StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,397
of 17,828 indexed, latest versions
Container images
2,730
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,397 of 17,828 indexed charts deploy, on 2,730 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,798
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more931
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed21
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,397 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,730 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
enclavenetworks/enclave:latest0a99759300d1
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.24
1
engrmth/bnkr:2.1.06d8464e6f0e8
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24
1
envoyproxy/envoy:v1.30.92956bd9de830
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.19
1
envoyproxy/envoy:v1.38.4447f857a0146
openssl@3.0.2-0ubuntu1.29
no fix listed
1
envoyproxy/envoy:v1.33.056da5afd7df3
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.19
1
envoyproxy/envoy:v1.31-latestcaa5b411be16
openssl@3.0.2-0ubuntu1.19
no fix listed
1
envoyproxy/envoy:v1.34-latestcfc0678bc03c
openssl@3.0.2-0ubuntu1.23
no fix listed
1
envoyproxy/envoy:v1.30.1e596fda6a0ce
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.19
1
envoyproxy/envoy:v1.18.2e8b37c1d7578
openssl@1.1.1-1ubuntu2.1~18.04.9
no fix listed
1
envsubst/envsubst:latest90963c70db69
openssl@3.1.2-r0
3.1.8-r0
1
epamedp/jenkins-operator:2.15.328ef56bc0ca3
openssl@3.1.4-r1
3.1.8-r0
1
eqalpha/keydb:alpine_x86_64_v6.3.4f1d60f12cb3c
openssl@3.1.4-r0
3.1.8-r0
1
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
openssl@1.1.1-1ubuntu2.1~18.04.21
no fix listed
1
erigontech/erigon:v2.61.288706754b627
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
erlangsolutions/wombatoam:4.1.284680c990147a
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
errbotio/errbot:6.1.900ee4e0953ab
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u3
1
esphome/esphome:2024.3.09ab8cc88b28c
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
1
esphome/esphome:2024.12.2b2c6322700ac
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
esphome/esphome:2025.3.0def8b6e4f517
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ethereum/client-go:v1.14.8886ec69b35b0
openssl@3.3.1-r3
3.3.2-r2
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
openssl@1.0.2g-1ubuntu4.10
no fix listed
1
ethersphere/bee:2.2.0a884fd84b72f
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
1
ethersphere/etherproxy:1.0.056029b0985f4
openssl@3.1.2-r0
3.1.8-r0
1
ethersphere/ethproxy:latest3a8a3926caa2
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
ethpandaops/blob-me-baby:latestad26158420dd
openssl@3.1.3-r0
3.1.8-r0
1
ethpandaops/blobscan-indexer:latestc58eb9ffe446
openssl@3.0.7-r2
3.0.19-r0
1
ethpandaops/xatu:sentry-logs-latest6ce31bb0eafd
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
evgkrsk/postgres-controller:0.6.237f0e1f435c3
openssl@3.0.7-r2
3.0.19-r0
1
evk02/mlflow:2.2.1ef6ff257ef35
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
expediagroup/pitchfork:1.314f2cf61e7de9
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
fabioformosa/hello-world-api:latest063873af085c
openssl@3.1.4-r5
3.1.8-r0
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
factly/mande-studio:0.34.19db4bee30e63
openssl@3.0.10-r0
3.0.19-r0
1
factly/mande-web:0.34.1742355964b0e
openssl@3.1.2-r0
3.1.8-r0
1
fanzynoodle/smeejas:0.0.15f9916c1a287
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
farberg/apache-knox-docker:1.6.14b4a22487394
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
featureformcom/quickstart-loader:latest82396f8fb5e8
openssl@3.3.0-r2
3.3.2-r2
1
fedodo/fedodo.be.activitypub:14728dada8e3216
openssl@3.0.8-r3
3.0.19-r0
1
fedodo/fedodo.be.auth:208f8eb7a1207e
openssl@3.0.8-r3
3.0.19-r0
1
fedodo/fedodo.ui.home:3c69413c4d690
openssl@3.0.9-r1
3.0.19-r0
1
fedodo/fedodo.ui.micro:12b2b540081c21
openssl@3.0.9-r1
3.0.19-r0
1
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
openssl@3.1.4-r5
3.1.8-r0
1
felddy/foundryvtt:12.343.06c5e3e9ffbb0
openssl@3.1.4-r5
3.1.8-r0
1
felipecs8/app-db-connection-test:v129e06c9c6385
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
felipecs8/app-movies-series:v14e51693fcdf5
openssl@3.0.8-r3
3.0.19-r0
1
felipecs8/qrcode-generator:v1d5f4f17cb066
openssl@3.0.8-r0
3.0.19-r0
1
firefart/requesttracker:5.0.40d6249906d8c
openssl@3.0.11-1~deb12u1
3.0.16-1~deb12u1
1
firefart/requesttracker:nginx-nightly-202307101028236b42a0
openssl@3.0.9-r1
3.0.19-r0
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.24
1
flag5/clustersecret:0.0.94ad5748bfcc6
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.