CVE-2024-4741

High

Advisory

Published 28 May 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.029; 86th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,518; of 17,787 indexed, latest versions
Container images: 1,595; deployed by those charts
Fix available: 3 of 4; affected packages

Security update for openssl-1_1

Carried by container images the latest versions of 1,518 of 17,787 indexed charts deploy, on 1,595 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+79 more	1.1.1f-1ubuntu2.23, 3.0.2-0ubuntu1.17, 3.0.13-0ubuntu3.2, 3.0.14-1~deb12u1	956
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+24 more	3.0.14-r0, 3.1.6-r0, 3.3.0-r3, 3.3.1-r0	638
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl-1_1rpm	1.1.1d-11.6.1	1.1.1d-150200.11.91.1	1

OSV records: ALPINE-CVE-2024-4741 CGA-53qp-wmg8-pjf3 DEBIAN-CVE-2024-4741 UBUNTU-CVE-2024-4741 SUSE-SU-2024:2035-1
Also known as: CGA-47j4-6g2h-8vfm, CGA-mq9p-h95f-gfhr, CGA-v662-x97w-gx7w, USN-6937-1

Charts affected

1,518 by stars

Chart

Latest

Affected images

Radar Score

workadventureworkadventure

1.1.0

1 of 9 See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
matthiasluedtke/iconserver :v3.16.0	661d607b0fbc	openssl@3.1.3-r0	3.1.6-r0

Open the chart page →

16,083

oauth2xd

1.0.0

1 of 1 See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
lishimeng/hufu :v1.2.1	3d5752dac834	openssl@3.0.8-r0	3.0.14-r0

Open the chart page →

2,007

owlxd

0.5.1

2 of 2 See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
lishimeng/owl-console :v0.11.2	c79a67657baf	openssl@3.0.8-r0	3.0.14-r0
lishimeng/owl-messager :v0.11.2	3d00485e64dc	openssl@3.0.8-r0	3.0.14-r0

Open the chart page →

3,880

passportxd

0.2.16

2 of 2 See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
lishimeng/passport :v0.2.16	3e7d05ded625	openssl@3.0.8-r0	3.0.14-r0
lishimeng/passport-profile :v0.2.16	0970dfe5dc8f	openssl@3.0.8-r0	3.0.14-r0

Open the chart page →

3,974

tabbyxd

1.0.6

2 of 2 See more

tabby xd 1.0.6

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1
lishimeng/tabby :v1.0.4	8145c3dc83c8	openssl@3.0.8-r0	3.0.14-r0

Open the chart page →

7,685

treexd

0.1.10

1 of 1 See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
lishimeng/tree :v0.2.8	9b2f8be6c7d3	openssl@3.0.8-r0	3.0.14-r0

Open the chart page →

1,997

zooxd

0.4.0

1 of 1 See more

1,955

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.2

Open the chart page →

2,136

prometheusalertygqygq2

1.0.0

1 of 1 See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
feiyu563/prometheus-alert :v4.9.1	224cfa68cbd9	openssl@3.1.4-r5	3.1.6-r0

Open the chart page →

1,610

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1

Open the chart page →

2,674

zahori-consulzahori

1.0.1

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	openssl@3.0.9-r1	3.0.14-r0
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	openssl@3.0.9-r1	3.0.14-r0

Open the chart page →

5,033

zahori-postgresqlzahori

1.0.1

1 of 1 See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
library/postgres :12.15-alpine	73ea9cdd4a9d	openssl@3.1.2-r0	3.1.6-r0

Open the chart page →

448

zahori-processzahori

1.0.1

1 of 1 See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-process :0.1.13	351f8a220ed7	openssl@3.1.1-r1	3.1.6-r0

Open the chart page →

3,480

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	openssl@1.1.1-1ubuntu2.1~18.04.23	no fix listed

Open the chart page →

2,464

zahori-serverzahori

1.0.1

2 of 2 See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	openssl@3.0.7-r2	3.0.14-r0
zahoriaut/zahori-server :0.1.17	b2de13916f3e	openssl@3.0.8-r3	3.0.14-r0

Open the chart page →

5,847

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	openssl@3.1.4-r5	3.1.6-r0

Open the chart page →

1,588

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	openssl@1.1.1-1ubuntu2.1~18.04.14	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.23

Open the chart page →

9,250

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,916

Container images carrying it

1,595 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	openssl@1.0.2g-1ubuntu4.14	no fix listed	3
oryd/hydra :v2.2.0	2c93beb5e5f2	openssl@3.1.4-r5	3.1.6-r0	3
pnnlmiscscripts/anaconda9 :1683907016.7470503-nginx-1	9a2fe06a1472	openssl@3.0.8-r3	3.0.14-r0	3
rcdelacruz/my-strapi-app :js-amd64	38007f358355	openssl@3.1.4-r1	3.1.6-r0	3
rss3/op-node :d2c5ced00901227473fc196fda838191f0cb4e02	d1d2ae6efd05	openssl@3.1.4-r5	3.1.6-r0	3
selenium/hub :3.141.59	02f251d48d5f	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.23	3
sigp/lighthouse :latest-amd64	50f66cfebb6d	openssl@3.0.2-0ubuntu1.21	no fix listed	3
xenondb/percona :5.7.33	0e26872a2b67	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.23	3
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	openssl@3.0.9-1	3.0.14-1~deb12u1	3
ghcr.io/huggingface/text-embeddings-inference :cpu-1.5	0502794a4d86	openssl@3.0.13-1~deb12u1	3.0.14-1~deb12u1	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.17	3
quay.io/devtron/devtron-utils :geni-v1.1.4	f6269309455a	openssl@3.1.4-r5	3.1.6-r0	3
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.23	3
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	openssl@1.0.2g-1ubuntu4.20	no fix listed	3
quay.io/devtron/jcmhproxy-ingress :v0.14.6	4286bcccda3e	openssl@3.1.4-r4	3.1.6-r0	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.17	3
quay.io/devtron/kubewatch :49f906a5-419-14814	eec0305b594c	openssl@3.1.2-r0	3.1.6-r0	3
quay.io/jupyterhub/configurable-http-proxy :4.6.1	fd916f75415f	openssl@3.1.4-r1	3.1.6-r0	3
quay.io/metallb/controller :v0.13.10	1b33357b3595	openssl@3.1.0-r4	3.1.6-r0	3
registry.k8s.io/ingress-nginx/controller :v1.8.1	e5c4824e7375	openssl@3.1.1-r1	3.1.6-r0	3
agoldis/sorry-cypress-api :2.5.11	afaa5a84051d	openssl@3.1.2-r0	3.1.6-r0	2
agoldis/sorry-cypress-dashboard :2.5.11	e061e5714238	openssl@3.0.8-r3	3.0.14-r0	2
agoldis/sorry-cypress-director :2.5.11	10228ecd353b	openssl@3.1.2-r0	3.1.6-r0	2
apache/nifi-registry :1.26.0	7cdfd8deec92	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.17	2
apache/superset :dockerize	afe59523a6c8	openssl@3.1.4-r6	3.1.6-r0	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.2	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	2
chatwoot/chatwoot :v3.1.0	d530ab8c1753	openssl@3.1.2-r0	3.1.6-r0	2
clickhouse/clickhouse-server :24.2	ed9640bfff07	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.23	2
clickhouse/clickhouse-server :24.3.3.102-alpine	f226fe41f057	openssl@3.1.4-r5	3.1.6-r0	2
clickhouse/clickhouse-server :26.8.2 :latest	fa394da808cc	openssl@3.0.2-0ubuntu1.29	no fix listed	2
cs3org/wopiserver :v9.4.2	02a9e78757b4	openssl@3.0.8-r0	3.0.14-r0	2
curlimages/curl :8.4.0	4a3396ae573c	openssl@3.1.3-r0	3.1.6-r0	2
curlimages/curl :8.6.0	c3b8bee303c6	openssl@3.1.4-r5	3.1.6-r0	2
daniacobext/airports-frontend :latest	9eae4d39fc33	openssl@3.0.9-r1	3.0.14-r0	2
datagrok/grok_connect :latest	f5876d3aebb8	openssl@3.0.2-0ubuntu1.26	no fix listed	2
dtzar/helm-kubectl :3.14.4	55429449408e	openssl@3.1.4-r6	3.1.6-r0	2
epamedp/krci-portal :0.8.0	687acf641097	openssl@3.1.4-r5	3.1.6-r0	2
eqalpha/keydb :latest	6537505c4235	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.23	2
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.23	2
ethersphere/bee-localchain :latest	0558799ca992	openssl@3.1.4-r5	3.1.6-r0	2
freeradius/freeradius-server :3.0.21	21c8bfa904d8	openssl@1.1.1-1ubuntu2.1~18.04.5	no fix listed	2
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.23	2
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.23	2
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.23	2
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.23	2
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.23	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.23	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	openssl@3.0.9-1	3.0.14-1~deb12u1	2
gradiant/ueransim :3.2.6	015b30d5fa0f	openssl@3.0.2-0ubuntu1.18	no fix listed	2