StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,451
of 17,832 indexed, latest versions
Container images
2,775
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,451 of 17,832 indexed charts deploy, on 2,775 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,828
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more946
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed20
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,451 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

8,128

Container images carrying it

2,775 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
oryd/hydra:v2.3.0b94007e19a1f
openssl@3.3.2-r1
3.3.2-r2
1
oryd/kratos:v1.1.08f15006a080d
openssl@3.1.4-r5
3.1.8-r0
1
oryd/kratos-selfservice-ui-node:v26.2.046a7bac1ad0c
openssl@3.0.7-r0
3.0.19-r0
1
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
openssl@3.0.7-r0
3.0.19-r0
1
otel/opentelemetry-ebpf-k8s-relay:v0.10.20980d0ab28bf
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
otel/opentelemetry-ebpf-k8s-watcher:v0.10.263a0d1dd2cac
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
otel/opentelemetry-ebpf-kernel-collector:v0.10.269e19991e328
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
otel/opentelemetry-ebpf-reducer:v0.10.26c49acfbc6f1
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
outlinewiki/outline:0.82.0494dfb9249a6
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
owncloud/server:10.15.051d9b74fc2a8
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24
1
owncloud/server:10.16.274c53d341076
openssl@3.0.2-0ubuntu1.23
no fix listed
1
owncloud/server:10.16.3b3f9efdcd7f7
openssl@3.0.2-0ubuntu1.25
no fix listed
1
oxfordsemantic/rdfox:5.6db17910eb855
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24
1
oxfordsemantic/rdfox-init:5.6baf570ff968d
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24
1
pangeo/base-notebook:2024.01.155fbe688a4f80
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
1
passbolt/passbolt:3.9.0-2-ce-non-rootec046e112d5c
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
openssl@3.0.2-0ubuntu1.21
no fix listed
1
pcarrascoponce/planner:v1.0981fc482442c
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
pecan/web:1.7.2814d678c5550
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
penpotapp/backend:2.2.147853d9bb9dd
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.19
1
penpotapp/backend:1.16.0-betae978e871be07
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.19
1
penpotapp/exporter:2.2.15c835ffd87ab
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.19
1
penpotapp/exporter:1.16.0-betafa7086ad92b1
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.19
1
penpotapp/frontend:1.16.0-beta37b38fc5e4f9
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
penpotapp/frontend:2.2.18974882a0542
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
pgpool/pgpool:latest3782cbf9bb0c
openssl@3.0.8-r0
3.0.19-r0
1
phan2410/dummy-service:0.0.89c6ed6de26ca
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
phntom/binaryvision-tlo-static:0.0.4e8b9ac93a3dd
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3
1
phntom/chartmuseum:v0.16.053883b65d9b7
openssl@3.1.1-r1
3.1.8-r0
1
phntom/email-manager:0.1.22d8e2a9f2f085
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
phntom/external-dns-host-network:0.0.123adadbac8443
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
phntom/mattermost-defaultbackend:6.4.0c318dc90a4bf
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
1
phntom/postgresql-backup-s3:1.0.2249b6488f618b
openssl@3.0.7-r0
3.0.19-r0
1
photoprism/photoprism:220629-jammy2954334adbda
openssl@3.0.2-0ubuntu1.5
3.0.2-0ubuntu1.19
1
photoprism/photoprism:240711-cefc6fd632ca74
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.5
1
phpipam/phpipam-cron:v1.7.354468713454e
openssl@3.3.2-r1
3.3.2-r2
1
phpipam/phpipam-www:v1.7.3ace0efd24830
openssl@3.3.2-r1
3.3.2-r2
1
phpmyadmin/phpmyadmin:5.138437e021deb
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3
1
phsmith/rundeck-exporter:2.6.10265a7616ae8
openssl@3.1.0-r4
3.1.8-r0
1
pihole/pihole:2023.05.0b83258064f54
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
pinclr/v2ray-proxy:latestf37f250b7091
openssl@3.1.0-r4
3.1.8-r0
1
platform9community/admin-server:latestde3fa9b70df1
openssl@1.1.1-1ubuntu2.1~18.04.9
no fix listed
1
platform9community/api-gateway:latest40a4970de568
openssl@1.1.1-1ubuntu2.1~18.04.9
no fix listed
1
platform9community/customers-service:latest2089811e5cc6
openssl@1.1.1-1ubuntu2.1~18.04.9
no fix listed
1
platform9community/vets-service:latestd1165c94dfb3
openssl@1.1.1-1ubuntu2.1~18.04.9
no fix listed
1
platform9community/visits-service:latest8d11b50368c6
openssl@1.1.1-1ubuntu2.1~18.04.9
no fix listed
1
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24
1
plexinc/pms-docker:1.19.5.3112-b23ab3896b598abb134ad
openssl@1.0.2g-1ubuntu4.16
no fix listed
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.