CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.1; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,477; of 17,837 indexed, latest versions
Container images: 2,812; deployed by those charts
Fix available: 3 of 6; affected packages

openssl - security update

Carried by container images the latest versions of 2,477 of 17,837 indexed charts deploy, on 2,812 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more	1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more	1,851
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more	3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more	958
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	no fix listed	21
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5
edk2deb	2022.11-6+deb12u2	no fix listed	1
openssl-1_1rpm	1.1.1l-150500.17.22.1	1.1.1l-150500.17.40.1	2

OSV records: ALPINE-CVE-2024-13176 CGA-82rc-p89h-xq36 DEBIAN-CVE-2024-13176 UBUNTU-CVE-2024-13176 DLA-4176-1 SUSE-SU-2025:0345-1
Also known as: CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,477 by stars

Chart

Latest

Affected images

Radar Score

am-pattern-1wso2

2.6.0-7

2 of 6 See more

am-pattern-1 wso2 2.6.0-7

2 of the 6 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
wso2/wso2am :2.6.0	fbe0f4059b74	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.24
wso2/wso2am-analytics-worker :2.6.0	05fa15b3d927	openssl@1.1.0g-2ubuntu4.3	no fix listed

Open the chart page →

31,796

ei-pattern-1wso2

6.6.0-3

3 of 6 See more

ei-pattern-1 wso2 6.6.0-3

3 of the 6 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
wso2/wso2ei-analytics-dashboard :6.6.0	526a1ccae902	openssl@1.1.1-1ubuntu2.1~18.04.5	no fix listed
wso2/wso2ei-analytics-worker :6.6.0	21e6b03449ac	openssl@1.1.1-1ubuntu2.1~18.04.5	no fix listed
wso2/wso2ei-integrator :6.6.0	790cd8c3a5a2	openssl@1.1.1-1ubuntu2.1~18.04.5	no fix listed

Open the chart page →

50,505

oauth2xd

1.0.0

1 of 1 See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
lishimeng/hufu :v1.2.1	3d5752dac834	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

2,010

owlxd

0.5.1

2 of 2 See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
lishimeng/owl-console :v0.11.2	c79a67657baf	openssl@3.0.8-r0	3.0.19-r0
lishimeng/owl-messager :v0.11.2	3d00485e64dc	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

4,112

passportxd

0.2.16

2 of 2 See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
lishimeng/passport :v0.2.16	3e7d05ded625	openssl@3.0.8-r0	3.0.19-r0
lishimeng/passport-profile :v0.2.16	0970dfe5dc8f	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

3,978

tabbyxd

1.0.6

2 of 2 See more

tabby xd 1.0.6

2 of the 2 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1
lishimeng/tabby :v1.0.4	8145c3dc83c8	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

7,788

treexd

0.1.10

1 of 1 See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
lishimeng/tree :v0.2.8	9b2f8be6c7d3	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

1,999

zooxd

0.4.0

1 of 1 See more

2,070

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	openssl@3.0.14-1~deb12u2	3.0.16-1~deb12u1
hamzaarshad10/queryfrontend :1.1.5.14	cd359d9a78c3	openssl@3.3.2-r0	3.3.2-r2
hamzaarshad10/querypodpy :1.7	154f38e8668e	openssl@3.0.14-1~deb12u2	3.0.16-1~deb12u1
murtazashah46/helmfile :latest	4d11726cf803	openssl@3.0.14-1~deb12u2	3.0.16-1~deb12u1

Open the chart page →

13,626

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.5

Open the chart page →

2,191

canal-serverxxl-job-admin

0.1.2

1 of 2 See more

canal-server xxl-job-admin 0.1.2

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
ghcr.io/dellnoantechnp/canal-server :v1.1.6	af724c855f65	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3

Open the chart page →

5,707

kadalu-operatorxxl-job-admin

1.2.4

2 of 4 See more

kadalu-operator xxl-job-admin 1.2.4

2 of the 4 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
kadalu/kadalu-csi :1.2.0	af8d470b0ef3	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u3
kadalu/kadalu-operator :1.2.0	3726d7a805f2	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u3

Open the chart page →

4,936

pgcatxxl-job-admin

0.3.3

1 of 1 See more

pgcat xxl-job-admin 0.3.3

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
ghcr.io/postgresml/pgcat :v1.2.0	627761f6dcbc	openssl@3.0.13-1~deb12u1	3.0.16-1~deb12u1

Open the chart page →

3,218

xxl-job-adminxxl-job-admin

1.1.3

1 of 1 See more

xxl-job-admin xxl-job-admin 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
xuxueli/xxl-job-admin :2.4.0	640093c35fd6	openssl@1.1.1n-0+deb11u1	1.1.1w-0+deb11u3

Open the chart page →

3,111

yearningxxl-job-admin

0.2.3

1 of 1 See more

yearning xxl-job-admin 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
yeelabs/yearning :v3.1.8	1576c002d1df	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

641

ygdrassil-monitoringygdrassil

0.4.0

1 of 10 See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
grafana/grafana :11.5.1	5781759b3d27	openssl@3.3.2-r0	3.3.2-r2

Open the chart page →

9,550

prometheusalertygqygq2

1.0.0

1 of 1 See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
feiyu563/prometheus-alert :v4.9.1	224cfa68cbd9	openssl@3.1.4-r5	3.1.8-r0

Open the chart page →

1,611

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1

Open the chart page →

2,733

zahori-consulzahori

1.0.1

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	openssl@3.0.9-r1	3.0.19-r0
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	openssl@3.0.9-r1	3.0.19-r0

Open the chart page →

5,077

zahori-postgresqlzahori

1.0.1

1 of 1 See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
library/postgres :12.15-alpine	73ea9cdd4a9d	openssl@3.1.2-r0	3.1.8-r0

Open the chart page →

448

zahori-processzahori

1.0.1

1 of 1 See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-process :0.1.13	351f8a220ed7	openssl@3.1.1-r1	3.1.8-r0

Open the chart page →

3,491

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	openssl@1.1.1-1ubuntu2.1~18.04.23	no fix listed

Open the chart page →

2,496

zahori-serverzahori

1.0.1

2 of 2 See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	openssl@3.0.7-r2	3.0.19-r0
zahoriaut/zahori-server :0.1.17	b2de13916f3e	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

5,840

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3

Open the chart page →

2,219

zerossl-cert-managerzerossl-cert-manager

0.1.0

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	openssl@3.1.7-r0	3.1.8-r0

Open the chart page →

570

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	openssl@1.1.1-1ubuntu2.1~18.04.14	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24

Open the chart page →

9,373

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

8,162

Container images carrying it

2,812 by charts deploying them

A fixed version is listed for 3 of the 6 affected packages.

Container image	Digest	Package	Fixed in	Used by
assistiot/open_api_backend :1.1.2	30812ba93555	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.19	1
assistiot/resource-provisioning_api :1.0.0	44a37b00d4f8	openssl@3.1.3-r0	3.1.8-r0	1
assistiot/resource-provisioning_im :1.0.0	a942dc14030a	openssl@3.1.4-r2	3.1.8-r0	1
assistiot/resource-provisioning_prc :1.0.0	8b5d118bdf0e	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24	1
assistiot/semantic_translation :latest	2a2587804717	openssl@3.1.3-r0	3.1.8-r0	1
assistiot/smart-orchestrator_cluster :latest	4f41e1defe99	openssl@3.0.8-r3	3.0.19-r0	1
assistiot/smart-orchestrator_enabler :latest	89f37e88c871	openssl@3.0.8-r3	3.0.19-r0	1
assistiot/smart-orchestrator_helm :latest	9bb46ea14e8e	openssl@3.1.4-r5	3.1.8-r0	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
assistiot/smart-orchestrator_repository :latest	a8b8dbed04a4	openssl@3.0.8-r3	3.0.19-r0	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	openssl@3.0.9-1	3.0.16-1~deb12u1	1
assistiot/tacticle_dashboard :api-latest	e4414cb72dc4	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
assistiot/traffic-classification_api :2.0.0	e32b87786142	openssl@3.1.4-r5	3.1.8-r0	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	openssl@1.1.1f-1ubuntu2.17	1.1.1f-1ubuntu2.24	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.19	1
atlassian/jira-software :8.14.0	37bc46cbec1a	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.19	1
atmoz/sftp :latest	0960390462a4	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u3	1
atomix/atomix :3.1.12	7738ff4f5c63	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u3	1
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	openssl@3.0.13-1~deb12u1	3.0.16-1~deb12u1	1
avinash263/pyredis263 :latest	aa2b8727f1a6	openssl@3.0.9-1	3.0.16-1~deb12u1	1
avzini/web-app :latest	f40b30210ed0	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
azhar008/flaskapplication :latest	a1e827b0adea	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u3	1
b4bz/homer :v24.12.1	4b44a4a9e329	openssl@3.3.2-r0	3.3.2-r2	1
baserow/backend :1.31.1	e0b3c8130b91	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
baserow/baserow :1.30.1	df0c42eb67e8	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24	1
bcgovimages/aries-cloudagent :py36-1.16-1_0.7.4	faa2e2d21916	openssl@1.1.1-1ubuntu2.1~18.04.9	no fix listed	1
beanbag/reviewboard :latest	6b840f546e1c	openssl@3.0.2-0ubuntu1.29	no fix listed	1
beastob/url-shortener :1.0.2	99a49885ab33	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u3	1
bedag/e2g :5.4	df0d16f152d8	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u3	1
behnambm/docker-sample :v1	bd3ad88afff9	openssl@3.3.1-r0	3.3.2-r2	1
belirta/beli-docker :v1.0.0	f65ad0e23b4d	openssl@3.0.10-r0	3.0.19-r0	1
beopenit/door-agent :v3.0.5	d24c323fe7c3	openssl@3.1.4-r2	3.1.8-r0	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24	1
binwiederhier/ntfy :v2.11.0	4a7d0f0adc6d	openssl@3.1.4-r5	3.1.8-r0	1
binwiederhier/ntfy :v2.6.2	83e2e43d9956	openssl@3.1.1-r1	3.1.8-r0	1
biospheere/promcord :latest	16d4fd269e66	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u3	1
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
bitnamilegacy/clickhouse :24.12.3-debian-12-r1	3cf6544f6c6c	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
bitnamilegacy/clickhouse :24.12.4	c7e70bf1d3fb	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
bitnamilegacy/clickhouse :24.6.2-debian-12-r3	dcc172c6c55f	openssl@3.0.13-1~deb12u1	3.0.16-1~deb12u1	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u3	1
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
bitnamilegacy/kafka :3.5.0-debian-11-r0	8657bb93a581	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u3	1
bitnamilegacy/kafka :3.4.0-debian-11-r6	ac64829e45b3	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3	1
bitnamilegacy/kafka :2.8.1-debian-11-r7	b6e381ffd6ae	openssl@1.1.1n-0+deb11u2	1.1.1w-0+deb11u3	1