StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,342
of 17,792 indexed, latest versions
Container images
2,672
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,342 of 17,792 indexed charts deploy, on 2,672 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,758
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more913
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 moreno fix listed15
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,342 by stars
ChartLatestAffected imagesRadar Score
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

3,057
passboltcnieg1.1.171 of 2See more

passbolt cnieg 1.1.17

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
passbolt/passbolt:3.4.0-ce-non-root655547e17263
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

3,544
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
openssl@3.3.2-r4
3.3.2-r5

Open the chart page →

4,550
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
openssl@3.0.9-r1
3.0.19-r0

Open the chart page →

2,351
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.19

Open the chart page →

4,973
redisinsightheywood8-helm-chartsVerified publisher0.4.51 of 1See more

redisinsight heywood8-helm-charts 0.4.5

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
heywood8/redisinsight:2.28.00bc9ab313d37
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3

Open the chart page →

2,831
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
openssl@3.1.1-r3
3.1.8-r0

Open the chart page →

2,709
tailscale-relaymvisonneau0.2.71 of 1See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
mvisonneau/tailscale:v1.68.1fc45ad8abf10
openssl@3.3.1-r0
3.3.2-r2

Open the chart page →

1,357
nfs-serverobeoneVerified publisher1.1.61 of 1See more

nfs-server obeone 1.1.6

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/obeone/nfs-server:2.2.3932f4fa9d0f1
openssl@3.1.7-r0
3.1.8-r0

Open the chart page →

228
servarrservarr1.0.28 of 10See more

servarr servarr 1.0.2

8 of the 10 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
dinutac/jinja2docker:2.1.89340dde8a8a4
openssl@3.1.4-r2
3.1.8-r0
jellyfin/jellyfin:10.8.1305a9734d7e83
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
rapidfort/curl:8.7.18483c9f4490f
openssl@3.1.4-r5
3.1.8-r0
ghcr.io/flaresolverr/flaresolverr:v3.3.16088412db1051
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
openssl@3.1.4-r5
3.1.8-r0
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
openssl@3.1.4-r2
3.1.8-r0
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
openssl@3.1.4-r5
3.1.8-r0
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
openssl@3.1.4-r5
3.1.8-r0

Open the chart page →

14,235
rekorsigstoreVerified publisher1.8.61 of 9See more

rekor sigstore 1.8.6

1 of the 9 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
gcr.io/trillian-opensource-ci/db_serverdigest-pinned2a685a38dd01
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

5,373
mssqlserver-2022simcube1.2.31 of 1See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
openssl@3.0.2-0ubuntu1.25
no fix listed

Open the chart page →

2,970
thehivestrangebee-helmOfficialVerified publisher1.0.71 of 7See more

thehive strangebee-helm 1.0.7

1 of the 7 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

16,242
uffizzi-controlleruffizzi-controller2.4.62 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

2 of the 11 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
openssl@3.1.4-r6
3.1.8-r0

Open the chart page →

14,320
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
curlimages/curl:8.5.008e466006f08
openssl@3.1.4-r4
3.1.8-r0

Open the chart page →

7,957
zipkinygqygq2Verified publisher2.1.41 of 4See more

zipkin ygqygq2 2.1.4

1 of the 4 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.24197a9692f6a9
openssl@3.1.4-r2
3.1.8-r0

Open the chart page →

2,764
zigbee2mqttzigbee2mqtt2.14.11 of 2See more

zigbee2mqtt zigbee2mqtt 2.14.1

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
mikefarah/yq:4.45.12c100efaca06
openssl@3.3.2-r4
3.3.2-r5

Open the chart page →

1,032
aad-pod-identityaad-pod-identity4.1.181 of 2See more

aad-pod-identity aad-pod-identity 4.1.18

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.1777788bf38938
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3

Open the chart page →

2,859
minecraft-overvieweralphani-helm-chartsVerified publisher0.1.01 of 3See more

minecraft-overviewer alphani-helm-charts 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
mide/minecraft-overviewer:latest4eee0dcb715f
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3

Open the chart page →

3,415
baserowbaserow-chartVerified publisher1.0.564 of 6See more

baserow baserow-chart 1.0.56

4 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
bitnamilegacy/redis:7.2.5-debian-12-r05261cae9e407
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
caddy/ingress:v0.2.118d1366fc0e9
openssl@3.1.3-r0
3.1.8-r0

Open the chart page →

17,468
mysql-operatorbitpokeVerified publisher0.6.32 of 2See more

mysql-operator bitpoke 0.6.3

2 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
bitpoke/mysql-operator:v0.6.3f44fa86ab27e
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
bitpoke/mysql-operator-orchestrator:v0.6.3d86560c75bed
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

3,355
fadicetic0.3.13 of 25See more

fadi cetic 0.3.1

3 of the 25 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
openssl@1.1.1f-1ubuntu2
1.1.1f-1ubuntu2.24
library/adminer:4.8.1-standalone34d37131366c
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

53,171
headwind-mdmchristianhuthVerified publisher5.10.21 of 2See more

headwind-mdm christianhuth 5.10.2

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
headwindmdm/hmdm:0.1.93550b4840840
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

5,956
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

9,258
daskhubdask2024.1.16 of 9See more

daskhub dask 2024.1.1

6 of the 9 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
openssl@3.1.4-r1
3.1.8-r0
pangeo/base-notebook:2024.01.155fbe688a4f80
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
quay.io/jupyterhub/configurable-http-proxy:4.6.1fd916f75415f
openssl@3.1.4-r1
3.1.8-r0
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
quay.io/jupyterhub/k8s-network-tools:3.2.1e532a2dc4761
openssl@3.1.3-r0
3.1.8-r0

Open the chart page →

14,180
seafiledatamateVerified publisher0.6.06 of 6See more

seafile datamate 0.6.0

6 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
bitnamilegacy/os-shell:11-debian-11-r968643af4facff
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
datamate/seafile-professional:11.0.202dd66b722464
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

27,465
homerdjjudas21Verified publisher8.2.41 of 1See more

homer djjudas21 8.2.4

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
b4bz/homer:v24.12.14b44a4a9e329
openssl@3.3.2-r0
3.3.2-r2

Open the chart page →

399
drone-runner-dockerdroneVerified publisher0.7.01 of 3See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
library/docker:20-dindaf96c680a7e1
openssl@3.1.0-r4
3.1.8-r0

Open the chart page →

5,692
k8s-image-swapperestahnVerified publisher1.11.01 of 2See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
openssl@3.1.4-r5
3.1.8-r0

Open the chart page →

1,987
lndfold0.3.151 of 4See more

lnd fold 0.3.15

1 of the 4 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
openssl@3.1.2-r0
3.1.8-r0

Open the chart page →

8,855
foundry-vttfoundry-vttVerified publisher12.343.01 of 1See more

foundry-vtt foundry-vtt 12.343.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
felddy/foundryvtt:12.343.06c5e3e9ffbb0
openssl@3.1.4-r5
3.1.8-r0

Open the chart page →

725
geonode-k8sgeonode-k8sVerified publisher2.0.02 of 10See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
alpine/curl:8.5.0513c4f0d7123
openssl@3.1.4-r5
3.1.8-r0
geonode/geoserver:2.28.4-latest81b1d431b7e9
openssl@3.0.2-0ubuntu1.23
no fix listed

Open the chart page →

14,147
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

12,399
graphql-gatewaygraphql-gatewayVerified publisher0.1.51 of 1See more

graphql-gateway graphql-gateway 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
hansehe/graphql-gateway:1.0.458e09540afbc
openssl@3.1.3-r0
3.1.8-r0

Open the chart page →

1,662
hertzbeathertzbeatOfficialVerified publisher1.8.11 of 4See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.95.1f52723a08a44
openssl@3.1.3-r0
3.1.8-r0

Open the chart page →

14,314
infrahubinfrahubVerified publisher4.33.21 of 5See more

infrahub infrahub 4.33.2

1 of the 5 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

10,561
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.24

Open the chart page →

6,370
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
openssl@3.0.7-r2
3.0.19-r0

Open the chart page →

3,812
kubeflowkubeflow1.6.29 of 45See more

kubeflow kubeflow 1.6.2

9 of the 45 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
openssl@1.1.1-1ubuntu2.1~18.04.9
no fix listed
istio/proxyv2:1.14.1df69c1a7af7c
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24
kubeflownotebookswg/kfam:v1.6.1f226fb44db57
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
kubeflownotebookswg/notebook-controller:v1.6.185e2e685abd6
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
kubeflownotebookswg/profile-controller:v1.6.19f01767a460f
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
library/python:3.7eedf63967cdb
openssl@3.0.9-1
3.0.16-1~deb12u1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
openssl@1.0.2g-1ubuntu4.20
no fix listed
gcr.io/ml-pipeline/metadata-writer:2.0.0-alpha.5ec3ae9f6df47
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3

Open the chart page →

97,283
kubernetes-loggingkubernetes-logging4.8.02 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

2 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
fluent/fluent-bit:2.1.96a1d0c693dfa
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24

Open the chart page →

10,583
librechatlibrechat-openshiftVerified publisher1.9.01 of 3See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

5,875
vclustermainVerified publisher0.17.01 of 10See more

vcluster main 0.17.0

1 of the 10 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
openssl@3.0.9-r1
3.0.19-r0

Open the chart page →

11,598
musicocielmusicocielVerified publisher0.0.02 of 3See more

musicociel musicociel 0.0.0

2 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
davdiv/musicociel:deva85f99be882c
openssl@3.1.4-r2
3.1.8-r0
library/postgres:15.2-alpined9c304353c03
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

4,407
headplanenbcloudVerified publisher0.1.21 of 4See more

headplane nbcloud 0.1.2

1 of the 4 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
headscale/headscale:0.25.1a7a8ae9616bb
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

8,024
node-local-dnsnode-local-dns2.4.01 of 1See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
openssl@3.0.11-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

2,626
open5gsopen5gsVerified publisher2.3.42 of 5See more

open5gs open5gs 2.3.4

2 of the 5 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
gradiant/open5gs:2.7.575277742fc8a
openssl@1.1.1w-0+deb11u2
1.1.1w-0+deb11u3
gradiant/open5gs-webui:2.7.5fbd10c017541
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

9,326
ubuntuopen-charts1.2.11 of 1See more

ubuntu open-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
library/ubuntu:22.042edbbc5dc405
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

1,585
clustersecretpatrungel0.2.01 of 1See more

clustersecret patrungel 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
flag5/clustersecret:0.0.94ad5748bfcc6
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

1,841
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19

Open the chart page →

8,788
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24

Open the chart page →

10,609

Container images carrying it

2,672 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
openssl@3.1.4-r5
3.1.8-r0
1
ghcr.io/estaid-app/pgbouncer-docker:1.22.07e5630757299
openssl@3.1.4-r5
3.1.8-r0
1
ghcr.io/eugenmayer/nist-data-mirror:0.1.1a2162df94729
openssl@3.0.8-r0
3.0.19-r0
1
ghcr.io/exposr/exposrd:v0.12.0561c8f23bdb6
openssl@3.1.4-r5
3.1.8-r0
1
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
openssl@3.1.1-r1
3.1.8-r0
1
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
openssl@1.1.1w-0+deb11u2
1.1.1w-0+deb11u3
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24
1
ghcr.io/flaresolverr/flaresolverr:v3.3.16088412db1051
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
ghcr.io/flaresolverr/flaresolverr:v3.3.21f104ee51e512
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
ghcr.io/flatcar/flatcar-linux-update-operator:v0.10.0-rc1f9063e20b1f6
openssl@3.1.1-r1
3.1.8-r0
1
ghcr.io/fleeksoft/hbase/hdfs:3.3.3.2ac62269785ac
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
ghcr.io/flohansen/dasher-server:latest7cde8c3fa2d1
openssl@3.3.1-r3
3.3.2-r2
1
ghcr.io/fluxcd/source-controller:v1.5.000cd9316a379
openssl@3.3.2-r4
3.3.2-r5
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.19
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
openssl@3.0.2-0ubuntu1.19
no fix listed
1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lcpserver:1.9.0324f9b7b689c
openssl@3.1.4-r5
3.1.8-r0
1
ghcr.io/fpetr/readium-lcp-server-docker-helm/lsdserver:1.9.0cdba39e3f3d0
openssl@3.1.4-r5
3.1.8-r0
1
ghcr.io/g0dscookie/aptly:latestedd095d3c0ee
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u3
1
ghcr.io/g0dscookie/icinga2:2.13.5da81246ccfc9
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
ghcr.io/gabe565/castsponsorskip:0.8.15f7b4c6dd299
openssl@3.3.2-r4
3.3.2-r5
1
ghcr.io/gabe565/limo:latest6dfdbc9853bb
openssl@3.1.4-r2
3.1.8-r0
1
ghcr.io/gabe565/matrimony:latestd39a9d7c3e1b
openssl@3.1.4-r5
3.1.8-r0
1
ghcr.io/gabe565/mnemonic-ninja:latest1fd90a9e4d04
openssl@3.1.4-r6
3.1.8-r0
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
openssl@3.1.7-r1
3.1.8-r0
1
ghcr.io/gearbox-protocol/safe-watcher:1.2.14e92a4508bee
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24
1
ghcr.io/helm/chartmuseum:v0.16.071d1f1c0179e
openssl@3.1.1-r1
3.1.8-r0
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
openssl@3.1.3-r0
3.1.8-r0
1
ghcr.io/hoverkraft-tech/ovh-snapshoter/app:0.4.1010d271f08ab3
openssl@1.1.1w-0+deb11u2
1.1.1w-0+deb11u3
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/ideamixes/object-cloner:2.0.031030fd2f192
openssl@3.1.1-r1
3.1.8-r0
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
openssl@3.0.2-0ubuntu1.26
no fix listed
1
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
openssl@3.0.2-0ubuntu1.19
no fix listed
1
ghcr.io/jeremylvln/shulker-operator:0.13.027c55706c126
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
openssl@1.1.1-1ubuntu2.1~18.04.23
no fix listed
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5
1
ghcr.io/jlclx/runtimeclass-controller:latestb3a87f92a963
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.