StackRadar

CVE-2025-69419

High

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,362
of 17,821 indexed, latest versions
Container images
2,688
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,362 of 17,821 indexed charts deploy, on 2,688 images.

Affected packageAffected versionsFixed inImages
openssldeb1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more1,509
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0951
opensslrpm1:1.1.1-8.el8, 1:1.1.1c-2.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8+16 more1:1.1.1k-15.el8_6, 1:1.1.1k-15.el8_10, 3.3.5-3223
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
OSV records
ALPINE-CVE-2025-69419CGA-pcvw-2j52-6586DEBIAN-CVE-2025-69419RHSA-2026:3042RLSA-2026:3042UBUNTU-CVE-2025-69419AZL-75290
Also known as
CGA-pww6-v8cf-x32w, RHSA-2026:3364, RHSA-2026:3437, RHSA-2026:4163, RHSA-2026:4214, USN-7980-1, USN-7980-2

Charts affected

2,362 by stars
ChartLatestAffected imagesRadar Score
nightingalexxl-job-adminVerified publisher0.2.111 of 6See more

nightingale xxl-job-admin 0.2.11

1 of the 6 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
flashcatcloud/nightingale:8.0.0-beta.11ea1b0aaabe09
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

9,743
pgcatxxl-job-adminVerified publisher0.3.31 of 1See more

pgcat xxl-job-admin 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
openssl@3.0.13-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

3,197
yearningxxl-job-adminVerified publisher0.2.31 of 1See more

yearning xxl-job-admin 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
yeelabs/yearning:v3.1.81576c002d1df
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

641
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

9,528
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2

Open the chart page →

2,638
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
openssl@3.0.9-r1
3.0.19-r0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
openssl@3.0.9-r1
3.0.19-r0

Open the chart page →

5,077
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm7

Open the chart page →

2,485
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.19-r0
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

5,847
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-15.el8_6

Open the chart page →

6,027
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-15.el8_6

Open the chart page →

3,701
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm7
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2

Open the chart page →

9,297
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,966

Container images carrying it

2,688 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
openssl@3.5.4-r0
3.5.5-r0
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm2
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm2
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm2
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm2
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm2
1
ghcr.io/lbi22/trivy-webhook-elasticsearch:v0.1.4b51b824e4f19
openssl@3.3.2-r1
3.3.6-r0
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
openssl@3.0.9-1
3.0.18-1~deb12u2
1
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.7
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
openssl@3.0.14-1~deb12u2
3.0.18-1~deb12u2
1
ghcr.io/linuxforhealth/fhir-schematool:5.1.1f62cefee6ef6
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-15.el8_6
1
ghcr.io/linuxoid69/school-bot:v0.3.3c8872438f1e0
openssl@3.3.2-r0
3.3.6-r0
1
ghcr.io/linuxoid69/webdav:1.26.2-r065bacf19caa7
openssl@3.3.0-r2
3.3.6-r0
1
ghcr.io/linuxserver/audacity:version-3.0.2cdf203db1e50
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm2
1
ghcr.io/linuxserver/booksonic:version-1.2677efca1065d
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm7
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
openssl@1.1.1-1ubuntu2.1~18.04.13
1.1.1-1ubuntu2.1~18.04.23+esm7
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
openssl@3.3.3-r0
3.3.6-r0
1
ghcr.io/linuxserver/code-server:version-v3.11.1a385ba5cb161
nodejs@14.17.6-1nodesource1
openssl@1.1.1-1ubuntu2.1~18.04.13
no fix listed
1.1.1-1ubuntu2.1~18.04.23+esm7
1
ghcr.io/linuxserver/digikam:version-7.3.055b4c7f320ae
nodejs@14.18.2-1nodesource1
openssl@1.1.1-1ubuntu2.1~18.04.13
no fix listed
1.1.1-1ubuntu2.1~18.04.23+esm7
1
ghcr.io/linuxserver/doublecommander:version-0.8.2-1d92969a929c2
nodejs@14.18.2-1nodesource1
openssl@1.1.1-1ubuntu2.1~18.04.13
no fix listed
1.1.1-1ubuntu2.1~18.04.23+esm7
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
openssl@3.3.3-r0
3.3.6-r0
1
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
nodejs@12.22.7-1nodesource1
openssl@1.1.1-1ubuntu2.1~18.04.13
no fix listed
1.1.1-1ubuntu2.1~18.04.23+esm7
1
ghcr.io/linuxserver/mariadb:version-110.4.21mariabionic7a94d7e89f52
openssl@1.1.1-1ubuntu2.1~18.04.10
1.1.1-1ubuntu2.1~18.04.23+esm7
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.21
1
ghcr.io/linuxserver/papermerge:version-v2.0.198ba2dd3f0bd
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm2
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1
ghcr.io/linuxserver/radarr:6.0.4.10291-ls2896c0948b42c14
openssl@3.5.4-r0
3.5.5-r0
1
ghcr.io/linuxserver/remmina:version-1.2.0-rcgit.29dfsg-1ubuntu105955792e00f
nodejs@14.19.3-1nodesource1
openssl@1.1.1-1ubuntu2.1~18.04.17
no fix listed
1.1.1-1ubuntu2.1~18.04.23+esm7
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm7
1
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
openssl@3.5.4-r0
3.5.5-r0
1
ghcr.io/linuxserver/sqlitebrowser:version-3.12.2-02876202105241947ubuntu18.04.1426e79828c4b
nodejs@14.19.0-1nodesource1
openssl@1.1.1-1ubuntu2.1~18.04.14
no fix listed
1.1.1-1ubuntu2.1~18.04.23+esm7
1
ghcr.io/liturgical-app/calendar-api:0.0.9688a685e2bde
openssl@3.5.1-r0
3.5.5-r0
1
ghcr.io/liturgical-app/liturgical-app:1.2.041f25aded572
openssl@3.5.1-r0
3.5.5-r0
1
ghcr.io/liubin/toml-cli:v0.0.734a1da9f0f83
openssl@3.0.7-r0
3.0.19-r0
1
ghcr.io/livepeer/cloudflared-ingress-operator:latestc179cdcaa050
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2
1
ghcr.io/loafoe/caddy-token:v0.3.0528f2174fa2f
openssl@3.3.1-r3
3.3.6-r0
1
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
openssl@3.0.2-0ubuntu1.26
no fix listed
1
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
openssl@3.0.2-0ubuntu1.26
no fix listed
1
ghcr.io/loxilb-io/loxilb:latesta475b43946b3
openssl@3.0.2-0ubuntu1.29
no fix listed
1
ghcr.io/luzifer/cert-manager-desec-webhook:v1.0.1fa1f6b2e9a6e
openssl@3.3.2-r4
3.3.6-r0
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
openssl@3.3.0-r2
3.3.6-r0
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1
ghcr.io/mailcow/prometheus-exporter:2.1.0cb76395b84eb
openssl@3.3.5-r0
3.3.6-r0
1
ghcr.io/mailu/clamav:1.9.5001d30483e4a8
openssl@3.0.8-r0
3.0.19-r0
1
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
openssl@3.5.0-r0
3.5.5-r0
1
ghcr.io/manzil-infinity180/deploydefender:ea3ab0bb646cdbeddd1aca483ecf650f9ac0d0847fbc6855c8b3
openssl@3.3.4-r0
3.3.6-r0
1
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
openssl@3.5.0-r0
3.5.5-r0
1
ghcr.io/marthydavid/kafka-keda-golang-consumer:0.0.4e07644865dd1
openssl@3.3.2-r0
3.3.6-r0
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.