StackRadar

CVE-2025-69420

High

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
56th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,200
of 17,813 indexed, latest versions
Container images
2,458
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2025-69420 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 2,200 of 17,813 indexed charts deploy, on 2,458 images.

Affected packageAffected versionsFixed inImages
openssldeb1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more1,504
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0948
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
opensslrpm3.3.5-1.azl33.3.5-31
OSV records
ALPINE-CVE-2025-69420CGA-8h52-q2fx-gx4pDEBIAN-CVE-2025-69420UBUNTU-CVE-2025-69420AZL-75269
Also known as
CGA-p8fj-r6mr-jjjj, USN-7980-1, USN-7980-2

Charts affected

2,200 by stars
ChartLatestAffected imagesRadar Score
controllerrookout0.2.561 of 1See more

controller rookout 0.2.56

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
rookout/controller:latest4451a6f6b8ec
openssl@3.0.11-r0
3.0.19-r0

Open the chart page →

1,970
datastorerookout0.1.481 of 1See more

datastore rookout 0.1.48

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
rookout/data-on-prem:latest51c0fce64467
openssl@3.0.11-r0
3.0.19-r0

Open the chart page →

1,951
rookout-hybridrookout0.3.12 of 2See more

rookout-hybrid rookout 0.3.1

2 of the 2 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
rookout/controller:latest4451a6f6b8ec
openssl@3.0.11-r0
3.0.19-r0
rookout/data-on-prem:latest51c0fce64467
openssl@3.0.11-r0
3.0.19-r0

Open the chart page →

3,921
acme-linoderotationalVerified publisher1.0.41 of 1See more

acme-linode rotational 1.0.4

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,325
honurotationalVerified publisher0.5.31 of 1See more

honu rotational 0.5.3

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
rotationalio/honu:0.5.069fd30c2e31c
openssl@3.0.17-1~deb12u2
3.0.18-1~deb12u2

Open the chart page →

2,213
imgtagrotationalVerified publisher0.2.01 of 1See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

3,379
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm2

Open the chart page →

7,023
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

3,597
chainrss30.1.281 of 8See more

chain rss3 0.1.28

1 of the 8 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
openquantumsafe/openssl3:latest543fb00ce31d
openssl@3.3.2-r4
3.3.6-r0

Open the chart page →

8,683
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

4,804
vsl-chainrss30.1.01 of 7See more

vsl-chain rss3 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
openquantumsafe/openssl3:latest543fb00ce31d
openssl@3.3.2-r4
3.3.6-r0

Open the chart page →

6,198
vsl-rpcrss30.3.42 of 4See more

vsl-rpc rss3 0.3.4

2 of the 4 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
openquantumsafe/openssl3:latest543fb00ce31d
openssl@3.3.2-r4
3.3.6-r0
quay.io/curl/curl:8.16.0b17b13321678
openssl@3.5.2-r0
3.5.5-r0

Open the chart page →

4,765
vsl-sequencerrss30.3.42 of 4See more

vsl-sequencer rss3 0.3.4

2 of the 4 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
openquantumsafe/openssl3:latest543fb00ce31d
openssl@3.3.2-r4
3.3.6-r0
quay.io/curl/curl:8.16.0b17b13321678
openssl@3.5.2-r0
3.5.5-r0

Open the chart page →

4,765
checkmkrtomik-helm-chartsVerified publisher0.1.01 of 1See more

checkmk rtomik-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
checkmk/check-mk-community:2.5.0p6c11b422210c4
openssl@3.0.2-0ubuntu1.23
no fix listed

Open the chart page →

7,820
karakeeprtomik-helm-chartsVerified publisher0.0.12 of 3See more

karakeep rtomik-helm-charts 0.0.1

2 of the 3 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
getmeili/meilisearch:v1.13.3bed3fb650e62
openssl@3.3.3-r0
3.3.6-r0
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

5,365
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2

Open the chart page →

10,845
recipyartomik-helm-chartsVerified publisher0.0.21 of 2See more

recipya rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
reaper99/recipya:v1.2.27f7ec3aeb88c
openssl@3.3.2-r4
3.3.6-r0

Open the chart page →

2,221
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

4,601
joplinrubxkubeVerified publisher1.3.11 of 2See more

joplin rubxkube 1.3.1

1 of the 2 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

7,518
trmnl-serverrubxkubeVerified publisher0.1.01 of 2See more

trmnl-server rubxkube 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

2,959
your-spotifyrubxkubeVerified publisher1.0.11 of 3See more

your-spotify rubxkube 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:latestb0652af9c8d0
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

5,476
janitorrryuunosukeds30.1.31 of 1See more

janitorr ryuunosukeds3 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
ghcr.io/schaka/janitorr:native-stable7cfe1e0c41da
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7

Open the chart page →

1,012
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.21

Open the chart page →

8,822
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
openssl@3.5.1-1+deb13u1
3.5.4-1~deb13u2

Open the chart page →

9,879
vrisingryuunosukeds30.1.01 of 1See more

vrising ryuunosukeds3 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
trueosiris/vrising:latest9356f98ad561
openssl@3.0.2-0ubuntu1.23
no fix listed

Open the chart page →

7,496
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2

Open the chart page →

3,957
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
openssl@3.0.9-1
3.0.18-1~deb12u2
safeglobal/safe-client-gateway-nest:v1.51.012ccfd93fcaf
openssl@3.3.1-r0
3.3.6-r0

Open the chart page →

19,929
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
openssl@3.0.9-1
3.0.18-1~deb12u2

Open the chart page →

16,923
sagawisesagawiseVerified publisher0.1.02 of 3See more

sagawise sagawise 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
venturenox/redis:latest83b471c193ba
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
venturenox/sagawise:latestc11d32f18718
openssl@3.3.2-r4
3.3.6-r0

Open the chart page →

4,395
fmtok8s-agenda-servicesalaboy0.1.21 of 2See more

fmtok8s-agenda-service salaboy 0.1.2

1 of the 2 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm7

Open the chart page →

2,615
fmtok8s-c4p-servicesalaboy0.1.11 of 2See more

fmtok8s-c4p-service salaboy 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm7

Open the chart page →

2,615
fmtok8s-conference-chartsalaboy0.1.44 of 6See more

fmtok8s-conference-chart salaboy 0.1.4

4 of the 6 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm7
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm7
ghcr.io/salaboy/fmtok8s-email-service:v0.1.0-nativecf28472bc460
openssl@1.1.1-1ubuntu2.1~18.04.19
1.1.1-1ubuntu2.1~18.04.23+esm7
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
openssl@3.0.2-0ubuntu1.2
3.0.2-0ubuntu1.21

Open the chart page →

16,312
fmtok8s-email-servicesalaboy0.2.01 of 1See more

fmtok8s-email-service salaboy 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-email-service:v0.2.0-nativeb52d5dbac2ca
openssl@1.1.1-1ubuntu2.1~18.04.19
1.1.1-1ubuntu2.1~18.04.23+esm7

Open the chart page →

2,917
fmtok8s-frontendsalaboy0.1.31 of 1See more

fmtok8s-frontend salaboy 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
openssl@3.0.2-0ubuntu1.2
3.0.2-0ubuntu1.21

Open the chart page →

8,165
pagessamanvithkaranth1.0.02 of 3See more

pages samanvithkaranth 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm2
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm7

Open the chart page →

20,285
samba-serversamba-serverVerified publisher1.1.01 of 1See more

samba-server samba-server 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

1,176
evsantisbon0.2.02 of 5See more

ev santisbon 0.2.0

2 of the 5 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
openssl@3.0.9-1
3.0.18-1~deb12u2
santisbon/evworker:lateste807283f8d69
openssl@3.0.9-1
3.0.18-1~deb12u2

Open the chart page →

14,532
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
santisbon/speedtest:latest8ee3a1697227
openssl@3.0.9-1
3.0.18-1~deb12u2

Open the chart page →

12,923
pagessarubits-pages1.0.02 of 3See more

pages sarubits-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm2
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm7

Open the chart page →

20,285
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2

Open the chart page →

10,308
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,832
jellyfinsb-helm-charts0.4.01 of 1See more

jellyfin sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.10.317c3a8d9dddb
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

4,179
memcachedsb-helm-charts0.4.01 of 1See more

memcached sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
library/memcached:1.6.39-alpine3.227b45203a99eb
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

684
mongodbsb-helm-charts0.4.01 of 1See more

mongodb sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
library/mongo:7.0.140032d2ca20db
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.21

Open the chart page →

4,118
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
openssl@3.5.4-1~deb13u1
3.5.4-1~deb13u2

Open the chart page →

10,002
pgadminsb-helm-charts0.3.01 of 1See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.13561c1f8f99f2
openssl@3.3.2-r0
3.3.6-r0

Open the chart page →

1,714
phpmyadminsb-helm-charts0.3.01 of 1See more

phpmyadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

5,455
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.7

Open the chart page →

2,295
redissb-helm-charts0.4.01 of 1See more

redis sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
library/redis:7.4.1-alpinec1e88455c852
openssl@3.3.2-r1
3.3.6-r0

Open the chart page →

1,326
rsshubsb-helm-charts0.3.01 of 1See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-69420.

Container imageDigestPackageFixed in
diygod/rsshub:2025-11-097a6312cac0d5
openssl@3.0.17-1~deb12u3
3.0.18-1~deb12u2

Open the chart page →

4,756

Container images carrying it

2,458 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
openssl@3.0.8-r0
3.0.19-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
openssl@3.5.2-r0
3.5.5-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
openssl@3.5.1-r0
3.5.5-r0
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
openssl@3.0.8-r1
3.0.19-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
openssl@3.3.2-r0
3.3.6-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.6-r0
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
openssl@3.5.4-r0
3.5.5-r0
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.