StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,452
of 17,837 indexed, latest versions
Container images
2,770
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,452 of 17,837 indexed charts deploy, on 2,770 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,825
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more944
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed20
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,452 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24

Open the chart page →

9,357
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

8,128

Container images carrying it

2,770 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
deluan/navidrome:0.49.311a24da08977
openssl@3.0.8-r0
3.0.19-r0
1
deluan/navidrome:0.50.02cf4442b0099
openssl@3.1.3-r0
3.1.8-r0
1
devopsfaith/krakend:2.6.34c678c224f67
openssl@3.1.4-r6
3.1.8-r0
1
devopsfaith/krakend:2.7.09219cda867e2
openssl@3.1.6-r2
3.1.8-r0
1
devopsgoofy/k8s-platform:latestad865312099f
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
devopstales/trivy-operator:2.575136aa7a26e
openssl@3.0.7-r2
3.0.19-r0
1
devravinder/node-express-app:1.0.05325a96967b5
openssl@3.3.2-r4
3.3.2-r5
1
devture/exim-relay:4.98-r0-47ba30080c7a6
openssl@3.3.2-r4
3.3.2-r5
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24
1
dinutac/jinja2docker:2.1.89340dde8a8a4
openssl@3.1.4-r2
3.1.8-r0
1
directus/directus:11.1.0e3c8bb975350
openssl@3.3.1-r3
3.3.2-r2
1
distribution/distribution:2.8.3f84b2078238f
openssl@3.1.3-r0
3.1.8-r0
1
djjudas21/autonodelabel:0.0.6f17233350c4f
openssl@3.1.1-r1
3.1.8-r0
1
djjudas21/bearhugmugs:0.1.14fa898a52d97
openssl@3.3.2-r1
3.3.2-r2
1
djjudas21/dbdump:0.0.917fc245e29bd
openssl@3.1.4-r5
3.1.8-r0
1
dniel/api-posts:master45a667852f2a
openssl@1.1.1-1ubuntu2.1~18.04.4
no fix listed
1
dnsforge/xteve:latest4d9a685c8c28
openssl@3.0.7-r2
3.0.19-r0
1
dobtc/bitcoin:25.1a870f7cb1105
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
1
dockurr/strfry:1.1.0545555da5dd2
openssl@3.1.2-r0
3.1.8-r0
1
documenso/documenso:v1.8.17f16a9449f18
openssl@3.3.2-r0
3.3.2-r2
1
domainmod/domainmod:4.23.04017bfe4c597
openssl@3.0.9-1
3.0.16-1~deb12u1
1
dongjiang1989/cosign-webhook:v1.1.02a3ead6a55dc
openssl@3.1.2-r0
3.1.8-r0
1
dongjiang1989/cpusets-controller:v1.1.1dc5bd483874c
openssl@3.1.1-r1
3.1.8-r0
1
dongjiang1989/cpusets-device-plugin:v1.1.1923085c65123
openssl@3.1.1-r1
3.1.8-r0
1
dongjiang1989/crane-scheduler-controller:mainf0055c05dbee
openssl@3.1.0-r4
3.1.8-r0
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.24
1
dongjiang1989/ns-node-affinity:latest451f7823723c
openssl@3.0.8-r3
3.0.19-r0
1
douz/helpdesk:latest4384103d0219
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
dpage/pgadmin4:8.418cd5711fc9a
openssl@3.1.4-r5
3.1.8-r0
1
dpage/pgadmin4:7.537946e4f3e7b
openssl@3.1.1-r1
3.1.8-r0
1
dpage/pgadmin4:8.13561c1f8f99f2
openssl@3.3.2-r0
3.3.2-r2
1
dragonflyoss/client:v0.1.82edf3e921f4e0
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
1
dragonflyoss/manager:v2.1.49c3ef7f10698d
openssl@3.0.12-r4
3.0.19-r0
1
dragonflyoss/scheduler:v2.1.49523785c77787
openssl@3.0.12-r4
3.0.19-r0
1
dremio/dremio-oss:24.1.080ed2e3b7c43
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.19
1
drpcorg/dshackle:0.54.08858fae1859d
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.19
1
dserio83/velero-ui:0.3.1b4e1ec6664d3
openssl@3.1.4-r2
3.1.8-r0
1
dserio83/velero-watchdog:0.1.8d5deae589229
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
dtzar/helm-kubectl:3.11.2a1041bb0f1d1
openssl@3.0.8-r0
3.0.19-r0
1
duck1123/astral:latestf4d5b6526c2a
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
duck1123/cert-downloader:latest0e29f19fa67c
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.19
1
duck1123/dinsro:latest9568c5961d5d
openssl@3.3.2-r4
3.3.2-r5
1
duck1123/lnd-fileserver:latest9d6fb247b714
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.19
1
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3
1
durellirsd/security-smells-api:v17398aca4fc2e
openssl@3.3.0-r2
3.3.2-r2
1
dwdraju/alpine-curl-jq:latest83bd9be2b14b
openssl@3.3.1-r3
3.3.2-r2
1
easypi/openrefine:3.7.0d2950a36a576
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3
1
easysoft/quickon-zentao:18.5592ad5df1f8b
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
eclipseaerios/openldap:2.6.30208743f315e
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
ectobit/budgie:0.1.4654336b145a0
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.