StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,342
of 17,797 indexed, latest versions
Container images
2,672
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,342 of 17,797 indexed charts deploy, on 2,672 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,758
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more913
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 moreno fix listed15
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,342 by stars
ChartLatestAffected imagesRadar Score
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
taigaio/taiga-back:6.4.29f97323cc150
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

7,257
piholesavepointsamVerified publisher0.2.01 of 1See more

pihole savepointsam 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
pihole/pihole:2023.05.0b83258064f54
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3

Open the chart page →

1,048
popeyeself-hosters-by-nightVerified publisher0.6.11 of 1See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
openssl@3.3.2-r4
3.3.2-r5

Open the chart page →

1,197
openspeedtestspeedtestVerified publisher0.1.21 of 1See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
openspeedtest/latest:v2.0.0d4d62f4b7d85
openssl@3.0.9-r1
3.0.19-r0

Open the chart page →

2,040
k8s-telegram-sendertelegram-senderVerified publisher0.0.11 of 1See more

k8s-telegram-sender telegram-sender 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
danuk/telegram-sender:0.0.1026560388070
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3

Open the chart page →

3,048
topolvmtopolvmVerified publisher17.2.01 of 1See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

2,393
uffizzi-appuffizzi-app1.3.03 of 14See more

uffizzi-app uffizzi-app 1.3.0

3 of the 14 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
uffizzi/app:latest66e9e3937c60
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3
uffizzi/controller:latest0344805f267b
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
registry.k8s.io/ingress-nginx/controller:v1.9.45b161f051d01
openssl@3.1.3-r0
3.1.8-r0

Open the chart page →

19,431
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
openssl@1.0.2g-1ubuntu4.8
no fix listed

Open the chart page →

13,587
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1

Open the chart page →

9,764
matrixzekker6Verified publisher3.31.01See more

matrix zekker6 3.31.0

1 container image this version deploys carries CVE-2024-13176.

Container imageDigestPackageFixed in
devture/exim-relay:4.98-r0-47ba30080c7a6
openssl@3.3.2-r4
3.3.2-r5

Open the chart page →

—
eshoponabpabp-charts1.0.012 of 15See more

eshoponabp abp-charts 1.0.0

12 of the 15 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
library/mongo:4.2699d652ed674
openssl@1.1.1-1ubuntu2.1~18.04.23
no fix listed
library/postgres:14.13162a6ead070
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
ghcr.io/volosoft/eshoponabp/app-authserver:1.0.022ce496c67d7
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
ghcr.io/volosoft/eshoponabp/app-publicweb:1.0.07e53010dda55
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
ghcr.io/volosoft/eshoponabp/gateway-web:1.0.026465a2bf671
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
ghcr.io/volosoft/eshoponabp/gateway-web-public:1.0.050cab15c80d9
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
ghcr.io/volosoft/eshoponabp/service-administration:1.0.0206a9bee17a8
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
ghcr.io/volosoft/eshoponabp/service-basket:1.0.0dd5ce454072e
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
ghcr.io/volosoft/eshoponabp/service-catalog:1.0.07ecb00f53d99
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
ghcr.io/volosoft/eshoponabp/service-identity:1.0.0e53bf47b62d0
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
ghcr.io/volosoft/eshoponabp/service-ordering:1.0.15e836b17337f
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
ghcr.io/volosoft/eshoponabp/service-payment:1.0.02ca91145099c
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3

Open the chart page →

19,818
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.19

Open the chart page →

8,264
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:15.2.0-debian-11-r113e65a6b89e38
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3

Open the chart page →

3,569
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
openssl@1.0.2g-1ubuntu4.8
no fix listed

Open the chart page →

11,025
cga-proxybarracuda-cga-helm-charts0.2.122 of 2See more

cga-proxy barracuda-cga-helm-charts 0.2.12

2 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
fydeinc/envoyproxy:1.13.8.29fadb0a491db
openssl@3.1.2-r0
3.1.8-r0
fydeinc/fydeproxy:1.3.1780e7c00bc9e7
openssl@3.1.4-r1
3.1.8-r0

Open the chart page →

1,051
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24

Open the chart page →

8,081
caddy-ingress-controllercaddy-ingress1.3.01 of 1See more

caddy-ingress-controller caddy-ingress 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
caddy/ingress:v0.2.118d1366fc0e9
openssl@3.1.3-r0
3.1.8-r0

Open the chart page →

1,891
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1

Open the chart page →

4,201
popeyechristianhuthVerified publisher2.4.31 of 1See more

popeye christianhuth 2.4.3

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
openssl@3.3.2-r4
3.3.2-r5

Open the chart page →

1,197
lighthousechronicleVerified publisher0.0.81 of 1See more

lighthouse chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.1.0870934e38931
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

1,970
cloudflare-exportercloudflare-exporter0.2.31 of 1See more

cloudflare-exporter cloudflare-exporter 0.2.3

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/lablabs/cloudflare_exporter:0.0.1670d74ec46602
openssl@3.1.4-r5
3.1.8-r0

Open the chart page →

791
cmak-operatorcmak-operatorVerified publisher2.2.21 of 3See more

cmak-operator cmak-operator 2.2.2

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/eshepelyuk/dckr/cmak-3.0.0.6:1.2.090a34412c6b5
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3

Open the chart page →

4,608
coder-observabilitycoder-observabilityVerified publisher0.7.35 of 21See more

coder-observability coder-observability 0.7.3

5 of the 21 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
dannyben/madness:latestebdf50556c02
openssl@3.3.1-r3
3.3.2-r2
grafana/loki:3.1.0d947e68a84d9
openssl@3.1.4-r1
3.1.8-r0
grafana/loki-canary:3.1.039baf6d67f85
openssl@3.1.4-r1
3.1.8-r0
library/memcached:1.6.23-alpine41d19476c100
openssl@3.1.4-r5
3.1.8-r0
nginxinc/nginx-unprivileged:1.24-alpinebe76a26e238d
openssl@3.1.4-r6
3.1.8-r0

Open the chart page →

24,755
community-solid-servercommunity-solid-server3.0.01 of 1See more

community-solid-server community-solid-server 3.0.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
solidproject/community-server:6.0.2ccc4acb7e9a1
openssl@3.1.2-r0
3.1.8-r0

Open the chart page →

1,614
convertigoconvertigoOfficialVerified publisher8.4.32 of 5See more

convertigo convertigo 8.4.3

2 of the 5 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
library/couchdb:3.4.22817ad50b5c5
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

17,632
cosmocosmo-platformOfficialVerified publisher0.20.05 of 10See more

cosmo cosmo-platform 0.20.0

5 of the 10 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
bitnamilegacy/postgresql:15.4.0-debian-11-r455dba7e6a514d
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

29,096
hoppscotchdeliveryheroVerified publisher0.3.21 of 1See more

hoppscotch deliveryhero 0.3.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
hoppscotch/hoppscotch:2024.8.2f1da831950b7
openssl@3.1.7-r0
3.1.8-r0

Open the chart page →

3,461
kube-benchdeliveryheroVerified publisher0.1.171 of 1See more

kube-bench deliveryhero 0.1.17

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
aquasec/kube-bench:v0.8.0ea3e33bc3c4e
openssl@3.3.1-r1
3.3.2-r2

Open the chart page →

1,624
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5

Open the chart page →

4,220
hdfsdmwm-bigdataVerified publisher1.0.11 of 2See more

hdfs dmwm-bigdata 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
gradiant/hdfs:3.2.2e3bf364fe713
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

7,949
proxysqldysnixVerified publisher0.11.21 of 1See more

proxysql dysnix 0.11.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
proxysql/proxysql:2.5.537eb7e46d947
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3

Open the chart page →

542
budgieectobitOfficialVerified publisher0.1.31 of 1See more

budgie ectobit 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ectobit/budgie:0.1.4654336b145a0
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3

Open the chart page →

278
edgelessdbedgelesssysVerified publisher0.3.21 of 1See more

edgelessdb edgelesssys 0.3.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24

Open the chart page →

4,879
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
openssl@3.1.1-r1
3.1.8-r0

Open the chart page →

14,552
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
redislabs/redisinsight:1.14.0b03ab1426d0d
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3

Open the chart page →

13,881
zabbix-agentfermosit0.0.51 of 1See more

zabbix-agent fermosit 0.0.5

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5

Open the chart page →

2,421
keydbfinkinfridomVerified publisher0.48.31 of 1See more

keydb finkinfridom 0.48.3

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24

Open the chart page →

5,311
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
openssl@3.3.2-r0
3.3.2-r2

Open the chart page →

2,787
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24

Open the chart page →

10,670
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u3

Open the chart page →

7,590
plexgeek-cookbookVerified publisher6.4.31 of 1See more

plex geek-cookbook 6.4.3

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24

Open the chart page →

9,679
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24

Open the chart page →

10,278
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24

Open the chart page →

10,693
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
openssl@1.1.1-1ubuntu2.1~18.04.23
no fix listed

Open the chart page →

11,946
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

2,452
graphql-hivegraphql-hive1.0.01 of 17See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
supertokens/supertokens-postgresql:3.1418d34c781347
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u3

Open the chart page →

10,332
hazelcasthazelcastVerified publisher5.10.31 of 2See more

hazelcast hazelcast 5.10.3

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
openssl@3.3.1-r3
3.3.2-r2

Open the chart page →

2,624
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3

Open the chart page →

7,337
typesensehmphuVerified publisher0.1.61 of 1See more

typesense hmphu 0.1.6

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
typesense/typesense:0.23.03accb727cbe2
openssl@1.0.2g-1ubuntu4.19
no fix listed

Open the chart page →

3,885
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.21 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

1 of the 5 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

10,663

Container images carrying it

2,672 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/opslevel/kubectl-opslevel:v2024.9.571697b5ff713
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
openssl@1.1.1-1ubuntu2.1~18.04.20
no fix listed
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24
1
public.ecr.aws/t0u0d5o5/ecr_authenticator:latest077e4e57e41c
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
1
public.ecr.aws/zinclabs/openobserve:v0.8.127f8de509169
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
1
quay.io/aerokube/jumphost:1.0.170fd7c00418d
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.19
1
quay.io/aerokube/keygen:1.0.1578934444f04
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.19
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.19
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
openssl@3.0.2-0ubuntu1.13
3.0.2-0ubuntu1.19
1
quay.io/cilium/tetragon:v1.1.096fac2482898
openssl@3.1.4-r5
3.1.8-r0
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
openssl@3.1.6-r2
3.1.8-r0
1
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
openssl@3.0.2-0ubuntu1.23
no fix listed
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
openssl@1.1.1-1ubuntu2.1~18.04.20
no fix listed
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.19
1
quay.io/fairwinds/docker-demo:1.4.0d53cb940196c
openssl@3.1.0-r4
3.1.8-r0
1
quay.io/fiware/dsba-pdp:0.3.20cca71497e9e
openssl@3.0.7-r2
3.0.19-r0
1
quay.io/fiware/vcverifier:2.0.1cd36290dc849
openssl@3.1.0-r4
3.1.8-r0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.19
1
quay.io/fluentd_elasticsearch/fluentd:v4.2.399079df58561
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
quay.io/fossa/postgres:17.2-15af45ac79f38
openssl@1.1.1w-0+deb11u2
1.1.1w-0+deb11u3
1
quay.io/frrouting/frr:9.0.2086acb1278fe
openssl@3.1.4-r1
3.1.8-r0
1
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
openssl@3.1.1-r1
3.1.8-r0
1
quay.io/groundcover/caretta:v0.0.16ed8f5118e3a4
openssl@3.0.8-r0
3.0.19-r0
1
quay.io/groundcover/victoria-metrics:v1.85.380ddeb90d18d
openssl@3.0.7-r0
3.0.19-r0
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3
1
quay.io/jupyterhub/k8s-network-tools:3.3.7310daf3451e3
openssl@3.1.4-r5
3.1.8-r0
1
quay.io/jupyterhub/k8s-network-tools:3.2.1e532a2dc4761
openssl@3.1.3-r0
3.1.8-r0
1
quay.io/kiwigrid/k8s-sidecar:1.25.2cb4c638ffb1f
openssl@3.1.3-r0
3.1.8-r0
1
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
openssl@3.0.12-r4
3.0.19-r0
1
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
openssl@3.0.9-r1
3.0.19-r0
1
quay.io/maxiv/storageclass-router:0.4.160725dab588c
openssl@3.1.4-r5
3.1.8-r0
1
quay.io/metallb/controller:v0.14.4bbef1ee3e7d3
openssl@3.1.4-r5
3.1.8-r0
1
quay.io/metallb/speaker:v0.14.437611bde45a2
openssl@3.1.4-r5
3.1.8-r0
1
quay.io/mongodb/farm-intro-backend:0.11a9ce0b8fbd4
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
openssl@1.0.2g-1ubuntu4.17
no fix listed
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
openssl@3.0.8-r4
3.0.19-r0
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
openssl@1.0.2g-1ubuntu4.15
no fix listed
1
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
openssl@3.3.1-r3
3.3.2-r2
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
quay.io/spotahome/redis-operator:latest8c772955184e
openssl@3.1.2-r0
3.1.8-r0
1
quay.io/wi_stefan/dsba-db-migrations:0.0.125b986cd14a08
openssl@3.0.7-r0
3.0.19-r0
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
openssl@3.0.9-1
3.0.16-1~deb12u1
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.