CVE-2024-4741

High

Advisory

Published 28 May 2024In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.029; 86th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,518; of 17,787 indexed, latest versions
Container images: 1,595; deployed by those charts
Fix available: 3 of 4; affected packages

Security update for openssl-1_1

Carried by container images the latest versions of 1,518 of 17,787 indexed charts deploy, on 1,595 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+79 more	1.1.1f-1ubuntu2.23, 3.0.2-0ubuntu1.17, 3.0.13-0ubuntu3.2, 3.0.14-1~deb12u1	956
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+24 more	3.0.14-r0, 3.1.6-r0, 3.3.0-r3, 3.3.1-r0	638
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl-1_1rpm	1.1.1d-11.6.1	1.1.1d-150200.11.91.1	1

OSV records: ALPINE-CVE-2024-4741 CGA-53qp-wmg8-pjf3 DEBIAN-CVE-2024-4741 UBUNTU-CVE-2024-4741 SUSE-SU-2024:2035-1
Also known as: CGA-47j4-6g2h-8vfm, CGA-mq9p-h95f-gfhr, CGA-v662-x97w-gx7w, USN-6937-1

Charts affected

1,518 by stars

Chart

Latest

Affected images

Radar Score

workadventureworkadventure

1.1.0

1 of 9 See more

workadventure workadventure 1.1.0

1 of the 9 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
matthiasluedtke/iconserver :v3.16.0	661d607b0fbc	openssl@3.1.3-r0	3.1.6-r0

Open the chart page →

16,083

oauth2xd

1.0.0

1 of 1 See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
lishimeng/hufu :v1.2.1	3d5752dac834	openssl@3.0.8-r0	3.0.14-r0

Open the chart page →

2,007

owlxd

0.5.1

2 of 2 See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
lishimeng/owl-console :v0.11.2	c79a67657baf	openssl@3.0.8-r0	3.0.14-r0
lishimeng/owl-messager :v0.11.2	3d00485e64dc	openssl@3.0.8-r0	3.0.14-r0

Open the chart page →

3,880

passportxd

0.2.16

2 of 2 See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
lishimeng/passport :v0.2.16	3e7d05ded625	openssl@3.0.8-r0	3.0.14-r0
lishimeng/passport-profile :v0.2.16	0970dfe5dc8f	openssl@3.0.8-r0	3.0.14-r0

Open the chart page →

3,974

tabbyxd

1.0.6

2 of 2 See more

tabby xd 1.0.6

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1
lishimeng/tabby :v1.0.4	8145c3dc83c8	openssl@3.0.8-r0	3.0.14-r0

Open the chart page →

7,685

treexd

0.1.10

1 of 1 See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
lishimeng/tree :v0.2.8	9b2f8be6c7d3	openssl@3.0.8-r0	3.0.14-r0

Open the chart page →

1,997

zooxd

0.4.0

1 of 1 See more

1,955

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.2

Open the chart page →

2,136

prometheusalertygqygq2

1.0.0

1 of 1 See more

prometheusalert ygqygq2 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
feiyu563/prometheus-alert :v4.9.1	224cfa68cbd9	openssl@3.1.4-r5	3.1.6-r0

Open the chart page →

1,610

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1

Open the chart page →

2,674

zahori-consulzahori

1.0.1

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	openssl@3.0.9-r1	3.0.14-r0
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	openssl@3.0.9-r1	3.0.14-r0

Open the chart page →

5,033

zahori-postgresqlzahori

1.0.1

1 of 1 See more

zahori-postgresql zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
library/postgres :12.15-alpine	73ea9cdd4a9d	openssl@3.1.2-r0	3.1.6-r0

Open the chart page →

448

zahori-processzahori

1.0.1

1 of 1 See more

zahori-process zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-process :0.1.13	351f8a220ed7	openssl@3.1.1-r1	3.1.6-r0

Open the chart page →

3,480

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	openssl@1.1.1-1ubuntu2.1~18.04.23	no fix listed

Open the chart page →

2,464

zahori-serverzahori

1.0.1

2 of 2 See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	openssl@3.0.7-r2	3.0.14-r0
zahoriaut/zahori-server :0.1.17	b2de13916f3e	openssl@3.0.8-r3	3.0.14-r0

Open the chart page →

5,847

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	f166a963b550	openssl@3.1.4-r5	3.1.6-r0

Open the chart page →

1,588

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	openssl@1.1.1-1ubuntu2.1~18.04.14	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.23

Open the chart page →

9,250

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2024-4741.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,916

Container images carrying it

1,595 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
alexvm6/generator :latest	fb99ee4f760a	openssl@3.1.0-r4	3.1.6-r0	1
alexvm6/pythonalex :latest	89a05786879c	openssl@3.1.0-r4	3.1.6-r0	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	openssl@1.1.1-1ubuntu2.1~18.04.19	no fix listed	1
alpine/curl :8.5.0	513c4f0d7123	openssl@3.1.4-r5	3.1.6-r0	1
alpine/k8s :1.27.3	21b24e6bf801	openssl@3.1.1-r1	3.1.6-r0	1
alpine/k8s :1.30.0	bd01dae02676	openssl@3.1.4-r5	3.1.6-r0	1
alpine/k8s :1.28.2	fc059f056ad0	openssl@3.1.3-r0	3.1.6-r0	1
alpine/socat :1.7.4.4	93efcf633c54	openssl@3.1.4-r1	3.1.6-r0	1
altinity/clickhouse-server :25.3.6.10034.altinitystable	3396b15c51a2	openssl@3.0.2-0ubuntu1.19	no fix listed	1
andrcuns/smocker :0.18.5	b4a8eb20581a	openssl@3.1.3-r0	3.1.6-r0	1
andrewgolikov55/intel-gpu-exporter :latest	fcc001b61c0e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.17	1
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	openssl@3.0.2-0ubuntu1.19	no fix listed	1
anguda/ant-media :2.5	c435285fc241	openssl@1.1.1f-1ubuntu2.17	1.1.1f-1ubuntu2.23	1
ankane/pgvector :v0.5.1	d3a9d8ac27bb	openssl@3.0.11-1~deb12u1	3.0.14-1~deb12u1	1
apache/airflow :2.8.4-python3.9	64e58748b6b9	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
apache/airflow :2.8.1	e5560ad0b86e	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
apache/gravitino-iceberg-rest :1.3.0	80136ae753ee	openssl@3.0.2-0ubuntu1.20	no fix listed	1
apache/iotdb :0.13.3-node	afa47bf1692a	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.23	1
apache/nifi-registry :1.27.0	63b8e3e40742	openssl@3.0.2-0ubuntu1.16	3.0.2-0ubuntu1.17	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.17	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.23	1
apachepulsar/pulsar :3.0.7	9c9947de139d	openssl@3.0.2-0ubuntu1.18	no fix listed	1
apachepulsar/pulsar :2.9.0	d056c89b7131	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.23	1
apachepulsar/pulsar :2.8.2	d538416d5afe	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.23	1
apache/ranger :2.7.0	76c176e8a0e4	openssl@3.0.2-0ubuntu1.19	no fix listed	1
apache/rocketmq :5.3.0	434d8398f996	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.2	1
apache/rocketmq-exporter :0.0.2	c8fb51195444	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.17	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.17	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.23	1
apache/skywalking-ui :9.2.0	295f1dc87d98	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.17	1
apache/skywalking-ui :8.9.1	80530f0308a5	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.23	1
apache/superset :4.0.1	ab9467fd712c	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
apache/tika :2.9.0.0	92d055a84e9e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.17	1
apecloud/kubeblocks-csi-driver :0.1.3	c93655ccb2d7	openssl@3.1.4-r1	3.1.6-r0	1
aquasec/harbor-scanner-trivy :0.31.2	6e790e233872	openssl@3.1.4-r5	3.1.6-r0	1
aquasec/kube-bench :v0.6.17	6672264accce	openssl@3.1.1-r3	3.1.6-r0	1
aquasec/postee :2.12.0-amd64	0795cba777e7	openssl@3.1.1-r1	3.1.6-r0	1
aquasec/postee-ui :2.12.0-amd64	c0467c3941dc	openssl@3.1.1-r1	3.1.6-r0	1
aquasec/trivy :0.43.1	944a04445179	openssl@3.1.1-r1	3.1.6-r0	1
arilot/docker-bitcoind :0.17.1	27a4f7e0f9f1	openssl@1.0.2g-1ubuntu4.14	no fix listed	1
aristidetm/basic-notebook :3.6.5	469dbc951224	openssl@3.0.13-1~deb12u1	3.0.14-1~deb12u1	1
arthurjguerra18/revwallet :v0.7.12	f540af20b307	openssl@3.0.13-1~deb12u1	3.0.14-1~deb12u1	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
assistiot/composite-services-manager_agent-http-mqtt :latest	16d21bc5e42e	openssl@3.1.2-r0	3.1.6-r0	1
assistiot/composite-services-manager_agent-mqtt-http :latest	27d58b8911cd	openssl@3.1.2-r0	3.1.6-r0	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.23	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.23	1
assistiot/identity-manager_db :latest	0d3e6d35f168	openssl@3.0.11-1~deb12u2	3.0.14-1~deb12u1	1
assistiot/location_processing :latest	e9bae124095f	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.17	1
assistiot/monitoring_notifying :2.0.0	68324d0fa5bb	openssl@3.0.8-r3	3.0.14-r0	1