StackRadar

CVE-2024-5535

Critical

Advisory

Published 27 Jun 2024In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.056
92nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,709
of 17,781 indexed, latest versions
Container images
1,866
deployed by those charts
Fix available
5 of 6
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 1,709 of 17,781 indexed charts deploy, on 1,866 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+80 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.23+4 more1,035
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+25 more3.0.14-r0, 3.1.6-r0, 3.3.1-r1, 3.3.1-r3648
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm615
opensslrpm1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+15 more1:1.1.1k-14.el8_6, 1:1.1.1k-14.el8_10, 1:3.0.7-29.el9_4182
openssl-1_1rpm1.1.1d-11.6.11.1.1d-150200.11.94.11
OSV records
ALPINE-CVE-2024-5535CGA-6r9r-wppq-f3vfDEBIAN-CVE-2024-5535UBUNTU-CVE-2024-5535RHSA-2024:7846RHSA-2024:7847RHSA-2024:7848RHSA-2025:3666RLSA-2024:7848SUSE-SU-2024:2909-1
Also known as
CGA-r27g-x88q-7j3g, USN-6937-1, USN-8678-2

Charts affected

1,709 by stars
ChartLatestAffected imagesRadar Score
zillazillaOfficialVerified publisher2.4.21 of 1See more

zilla zilla 2.4.2

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/aklivity/zilla:2.4.289c4a2e74863
openssl@3.0.2-0ubuntu1.25
no fix listed

Open the chart page →

1,698
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.17

Open the chart page →

4,244
metabasedeliveryheroVerified publisher0.14.41 of 1See more

metabase deliveryhero 0.14.4

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
metabase/metabase:v0.45.21fb334ce4820
openssl@3.0.7-r2
3.0.14-r0

Open the chart page →

2,572
devtron-operatordevtron0.23.33 of 11See more

devtron-operator devtron 0.23.3

3 of the 11 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1
quay.io/devtron/migrator:v4.16.2fbeaef7a8566
openssl@3.1.0-r4
3.1.6-r0
quay.io/devtron/postgres:14.91b594392f7cb
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1

Open the chart page →

32,902
envoy-gatewayhelmforgeVerified publisher2.1.01 of 3See more

envoy-gateway helmforge 2.1.0

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
mccutchen/go-httpbin:v2.15.024528cf5229d
openssl@3.0.14-1~deb12u2
3.0.15-1~deb12u1

Open the chart page →

2,379
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
curlimages/curl:8.5.008e466006f08
openssl@3.1.4-r4
3.1.6-r0

Open the chart page →

23,228
temporallemontechVerified publisher0.37.01 of 13See more

temporal lemontech 0.37.0

1 of the 13 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
temporalio/server:1.22.4c0a44c26397b
openssl@3.1.3-r0
3.1.6-r0

Open the chart page →

14,893
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
haproxytech/haproxy-alpine:2.8.08951be4b4e1c
openssl@3.1.1-r1
3.1.6-r0

Open the chart page →

30,326
syftopenmined0.9.52 of 6See more

syft openmined 0.9.5

2 of the 6 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1
library/traefik:v2.11.00a5157f742d2
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

17,245
spring-petclinic-cloudplatform9-communityVerified publisher0.2.05 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
platform9community/api-gateway:latest40a4970de568
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
platform9community/customers-service:latest2089811e5cc6
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
platform9community/vets-service:latestd1165c94dfb3
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
platform9community/visits-service:latest8d11b50368c6
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

41,872
puppetserverpuppetserver9.5.23 of 5See more

puppetserver puppetserver 9.5.2

3 of the 5 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
curlimages/curl:8.7.125d29daeb9b1
openssl@3.1.4-r5
3.1.6-r0
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.17
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.17

Open the chart page →

14,184
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23

Open the chart page →

11,782
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

7,268
plexutkuozdemirVerified publisher2.1.11 of 1See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
linuxserver/plex:1.25.24a13ced2326c
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.23

Open the chart page →

6,348
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.17

Open the chart page →

5,630
zabbix-serveraekondratievVerified publisher1.0.63 of 4See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23

Open the chart page →

30,668
awx-operatorawx-operator-helm3.2.11 of 2See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_6

Open the chart page →

9,868
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.23

Open the chart page →

12,111
codercoderOfficialVerified publisher1.44.62 of 2See more

coder coder 1.44.6

2 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
coderenvs/coder-service:1.44.61deffc4670e6
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_6
coderenvs/timescale:1.44.676fd37fe6830
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_6

Open the chart page →

6,849
kube-routerenixVerified publisher1.10.01 of 1See more

kube-router enix 1.10.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
cloudnativelabs/kube-router:v1.6.00ec7cd73f43f
openssl@3.0.9-r1
3.0.14-r0

Open the chart page →

2,344
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.17

Open the chart page →

4,903
invoiceninjainvoiceninjaVerified publisher0.10.21 of 5See more

invoiceninja invoiceninja 0.10.2

1 of the 5 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
invoiceninja/invoiceninja:5.6.241437916dee01
openssl@3.1.1-r3
3.1.6-r0

Open the chart page →

2,709
tailscale-relaymvisonneau0.2.71 of 1See more

tailscale-relay mvisonneau 0.2.7

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
mvisonneau/tailscale:v1.68.1fc45ad8abf10
openssl@3.3.1-r0
3.3.1-r1

Open the chart page →

1,356
servarrservarr1.0.26 of 10See more

servarr servarr 1.0.2

6 of the 10 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
dinutac/jinja2docker:2.1.89340dde8a8a4
openssl@3.1.4-r2
3.1.6-r0
rapidfort/curl:8.7.18483c9f4490f
openssl@3.1.4-r5
3.1.6-r0
ghcr.io/onedr0p/prowlarr-develop:1.14.0.4286c77d84ebf7a6
openssl@3.1.4-r5
3.1.6-r0
ghcr.io/onedr0p/qbittorrent:4.6.3a4ad890e8c4a
openssl@3.1.4-r2
3.1.6-r0
ghcr.io/onedr0p/radarr:5.3.6.86128d299e59fce7
openssl@3.1.4-r5
3.1.6-r0
ghcr.io/onedr0p/sonarr:4.0.2.118327ffdcc8a937
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

14,238
mssqlserver-2022simcube1.2.31 of 1See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
openssl@3.0.2-0ubuntu1.25
no fix listed

Open the chart page →

2,878
uffizzi-controlleruffizzi-controller2.4.62 of 11See more

uffizzi-controller uffizzi-controller 2.4.6

2 of the 11 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
openssl@3.1.4-r6
3.1.6-r0

Open the chart page →

14,240
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
curlimages/curl:8.5.008e466006f08
openssl@3.1.4-r4
3.1.6-r0

Open the chart page →

7,930
zipkinygqygq2Verified publisher2.1.41 of 4See more

zipkin ygqygq2 2.1.4

1 of the 4 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
openzipkin/zipkin:2.24197a9692f6a9
openssl@3.1.4-r2
3.1.6-r0

Open the chart page →

2,764
baserowbaserow-chartVerified publisher1.0.564 of 6See more

baserow baserow-chart 1.0.56

4 of the 6 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
openssl@3.0.14-1~deb12u2
3.0.15-1~deb12u1
bitnamilegacy/redis:7.2.5-debian-12-r05261cae9e407
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1
caddy/ingress:v0.2.118d1366fc0e9
openssl@3.1.3-r0
3.1.6-r0

Open the chart page →

17,263
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.23
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
openssl@1.1.1f-1ubuntu2
1.1.1f-1ubuntu2.23

Open the chart page →

52,919
headwind-mdmchristianhuthVerified publisher5.10.11 of 2See more

headwind-mdm christianhuth 5.10.1

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
headwindmdm/hmdm:0.1.93550b4840840
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

5,870
daskhubdask2024.1.14 of 9See more

daskhub dask 2024.1.1

4 of the 9 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
library/traefik:2.10.61957e3314f43
openssl@3.1.4-r1
3.1.6-r0
pangeo/base-notebook:2024.01.155fbe688a4f80
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.17
quay.io/jupyterhub/configurable-http-proxy:4.6.1fd916f75415f
openssl@3.1.4-r1
3.1.6-r0
quay.io/jupyterhub/k8s-network-tools:3.2.1e532a2dc4761
openssl@3.1.3-r0
3.1.6-r0

Open the chart page →

14,094
seafiledatamateVerified publisher0.6.04 of 6See more

seafile datamate 0.6.0

4 of the 6 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1
datamate/seafile-professional:11.0.202dd66b722464
openssl@3.0.2-0ubuntu1.19
no fix listed

Open the chart page →

27,267
drone-runner-dockerdroneVerified publisher0.7.01 of 3See more

drone-runner-docker drone 0.7.0

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
library/docker:20-dindaf96c680a7e1
openssl@3.1.0-r4
3.1.6-r0

Open the chart page →

5,674
k8s-image-swapperestahnVerified publisher1.11.01 of 2See more

k8s-image-swapper estahn 1.11.0

1 of the 2 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/estahn/k8s-image-swapper:1.5.102f5be9cde5f9
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

1,981
lndfold0.3.151 of 4See more

lnd fold 0.3.15

1 of the 4 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
thesisrobot/lnd:v0.16.4-beta-c287129953689
openssl@3.1.2-r0
3.1.6-r0

Open the chart page →

8,835
foundry-vttfoundry-vttVerified publisher12.343.01 of 1See more

foundry-vtt foundry-vtt 12.343.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
felddy/foundryvtt:12.343.06c5e3e9ffbb0
openssl@3.1.4-r5
3.1.6-r0

Open the chart page →

723
geonode-k8sgeonode-k8sVerified publisher2.0.02 of 10See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
alpine/curl:8.5.0513c4f0d7123
openssl@3.1.4-r5
3.1.6-r0
geonode/geoserver:2.28.4-latest81b1d431b7e9
openssl@3.0.2-0ubuntu1.23
no fix listed

Open the chart page →

13,953
glpiglpi-conteiner0.1.01 of 3See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1

Open the chart page →

12,170
graphql-gatewaygraphql-gatewayVerified publisher0.1.51 of 1See more

graphql-gateway graphql-gateway 0.1.5

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
hansehe/graphql-gateway:1.0.458e09540afbc
openssl@3.1.3-r0
3.1.6-r0

Open the chart page →

1,660
hertzbeathertzbeatOfficialVerified publisher1.8.11 of 4See more

hertzbeat hertzbeat 1.8.1

1 of the 4 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.95.1f52723a08a44
openssl@3.1.3-r0
3.1.6-r0

Open the chart page →

14,000
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

6,307
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_6

Open the chart page →

4,652
percona-xtradb-clusterkfirfer1.5.101 of 3See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
percona/percona-xtradb-cluster:8.0.32-24.21f978ab8912e
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_6

Open the chart page →

4,957
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
kyleslugg/klusterview:latestba8c36dfdfbd
openssl@3.0.7-r2
3.0.14-r0

Open the chart page →

3,795
kubeflowkubeflow1.6.24 of 45See more

kubeflow kubeflow 1.6.2

4 of the 45 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
istio/proxyv2:1.14.1df69c1a7af7c
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.23
library/python:3.7eedf63967cdb
openssl@3.0.9-1
3.0.15-1~deb12u1
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

96,941
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.23

Open the chart page →

10,530
vclustermainVerified publisher0.17.01 of 10See more

vcluster main 0.17.0

1 of the 10 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
quay.io/kubermatic/machine-controller:v1.57.0476ae867ae56
openssl@3.0.9-r1
3.0.14-r0

Open the chart page →

11,552
musicocielmusicocielVerified publisher0.0.02 of 3See more

musicociel musicociel 0.0.0

2 of the 3 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
davdiv/musicociel:deva85f99be882c
openssl@3.1.4-r2
3.1.6-r0
library/postgres:15.2-alpined9c304353c03
openssl@3.0.8-r3
3.0.14-r0

Open the chart page →

4,406
node-local-dnsnode-local-dns2.4.01 of 1See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry CVE-2024-5535.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
openssl@3.0.11-1~deb12u1
3.0.15-1~deb12u1

Open the chart page →

2,593

Container images carrying it

1,866 by charts deploying them

A fixed version is listed for 5 of the 6 affected packages.

Container imageDigestPackageFixed inUsed by
grafana/grafana:11.0.00dc5a246ab16
openssl@3.1.4-r5
3.1.6-r0
3
jacobalberty/unifi:v10.0.162896c0ab82d33
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5
3
library/docker:20.10-dind:20-dindaf96c680a7e1
openssl@3.1.0-r4
3.1.6-r0
3
library/nginx:1.25.5-alpine:1.25-alpine516475cc129d
openssl@3.1.4-r6
3.1.6-r0
3
library/nginx:1.25:1.25.5a484819eb602
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1
3
library/redis:7.2.4-alpinec8bb255c3559
openssl@3.1.4-r6
3.1.6-r0
3
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
openssl@1:1.1.1g-12.el8_3
1:1.1.1k-14.el8_6
3
natsio/nats-server-config-reloader:0.13.0b3359eeb10bf
openssl@3.1.1-r1
3.1.6-r0
3
nginxinc/nginx-unprivileged:1.24-alpinebe76a26e238d
openssl@3.1.4-r6
3.1.6-r0
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm18
3
oryd/hydra:v2.2.02c93beb5e5f2
openssl@3.1.4-r5
3.1.6-r0
3
pnnlmiscscripts/anaconda9:1683907016.7470503-nginx-19a2fe06a1472
openssl@3.0.8-r3
3.0.14-r0
3
rcdelacruz/my-strapi-app:js-amd6438007f358355
openssl@3.1.4-r1
3.1.6-r0
3
rss3/op-node:d2c5ced00901227473fc196fda838191f0cb4e02d1d2ae6efd05
openssl@3.1.4-r5
3.1.6-r0
3
selenium/hub:3.141.5902f251d48d5f
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.23
3
sigp/lighthouse:latest-amd6450f66cfebb6d
openssl@3.0.2-0ubuntu1.21
no fix listed
3
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.23
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
openssl@3.0.9-1
3.0.15-1~deb12u1
3
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
openssl@3.0.13-1~deb12u1
3.0.15-1~deb12u1
3
quay.io/devtron/ai-agent:0.0.16545dac92173
openssl@3.0.14-1~deb12u2
3.0.15-1~deb12u1
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.17
3
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_6
3
quay.io/devtron/clair:4.3.675fb847ac045
openssl@1:1.1.1k-5.el8_5
1:1.1.1k-14.el8_6
3
quay.io/devtron/devtron-utils:geni-v1.1.4f6269309455a
openssl@3.1.4-r5
3.1.6-r0
3
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.23
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm18
3
quay.io/devtron/jcmhproxy-ingress:v0.14.64286bcccda3e
openssl@3.1.4-r4
3.1.6-r0
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.17
3
quay.io/devtron/kubewatch:49f906a5-419-14814eec0305b594c
openssl@3.1.2-r0
3.1.6-r0
3
quay.io/jupyterhub/configurable-http-proxy:4.6.1fd916f75415f
openssl@3.1.4-r1
3.1.6-r0
3
quay.io/metallb/controller:v0.13.101b33357b3595
openssl@3.1.0-r4
3.1.6-r0
3
quay.io/openshift/origin-oauth-proxy:4.14a7dff785d821
openssl@1:1.1.1k-9.el8_6
1:1.1.1k-14.el8_6
3
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
openssl@1:1.1.1k-4.el8
1:1.1.1k-14.el8_6
3
registry.k8s.io/ingress-nginx/controller:v1.8.1e5c4824e7375
openssl@3.1.1-r1
3.1.6-r0
3
agoldis/sorry-cypress-api:2.5.11afaa5a84051d
openssl@3.1.2-r0
3.1.6-r0
2
agoldis/sorry-cypress-dashboard:2.5.11e061e5714238
openssl@3.0.8-r3
3.0.14-r0
2
agoldis/sorry-cypress-director:2.5.1110228ecd353b
openssl@3.1.2-r0
3.1.6-r0
2
alpine/curl:8.7.1f0c1b7ca12f6
openssl@3.3.1-r0
3.3.1-r1
2
apache/nifi-registry:1.26.07cdfd8deec92
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.17
2
apache/superset:dockerizeafe59523a6c8
openssl@3.1.4-r6
3.1.6-r0
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.2
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
openssl@3.0.14-1~deb12u2
3.0.15-1~deb12u1
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
openssl@3.0.11-1~deb12u2
3.0.15-1~deb12u1
2
chatwoot/chatwoot:v3.1.0d530ab8c1753
openssl@3.1.2-r0
3.1.6-r0
2
clickhouse/clickhouse-server:24.2ed9640bfff07
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.23
2
clickhouse/clickhouse-server:24.3.3.102-alpinef226fe41f057
openssl@3.1.4-r5
3.1.6-r0
2
clickhouse/clickhouse-server:26.8.2:latestfa394da808cc
openssl@3.0.2-0ubuntu1.29
no fix listed
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_6
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_6
2
cs3org/wopiserver:v9.4.202a9e78757b4
openssl@3.0.8-r0
3.0.14-r0
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.