StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,435
of 17,828 indexed, latest versions
Container images
2,767
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,435 of 17,828 indexed charts deploy, on 2,767 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,823
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more943
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed20
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,435 by stars
ChartLatestAffected imagesRadar Score
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24

Open the chart page →

12,081
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.19

Open the chart page →

10,632
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24

Open the chart page →

7,852
resilio-syncgeek-cookbookVerified publisher5.4.21 of 1See more

resilio-sync geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
openssl@1.1.1-1ubuntu2.1~18.04.9
no fix listed

Open the chart page →

5,946
rtorrent-rutorrentgeek-cookbookVerified publisher1.1.21 of 1See more

rtorrent-rutorrent geek-cookbook 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
crazymax/rtorrent-rutorrent:3.10-0.9.8-0.13.8fb307f5b87bf
openssl@3.0.7-r0
3.0.19-r0

Open the chart page →

4,234
satisfactorygeek-cookbookVerified publisher1.2.21 of 1See more

satisfactory geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:lateste103700ae6ae
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

3,512
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24

Open the chart page →

98,535
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
openssl@1.1.0g-2ubuntu4.1
no fix listed

Open the chart page →

27,112
theme-parkgeek-cookbookVerified publisher1.2.21 of 1See more

theme-park geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/theme-park:v1.7.3f8a5ec8f4669
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

1,287
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24

Open the chart page →

12,135
webtreesgeek-cookbookVerified publisher2.2.01 of 1See more

webtrees geek-cookbook 2.2.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.0.1969423a100fab
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

3,651
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24

Open the chart page →

18,210
chproxygeneral-helm-chartsVerified publisher0.0.21 of 1See more

chproxy general-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
contentsquareplatform/chproxy:v1.26.524555f22d4be
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1

Open the chart page →

3,756
kafkagengxiankun-charts0.2.01 of 1See more

kafka gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
wurstmeister/kafka:latest2d4bbf9cc83d
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u3

Open the chart page →

4,559
mongogengxiankun-charts0.1.01 of 1See more

mongo gengxiankun-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
library/mongo:5.041108d183e97
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.24

Open the chart page →

4,049
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.5

Open the chart page →

5,016
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.84 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

4 of the 5 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
openssl@1.1.1-1ubuntu2.1~18.04.23
no fix listed
jingking/geonetwork-hnap:4.2.843e74ab234e1
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24
library/elasticsearch:7.17.1588c2ec10c7f2
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24
library/kibana:7.17.150172f1c538e7
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24

Open the chart page →

35,118
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24

Open the chart page →

16,922
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
litestream/litestream:0.3c5a1e1b01916
openssl@3.0.8-r0
3.0.19-r0

Open the chart page →

8,919
gitanagitana1.4.01 of 1See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ntakashi/gitana:1.4.04171ec641120
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

3,479
github-rate-limits-prometheus-exportergithub-rate-limit-prometheus-exporterVerified publisher0.2.151 of 1See more

github-rate-limits-prometheus-exporter github-rate-limit-prometheus-exporter 0.2.15

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/kalgurn/grl-exporter:v3.2.0bd109b2bda38
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

896
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
openssl@1.0.2g-1ubuntu4.15
no fix listed
istio/pilot:1.2.9c09319753454
openssl@1.0.2g-1ubuntu4.15
no fix listed
istio/proxyv2:1.2.90c78be035e98
openssl@1.0.2g-1ubuntu4.15
no fix listed

Open the chart page →

197,341
apid-helpergkarthiks0.1.41 of 1See more

apid-helper gkarthiks 0.1.4

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
quay.io/gkarthics/apid-helper:v0.2.3d7d93debf1f4
openssl@3.1.1-r1
3.1.8-r0

Open the chart page →

2,617
volume-autoscalergke-volume-autoscaler3.0.21 of 1See more

volume-autoscaler gke-volume-autoscaler 3.0.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
shadowrhyder/gke-volume-autoscaler:3.0.24aae9270356a
openssl@3.1.3-r0
3.1.8-r0

Open the chart page →

901
pgbouncerglassflowVerified publisher0.1.01 of 1See more

pgbouncer glassflow 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
bitnamilegacy/pgbouncer:1.23.192356da09704
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

3,330
api-mapperglenndehaanVerified publisher1.2.01 of 1See more

api-mapper glenndehaan 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
glenndehaan/api-mapper:latest6ff6310683bf
openssl@3.1.4-r5
3.1.8-r0

Open the chart page →

1,160
contentbridgeglenndehaanVerified publisher1.1.01 of 1See more

contentbridge glenndehaan 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
glenndehaan/contentbridge:latest99b9e4f73848
openssl@3.0.15-r0
3.0.19-r0

Open the chart page →

1,004
kube-hookglenndehaanVerified publisher1.0.31 of 1See more

kube-hook glenndehaan 1.0.3

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
glenndehaan/kube-hook:latest0a7116f48bfe
openssl@3.3.2-r0
3.3.2-r2

Open the chart page →

925
ssl-checker-botglenndehaanVerified publisher1.0.01 of 2See more

ssl-checker-bot glenndehaan 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
marnixjanssen/ssl-checker-bot:latest81c97351ea2e
openssl@3.1.4-r5
3.1.8-r0

Open the chart page →

254
sunflare-toolsglenndehaanVerified publisher1.1.01 of 1See more

sunflare-tools glenndehaan 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
glenndehaan/sunflare-tools:latesta5b3f1dd865d
openssl@3.1.1-r1
3.1.8-r0

Open the chart page →

1,503
telegram-pepperbotglenndehaanVerified publisher1.3.51 of 2See more

telegram-pepperbot glenndehaan 1.3.5

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
marnixjanssen/telgram-pepperbot:latest0a4c9cf1fe5e
openssl@3.1.7-r0
3.1.8-r0

Open the chart page →

35
tesbotglenndehaanVerified publisher1.0.01 of 2See more

tesbot glenndehaan 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
glenndehaan/tesbot:latest372b85ef91eb
openssl@3.1.4-r1
3.1.8-r0

Open the chart page →

306
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

12,550
go-app-helmgo-app-helm0.1.01 of 1See more

go-app-helm go-app-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
manojchaulagain/go-k8s:0.1.0f237b5f637ae
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3

Open the chart page →

1,595
go-file-servergo-file-server1.0.01 of 2See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
goccx/go-file-server-ui:latest784b35910d52
openssl@3.3.2-r0
3.3.2-r2

Open the chart page →

2,223
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

2,839
ingress-nginxgpg-dev4.9.01 of 2See more

ingress-nginx gpg-dev 4.9.0

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
openssl@3.1.4-r2
3.1.8-r0

Open the chart page →

2,316
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
library/cassandra:3.11.65aa8400b4b3b
openssl@1.1.1-1ubuntu2.1~18.04.6
no fix listed

Open the chart page →

19,460
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

6,139
opentelemetry-demogpg-dev0.33.817 of 27See more

opentelemetry-demo gpg-dev 0.33.8

17 of the 27 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
openssl@3.3.2-r0
3.3.2-r2
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
openssl@3.3.2-r0
3.3.2-r2
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
openssl@3.1.4-r5
3.1.8-r0
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
openssl@3.3.2-r0
3.3.2-r2
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
ghcr.io/open-telemetry/demo:1.12.0-cartservice89730afa0b5d
openssl@3.3.2-r0
3.3.2-r2
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
openssl@3.3.2-r0
3.3.2-r2
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.19
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.5
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
openssl@3.3.0-r2
3.3.2-r2
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
ghcr.io/open-telemetry/demo:1.12.0-currencyservicedb69fdf22ec5
openssl@3.1.7-r1
3.1.8-r0
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
openssl@3.3.2-r0
3.3.2-r2

Open the chart page →

50,116
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
openssl@3.0.2-0ubuntu1.21
no fix listed

Open the chart page →

1,582
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24

Open the chart page →

15,981
supertokensgraphql-hive1.0.01 of 1See more

supertokens graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
supertokens/supertokens-postgresql:3.1418d34c781347
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u3

Open the chart page →

2,699
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.5

Open the chart page →

82,839
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
openssl@3.0.2-0ubuntu1.20
no fix listed

Open the chart page →

4,742
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

5,083
fasttrackmlgresearch0.1.01 of 1See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
gresearch/fasttrackml:latest16d1228220fc
openssl@3.1.4-r5
3.1.8-r0

Open the chart page →

1,399
siembolgresearch0.1.62 of 4See more

siembol gresearch 0.1.6

2 of the 4 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3

Open the chart page →

14,305
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
openssl@3.3.2-r0
3.3.2-r2

Open the chart page →

2,609
routergroundcover1.12.3781 of 7See more

router groundcover 1.12.378

1 of the 7 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

6,256

Container images carrying it

2,767 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
openssl@3.1.3-r0
3.1.8-r0
1
registry.gitlab.com/vicamo/docker-sshd/sshd:3.0-stable22c33d693fe2
openssl@1.1.1k-1
1.1.1w-0+deb11u3
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
openssl@3.0.11-1~deb12u1
3.0.16-1~deb12u1
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
1
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
openssl@3.0.11-1~deb12u1
3.0.16-1~deb12u1
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
openssl@3.0.8-r0
3.0.19-r0
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
openssl@3.1.4-r5
3.1.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
openssl@3.1.0-r4
3.1.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
openssl@3.0.8-r1
3.0.19-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
openssl@3.3.2-r0
3.3.2-r2
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
openssl@3.1.4-r6
3.1.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.2-r5
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
registry.k8s.io/sig-storage/volume-data-source-validator:v1.0.0d35884236461
openssl@1.1.1k-1+deb11u2
1.1.1w-0+deb11u3
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.