | 1 |
| natsio/ | c507bd7e3831 | openssl | 3.0.19-r0 | 1 |
| natsio/ | 47094fcae2f4 | openssl | 3.5.5-r0 | 1 |
| natsio/ | 5b21830a9e9d | openssl | 3.3.6-r0 | 1 |
| natsio/ | 81edf32a3680 | openssl | 3.5.5-r0 | 1 |
| natsio/ | 02469dc907bc | openssl | 3.5.5-r0 | 1 |
| ncsa/ | 0b738bbc8d70 | openssl | 3.5.4-1~deb13u2 | 1 |
| nelssec/ | 5e471f0cdeaa | openssl | 3.0.2-0ubuntu1.21 | 1 |
| neosmemo/ | c6defc2dfb98 | openssl | 3.5.5-r0 | 1 |
| netapp/ | 58b9fac358bd | openssl | 3.5.5-r0 | 1 |
| netbirdio/ | 0c9994b393ea | openssl | 3.0.13-0ubuntu3.7 | 1 |
| netbirdio/ | 52682e5f48f9 | openssl | 3.0.13-0ubuntu3.7 | 1 |
| netbirdio/ | b0adc4ad4ec6 | openssl | 3.0.13-0ubuntu3.7 | 1 |
| netbirdio/ | 872e3add0e1e | openssl | 3.0.18-1~deb12u2 | 1 |
| netbirdio/ | a10762533793 | openssl | 3.0.18-1~deb12u2 | 1 |
| netbirdio/ | d32f82514a24 | openssl | 3.0.18-1~deb12u2 | 1 |
| netbirdio/ | 46ce5a45538f | openssl | 3.0.18-1~deb12u2 | 1 |
| netbirdio/ | 67176bcbf6ab | openssl | 3.0.18-1~deb12u2 | 1 |
| netbirdio/ | e8f392611152 | openssl | 3.0.18-1~deb12u2 | 1 |
| netboxcommunity/ | 3d652dca5351 | openssl | 3.0.2-0ubuntu1.21 | 1 |
| nethermind/ | 15517708c3b6 | openssl | 3.0.2-0ubuntu1.21 | 1 |
| nethermind/ | 93e57917371a | openssl | 3.0.13-0ubuntu3.7 | 1 |
| nethermind/ | aeca3b55bda5 | openssl | 3.0.13-0ubuntu3.7 | 1 |
| netskopeprivateaccess/ | 93e2fd164a93 | openssl | no fix listed | 1 |
| networkboot/ | e99bbfbd6fb2 | openssl | 3.0.2-0ubuntu1.21 | 1 |
| newrelic/ | 1a448492b55a | openssl | 3.5.4-1~deb13u2 | 1 |
| nginxdemos/ | 751bf8933179 | openssl | 3.5.5-r0 | 1 |
| nginxdemos/ | b28d1e16c676 | openssl | 3.5.5-r0 | 1 |
| nginxinc/ | 62a904036bfc | openssl | 3.3.6-r0 | 1 |
| nginxinc/ | 82dcf28da5a8 | openssl | 3.5.5-r0 | 1 |
| nirmalnaveen/ | 8541a39162f3 | openssl | 3.0.18-1~deb12u2 | 1 |
| nocodb/ | d9516f0bf546 | openssl | 3.3.6-r0 | 1 |
| nodered/ | 216e7403aab9 | openssl | 3.5.5-r0 | 1 |
| nottiey/ | 9c35a24c9eb3 | openssl | 3.0.19-r0 | 1 |
| oada/ | c0d077e79ef4 | openssl | 3.5.5-r0 | 1 |
| oada/ | d87efe8ba4b0 | openssl | 3.5.5-r0 | 1 |
| oada/ | ebc8343f05ff | openssl | 3.5.5-r0 | 1 |
| oada/ | c6ffb4e8ed63 | openssl | 3.5.5-r0 | 1 |
| oada/ | fc09495e2f3c | openssl | 3.5.5-r0 | 1 |
| oada/ | b7a2cfc137cf | openssl | 3.5.5-r0 | 1 |
| oada/ | b6c562fa5b1b | openssl | 3.5.5-r0 | 1 |
| oada/ | 6590c60de347 | openssl | 3.5.5-r0 | 1 |
| oada/ | 7943fde43b19 | openssl | 3.5.5-r0 | 1 |