StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,451
of 17,832 indexed, latest versions
Container images
2,775
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,451 of 17,832 indexed charts deploy, on 2,775 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,828
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more946
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed20
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,451 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

8,128

Container images carrying it

2,775 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24
1
yandex/clickhouse-server:19.17ab1738a64b70
openssl@1.1.1-1ubuntu2.1~18.04.6
no fix listed
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
openssl@1.1.1-1ubuntu2.1~18.04.6
no fix listed
1
yandex/clickhouse-server:19.16d210dc69321e
openssl@1.1.1-1ubuntu2.1~18.04.5
no fix listed
1
yeelabs/yearning:v3.1.81576c002d1df
openssl@3.0.8-r3
3.0.19-r0
1
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
1
youssef11gaber10/deployment-ui-react:latestba6853e35c60
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u3
1
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.19
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.19
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.19
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.19
1
zahoriaut/zahori-process:0.1.13351f8a220ed7
openssl@3.1.1-r1
3.1.8-r0
1
zahoriaut/zahori-scheduler:1.0.047d0979b1184
openssl@1.1.1-1ubuntu2.1~18.04.23
no fix listed
1
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.19-r0
1
zbalogh/reservation-api-server:1.0.97c247e399a1f
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
zedeus/nitter:bc219aa792cc0e4117888b2036a969559f4f26893dd3d5ea33be
openssl@3.0.8-r0
3.0.19-r0
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed
1
zurdi15/romm:2.3.12db88fe44c89
openssl@3.0.12-r1
3.0.19-r0
1
zzorica/k8s-mgmt-pod:0.5.2640ca4de2922
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
openssl@1.1.1-1ubuntu2.1~18.04.5
openssl1.0@1.0.2n-1ubuntu5.3
no fix listed
no fix listed
1
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
openssl@1.0.2g-1ubuntu4.8
no fix listed
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
openssl@1.0.2g-1ubuntu4.8
no fix listed
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
openssl@1.0.2g-1ubuntu4.15
no fix listed
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
openssl@1.0.2g-1ubuntu4.15
no fix listed
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.5
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
1
gcr.io/kubecost1/frontend:prod-1.108.14c6df805bbf2
openssl@3.1.4-r1
3.1.8-r0
1
gcr.io/kubecost1/kubecost-network-costs:v0.17.6ab6a54c53fd8
openssl@3.3.2-r0
3.4.0-r6
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
openssl@3.1.6-r2
3.1.8-r0
1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
openssl@1.0.2g-1ubuntu4.20
no fix listed
1
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
1
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
openssl@3.1.6-r2
3.1.8-r0
1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
openssl@3.1.6-r2
3.1.8-r0
1
gcr.io/ml-pipeline/viewer-crd-controller:2.3.08cf8213d69e4
openssl@3.3.1-r3
3.3.2-r2
1
gcr.io/press-labs-public/dashboard:1.8.19b88f88070fb0
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
gcr.io/projectsigstore/cosigned784518ff3ee7
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.