StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,451
of 17,832 indexed, latest versions
Container images
2,775
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,451 of 17,832 indexed charts deploy, on 2,775 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,828
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more946
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed20
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,451 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

8,128

Container images carrying it

2,775 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/projectsigstore/policy-webhook82940e8c3e0d
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3
1
gcr.io/prysmaticlabs/prysm/beacon-chain:stable31239807cbbd
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
gcr.io/prysmaticlabs/prysm/beacon-chain:v6.1.28ef452191a3a
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
gcr.io/prysmaticlabs/prysm/validator:v6.0.1a7d06fcfe91f
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/0xemma/reddark:main2a115e991894
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
ghcr.io/98jan/smalland-server/smalland-server:deveb7be822d5b2
openssl@1.1.1-1ubuntu2.1~18.04.23
no fix listed
1
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.5
1
ghcr.io/aetrius/msockperf-server/msockperf-server:main46ae4ea003e0
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.5
1
ghcr.io/ajnart/homarr:0.16.0737ec361ed24
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
ghcr.io/ajnart/homarr:0.13.4985456bdfb46
openssl@3.1.2-r0
3.1.8-r0
1
ghcr.io/ajnart/homarr:lateste103abadfb52
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
ghcr.io/akash-network/node:0.36.08763983b31f1
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
ghcr.io/aklivity/zilla:2.4.3e33d59dbb606
openssl@3.0.2-0ubuntu1.25
no fix listed
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5
1
ghcr.io/alpineworks/katalog-frontend:v1.0.734b76dcb1c10
openssl@1.1.1w-0+deb11u2
1.1.1w-0+deb11u3
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.19
1
ghcr.io/appscode/appcatalog:v0.0.109709a346888
openssl@3.1.1-r1
3.1.8-r0
1
ghcr.io/appscode/b3:v2023.03.235f5a40fc1702
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3
1
ghcr.io/appscode/capa-vpc-peering-operator:v0.0.4b1557553a2b3
openssl@3.1.4-r2
3.1.8-r0
1
ghcr.io/appscode/capi-ops-manager:v0.0.57465f35b684c
openssl@3.3.2-r4
3.3.2-r5
1
ghcr.io/appscode/deploy-ui:0.3.6f3e07eff3997
openssl@3.3.2-r1
3.3.2-r2
1
ghcr.io/appscode/docker-machine-operator:v0.0.481f6007abb4e
openssl@3.3.1-r1
3.3.2-r2
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.19
1
ghcr.io/appscode/kube-bind-server:v0.0.11762f3f6bb71
openssl@3.0.8-r3
3.0.19-r0
1
ghcr.io/appscode/kube-ui-server:v0.0.1340775d6850b5
openssl@3.0.7-r2
3.0.19-r0
1
ghcr.io/appscode/license-proxyserver:v0.0.372a5c874d854
openssl@3.0.8-r0
3.0.19-r0
1
ghcr.io/appscode/license-proxyserver:v0.0.8d6c2532ea386
openssl@3.1.4-r5
3.1.8-r0
1
ghcr.io/appscode/marketplace-ui:0.3.1d52177072013
openssl@3.3.2-r1
3.3.2-r2
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.19
1
ghcr.io/appuio/cloud-portal:v0.2.18c7e08d32d70
openssl@1.1.1k-1+deb11u2
1.1.1w-0+deb11u3
1
ghcr.io/aquasecurity/trivy-operator:0.16.0a608b798fda5
openssl@3.1.2-r0
3.1.8-r0
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
openssl@1.1.1f-1ubuntu2.24
3.0.13-0ubuntu3.5
1
ghcr.io/astriaorg/ria-faucet:0.0.1a06c8ebef427
openssl@3.1.1-r1
3.1.8-r0
1
ghcr.io/astriaorg/seq-faucet:0.9.0bf3cb9b505b6
openssl@3.3.2-r0
3.3.2-r2
1
ghcr.io/automata-network/multi-prover-avs/operator:v0.6.0752f1aa02438
openssl@3.1.4-r5
3.1.8-r0
1
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
openssl@3.1.4-r1
3.1.8-r0
1
ghcr.io/bakito/sealed-secrets-web:v3.0.574aff24d4b97
openssl@3.0.7-r0
3.0.19-r0
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.19
1
ghcr.io/bastienwirtz/homer:v25.02.1cf4ae752adbb
openssl@3.3.2-r1
3.3.2-r2
1
ghcr.io/beluga-cloud/actual/actualserver:23.12.1c8a0d5ec5a12
openssl@3.1.4-r6
3.1.8-r0
1
ghcr.io/beluga-cloud/helm-dashboard/dashboard:1.3.39ab9a675c405
openssl@3.1.3-r0
3.1.8-r0
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.