StackRadar

CVE-2025-69419

High

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.006
46th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,303
of 17,790 indexed, latest versions
Container images
2,633
deployed by those charts
Fix available
3 of 4
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,303 of 17,790 indexed charts deploy, on 2,633 images.

Affected packageAffected versionsFixed inImages
openssldeb1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more1,475
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0931
opensslrpm1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+15 more1:1.1.1k-15.el8_6, 1:1.1.1k-15.el8_10, 3.3.5-3222
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
OSV records
ALPINE-CVE-2025-69419CGA-pcvw-2j52-6586DEBIAN-CVE-2025-69419RHSA-2026:3042RLSA-2026:3042UBUNTU-CVE-2025-69419AZL-75290
Also known as
CGA-pww6-v8cf-x32w, RHSA-2026:3364, RHSA-2026:3437, RHSA-2026:4163, RHSA-2026:4214, USN-7980-1, USN-7980-2

Charts affected

2,303 by stars
ChartLatestAffected imagesRadar Score
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-15.el8_6

Open the chart page →

3,697
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm7
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2

Open the chart page →

9,256
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-69419.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,929

Container images carrying it

2,633 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/argoproj/argocd:v2.14.115fc69e31c755
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
2
quay.io/curl/curl:8.16.0b17b13321678
openssl@3.5.2-r0
3.5.5-r0
2
quay.io/flomesh/curl-ubi8:7.84.0bef31fa5f5f3
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-15.el8_6
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-15.el8_6
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-15.el8_6
2
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
openssl@3.5.4-r0
3.5.5-r0
2
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
openssl@3.3.0-r2
3.3.6-r0
2
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-15.el8_6
2
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-15.el8_6
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-15.el8_6
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-15.el8_6
2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-15.el8_6
2
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-15.el8_6
2
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-15.el8_6
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
openssl@1:1.1.1g-18.el8_4
1:1.1.1k-15.el8_6
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
openssl@1:1.1.1g-18.el8_4
1:1.1.1k-15.el8_6
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-15.el8_6
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
openssl@3.5.4-r0
3.5.5-r0
2
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.5-r0
2
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
openssl@3.3.3-r0
3.3.6-r0
2
0hlov3/semaphore:v1.0.050f874ec096b
openssl@3.0.8-r0
3.0.19-r0
1
1dev/server:11.9.0cd5b12fe5471
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1
2martens/configserver:latestbf1cdb80239d
openssl@3.3.1-r3
3.3.6-r0
1
2martens/timetable:latestbd1ba6ab84c9
openssl@3.5.1-r0
3.5.5-r0
1
2martens/wahlrecht:latestba2c3040dab0
openssl@3.5.1-r0
3.5.5-r0
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
openssl@3.0.9-1
3.0.18-1~deb12u2
1
5200710/hadoop:3.2.3-java8092d3088a5fb
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm2
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm7
1
abdullahkhabir/radio:latest56526d0cc929
openssl@3.0.7-r2
3.0.19-r0
1
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
openssl@3.3.2-r4
3.3.6-r0
1
abhinavsingh/proxy.py:latest51adc989fd03
openssl@3.3.3-r0
3.3.6-r0
1
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
openssl@3.3.4-r0
3.3.6-r0
1
aboogie/login_test_backend:new9c41a4483ac8
openssl@3.0.13-1~deb12u1
3.0.18-1~deb12u2
1
adguard/adguardhome:v0.107.65d765078d2140
openssl@3.3.4-r0
3.3.6-r0
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.7
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.7
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm2
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.21
1
aibrix/metadata-service:v0.7.063fb81a64377
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
airbyte/db:2.3.000cc017f0393
openssl@3.5.4-r0
3.5.5-r0
1
airbyte/pod-sweeper:1.5.198d2c39d512e
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
openssl@1.1.1f-1ubuntu2.2
1.1.1f-1ubuntu2.24+esm2
1
akaunting/akaunting:3.0.1552811b36ec3a
openssl@3.0.9-1
3.0.18-1~deb12u2
1
akeyless/base-rhel:0.0.14ba8900a0061
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-15.el8_6
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
openssl@3.5.1-r0
3.5.5-r0
1
aktosecurity/data-ingestion-service213aded7adc5
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.7
1
alakaganaguathoork/local-business:latest7eb27b0f4a5a
openssl@3.5.4-r0
3.5.5-r0
1
allegroai/clearml:2.0.0-613713ae38f7daf
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
openssl@1.1.1-1ubuntu2.1~18.04.19
1.1.1-1ubuntu2.1~18.04.23+esm7
1
alpine/curl:8.12.08943e8c7e8e4
openssl@3.3.2-r4
3.3.6-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.