StackRadar

CVE-2024-5535

Critical

Advisory

Published 27 Jun 2024In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.056
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,715
of 17,787 indexed, latest versions
Container images
1,873
deployed by those charts
Fix available
5 of 6
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 1,715 of 17,787 indexed charts deploy, on 1,873 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+80 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.23+4 more1,037
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+25 more3.0.14-r0, 3.1.6-r0, 3.3.1-r1, 3.3.1-r3652
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm615
opensslrpm1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+15 more1:1.1.1k-14.el8_6, 1:1.1.1k-14.el8_10, 1:3.0.7-29.el9_4183
openssl-1_1rpm1.1.1d-11.6.11.1.1d-150200.11.94.11
OSV records
ALPINE-CVE-2024-5535CGA-6r9r-wppq-f3vfDEBIAN-CVE-2024-5535UBUNTU-CVE-2024-5535RHSA-2024:7846RHSA-2024:7847RHSA-2024:7848RHSA-2025:3666RLSA-2024:7848SUSE-SU-2024:2909-1
Also known as
CGA-r27g-x88q-7j3g, USN-6937-1, USN-8678-2

Charts affected

1,715 by stars
ChartLatestAffected imagesRadar Score
kubernetes-azure-keyvault-secret-operatorbtungutVerified publisher1.7.01 of 1See more

kubernetes-azure-keyvault-secret-operator btungut 1.7.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
btungut/azure-keyvault-secret-operator:1.7.04a072e2edf71
openssl@3.1.2-r0
3.1.6-r0

Open the chart page →

584
category-microservicebusi-adsVerified publisher1.0.01 of 2See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
dellcloud/category:distributed02fc234353a9
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.23

Open the chart page →

11,947
fluobuttahtoastVerified publisher0.1.01 of 1See more

fluo buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/flatcar/flatcar-linux-update-operator:v0.10.0-rc1f9063e20b1f6
openssl@3.1.1-r1
3.1.6-r0

Open the chart page →

1,298
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
openssl@3.0.12-r4
3.0.14-r0

Open the chart page →

2,772
kubevirt-managerbuttahtoastVerified publisher0.1.31 of 1See more

kubevirt-manager buttahtoast 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.3.3df3ea27d4a9e
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

1,497
memcachedbysamioVerified publisher1.0.21 of 1See more

memcached bysamio 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
library/memcached:1.6.24-alpineeff78098089f
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

311
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
calltelemetry/web:0.8.1-rc7205d13269e350
openssl@3.0.14-1~deb12u2
3.0.15-1~deb12u1

Open the chart page →

10,442
stable-hacalltelemetry0.11.43 of 7See more

stable-ha calltelemetry 0.11.4

3 of the 7 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
library/nats:2.10.12-alpinebca70839d953
openssl@3.1.4-r5
3.1.6-r0
natsio/nats-box:0.14.2e808e0644ce1
openssl@3.1.4-r2
3.1.6-r0
natsio/nats-server-config-reloader:0.14.10d50270fa374
openssl@3.1.4-r2
3.1.6-r0

Open the chart page →

4,705
pagescamden-pages1.0.02 of 3See more

pages camden-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.23
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

20,233
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
openssl@3.0.9-1
3.0.15-1~deb12u1

Open the chart page →

7,329
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23

Open the chart page →

88,377
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
openssl@3.0.14-1~deb12u2
3.0.15-1~deb12u1

Open the chart page →

5,051
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
openssl@1.1.1-1ubuntu2.1~18.04.15
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

6,158
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
openssl@3.0.2-0ubuntu1.18
no fix listed

Open the chart page →

5,932
redisoperatorcamptocamp33.0.11 of 1See more

redisoperator camptocamp3 3.0.1

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
quay.io/spotahome/redis-operator:latest8c772955184e
openssl@3.1.2-r0
3.1.6-r0

Open the chart page →

1,193
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1

Open the chart page →

13,363
stigatroncarbide-charts0.4.13 of 10See more

stigatron carbide-charts 0.4.1

3 of the 10 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
library/nats:2.10.5-alpine85319e5e541b
openssl@3.1.4-r1
3.1.6-r0
natsio/nats-box:0.14.1a67913df95f1
openssl@3.1.3-r0
3.1.6-r0
natsio/nats-server-config-reloader:0.13.0b3359eeb10bf
openssl@3.1.1-r1
3.1.6-r0

Open the chart page →

4,423
pagescarina-pages1.0.02 of 3See more

pages carina-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.23
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

20,233
pagescarmel-pages-dell1.0.02 of 3See more

pages carmel-pages-dell 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.23
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

20,233
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.23

Open the chart page →

9,521
castware-componentscastaiVerified publisher0.4.01 of 1See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
openssl@3.0.7-r0
3.0.14-r0

Open the chart page →

3,451
temporalcastaiVerified publisher0.54.22 of 14See more

temporal castai 0.54.2

2 of the 14 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
openssl@3.1.4-r5
3.1.6-r0
temporalio/ui:2.33.05c586a3c8ec5
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

16,197
catalyst-agentscatalyst-agents0.1.303 of 18See more

catalyst-agents catalyst-agents 0.1.30

3 of the 18 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
grafana/loki:3.0.0757b5fadf816
openssl@3.1.4-r1
3.1.6-r0
grafana/loki-canary:3.0.028d7c00588aa
openssl@3.1.4-r1
3.1.6-r0
grafana/tempo:2.5.0f0200a9bff6d
openssl@3.3.0-r2
3.3.1-r1

Open the chart page →

14,865
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
openssl@1:1.1.1g-11.el8
1:1.1.1k-14.el8_6

Open the chart page →

6,389
cert-manager-webhook-namecheapcert-manager-webhook-namecheap0.1.21 of 1See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
openssl@3.1.1-r1
3.1.6-r0

Open the chart page →

1,752
cert-utils-operatorcert-utils-operator1.3.122 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_6
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
openssl@1:1.1.1k-4.el8
1:1.1.1k-14.el8_6

Open the chart page →

7,776
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
litmuschaos/mongo:4.2.899961210d467
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

16,395
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
sigp/lighthouse:v8.1.344aa773dcf27
openssl@3.0.2-0ubuntu1.21
no fix listed

Open the chart page →

7,457
ddb-proxycharts-derwitt-devVerified publisher1.3.01 of 1See more

ddb-proxy charts-derwitt-dev 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/mrprimate/ddb-proxy:0.0.258dc2d7fb460f
openssl@3.1.2-r0
3.1.6-r0

Open the chart page →

812
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
nodejs@8.10.0~dfsg-2ubuntu0.4
openssl@1.1.1-1ubuntu2.1~18.04.23
openssl1.0@1.0.2n-1ubuntu5.13
no fix listed
1.1.1-1ubuntu2.1~18.04.23+esm10
1.0.2n-1ubuntu5.13+esm6

Open the chart page →

12,804
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1

Open the chart page →

4,048
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
openssl@1.0.1f-1ubuntu2.27
1.0.1f-1ubuntu2.27+esm16

Open the chart page →

30,163
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.23

Open the chart page →

12,531
magnifhirchglVerified publisher1.3.721 of 1See more

magnifhir chgl 1.3.72

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/chgl/magnifhir:v1.5.213f121613edd
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.17

Open the chart page →

1,149
supersetchoerodon1.0.01 of 3See more

superset choerodon 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
apache/superset:dockerizeafe59523a6c8
openssl@3.1.4-r6
3.1.6-r0

Open the chart page →

1,439
wipeout-rewritechrisfuVerified publisher0.1.01 of 1See more

wipeout-rewrite chrisfu 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
chrisfu/docker-wipeout-rewrite:sha-0c4f0614f8b4996a203d
openssl@3.1.2-r0
3.1.6-r0

Open the chart page →

349
dnsbl-exporterchristianhuthVerified publisher1.4.01 of 2See more

dnsbl-exporter christianhuth 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

1,459
basechronicleVerified publisher0.0.81 of 1See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
openssl@3.0.2-0ubuntu1.18
no fix listed

Open the chart page →

4,858
rpc-routerchronicleVerified publisher0.2.91 of 1See more

rpc-router chronicle 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.17

Open the chart page →

6,487
zksyncchronicleVerified publisher0.1.01 of 2See more

zksync chronicle 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1

Open the chart page →

5,550
calico-cniclastixVerified publisher3.28.11 of 3See more

calico-cni clastix 3.28.1

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
calico/node:v3.28.1d8c644a8a3ee
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_6

Open the chart page →

3,050
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
openssl@3.1.4-r1
3.1.6-r0

Open the chart page →

2,761
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1

Open the chart page →

12,021
kube-acp-stackcloudentity2.28.02 of 7See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
cockroachdb/cockroach:v22.2.91116820f4134
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_6
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

20,936
cloudflare-ddns-updatecloudflare-ddns-update0.1.21 of 1See more

cloudflare-ddns-update cloudflare-ddns-update 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/dploeger/cloudflare-ddns-update:v0.1.0ec06685b9ff4
openssl@3.3.0-r2
3.3.1-r1

Open the chart page →

1,338
bitcoindcloudnativeapp0.2.11 of 2See more

bitcoind cloudnativeapp 0.2.1

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
arilot/docker-bitcoind:0.17.127a4f7e0f9f1
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

5,057
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
openssl@1.1.0g-2ubuntu4.3
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

29,922
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

36,132
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
openssl@1.0.2g-1ubuntu4.10
no fix listed
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

27,434
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
openssl@1.0.1f-1ubuntu2.8
1.0.1f-1ubuntu2.27+esm16

Open the chart page →

36,866

Container images carrying it

1,873 by charts deploying them

A fixed version is listed for 5 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
istio/pilot:1.15.2db08d6963975
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.17
1
istio/pilot:1.10.3e7e110a421c2
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
1
istio/proxyv2:1.2.90c78be035e98
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm18
1
istio/proxyv2:1.9.687a9db561d2e
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
1
istio/proxyv2:1.10.088c6c693e67a
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
1
istio/proxyv2:1.14.1df69c1a7af7c
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.23
1
jacobalberty/unifi:v7.1.664a3616625dda
openssl@1.1.1-1ubuntu2.1~18.04.17
1.1.1-1ubuntu2.1~18.04.23+esm10
1
jacobalberty/unifi:v7.4.162b3edc809a3ff
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm10
1
jacobalberty/unifi:5.10.19c409924e2463
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm18
1
jakowenko/double-take:1.6.0b858bac9e32a
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
1
jedi132000/nextapp:latestdc2a81e92f23
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.23
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
openssl@3.0.14-1~deb12u2
3.0.15-1~deb12u1
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1
1
jhaals/yopass:11.17.026873480863b
openssl@3.0.14-1~deb12u2
3.0.15-1~deb12u1
1
jhipster/jhipster-registry:latest7184525acd4d
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1
1
jingking/geonetwork-hnap:4.2.843e74ab234e1
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.23
1
jlesage/handbrake:v24.01.20752dcb72bd1
openssl@3.0.12-r1
3.0.14-r0
1
jmferrer/azure-devops-agent:latest030f68ec6998
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm18
1
josepht05/nodejs-feb24:latest36cb0c618c94
openssl@3.0.12-r1
3.0.14-r0
1
josepht05/titajo-docker:v1.0.0d94024965d78
openssl@3.0.10-r0
3.0.14-r0
1
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
openssl@3.0.2-0ubuntu1.15
no fix listed
3.0.2-0ubuntu1.17
1
juicedata/csi-dashboard:v0.23.03e4daf9626d5
openssl@3.1.3-r0
3.1.6-r0
1
jupyterhub/configurable-http-proxy:4.5.67adeeed34a36
openssl@3.1.2-r0
3.1.6-r0
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.23
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
1
jupyterhub/k8s-network-tools:3.0.1-0.dev.git.6287.hbfb05cd691f8f833fc1d
openssl@3.1.2-r0
3.1.6-r0
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
openssl@1.1.1f-1ubuntu2
1.1.1f-1ubuntu2.23
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.17
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.17
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.17
1
kennethreitz/httpbin:latest599fe5e50731
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm10
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
openssl@3.1.4-r1
3.1.6-r0
1
kfirfer/king:latestc05d9fc7ae77
openssl@3.0.10-r0
3.0.14-r0
1
kfirfer/mysql-client:0.0.4d23d173f333f
openssl@3.1.4-r2
3.1.6-r0
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.23
1
kfirfer/slackgpt:0.0.15461331bd838e
openssl@3.1.3-r0
3.1.6-r0
1
kiwigrid/k8s-sidecar:1.26.2e271016441af
openssl@3.1.4-r6
3.1.6-r0
1
knspar/phronetis-operator:0.1.60c4f0543ee58
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1
1
kong/httpbin:latesta6ac46531193
openssl@3.0.2-0ubuntu1.18
no fix listed
1
krontechnology/aapm-agent:1.8.41cc7d5be6529
openssl@3.0.2-0ubuntu1.21
no fix listed
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.23
1
krontechnology/aapm-service:1.1.39dd602db8baa
openssl@3.0.2-0ubuntu1.21
no fix listed
1
kserve/models-web-app:v0.13.073486345a602
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1
1
ktitilayo2/nodejswebapp:latest8bac28058688
openssl@3.0.10-r0
3.0.14-r0
1
kubebb/bff-server:v0.2.0-202312040fbb732379bc
openssl@3.1.1-r1
3.1.6-r0
1
kubebb/component-store:latestfd8ecbd73213
openssl@3.1.1-r1
3.1.6-r0
1
kubebb/mesh-operator:v5.7.0163ebbfc7a82
openssl@3.1.1-r1
3.1.6-r0
1
kubeflow/model-registry:v0.2.95783f6db428f
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_6
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.