CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.1; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,451; of 17,832 indexed, latest versions
Container images: 2,775; deployed by those charts
Fix available: 2 of 5; affected packages

openssl - security update

Carried by container images the latest versions of 2,451 of 17,832 indexed charts deploy, on 2,775 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more	1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more	1,828
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more	3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more	946
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	no fix listed	20
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5
edk2deb	2022.11-6+deb12u2	no fix listed	1

OSV records: ALPINE-CVE-2024-13176 CGA-82rc-p89h-xq36 DEBIAN-CVE-2024-13176 UBUNTU-CVE-2024-13176 DLA-4176-1
Also known as: CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,451 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

8,128

Container images carrying it

2,775 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.19	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.19	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.19	1
ghcr.io/voyagermesh/gateway-converter :v0.0.1	b92123805584	openssl@3.3.2-r0	3.3.2-r2	1
ghcr.io/vshn/haproxy-with-mysql :1.0.0	a3c27ee3fb2f	openssl@3.0.9-1	3.0.16-1~deb12u1	1
ghcr.io/vshn/stardog-userrole-operator :v0.3.0	4774237c9e86	openssl@3.0.12-r4	3.0.19-r0	1
ghcr.io/waldo-vision/migrate :v0.3.6	ae31923312ed	openssl@3.0.8-r3	3.0.19-r0	1
ghcr.io/waldo-vision/web :v0.3.6	5bbc7647df07	openssl@3.0.8-r3	3.0.19-r0	1
ghcr.io/wasi-master/13ft :0.3.4	563ce7794a71	openssl@3.1.4-r5	3.1.8-r0	1
ghcr.io/wbstack/api :8x.9.11	eee94f9f7a53	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
ghcr.io/wbstack/mediawiki :1.37-7.4-20220621-fp-beta-0	c3012c8a34b4	openssl@1.1.1n-0+deb11u2	1.1.1w-0+deb11u3	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
ghcr.io/wjentner/k8s-db-backup-retention :v1.1.0	8027bb46d1f4	openssl@3.3.2-r4	3.3.2-r5	1
ghcr.io/wmde/wbaas-backup :v0.1.7	8e6a9516eac0	openssl@1.1.1-1ubuntu2.1~18.04.17	no fix listed	1
ghcr.io/wolveix/satisfactory-server :v1.9.10	e0f2f8c97598	openssl@3.0.2-0ubuntu1.19	no fix listed	1
ghcr.io/woodenmaiden/relfinderreformedapi :1.1.2	0708d30433d4	openssl@3.3.1-r0	3.3.2-r2	1
ghcr.io/woodenmaiden/relfinderreformedfront :latest	344f53763b25	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
ghcr.io/wundergraph/cosmo/graphqlmetrics :0.33.0	efb69ec3330c	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
ghcr.io/wyrihaximusnet/redirect :random	bf5983d754d7	openssl@3.3.2-r0	3.3.2-r2	1
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	openssl@3.3.2-r4	3.3.2-r5	1
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	openssl@3.3.0-r2	3.3.2-r2	1
ghcr.io/zazuko/blueprint :v0.1.0	92ac2f97978e	openssl@3.1.6-r2	3.1.8-r0	1
ghcr.io/zazukoians/qlever-ui :v0.10.1	51a7ec1c2de4	openssl@3.3.1-r3	3.3.2-r2	1
ghcr.io/zcube/bitnami-compat/redis :7.0-debian-11-r55	118a403046f7	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
ghcr.io/zoriya/kyoo_back :4.7.1	416e980f76a6	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
ghcr.io/zoriya/kyoo_front :4.7.1	d7f76c9c65d9	openssl@3.3.2-r4	3.3.2-r5	1
ghcr.io/zoriya/kyoo_migrations :4.7.1	f7e607f24071	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
ghcr.io/zystem-io/zymtrace-pub-gateway :26.9.2	ae9ae0925ff8	openssl@3.0.2-0ubuntu1.20	no fix listed	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24	1
mcr.microsoft.com/mssql/server :2022-latest	4402d880dd4c	openssl@3.0.2-0ubuntu1.29	no fix listed	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24	1
mcr.microsoft.com/oss/azure/aad-pod-identity/nmi :v1.8.17	77788bf38938	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u3	1
public.ecr.aws/aktosecurity/keelhq-keel :akto_v1.0.0	1eb61443d68e	openssl@3.3.2-r0	3.3.2-r2	1
public.ecr.aws/cloudnatix/llmariner/envsubst :1.17.0	af66e52f852a	openssl@3.1.4-r5	3.1.8-r0	1
public.ecr.aws/cloudnatix/llmariner/envsubst :1.19.1	ffc29318c5e9	openssl@3.1.4-r5	3.1.8-r0	1
public.ecr.aws/docker/library/redis :7.0.13-alpine	873c49204b64	openssl@3.1.3-r0	3.1.8-r0	1
public.ecr.aws/g4a0y2u8/unifie-store :staging-19925	a2057fabc948	openssl@3.0.15-1~deb12u1	3.0.16-1~deb12u1	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	openssl@3.0.2-0ubuntu1.19	no fix listed	1
public.ecr.aws/j1r0q0g6/notebooks/notebook-controller :v1.4	cac3ed9a9826	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u3	1
public.ecr.aws/jtekt-corporation/annotation-tool :ef974ad9	abd817eb6845	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u3	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	openssl@3.0.14-1~deb12u2	3.0.16-1~deb12u1	1
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	openssl@3.0.14-1~deb12u2	3.0.16-1~deb12u1	1
public.ecr.aws/jtekt-corporation/polygonal-annotation-tool :a3fa9360	56efd38500d6	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u3	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	openssl@3.0.11-1~deb12u2	3.0.16-1~deb12u1	1