StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,401
of 17,821 indexed, latest versions
Container images
2,733
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,401 of 17,821 indexed charts deploy, on 2,733 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,799
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more933
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed21
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,401 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,966

Container images carrying it

2,733 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
firefart/requesttracker:nginx-nightly-202307101028236b42a0
openssl@3.0.9-r1
3.0.19-r0
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.24
1
flag5/clustersecret:0.0.94ad5748bfcc6
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
flanksource/apm-hub:v0.0.471dacc3195bf9
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
1
flanksource/vcluster-sync-host-secrets:v0.1.6bd3294c20a60
openssl@3.1.1-r1
3.1.8-r0
1
flashbots/mev-boost:1.8.07c486b5789da
openssl@3.3.1-r3
3.3.2-r2
1
flofree/base-project:2.1.16b6486c5f81e
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3
1
flomesh/fsm-ingress-pipy:0.2.11cc39c96711c4
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
flomesh/pipy:0.90.2-41-nonroot630afdbcce9b
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
flowable/flowable-rest:7.1.0b7ae287502cd
openssl@3.3.2-r0
3.3.2-r2
1
fluent/fluent-bit:2.2.00fa18c71d821
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
fluent/fluent-bit:2.15766d881ddb1
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
fluent/fluent-bit:2.1.96a1d0c693dfa
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
fluent/fluent-bit:1.8cc8dbcdc074d
openssl@1.1.1k-1+deb11u2
1.1.1w-0+deb11u3
1
flyway/flyway:9.1545b5d7cdc75a
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24
1
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.19-r0
1
fnzv/dump1090:latestb3079b95c336
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
1
foldingathome/fah-gpu:latest5ef7742d1eb4
openssl@1.1.1-1ubuntu2.1~18.04.13
no fix listed
1
folioci/mod-agreements:latest29c3f233a498
openssl@3.3.1-r3
3.3.2-r2
1
folioci/mod-data-import-converter-storage:latest3028f333778f
openssl@3.0.7-r2
3.0.19-r0
1
folioci/mod-licenses:latestcfd6109bf477
openssl@3.3.1-r3
3.3.2-r2
1
folioci/mod-oa:latestae3b069d4ba5
openssl@3.3.1-r3
3.3.2-r2
1
folioci/mod-serials-management:latest571fa1ffe8c9
openssl@3.3.1-r3
3.3.2-r2
1
folioci/mod-service-interaction:latestf53c327a48e8
openssl@3.3.1-r3
3.3.2-r2
1
fonoster/routr-connect:2.13.6e8c84b5eaa67
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-dispatcher:2.13.65f8f380dc174
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-edgeport:2.13.6d08a8a574a50
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-location:2.13.6051ba9c34ef5
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-pgdata:2.13.6e4d5f5ff1945
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-pgdata-migrations:2.13.6c7b1dba81eb3
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-registry:2.13.6e27001f2813c
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-requester:2.13.6e0c823506eb2
openssl@3.1.7-r0
3.1.8-r0
1
foxcpp/maddy:0.7.16ab538e2f28b
openssl@3.1.4-r4
3.1.8-r0
1
frankescobar/allure-docker-service:2.27.00815040339a9
openssl@1.1.1-1ubuntu2.1~18.04.6
no fix listed
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
openssl@1.1.1-1ubuntu2.1~18.04.6
no fix listed
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
openssl@1.1.1-1ubuntu2.1~18.04.6
no fix listed
1
free5gmano/nextepc-mongodb:latest36f806935519
openssl@1.0.2g-1ubuntu4.14
no fix listed
1
freedom98/flask:k3.0d7ce1533f297
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
openssl@3.0.2-0ubuntu1.19
no fix listed
1
fydeinc/envoyproxy:1.13.8.29fadb0a491db
openssl@3.1.2-r0
3.1.8-r0
1
fydeinc/fydeproxy:1.3.1780e7c00bc9e7
openssl@3.1.4-r1
3.1.8-r0
1
galaxy/cloudman-server:lateste5c265fe9fcd
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24
1
galaxy/galaxy-init:v18.010267bad550e6
openssl@1.0.1f-1ubuntu2.25
no fix listed
1
galaxy/galaxy-stable:v18.018e577a626dfd
openssl@1.0.1f-1ubuntu2.25
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
gchq/accumulo:2.0.1c460bb587d6d
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5
1
genseb/rabbitmq-producer-randomizer:0.0.6cb7599641099
openssl@3.1.3-r0
3.1.8-r0
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
openssl@1.1.1-1ubuntu2.1~18.04.23
no fix listed
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
openssl@3.0.2-0ubuntu1.23
no fix listed
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
openssl@1.1.1-1ubuntu2.1~18.04.6
openssl1.0@1.0.2n-1ubuntu5.3
no fix listed
no fix listed
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.