StackRadar

CVE-2024-4741

High

Advisory

Published 28 May 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.029
86th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,519
of 17,790 indexed, latest versions
Container images
1,598
deployed by those charts
Fix available
3 of 4
affected packages

Security update for openssl-1_1

Carried by container images the latest versions of 1,519 of 17,790 indexed charts deploy, on 1,598 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+79 more1.1.1f-1ubuntu2.23, 3.0.2-0ubuntu1.17, 3.0.13-0ubuntu3.2, 3.0.14-1~deb12u1958
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+24 more3.0.14-r0, 3.1.6-r0, 3.3.0-r3, 3.3.1-r0639
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl-1_1rpm1.1.1d-11.6.11.1.1d-150200.11.91.11
OSV records
ALPINE-CVE-2024-4741CGA-53qp-wmg8-pjf3DEBIAN-CVE-2024-4741UBUNTU-CVE-2024-4741SUSE-SU-2024:2035-1
Also known as
CGA-47j4-6g2h-8vfm, CGA-mq9p-h95f-gfhr, CGA-v662-x97w-gx7w, USN-6937-1

Charts affected

1,519 by stars
ChartLatestAffected imagesRadar Score
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
openssl@3.0.2-0ubuntu1.16
no fix listed
3.0.2-0ubuntu1.17

Open the chart page →

14,173
workadventureworkadventure1.1.01 of 9See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
matthiasluedtke/iconserver:v3.16.0661d607b0fbc
openssl@3.1.3-r0
3.1.6-r0

Open the chart page →

16,084
oauth2xdVerified publisher1.0.01 of 1See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
lishimeng/hufu:v1.2.13d5752dac834
openssl@3.0.8-r0
3.0.14-r0

Open the chart page →

2,008
owlxdVerified publisher0.5.12 of 2See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
lishimeng/owl-console:v0.11.2c79a67657baf
openssl@3.0.8-r0
3.0.14-r0
lishimeng/owl-messager:v0.11.23d00485e64dc
openssl@3.0.8-r0
3.0.14-r0

Open the chart page →

3,882
passportxdVerified publisher0.2.162 of 2See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
lishimeng/passport:v0.2.163e7d05ded625
openssl@3.0.8-r0
3.0.14-r0
lishimeng/passport-profile:v0.2.160970dfe5dc8f
openssl@3.0.8-r0
3.0.14-r0

Open the chart page →

3,976
tabbyxdVerified publisher1.0.62 of 2See more

tabby xd 1.0.6

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
openssl@3.0.11-1~deb12u2
3.0.14-1~deb12u1
lishimeng/tabby:v1.0.48145c3dc83c8
openssl@3.0.8-r0
3.0.14-r0

Open the chart page →

7,697
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
openssl@3.0.8-r0
3.0.14-r0

Open the chart page →

1,998
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
openssl@3.0.8-r0
3.0.14-r0

Open the chart page →

1,955
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.2

Open the chart page →

2,142
prometheusalertygqygq2Verified publisher1.0.01 of 1See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
feiyu563/prometheus-alert:v4.9.1224cfa68cbd9
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

1,610
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
3.0.14-1~deb12u1

Open the chart page →

2,684
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
openssl@3.0.9-r1
3.0.14-r0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
openssl@3.0.9-r1
3.0.14-r0

Open the chart page →

5,047
zahori-postgresqlzahoriVerified publisher1.0.11 of 1See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
library/postgres:12.15-alpine73ea9cdd4a9d
openssl@3.1.2-r0
3.1.6-r0

Open the chart page →

448
zahori-processzahoriVerified publisher1.0.11 of 1See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
zahoriaut/zahori-process:0.1.13351f8a220ed7
openssl@3.1.1-r1
3.1.6-r0

Open the chart page →

3,487
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
openssl@1.1.1-1ubuntu2.1~18.04.23
no fix listed

Open the chart page →

2,467
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.14-r0
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.14-r0

Open the chart page →

5,852
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latestf166a963b550
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

1,588
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.23

Open the chart page →

9,256
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-4741.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,929

Container images carrying it

1,598 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
resouer/redis-slave:v2e2f198b49ba7
openssl@1.0.1f-1ubuntu2.8
no fix listed
1
restic/restic:0.15.2579e4e6a4931
openssl@3.0.8-r3
3.0.14-r0
1
resurfaceio/resurface:3.7.84d5cda2f64109
openssl@3.0.2-0ubuntu1.19
no fix listed
1
rezachalak/bzen-mongo:1.0.034f694325191
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.23
1
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
1
rnwood/smtp4dev:3.6.1912304153668
openssl@3.0.11-1~deb12u2
3.0.14-1~deb12u1
1
robotshop/rs-mongodb:latest119b545823cd
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
1
rraahul/test:latestbfe2c1183bc0
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.17
1
rss3/op-batcher:d2c5ced00901227473fc196fda838191f0cb4e02e8adc09d9c07
openssl@3.1.4-r5
3.1.6-r0
1
rss3/op-node:a77d1f52fc3492bf21915bdff8ee8e0b5bd2cb8a45b91380bbe7
openssl@3.1.4-r5
3.1.6-r0
1
rss3/op-proposer:d2c5ced00901227473fc196fda838191f0cb4e0296672897ba9e
openssl@3.1.4-r5
3.1.6-r0
1
rss3/proxyd:6edce9ddfeee0b00a2d98f24c3ce67885653651b865a0a6bdf4c
openssl@3.1.4-r5
3.1.6-r0
1
rss3/proxyd:d2c5ced00901227473fc196fda838191f0cb4e028d9a44c650fa
openssl@3.1.4-r5
3.1.6-r0
1
rundeck/rundeck:3.2.74d64fe56f767
openssl@1.0.2g-1ubuntu4.15
no fix listed
1
rundeck/rundeck:3.0.16b13e8059ad72
openssl@1.0.2g-1ubuntu4.14
no fix listed
1
ryuunosukeds3/nadeko-bot-docker:latestc0398f13e8a9
openssl@3.0.2-0ubuntu1.19
no fix listed
1
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3ce9ce8293e4e
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.17
1
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9bb64bf14467d
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.17
1
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525799c35f9f306
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.17
1
santisbon/evwatcher:latestc4e994ca4540
openssl@3.0.9-1
3.0.14-1~deb12u1
1
santisbon/evworker:lateste807283f8d69
openssl@3.0.9-1
3.0.14-1~deb12u1
1
santisbon/speedtest:latest8ee3a1697227
openssl@3.0.9-1
3.0.14-1~deb12u1
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
openssl@3.0.11-1~deb12u2
3.0.14-1~deb12u1
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
openssl@3.0.2-0ubuntu1.18
no fix listed
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
openssl@3.0.2-0ubuntu1.18
no fix listed
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
openssl@3.0.2-0ubuntu1.18
no fix listed
1
scrapinghub/splash:3.4.1a5f89bc84606
openssl@1.1.1-1ubuntu2.1~18.04.5
no fix listed
1
scsibug/nostr-rs-relay:0.9.003f54bfbffff
openssl@3.0.11-1~deb12u2
3.0.14-1~deb12u1
1
seafileltd/seafile-mc:9.0.106693911bcc40
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.23
1
seafileltd/seafile-mc:10.0.170628f29c663
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.23
1
seafileltd/seafile-mc:9.0.97ac833196f60
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.23
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
openssl@3.0.2-0ubuntu1.17
no fix listed
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.23
1
sealio/hermitcrab:v0.1.4a326a2f03660
openssl@3.1.4-r5
3.1.6-r0
1
sealio/terraform-deployer:v1.5.7-seal.1b0389d9848a5
openssl@3.1.4-r1
3.1.6-r0
1
seldonio/locust-core:0.81d0da98a2d76
openssl@1.0.2g-1ubuntu4.15
no fix listed
1
semaphoreui/semaphore:v2.9.645b50bc11833f
openssl@3.1.4-r5
3.1.6-r0
1
semitechnologies/weaviate:1.19.17a00d226f063
openssl@3.1.0-r4
3.1.6-r0
1
shadowrhyder/gke-volume-autoscaler:3.0.24aae9270356a
openssl@3.1.3-r0
3.1.6-r0
1
shamimkuet/nginx:1.0.2b82902a76a04
openssl@3.0.13-1~deb12u1
3.0.14-1~deb12u1
1
shaowenchen/ops-controller-manager:latest26da43bb5b66
openssl@3.0.2-0ubuntu1.25
no fix listed
1
shaowenchen/ops-server:latest315444f703f4
openssl@3.0.2-0ubuntu1.19
no fix listed
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
openssl@1.1.1-1ubuntu2.1~18.04.9
no fix listed
1
sigp/lighthouse:v7.0.12cae720e9a35
openssl@3.0.2-0ubuntu1.19
no fix listed
1
sigp/lighthouse:v7.1.0870934e38931
openssl@3.0.2-0ubuntu1.19
no fix listed
1
sigp/lighthouse:v2.1.2ad501f02cfef
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.23
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
openssl@3.0.13-1~deb12u1
3.0.14-1~deb12u1
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
openssl@3.0.13-1~deb12u1
3.0.14-1~deb12u1
1
sirrend/helmup-notifications-service:0.1.3997866417011
openssl@3.0.13-1~deb12u1
3.0.14-1~deb12u1
1
sismics/docs:v1.10f4b0ef019cf1
openssl@1.1.0g-2ubuntu4.1
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.