StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,452
of 17,837 indexed, latest versions
Container images
2,770
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,452 of 17,837 indexed charts deploy, on 2,770 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,825
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more944
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed20
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,452 by stars
ChartLatestAffected imagesRadar Score
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24

Open the chart page →

9,357
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

8,128

Container images carrying it

2,770 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
fedodo/fedodo.be.activitypub:14728dada8e3216
openssl@3.0.8-r3
3.0.19-r0
1
fedodo/fedodo.be.auth:208f8eb7a1207e
openssl@3.0.8-r3
3.0.19-r0
1
fedodo/fedodo.ui.home:3c69413c4d690
openssl@3.0.9-r1
3.0.19-r0
1
fedodo/fedodo.ui.micro:12b2b540081c21
openssl@3.0.9-r1
3.0.19-r0
1
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
openssl@3.1.4-r5
3.1.8-r0
1
felddy/foundryvtt:12.343.06c5e3e9ffbb0
openssl@3.1.4-r5
3.1.8-r0
1
felipecs8/app-db-connection-test:v129e06c9c6385
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
felipecs8/app-movies-series:v14e51693fcdf5
openssl@3.0.8-r3
3.0.19-r0
1
felipecs8/qrcode-generator:v1d5f4f17cb066
openssl@3.0.8-r0
3.0.19-r0
1
firefart/requesttracker:5.0.40d6249906d8c
openssl@3.0.11-1~deb12u1
3.0.16-1~deb12u1
1
firefart/requesttracker:nginx-nightly-202307101028236b42a0
openssl@3.0.9-r1
3.0.19-r0
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.24
1
flag5/clustersecret:0.0.94ad5748bfcc6
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
flanksource/apm-hub:v0.0.471dacc3195bf9
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
1
flanksource/vcluster-sync-host-secrets:v0.1.6bd3294c20a60
openssl@3.1.1-r1
3.1.8-r0
1
flashbots/mev-boost:1.8.07c486b5789da
openssl@3.3.1-r3
3.3.2-r2
1
flofree/base-project:2.1.16b6486c5f81e
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3
1
flomesh/fsm-ingress-pipy:0.2.11cc39c96711c4
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
flomesh/pipy:0.90.2-41-nonroot630afdbcce9b
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
flowable/flowable-rest:7.1.0b7ae287502cd
openssl@3.3.2-r0
3.3.2-r2
1
fluent/fluent-bit:2.2.00fa18c71d821
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
fluent/fluent-bit:2.15766d881ddb1
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
fluent/fluent-bit:2.1.96a1d0c693dfa
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
fluent/fluent-bit:1.8cc8dbcdc074d
openssl@1.1.1k-1+deb11u2
1.1.1w-0+deb11u3
1
flyway/flyway:9.1545b5d7cdc75a
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24
1
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.19-r0
1
fnzv/dump1090:latestb3079b95c336
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
1
foldingathome/fah-gpu:latest5ef7742d1eb4
openssl@1.1.1-1ubuntu2.1~18.04.13
no fix listed
1
folioci/mod-agreements:latest29c3f233a498
openssl@3.3.1-r3
3.3.2-r2
1
folioci/mod-data-import-converter-storage:latest3028f333778f
openssl@3.0.7-r2
3.0.19-r0
1
folioci/mod-licenses:latestcfd6109bf477
openssl@3.3.1-r3
3.3.2-r2
1
folioci/mod-oa:latestae3b069d4ba5
openssl@3.3.1-r3
3.3.2-r2
1
folioci/mod-serials-management:latest571fa1ffe8c9
openssl@3.3.1-r3
3.3.2-r2
1
folioci/mod-service-interaction:latestf53c327a48e8
openssl@3.3.1-r3
3.3.2-r2
1
fonoster/routr-connect:2.13.6e8c84b5eaa67
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-dispatcher:2.13.65f8f380dc174
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-edgeport:2.13.6d08a8a574a50
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-location:2.13.6051ba9c34ef5
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-pgdata:2.13.6e4d5f5ff1945
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-pgdata-migrations:2.13.6c7b1dba81eb3
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-registry:2.13.6e27001f2813c
openssl@3.1.7-r0
3.1.8-r0
1
fonoster/routr-requester:2.13.6e0c823506eb2
openssl@3.1.7-r0
3.1.8-r0
1
foxcpp/maddy:0.7.16ab538e2f28b
openssl@3.1.4-r4
3.1.8-r0
1
frankescobar/allure-docker-service:2.27.00815040339a9
openssl@1.1.1-1ubuntu2.1~18.04.6
no fix listed
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
openssl@1.1.1-1ubuntu2.1~18.04.6
no fix listed
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
openssl@1.1.1-1ubuntu2.1~18.04.6
no fix listed
1
free5gmano/nextepc-mongodb:latest36f806935519
openssl@1.0.2g-1ubuntu4.14
no fix listed
1
freedom98/flask:k3.0d7ce1533f297
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
openssl@3.0.2-0ubuntu1.19
no fix listed
1
frinx/frinx-demo-workflows:6.1.0ee29588bd238
openssl@3.3.1-r3
3.3.2-r2
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.