CVE-2025-69419

High

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.4; base score, highest
EPSS: 0.006; 46th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,303; of 17,790 indexed, latest versions
Container images: 2,633; deployed by those charts
Fix available: 3 of 4; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,303 of 17,790 indexed charts deploy, on 2,633 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more	1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more	1,475
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more	3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0	931
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+15 more	1:1.1.1k-15.el8_6, 1:1.1.1k-15.el8_10, 3.3.5-3	222
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16

OSV records: ALPINE-CVE-2025-69419 CGA-pcvw-2j52-6586 DEBIAN-CVE-2025-69419 RHSA-2026:3042 RLSA-2026:3042 UBUNTU-CVE-2025-69419 AZL-75290
Also known as: CGA-pww6-v8cf-x32w, RHSA-2026:3364, RHSA-2026:3437, RHSA-2026:4163, RHSA-2026:4214, USN-7980-1, USN-7980-2

Charts affected

2,303 by stars

Chart

Latest

Affected images

Radar Score

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-69419.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-15.el8_6

Open the chart page →

3,697

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-69419.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	openssl@1.1.1-1ubuntu2.1~18.04.14	1.1.1-1ubuntu2.1~18.04.23+esm7
yandex/clickhouse-server :21.3.20	4eccfffb01d7	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm2

Open the chart page →

9,256

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-69419.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,929

Container images carrying it

2,633 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm2	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	openssl@3.0.2-0ubuntu1.5	3.0.2-0ubuntu1.21	2
sysnet4admin/dashboard :blue	c5bd3bb1b5a6	openssl@3.3.3-r0	3.3.6-r0	2
taigaio/taiga-front :latest	570c8792ce80	openssl@3.0.8-r3	3.0.19-r0	2
timberio/vector :0.51.1-alpine	2d16ae87ec39	openssl@3.5.4-r0	3.5.5-r0	2
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	nodejs@16.14.2-deb-1nodesource1 openssl@3.0.2-0ubuntu1.9	no fix listed 3.0.2-0ubuntu1.21	2
uffizzi/controller :latest	0344805f267b	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2	2
uselagoon/docker-host :v3.6.1	2c89ed939b8b	openssl@3.3.3-r0	3.3.6-r0	2
valkey/valkey :9.0.1	546304417fea	openssl@3.5.4-1~deb13u1	3.5.4-1~deb13u2	2
valkey/valkey :8.1.4	81db6d39e1bb	openssl@3.5.1-1+deb13u1	3.5.4-1~deb13u2	2
vdiogov/glpi-conteiner :latest	6945f84f0058	openssl@3.0.13-1~deb12u1	3.0.18-1~deb12u2	2
wolveix/satisfactory-server :latest :v1.9.10	e103700ae6ae	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.21	2
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.7	2
ghcr.io/appscode/inbox-server :latest :postgres-latest	536358d7b17e	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.21	2
ghcr.io/appscode/kube-auth-manager :v0.0.1	789692ab9193	openssl@3.0.8-r3	3.0.19-r0	2
ghcr.io/appscode/service-provider :v0.0.2	f6e481386d70	openssl@3.5.4-r0	3.5.5-r0	2
ghcr.io/astriaorg/astria-geth :latest	4249e403225a	openssl@3.5.0-r0	3.5.5-r0	2
ghcr.io/astriaorg/conductor :latest	3ea8164b0eae	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	2
ghcr.io/celestiaorg/celestia-node :v0.27.5-mocha	4768ea1c5fd2	openssl@3.3.1-r3	3.3.6-r0	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	nodejs@16.18.0-deb-1nodesource1 openssl@3.0.2-0ubuntu1.6	no fix listed 3.0.2-0ubuntu1.21	2
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	openssl@3.0.7-r0	3.0.19-r0	2
ghcr.io/cosmos/gaia :v25.1.0	f115777d1112	openssl@3.5.0-r0	3.5.5-r0	2
ghcr.io/cross-seed/cross-seed :6.13.3	81afafdd96a5	openssl@3.5.1-r0	3.5.5-r0	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.21	2
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	openssl@3.0.17-1~deb12u3	3.0.18-1~deb12u2	2
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm2	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm2	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm2	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	openssl@3.0.13-1~deb12u1	3.0.18-1~deb12u2	2
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	openssl@3.5.1-r0	3.5.5-r0	2
ghcr.io/home-operations/readarr :0.4.18 :0.4.18.2805	8f7551205fbd	openssl@3.5.0-r0	3.5.5-r0	2
ghcr.io/immich-app/postgres :14-vectorchord0.4.3-pgvectors0.2.0	bcf63357191b	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2	2
ghcr.io/kiwigrid/k8s-sidecar :1.29.1	42002d66ddb3	openssl@3.3.2-r4	3.3.6-r0	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm7	2
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	openssl@3.0.13-r0	3.0.19-r0	2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss :unprivileged-oss-20250331	3db8145349a3	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2	2
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2	2
ghcr.io/nucleuscloud/neosync/app :0.5.41	ca31ec35b829	openssl@3.5.0-r0	3.5.5-r0	2
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2	2
ghcr.io/postgresml/pgcat :main	245f9d2f5f5b	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2	2
ghcr.io/rss3-network/agentdata :0.1.0	fd8d3e6e4cdf	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2	2
ghcr.io/salaboy/fmtok8s-agenda-service :v0.0.1-native	6c5efe150958	openssl@1.1.1-1ubuntu2.1~18.04.21	1.1.1-1ubuntu2.1~18.04.23+esm7	2
ghcr.io/salaboy/fmtok8s-c4p-service :v0.0.1-native	3f7cc45fd20b	openssl@1.1.1-1ubuntu2.1~18.04.21	1.1.1-1ubuntu2.1~18.04.23+esm7	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	openssl@3.0.2-0ubuntu1.2	3.0.2-0ubuntu1.21	2
ghcr.io/smarter-project/home-ha-mock :main	95ee018cf558	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2	2
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	openssl@3.0.8-r0	3.0.19-r0	2
ghcr.io/wg-easy/wg-easy :14	5f26407fd2ed	openssl@3.5.0-r0	3.5.5-r0	2
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm2	2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	openssl@3.5.1-1	3.5.4-1~deb13u2	2