StackRadar

CVE-2024-5535

Critical

Advisory

Published 27 Jun 2024In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.056
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,709
of 17,787 indexed, latest versions
Container images
1,866
deployed by those charts
Fix available
5 of 6
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 1,709 of 17,787 indexed charts deploy, on 1,866 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+80 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.23+4 more1,035
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+25 more3.0.14-r0, 3.1.6-r0, 3.3.1-r1, 3.3.1-r3648
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm615
opensslrpm1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+15 more1:1.1.1k-14.el8_6, 1:1.1.1k-14.el8_10, 1:3.0.7-29.el9_4182
openssl-1_1rpm1.1.1d-11.6.11.1.1d-150200.11.94.11
OSV records
ALPINE-CVE-2024-5535CGA-6r9r-wppq-f3vfDEBIAN-CVE-2024-5535UBUNTU-CVE-2024-5535RHSA-2024:7846RHSA-2024:7847RHSA-2024:7848RHSA-2025:3666RLSA-2024:7848SUSE-SU-2024:2909-1
Also known as
CGA-r27g-x88q-7j3g, USN-6937-1, USN-8678-2

Charts affected

1,709 by stars
ChartLatestAffected imagesRadar Score
category-microservicebusi-adsVerified publisher1.0.01 of 2See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
dellcloud/category:distributed02fc234353a9
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.23

Open the chart page →

11,869
fluobuttahtoastVerified publisher0.1.01 of 1See more

fluo buttahtoast 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/flatcar/flatcar-linux-update-operator:v0.10.0-rc1f9063e20b1f6
openssl@3.1.1-r1
3.1.6-r0

Open the chart page →

1,298
kubermatic-operatorbuttahtoastVerified publisher2.24.51 of 1See more

kubermatic-operator buttahtoast 2.24.5

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
quay.io/kubermatic/kubermatic:v2.24.5ebba936046ab
openssl@3.0.12-r4
3.0.14-r0

Open the chart page →

2,770
kubevirt-managerbuttahtoastVerified publisher0.1.31 of 1See more

kubevirt-manager buttahtoast 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
kubevirtmanager/kubevirt-manager:1.3.3df3ea27d4a9e
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

1,497
memcachedbysamioVerified publisher1.0.21 of 1See more

memcached bysamio 1.0.2

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
library/memcached:1.6.24-alpineeff78098089f
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

311
ct-singlecalltelemetry0.8.41 of 7See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
calltelemetry/web:0.8.1-rc7205d13269e350
openssl@3.0.14-1~deb12u2
3.0.15-1~deb12u1

Open the chart page →

10,629
stable-hacalltelemetry0.11.43 of 7See more

stable-ha calltelemetry 0.11.4

3 of the 7 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
library/nats:2.10.12-alpinebca70839d953
openssl@3.1.4-r5
3.1.6-r0
natsio/nats-box:0.14.2e808e0644ce1
openssl@3.1.4-r2
3.1.6-r0
natsio/nats-server-config-reloader:0.14.10d50270fa374
openssl@3.1.4-r2
3.1.6-r0

Open the chart page →

4,705
pagescamden-pages1.0.02 of 3See more

pages camden-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.23
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

20,190
camellia-redis-proxycamellia-redis-proxy1.4.01 of 2See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
openssl@3.0.9-1
3.0.15-1~deb12u1

Open the chart page →

8,001
geoservercamptocamp20.0.36 of 12See more

geoserver camptocamp2 0.0.3

6 of the 12 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23

Open the chart page →

88,335
nginx-s3-gatewaycamptocamp31.0.01 of 1See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss-202503313db8145349a3
openssl@3.0.14-1~deb12u2
3.0.15-1~deb12u1

Open the chart page →

5,039
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
openssl@1.1.1-1ubuntu2.1~18.04.15
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

6,143
puppetservercamptocamp31.0.11 of 2See more

puppetserver camptocamp3 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
openssl@3.0.2-0ubuntu1.18
no fix listed

Open the chart page →

5,886
redisoperatorcamptocamp33.0.11 of 1See more

redisoperator camptocamp3 3.0.1

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
quay.io/spotahome/redis-operator:latest8c772955184e
openssl@3.1.2-r0
3.1.6-r0

Open the chart page →

1,193
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latesta058034ca006
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1

Open the chart page →

14,130
stigatroncarbide-charts0.4.13 of 10See more

stigatron carbide-charts 0.4.1

3 of the 10 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
library/nats:2.10.5-alpine85319e5e541b
openssl@3.1.4-r1
3.1.6-r0
natsio/nats-box:0.14.1a67913df95f1
openssl@3.1.3-r0
3.1.6-r0
natsio/nats-server-config-reloader:0.13.0b3359eeb10bf
openssl@3.1.1-r1
3.1.6-r0

Open the chart page →

4,423
pagescarina-pages1.0.02 of 3See more

pages carina-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.23
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

20,190
pagescarmel-pages-dell1.0.02 of 3See more

pages carmel-pages-dell 1.0.0

2 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.23
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

20,190
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.23

Open the chart page →

9,473
castware-componentscastaiVerified publisher0.4.01 of 1See more

castware-components castai 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
lachlanevenson/k8s-kubectl:v1.25.4af5cea3f2e40
openssl@3.0.7-r0
3.0.14-r0

Open the chart page →

3,449
temporalcastaiVerified publisher0.54.22 of 14See more

temporal castai 0.54.2

2 of the 14 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
grafana/grafana:11.0.00dc5a246ab16
openssl@3.1.4-r5
3.1.6-r0
temporalio/ui:2.33.05c586a3c8ec5
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

16,198
catalyst-agentscatalyst-agents0.1.303 of 18See more

catalyst-agents catalyst-agents 0.1.30

3 of the 18 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
grafana/loki:3.0.0757b5fadf816
openssl@3.1.4-r1
3.1.6-r0
grafana/loki-canary:3.0.028d7c00588aa
openssl@3.1.4-r1
3.1.6-r0
grafana/tempo:2.5.0f0200a9bff6d
openssl@3.3.0-r2
3.3.1-r1

Open the chart page →

15,027
mongodb-operatorccowleyVerified publisher0.1.11 of 1See more

mongodb-operator ccowley 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
openssl@1:1.1.1g-11.el8
1:1.1.1k-14.el8_6

Open the chart page →

6,389
cert-manager-webhook-namecheapcert-manager-webhook-namecheap0.1.21 of 1See more

cert-manager-webhook-namecheap cert-manager-webhook-namecheap 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/extrality/cert-manager-webhook-namecheap:lateste3552fa0c68a
openssl@3.1.1-r1
3.1.6-r0

Open the chart page →

1,752
cert-utils-operatorcert-utils-operator1.3.122 of 2See more

cert-utils-operator cert-utils-operator 1.3.12

2 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
quay.io/redhat-cop/cert-utils-operator:v1.3.120290e7b2800a
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_6
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
openssl@1:1.1.1k-4.el8
1:1.1.1k-14.el8_6

Open the chart page →

7,776
clechaosnative0.2.71 of 6See more

cle chaosnative 0.2.7

1 of the 6 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
litmuschaos/mongo:4.2.899961210d467
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

16,389
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
sigp/lighthouse:v8.1.344aa773dcf27
openssl@3.0.2-0ubuntu1.21
no fix listed

Open the chart page →

7,405
ddb-proxycharts-derwitt-devVerified publisher1.3.01 of 1See more

ddb-proxy charts-derwitt-dev 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/mrprimate/ddb-proxy:0.0.258dc2d7fb460f
openssl@3.1.2-r0
3.1.6-r0

Open the chart page →

812
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
nodejs@8.10.0~dfsg-2ubuntu0.4
openssl@1.1.1-1ubuntu2.1~18.04.23
openssl1.0@1.0.2n-1ubuntu5.13
no fix listed
1.1.1-1ubuntu2.1~18.04.23+esm10
1.0.2n-1ubuntu5.13+esm6

Open the chart page →

12,779
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1

Open the chart page →

4,042
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
openssl@1.0.1f-1ubuntu2.27
1.0.1f-1ubuntu2.27+esm16

Open the chart page →

30,140
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.23

Open the chart page →

12,483
magnifhirchglVerified publisher1.3.721 of 1See more

magnifhir chgl 1.3.72

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/chgl/magnifhir:v1.5.213f121613edd
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.17

Open the chart page →

1,142
supersetchoerodon1.0.01 of 3See more

superset choerodon 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
apache/superset:dockerizeafe59523a6c8
openssl@3.1.4-r6
3.1.6-r0

Open the chart page →

1,439
wipeout-rewritechrisfuVerified publisher0.1.01 of 1See more

wipeout-rewrite chrisfu 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
chrisfu/docker-wipeout-rewrite:sha-0c4f0614f8b4996a203d
openssl@3.1.2-r0
3.1.6-r0

Open the chart page →

349
dnsbl-exporterchristianhuthVerified publisher1.4.01 of 2See more

dnsbl-exporter christianhuth 1.4.0

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.7.0-rc3252613692e5e
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

1,459
basechronicleVerified publisher0.0.81 of 1See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
openssl@3.0.2-0ubuntu1.18
no fix listed

Open the chart page →

4,810
rpc-routerchronicleVerified publisher0.2.91 of 1See more

rpc-router chronicle 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
drpcorg/dshackle:0.54.08858fae1859d
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.17

Open the chart page →

6,447
zksyncchronicleVerified publisher0.1.01 of 2See more

zksync chronicle 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
matterlabs/external-node:v24.0.06cbfea4c694a
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1

Open the chart page →

5,982
calico-cniclastixVerified publisher3.28.11 of 3See more

calico-cni clastix 3.28.1

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
calico/node:v3.28.1d8c644a8a3ee
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_6

Open the chart page →

3,050
kamaji-consoleclastixVerified publisher0.1.31 of 1See more

kamaji-console clastix 0.1.3

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
openssl@3.1.4-r1
3.1.6-r0

Open the chart page →

2,759
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1

Open the chart page →

11,995
kube-acp-stackcloudentity2.28.02 of 7See more

kube-acp-stack cloudentity 2.28.0

2 of the 7 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
cockroachdb/cockroach:v22.2.91116820f4134
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_6
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

20,900
cloudflare-ddns-updatecloudflare-ddns-update0.1.21 of 1See more

cloudflare-ddns-update cloudflare-ddns-update 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/dploeger/cloudflare-ddns-update:v0.1.0ec06685b9ff4
openssl@3.3.0-r2
3.3.1-r1

Open the chart page →

1,338
bitcoindcloudnativeapp0.2.11 of 2See more

bitcoind cloudnativeapp 0.2.1

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
arilot/docker-bitcoind:0.17.127a4f7e0f9f1
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

5,051
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
openssl@1.1.0g-2ubuntu4.3
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

29,901
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

36,094
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
openssl@1.0.2g-1ubuntu4.10
no fix listed
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

27,417
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
openssl@1.0.1f-1ubuntu2.8
1.0.1f-1ubuntu2.27+esm16

Open the chart page →

36,839
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

33,963

Container images carrying it

1,866 by charts deploying them

A fixed version is listed for 5 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
grafana/grafana:11.0.00dc5a246ab16
openssl@3.1.4-r5
3.1.6-r0
3
jacobalberty/unifi:v10.0.162896c0ab82d33
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5
3
library/docker:20.10-dind:20-dindaf96c680a7e1
openssl@3.1.0-r4
3.1.6-r0
3
library/nginx:1.25.5-alpine:1.25-alpine516475cc129d
openssl@3.1.4-r6
3.1.6-r0
3
library/nginx:1.25:1.25.5a484819eb602
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1
3
library/redis:7.2.4-alpinec8bb255c3559
openssl@3.1.4-r6
3.1.6-r0
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
openssl@1:1.1.1g-12.el8_3
1:1.1.1k-14.el8_6
3
natsio/nats-server-config-reloader:0.13.0b3359eeb10bf
openssl@3.1.1-r1
3.1.6-r0
3
nginxinc/nginx-unprivileged:1.24-alpinebe76a26e238d
openssl@3.1.4-r6
3.1.6-r0
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm18
3
oryd/hydra:v2.2.02c93beb5e5f2
openssl@3.1.4-r5
3.1.6-r0
3
pnnlmiscscripts/anaconda9:1683907016.7470503-nginx-19a2fe06a1472
openssl@3.0.8-r3
3.0.14-r0
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
openssl@3.1.4-r1
3.1.6-r0
3
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
openssl@3.1.4-r5
3.1.6-r0
3
selenium/hub:3.141.5902f251d48d5f
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
3
sigp/lighthouse:latest-amd6450f66cfebb6d
openssl@3.0.2-0ubuntu1.21
no fix listed
3
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.23
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
openssl@3.0.9-1
3.0.15-1~deb12u1
3
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1
3
quay.io/devtron/ai-agent:0.0.16545dac92173
openssl@3.0.14-1~deb12u2
3.0.15-1~deb12u1
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.17
3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_6
3
quay.io/devtron/clair:4.3.675fb847ac045
openssl@1:1.1.1k-5.el8_5
1:1.1.1k-14.el8_6
3
quay.io/devtron/devtron-utils:geni-v1.1.4f6269309455a
openssl@3.1.4-r5
3.1.6-r0
3
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.23
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm18
3
quay.io/devtron/jcmhproxy-ingress:v0.14.64286bcccda3e
openssl@3.1.4-r4
3.1.6-r0
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.17
3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
openssl@3.1.2-r0
3.1.6-r0
3
quay.io/jupyterhub/configurable-http-proxy:4.6.1fd916f75415f
openssl@3.1.4-r1
3.1.6-r0
3
quay.io/metallb/controller:v0.13.101b33357b3595
openssl@3.1.0-r4
3.1.6-r0
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
openssl@1:1.1.1k-9.el8_6
1:1.1.1k-14.el8_6
3
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
openssl@1:1.1.1k-4.el8
1:1.1.1k-14.el8_6
3
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
openssl@3.1.1-r1
3.1.6-r0
3
agoldis/sorry-cypress-api:2.5.11afaa5a84051d
openssl@3.1.2-r0
3.1.6-r0
2
agoldis/sorry-cypress-dashboard:2.5.11e061e5714238
openssl@3.0.8-r3
3.0.14-r0
2
agoldis/sorry-cypress-director:2.5.1110228ecd353b
openssl@3.1.2-r0
3.1.6-r0
2
alpine/curl:8.7.1f0c1b7ca12f6
openssl@3.3.1-r0
3.3.1-r1
2
apache/nifi-registry:1.26.07cdfd8deec92
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.17
2
apache/superset:dockerizeafe59523a6c8
openssl@3.1.4-r6
3.1.6-r0
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.2
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
openssl@3.0.14-1~deb12u2
3.0.15-1~deb12u1
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
openssl@3.1.2-r0
3.1.6-r0
2
clickhouse/clickhouse-server:24.2ed9640bfff07
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.23
2
clickhouse/clickhouse-server:24.3.3.102-alpinef226fe41f057
openssl@3.1.4-r5
3.1.6-r0
2
clickhouse/clickhouse-server:26.8.2:latestfa394da808cc
openssl@3.0.2-0ubuntu1.29
no fix listed
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_6
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_6
2
cs3org/wopiserver:v9.4.202a9e78757b4
openssl@3.0.8-r0
3.0.14-r0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.