StackRadar

CVE-2024-13176

Medium

Advisory

Published 20 Jan 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,435
of 17,828 indexed, latest versions
Container images
2,767
deployed by those charts
Fix available
2 of 5
affected packages

openssl - security update

Carried by container images the latest versions of 2,435 of 17,828 indexed charts deploy, on 2,767 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+92 more1.1.1f-1ubuntu2.24, 1.1.1f-1ubuntu2.fips.24, 1.1.1w-0+deb11u3, 3.0.2-0ubuntu1.19+2 more1,823
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r0, 3.3.2-r2, 3.3.2-r5+1 more943
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 moreno fix listed20
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
edk2deb2022.11-6+deb12u2no fix listed1
OSV records
ALPINE-CVE-2024-13176CGA-82rc-p89h-xq36DEBIAN-CVE-2024-13176UBUNTU-CVE-2024-13176DLA-4176-1
Also known as
CGA-qxwv-h54f-gwqm, USN-7278-1

Charts affected

2,435 by stars
ChartLatestAffected imagesRadar Score
clickhouseclickhouse-alerthawkVerified publisher26.5.01 of 1See more

clickhouse clickhouse-alerthawk 26.5.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.584d05b9c205e
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

1,784
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
openssl@1.0.2g-1ubuntu4.10
no fix listed

Open the chart page →

93,202
pgbenchcloudnative-pgVerified publisher0.1.01 of 1See more

pgbench cloudnative-pg 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3

Open the chart page →

2,715
clustereye-stackclustereyeVerified publisher0.1.12 of 5See more

clustereye-stack clustereye 0.1.1

2 of the 5 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31.02bf7f042e396
openssl@3.0.2-0ubuntu1.16
3.0.2-0ubuntu1.19
library/influxdb:1.8.10-alpine2601e27d6b7e
openssl@3.0.15-r0
3.0.19-r0

Open the chart page →

4,659
clusternet-hubclusternet1.0.01 of 1See more

clusternet-hub clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
openssl@3.3.2-r4
3.3.2-r5

Open the chart page →

1,556
clusternet-schedulerclusternet1.0.01 of 1See more

clusternet-scheduler clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
openssl@3.3.2-r4
3.3.2-r5

Open the chart page →

1,556
proxy-relaycnieg2.1.21 of 1See more

proxy-relay cnieg 2.1.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
library/httpd:2.4.54ee2117e77c35
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3

Open the chart page →

732
commonground-gatewaycommonground-gateway1.5.42 of 7See more

commonground-gateway commonground-gateway 1.5.4

2 of the 7 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/commonground-gateway-nginx:latestb72cf734d85f
openssl@3.1.4-r5
3.1.8-r0
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
openssl@3.0.9-1
3.0.16-1~deb12u1

Open the chart page →

9,800
contactcataloguscontact-catalogus1.0.01 of 3See more

contactcatalogus contact-catalogus 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/contactcatalogus-nginx:latest480c84fa9e63
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

7,313
oci-registrycronce0.4.51 of 1See more

oci-registry cronce 0.4.5

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
mcronce/oci-registry:v0.4.509519cd7bd2f
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1

Open the chart page →

1,330
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1

Open the chart page →

14,016
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
openssl@3.0.12-r1
3.0.19-r0

Open the chart page →

1,963
tasmo-admincrystalnetVerified publisher3.0.111 of 1See more

tasmo-admin crystalnet 3.0.11

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/tasmoadmin/tasmoadmin:v3.3.205aeefbdac2b
openssl@3.1.4-r1
3.1.8-r0

Open the chart page →

892
cubefscubefs3.2.02 of 10See more

cubefs cubefs 3.2.0

2 of the 10 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
chubaofs/cfs-client:3.2.015ff74209ce7
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
chubaofs/cfs-server:3.2.0205030e045f2
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

15,941
CubeUniversecubeuniverseVerified publisher0.1.01 of 1See more

CubeUniverse cubeuniverse 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
tksky1/cubeuniverse:0.1alphaec7b889f380f
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3

Open the chart page →

1,838
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.19

Open the chart page →

5,535
aibrixdanchevVerified publisher0.7.01 of 5See more

aibrix danchev 0.7.0

1 of the 5 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
aibrix/metadata-service:v0.7.063fb81a64377
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

5,408
dao-2048dao-20481.4.11 of 1See more

dao-2048 dao-2048 1.4.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/daocloud/dao-2048:v1.4.121275bc02f75
openssl@3.0.8-r0
3.0.19-r0

Open the chart page →

1,884
data-fairdata354-helmVerified publisher1.1.26 of 12See more

data-fair data354-helm 1.1.2

6 of the 12 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.fips.24
ghcr.io/data-fair/data-fair:3cc9498b64b5b
openssl@3.1.3-r0
3.1.8-r0
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24
ghcr.io/data-fair/metrics:0a8d40779eeae
openssl@3.1.1-r1
3.1.8-r0
ghcr.io/data-fair/portals:18b621866ceb2
openssl@3.0.8-r3
3.0.19-r0
ghcr.io/data-fair/processings:15a9216989707
openssl@3.1.3-r0
3.1.8-r0

Open the chart page →

38,854
dbrepodbrepo1.13.313 of 25See more

dbrepo dbrepo 1.13.3

13 of the 25 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
openssl@3.0.14-1~deb12u2
3.0.16-1~deb12u1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

53,884
mastodondefault-ghVerified publisher0.3.11 of 3See more

mastodon default-gh 0.3.1

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/mastodon/mastodon:v4.1.26b18e6d0eda4
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u3

Open the chart page →

5,066
frontenddemo-application0.1.01 of 1See more

frontend demo-application 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
azhar008/flaskapplication:latesta1e827b0adea
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

3,563
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
openssl@3.0.7-r2
3.0.19-r0

Open the chart page →

5,609
dex-serverdex-server1.19.11 of 3See more

dex-server dex-server 1.19.1

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/envsubst:1.19.1ffc29318c5e9
openssl@3.1.4-r5
3.1.8-r0

Open the chart page →

2,246
digispoof-interfacedigispoof-interface1.0.01 of 3See more

digispoof-interface digispoof-interface 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/digispoof-interface-nginx:latest8fa4597217a4
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

7,787
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24

Open the chart page →

74,973
joplin-serverdjjudas21Verified publisher5.5.81 of 1See more

joplin-server djjudas21 5.5.8

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
joplin/server:2.14.2-betab87564ef34e9
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u3

Open the chart page →

3,949
jumpdjjudas21Verified publisher0.1.71 of 1See more

jump djjudas21 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
daledavies/jump:v1.4.10a0c8ad93902
openssl@3.1.4-r5
3.1.8-r0

Open the chart page →

728
openssh-serverdjjudas21Verified publisher0.1.141 of 1See more

openssh-server djjudas21 0.1.14

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
linuxserver/openssh-server:9.7_p1-r4-ls17153ea39d2485c
openssl@3.3.2-r0
3.3.2-r2

Open the chart page →

566
docker-in-dockerdocker-in-docker0.0.31 of 2See more

docker-in-docker docker-in-docker 0.0.3

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
library/docker:24.0.2-dind1d148deae16a
openssl@3.1.1-r1
3.1.8-r0

Open the chart page →

2,596
dokudokuOfficialVerified publisher0.1.41 of 3See more

doku doku 0.1.4

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:latesta73b5c0fb6f8
openssl@3.0.2-0ubuntu1.29
no fix listed

Open the chart page →

1,657
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1

Open the chart page →

8,970
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
hanchuanchuan/goinception:latestb3c0dd26fb50
openssl@3.3.2-r0
3.3.2-r2

Open the chart page →

5,862
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
openssl@3.0.2-0ubuntu1.17
3.0.2-0ubuntu1.19

Open the chart page →

71,850
dragonfly-stackdragonflyVerified publisher0.1.24 of 7See more

dragonfly-stack dragonfly 0.1.2

4 of the 7 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
dragonflyoss/manager:v2.1.49c3ef7f10698d
openssl@3.0.12-r4
3.0.19-r0
dragonflyoss/scheduler:v2.1.49523785c77787
openssl@3.0.12-r4
3.0.19-r0
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
openssl@3.0.7-r0
3.0.19-r0

Open the chart page →

18,998
nydus-snapshotterdragonflyVerified publisher0.0.102 of 2See more

nydus-snapshotter dragonfly 0.0.10

2 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/containerd/nydus-snapshotter:v0.9.056f8617363b4
openssl@3.0.7-r0
3.0.19-r0
ghcr.io/liubin/toml-cli:v0.0.734a1da9f0f83
openssl@3.0.7-r0
3.0.19-r0

Open the chart page →

3,669
gethdysnixVerified publisher1.1.21 of 1See more

geth dysnix 1.1.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ethereum/client-go:v1.14.8886ec69b35b0
openssl@3.3.1-r3
3.3.2-r2

Open the chart page →

1,626
glideeinstackOfficialVerified publisher0.0.21 of 1See more

glide einstack 0.0.2

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/einstack/glide:0.0.1-alpineab3f7d0a1d50
openssl@3.1.4-r5
3.1.8-r0

Open the chart page →

1,335
elchi-stackelchi1.13.04 of 10See more

elchi-stack elchi 1.13.0

4 of the 10 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.81ffa82edee00
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24
envoyproxy/envoy:v1.33.056da5afd7df3
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.19
library/mongo:6.0.12646902910d6a
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.19
victoriametrics/victoria-metrics:v1.93.577a9815d0640
openssl@3.1.2-r0
3.1.8-r0

Open the chart page →

15,852
navidromeemmas-chartsVerified publisher0.0.61 of 1See more

navidrome emmas-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
deluan/navidrome:0.50.02cf4442b0099
openssl@3.1.3-r0
3.1.8-r0

Open the chart page →

2,130
enavenav-service-architectureVerified publisher0.0.71 of 10See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
apache/kafka:3.9.0fbc7d7c428e3
openssl@3.3.2-r1
3.3.2-r2

Open the chart page →

12,668
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

31,893
neo4j-communityequinor-charts1.2.51 of 1See more

neo4j-community equinor-charts 1.2.5

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
library/neo4j:4.2.4348e3f56faa2
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3

Open the chart page →

2,752
pgbouncerestaidVerified publisher1.0.71 of 1See more

pgbouncer estaid 1.0.7

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/estaid-app/pgbouncer-docker:1.22.07e5630757299
openssl@3.1.4-r5
3.1.8-r0

Open the chart page →

544
beaconchain-explorerethereum-helm-chartsVerified publisher0.1.61 of 2See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

3,144
genesis-generatorethereum-helm-chartsVerified publisher0.2.31 of 2See more

genesis-generator ethereum-helm-charts 0.2.3

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
skylenet/ethereum-genesis-generator:latest210353ce7c89
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u3

Open the chart page →

3,138
ipfs-clusterethereum-helm-chartsVerified publisher0.1.141 of 3See more

ipfs-cluster ethereum-helm-charts 0.1.14

1 of the 3 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
openssl@3.0.7-r0
3.0.19-r0

Open the chart page →

4,717
lighthouseethereum-helm-chartsVerified publisher1.1.91 of 2See more

lighthouse ethereum-helm-charts 1.1.9

1 of the 2 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
sigp/lighthouse:latest9a62bb870545
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

1,632
iobrokereugen0.2.61 of 1See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
openssl@3.0.13-1~deb12u1
3.0.16-1~deb12u1

Open the chart page →

11,591
event-exporterevent-exporterVerified publisher0.1.171 of 1See more

event-exporter event-exporter 0.1.17

1 of the 1 container images this version deploys carry CVE-2024-13176.

Container imageDigestPackageFixed in
kubestar/event-exporter:latest656606941255
openssl@3.1.4-r5
3.1.8-r0

Open the chart page →

1,211

Container images carrying it

2,767 by charts deploying them

A fixed version is listed for 2 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u3
1
registry.gitlab.com/parrotsec/project/parrot-mirror-docker:mainf91b602ca572
openssl@3.1.3-r0
3.1.8-r0
1
registry.gitlab.com/vicamo/docker-sshd/sshd:3.0-stable22c33d693fe2
openssl@1.1.1k-1
1.1.1w-0+deb11u3
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
openssl@3.0.11-1~deb12u1
3.0.16-1~deb12u1
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
openssl@3.0.11-1~deb12u2
3.0.16-1~deb12u1
1
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u3
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
openssl@3.0.11-1~deb12u1
3.0.16-1~deb12u1
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
openssl@3.0.8-r0
3.0.19-r0
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
openssl@3.1.4-r5
3.1.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.8.0744ae2afd433
openssl@3.1.0-r4
3.1.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
openssl@3.0.8-r1
3.0.19-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
openssl@3.3.2-r0
3.3.2-r2
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
openssl@3.1.4-r6
3.1.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.2-r5
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
openssl@3.0.15-1~deb12u1
3.0.16-1~deb12u1
1
registry.k8s.io/sig-storage/volume-data-source-validator:v1.0.0d35884236461
openssl@1.1.1k-1+deb11u2
1.1.1w-0+deb11u3
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.