StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,737
of 17,790 indexed, latest versions
Container images
3,261
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,737 of 17,790 indexed charts deploy, on 3,261 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more1,966
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0970
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm215
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+29 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7322
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,737 by stars
ChartLatestAffected imagesRadar Score
rocketmqgengxiankun-charts0.3.01 of 1See more

rocketmq gengxiankun-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
apache/rocketmq:5.3.0434d8398f996
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.6

Open the chart page →

4,969
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.84 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

4 of the 5 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm6
jingking/geonetwork-hnap:4.2.843e74ab234e1
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm1
library/elasticsearch:7.17.1588c2ec10c7f2
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm1
library/kibana:7.17.150172f1c538e7
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

34,893
istiogetindataVerified publisher1.11.12 of 2See more

istio getindata 1.11.1

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:1.11.1c552478f8f11
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

16,854
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
litestream/litestream:0.3c5a1e1b01916
openssl@3.0.8-r0
3.0.19-r0

Open the chart page →

9,071
gitanagitana1.4.01 of 1See more

gitana gitana 1.4.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ntakashi/gitana:1.4.04171ec641120
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

3,478
github-rate-limits-prometheus-exportergithub-rate-limit-prometheus-exporterVerified publisher0.2.151 of 1See more

github-rate-limits-prometheus-exporter github-rate-limit-prometheus-exporter 0.2.15

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/kalgurn/grl-exporter:v3.2.0bd109b2bda38
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

896
knativegitlabVerified publisher0.10.03 of 10See more

knative gitlab 0.10.0

3 of the 10 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
istio/node-agent-k8s:1.2.9268ab879ea51
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm13
istio/pilot:1.2.9c09319753454
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm13
istio/proxyv2:1.2.90c78be035e98
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

36,132
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.17.326c826662ac8
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

12,115
pgbouncerglassflowVerified publisher0.1.01 of 1See more

pgbouncer glassflow 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/pgbouncer:1.23.192356da09704
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

3,279
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/nnstd/glauth:2.52e6e09fa77dd
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

2,634
api-mapperglenndehaanVerified publisher1.2.01 of 1See more

api-mapper glenndehaan 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
glenndehaan/api-mapper:latest6ff6310683bf
openssl@3.1.4-r5
3.1.8-r1

Open the chart page →

1,158
contentbridgeglenndehaanVerified publisher1.1.01 of 1See more

contentbridge glenndehaan 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
glenndehaan/contentbridge:latest99b9e4f73848
openssl@3.0.15-r0
3.0.19-r0

Open the chart page →

1,001
kube-hookglenndehaanVerified publisher1.0.31 of 1See more

kube-hook glenndehaan 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
glenndehaan/kube-hook:latest0a7116f48bfe
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

923
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
vdiogov/glpi-conteiner:latest6945f84f0058
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

12,359
gnp-stackgnp-stack0.0.52 of 14See more

gnp-stack gnp-stack 0.0.5

2 of the 14 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.329289da488b07
openssl@3.5.1-r0
3.5.4-r0
quay.io/kiwigrid/k8s-sidecar:1.30.10835d79d8fbae
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

7,683
go-app-helmgo-app-helm0.1.01 of 1See more

go-app-helm go-app-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
manojchaulagain/go-k8s:0.1.0f237b5f637ae
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4

Open the chart page →

1,594
go-file-servergo-file-server1.0.01 of 2See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
goccx/go-file-server-ui:latest784b35910d52
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

2,222
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

2,806
ingress-nginxgpg-dev4.9.01 of 2See more

ingress-nginx gpg-dev 4.9.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
openssl@3.1.4-r2
3.1.8-r1

Open the chart page →

2,316
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.20
library/cassandra:3.11.65aa8400b4b3b
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

19,311
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20

Open the chart page →

6,078
opentelemetry-demogpg-dev0.33.816 of 27See more

opentelemetry-demo gpg-dev 0.33.8

16 of the 27 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
openssl@3.3.2-r0
3.3.5-r0
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
openssl@3.3.2-r0
3.3.5-r0
ghcr.io/open-telemetry/demo:1.12.0-kafka071a788162e8
openssl@3.1.4-r5
3.1.8-r1
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
openssl@3.3.2-r0
3.3.5-r0
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
ghcr.io/open-telemetry/demo:1.12.0-cartservice89730afa0b5d
openssl@3.3.2-r0
3.3.5-r0
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
openssl@3.3.2-r0
3.3.5-r0
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.20
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.6
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
openssl@3.3.0-r2
3.3.5-r0
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

49,362
velerogpg-dev12.0.01 of 1See more

velero gpg-dev 12.0.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
velero/velero:v1.18.0e4d1e79be2ee
openssl@3.0.2-0ubuntu1.21
no fix listed

Open the chart page →

1,562
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

15,797
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

4,681
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
openssl@1:1.1.1g-12.el8_3
1:1.1.1k-14.el8_10
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
openssl@1:1.1.1g-12.el8_3
1:1.1.1k-14.el8_10

Open the chart page →

17,780
pyroscope-monitoringgrafana0.1.13 of 6See more

pyroscope-monitoring grafana 0.1.1

3 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
grafana/otel-lgtm:0.11.1009d8c3ce4f3a
openssl@1:3.2.2-6.el9_5.1
1:3.2.2-7.el9_6.1
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
openssl@1:3.2.2-6.el9_5.1
1:3.2.2-7.el9_6.1
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

8,269
supertokensgraphql-hive1.0.01 of 1See more

supertokens graphql-hive 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
supertokens/supertokens-postgresql:3.1418d34c781347
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u4

Open the chart page →

2,712
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.6

Open the chart page →

7,956
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
openssl@3.0.2-0ubuntu1.20
no fix listed

Open the chart page →

4,632
grayloggraylogVerified publisher1.0.21 of 4See more

graylog graylog 1.0.2

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20

Open the chart page →

5,347
armada-executorgresearch0.22.81 of 1See more

armada-executor gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
gresearch/armada-executor:latest393aff4aa8f2
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

714
armada-lookout-ingestergresearch0.22.81 of 1See more

armada-lookout-ingester gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
gresearch/armada-lookout-ingester:latest3df14cda1855
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

714
armada-lookout-migrationgresearch0.22.81 of 1See more

armada-lookout-migration gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
gresearch/armada-lookout:latestf5e3226f1d33
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

714
armada-scheduler-migrationgresearch0.22.81 of 1See more

armada-scheduler-migration gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
gresearch/armada-scheduler:latest6141a6213fcb
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

714
fasttrackmlgresearch0.1.01 of 1See more

fasttrackml gresearch 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
gresearch/fasttrackml:latest16d1228220fc
openssl@3.1.4-r5
3.1.8-r1

Open the chart page →

1,398
siembolgresearch0.1.62 of 4See more

siembol gresearch 0.1.6

2 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
gresearchdev/siembol-config-editor-rest:latest91863a50afb7
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
gresearchdev/siembol-storm-topology-manager:latest8dad36a05ebf
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

14,327
act-runnergringolitoVerified publisher0.2.01 of 1See more

act-runner gringolito 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
gitea/act_runner:0.2.11-dind-rootless6120b1165f3a
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

2,598
routergroundcover1.12.3621 of 7See more

router groundcover 1.12.362

1 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20

Open the chart page →

6,070
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
openssl@3.3.1-r3
3.3.5-r0
clsen2024/gwangju_2-3:service-a-151b1d45961cd
openssl@3.3.1-r3
3.3.5-r0
clsen2024/gwangju_2-3:service-c-1efb1586c8299
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

6,506
littlelink-serverh2mVerified publisher1.0.11 of 1See more

littlelink-server h2m 1.0.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/techno-tim/littlelink-server:lateste84ea9d93b60
openssl@3.1.4-r5
3.1.8-r1

Open the chart page →

819
librechathajowielandVerified publisher1.1.01 of 1See more

librechat hajowieland 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

2,949
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

2,301
minifluxhajowielandVerified publisher1.0.01 of 1See more

miniflux hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/miniflux/miniflux:2.2.83a11ac10969e
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,113
mautrix-signalhalkeye0.3.01 of 2See more

mautrix-signal halkeye 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
signald/signald:0.23.2edbff058278c
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

1,500
schildichat-webhalkeye1.2.01 of 1See more

schildichat-web halkeye 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/schildichat/schildichat-web:latesta87f57287805
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

641
tautullihalkeye1.1.41 of 2See more

tautulli halkeye 1.1.4

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
tautulli/tautulli:v2.7.7c4da15f058ea
openssl@1.1.1k-1
1.1.1w-0+deb11u4

Open the chart page →

1,473
ubooquityhalkeye0.1.11 of 1See more

ubooquity halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
linuxserver/ubooquity:2.1.2-ls369932d6759112
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

4,304
handbrakehandbrake0.3.01 of 1See more

handbrake handbrake 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
jlesage/handbrake:v24.01.20752dcb72bd1
openssl@3.0.12-r1
3.0.19-r0

Open the chart page →

674
hatchet-hahatchetOfficialVerified publisher0.19.02 of 8See more

hatchet-ha hatchet 0.19.0

2 of the 8 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
openssl@3.0.17-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

7,407

Container images carrying it

3,261 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
allegroai/clearml-serving-inference:1.3.0fca885e8cfc6
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
allegroai/clearml-serving-statistics:1.3.0c58d9da7bdf8
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
alpine/curl:8.5.0513c4f0d7123
openssl@3.1.4-r5
3.1.8-r1
1
alpine/curl:8.12.08943e8c7e8e4
openssl@3.3.2-r4
3.3.5-r0
1
alpine/helm105741fa6621
openssl@3.3.1-r3
3.3.5-r0
1
alpine/k8s:1.31.106dbe6f391eda
openssl@3.5.0-r0
3.5.4-r0
1
alpine/k8s:1.31.137a319b15cfc9
openssl@3.5.1-r0
3.5.4-r0
1
alpine/k8s:1.32.47e1e7d5b7a96
openssl@3.3.3-r0
3.3.5-r0
1
alpine/k8s:1.31.49c4976d47656
openssl@3.3.2-r4
3.3.5-r0
1
alpine/k8s:1.30.0bd01dae02676
openssl@3.1.4-r5
3.1.8-r1
1
alpine/k8s:1.30.2cd560fce90f7
openssl@3.3.1-r0
3.3.5-r0
1
alpine/k8s:1.28.13e5c0b053fed7
openssl@3.3.1-r3
3.3.5-r0
1
alpine/k8s:1.32.3eec354133193
openssl@3.3.3-r0
3.3.5-r0
1
alpine/kubectl:1.33.32c59a3f0726c
openssl@3.5.1-r0
3.5.4-r0
1
altinity/clickhouse-operator:0.19.07a85f522c5bc
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
1
altinity/clickhouse-operator:0.20.08f0f582d41f0
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
1
altinity/clickhouse-operator:0.16.1db7dde971407
openssl@1:1.0.2k-22.el7_9
1:1.0.2k-26.el7_9.1
1
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20
1
altinity/metrics-exporter:0.20.01a46d104406d
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
1
altinity/metrics-exporter:0.16.185b4fdbae053
openssl@1:1.0.2k-22.el7_9
1:1.0.2k-26.el7_9.1
1
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
openssl@3.3.3-r0
3.3.5-r0
1
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
openssl@3.3.3-r0
3.3.5-r0
1
anchore/anchore-engine:v0.10.0bde9eedf639d
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
openssl@1:1.1.1c-2.el8_1.1
1:1.1.1k-14.el8_10
1
andreacioni/kube-workload-restarter:0.0.242938b310090a
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.6
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.20
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20
1
andreymileshin/kube-info:v0.1.0f7b300bc9e66
openssl@3.1.7-r0
3.1.8-r1
1
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
openssl@3.1.7-r0
3.1.8-r1
1
andrianrf/backoffice:latest047a7837651e
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_10
1
andrianrf/backoffice-be:latest6036614803d4
openssl@1:3.0.7-6.el9_2
1:3.5.1-4.el9_7
1
andrianrf/bpjstk-service:latest46abe878d9d8
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
andrianrf/bpjstk-simulator:latestb63fdb51d39d
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
andrianrf/iso-client:latestba560086ce15
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
andrianrf/iso-server:latest7da47f525c7d
openssl@1:3.0.7-6.el9_2
1:3.5.1-4.el9_7
1
anguda/ant-media:2.5c435285fc241
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm1
1
ankane/pgvector:v0.5.1d3a9d8ac27bb
openssl@3.0.11-1~deb12u1
3.0.17-1~deb12u3
1
anujdatar/cups:25.07.01685df04a643b
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
apache/activemq-artemis:2.37.0bae523439ee3
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.6
1
apache/airflow:2.8.4-python3.964e58748b6b9
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
apache/airflow:airflow-pgbouncer-2025.03.05-1.23.18fbd1a66c5f2
openssl@3.1.8-r0
3.1.8-r1
1
apache/airflow:airflow-pgbouncer-exporter-2025.03.05-0.18.0adf7260c2c5f
openssl@3.1.8-r0
3.1.8-r1
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
apache/airflow:2.8.1e5560ad0b86e
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
apache/camel-k:1.10.43bb13d14f64a
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
apache/drill:1.21.11f96558fd292
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
openssl@3.0.2-0ubuntu1.20
no fix listed
1
apache/iotdb:0.13.3-nodeafa47bf1692a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm1
1
apache/kafka:4.1.0bff074a5d005
openssl@3.5.2-r0
3.5.4-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.