StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,401
of 17,821 indexed, latest versions
Container images
2,733
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,401 of 17,821 indexed charts deploy, on 2,733 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,799
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more933
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed21
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,401 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,966

Container images carrying it

2,733 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
joplin/server:3.0-beta52af57880c0e
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
joplin/server:2.14.2-betab87564ef34e9
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
joseenrique/pip-cache:latest0bf21c50293c
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
josepht05/nodejs-feb24:latest36cb0c618c94
openssl@3.0.12-r1
3.0.19-r0
1
josepht05/titajo-docker:v1.0.0d94024965d78
openssl@3.0.10-r0
3.0.19-r0
1
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
openssl@3.0.2-0ubuntu1.15
no fix listed
3.0.2-0ubuntu1.19
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
juicedata/csi-dashboard:v0.23.03e4daf9626d5
openssl@3.1.3-r0
3.1.8-r0
1
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
jupyterhub/configurable-http-proxy:4.5.67adeeed34a36
openssl@3.1.2-r0
3.1.8-r0
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24
1
jupyterhub/k8s-hub:0.9.1ec78bdae0fed
openssl@1.1.1-1ubuntu2.1~18.04.5
no fix listed
1
jupyterhub/k8s-network-tools:3.0.1-0.dev.git.6287.hbfb05cd691f8f833fc1d
openssl@3.1.2-r0
3.1.8-r0
1
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
openssl@1.1.1f-1ubuntu2
1.1.1f-1ubuntu2.24
1
just1not2/streama:1.10.48a2305192dec
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
justusbunsi/gitea-sonarqube-bot:v0.4.018dd43b470d9
openssl@3.3.2-r1
3.3.2-r2
1
kadalu/kadalu-csi:1.2.0af8d470b0ef3
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
kadalu/kadalu-operator:1.2.03726d7a805f2
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.19
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.19
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.19
1
kaushaln1/helm_node_app:lateste9f2d5dfdba0
openssl@3.3.1-r3
3.3.2-r2
1
keelhq/keel:0.19.202ac4ea616c4
openssl@3.1.4-r5
3.1.8-r0
1
kennethreitz/httpbin:latest599fe5e50731
openssl@1.1.0g-2ubuntu4.1
no fix listed
1
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
openssl@3.3.2-r4
3.3.2-r5
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
openssl@3.1.4-r1
3.1.8-r0
1
kfirfer/king:latestc05d9fc7ae77
openssl@3.0.10-r0
3.0.19-r0
1
kfirfer/mysql-client:0.0.4d23d173f333f
openssl@3.1.4-r2
3.1.8-r0
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24
1
kfirfer/slackgpt:0.0.15461331bd838e
openssl@3.1.3-r0
3.1.8-r0
1
khaliq/drl-exporter:latestf63cf53166f8
openssl@3.3.1-r3
3.3.2-r2
1
kiwigrid/k8s-sidecar:1.27.6db85bd553253
openssl@3.3.1-r3
3.3.2-r2
1
kiwigrid/k8s-sidecar:1.26.2e271016441af
openssl@3.1.4-r6
3.1.8-r0
1
knspar/phronetis-operator:0.1.60c4f0543ee58
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
1
kobotoolbox/kobocat:2.022.24ab15679454415
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
kong/httpbin:latesta6ac46531193
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.19
1
kporwit/vinyl_lib_app:v0.1.1217de0302218
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u3
1
krontechnology/aapm-agent:1.8.41cc7d5be6529
openssl@3.0.2-0ubuntu1.21
no fix listed
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24
1
krontechnology/aapm-service:1.1.39dd602db8baa
openssl@3.0.2-0ubuntu1.21
no fix listed
1
kserve/models-web-app:v0.13.073486345a602
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
1
ktitilayo2/nodejswebapp:latest8bac28058688
openssl@3.0.10-r0
3.0.19-r0
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
openssl@3.1.1-r1
3.1.8-r0
1
kubebb/component-store:latestfd8ecbd73213
openssl@3.1.1-r1
3.1.8-r0
1
kubebb/hello-world:0.1.0b746824819f3
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.