CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,731; of 17,792 indexed, latest versions
Container images: 3,248; deployed by those charts
Fix available: 6 of 7; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,731 of 17,792 indexed charts deploy, on 3,248 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more	1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more	1,957
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more	3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0	966
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm2	15
opensslrpm	1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+29 more	1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7	322
openssl-3rpm	3.2.3-150700.5.18.1	3.2.3-150700.5.21.1	3
openssl-1_1rpm	1.1.1w-150700.11.3.1	1.1.1w-150700.11.6.1	1

OSV records: ALPINE-CVE-2025-9230 CGA-c4v2-6rpm-vq95 DEBIAN-CVE-2025-9230 UBUNTU-CVE-2025-9230 RHSA-2025:21174 RHSA-2025:21255 RHSA-2026:0337 RHSA-2026:1720 RLSA-2025:21255 RLSA-2026:0337 DLA-4321-1 SUSE-SU-2025:03546-1 SUSE-SU-2025:03635-1
Also known as: CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,731 by stars

Chart

Latest

Affected images

Radar Score

kubeclaritykubeclarity

2.23.3

3 of 5 See more

kubeclarity kubeclarity 2.23.3

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	openssl@3.0.10-r0	3.0.19-r0
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	openssl@3.1.5-r0	3.1.8-r1
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	openssl@3.1.5-r0	3.1.8-r1

Open the chart page →

5,520

helm-controllerkubedex

0.4.0

1 of 1 See more

helm-controller kubedex 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubedex/helm-controller :v1.0.1	4f1008c51ef9	openssl@1:1.0.2k-16.el7_6.1	1:1.0.2k-26.el7_9.1

Open the chart page →

2,421

listener-operatorkubedoop

0.4.0

1 of 6 See more

listener-operator kubedoop 0.4.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	openssl@1:3.2.2-6.el9_5.1	1:3.2.2-7.el9_6.1

Open the chart page →

4,472

secret-operatorkubedoop

0.4.0

1 of 5 See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	openssl@1:3.2.2-6.el9_5.1	1:3.2.2-7.el9_6.1

Open the chart page →

4,414

juicefs-csi-driverkubegems

0.19.2

1 of 6 See more

juicefs-csi-driver kubegems 0.19.2

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4

Open the chart page →

4,838

juicefs-tenantkubegems

1.0.1

1 of 3 See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubegems/redis :7.2.5-debian-12-r2	870ee3a77add	openssl@3.0.13-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

4,306

kubegems-multus-cnikubegems

2.4.1

1 of 2 See more

kubegems-multus-cni kubegems 2.4.1

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.2.1	6bebbda31416	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

1,391

kubegems-paikubegems

1.0.18

1 of 1 See more

kubegems-pai kubegems 1.0.18

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubegems/mysql :8.0.33-debian-11-r0	19cb195b9a50	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4

Open the chart page →

1,052

volcanokubegems

1.12.1

3 of 3 See more

volcano kubegems 1.12.1

3 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
volcanosh/vc-controller-manager :v1.12.1	3815883c32f6	openssl@3.5.0-r0	3.5.4-r0
volcanosh/vc-scheduler :v1.12.1	b24ea8af2d16	openssl@3.5.0-r0	3.5.4-r0
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	openssl@3.5.0-r0	3.5.4-r0

Open the chart page →

5,036

gptchat-api-feishubotkubegemsapp

0.1.1

3 of 3 See more

gptchat-api-feishubot kubegemsapp 0.1.1

3 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubegems/chatgpt-api :latest	f3c492a938ad	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	openssl@3.0.7-r0	3.0.19-r0
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	openssl@3.0.7-r0	3.0.19-r0

Open the chart page →

8,487

kube-infokube-info

0.1.0

1 of 1 See more

kube-info kube-info 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
andreymileshin/kube-info :v0.1.0	f7b300bc9e66	openssl@3.1.7-r0	3.1.8-r1

Open the chart page →

518

kube-janitorkube-janitor

0.3.3

1 of 1 See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
hjacobs/kube-janitor :23.7.0	fbb303ed463c	openssl@3.0.9-1	3.0.17-1~deb12u3

Open the chart page →

4,310

kubemacpoolkubemacpool

0.3.0

1 of 1 See more

kubemacpool kubemacpool 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubemacpool :v0.45.0	eebb65b8a12c	openssl@1:3.2.2-6.el9_5	1:3.5.1-4.el9_7

Open the chart page →

1,624

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,208

kube-ovnkube-ovn-test

1.14.0

1 of 1 See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeovn/kube-ovn :v1.14.0	6722b54eb5c0	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.6

Open the chart page →

5,003

kubernetes-netskope-publisherkubernetes-netskope-publisher

1.5.0

1 of 2 See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
netskopeprivateaccess/publisher_u22 :latest	93e2fd164a93	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

3,586

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10

Open the chart page →

3,630

kube-httpcachekubernetes-replicator

0.9.1

1 of 1 See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kube-httpcache :stable	2169032c5840	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

4,463

whatsappkubernetes-whatsapp

0.1.8

1 of 4 See more

whatsapp kubernetes-whatsapp 0.1.8

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
library/python :3.8-alpine	3d93b1f77efc	openssl@3.3.2-r0	3.3.5-r0

Open the chart page →

1,574

testkube-apikubeshop

2.1.162

1 of 2 See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :2.1.162	e97dc620d9b4	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

1,670

testkube-logskubeshop

0.2.2

1 of 1 See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeshop/testkube-logs-server :latest	094186b19698	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

1,286

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	openssl@3.3.2-r0	3.3.5-r0

Open the chart page →

1,562

databend-metakubesphere-stable

0.7.3

1 of 1 See more

databend-meta kubesphere-stable 0.7.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
datafuselabs/databend-meta :v1.2.279	ba877ee6cb4d	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3

Open the chart page →

2,838

databend-querykubesphere-stable

0.8.3

1 of 1 See more

databend-query kubesphere-stable 0.8.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
datafuselabs/databend-query :v1.2.279	a936843b85b4	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3

Open the chart page →

2,838

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1
deepflowce/deepflow-agent :v6.2.6.5	29332fee7fc2	openssl@3.0.2-0ubuntu1.9	3.0.2-0ubuntu1.20
grafana/grafana :9.5.2	39c849cebccc	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

18,420

fpga-operatorkubesphere-stable

2.7.4

3 of 7 See more

fpga-operator kubesphere-stable 2.7.4

3 of the 7 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
inaccel/driver :latest	07271a5c2fe7	openssl@3.1.4-r5	3.1.8-r1
inaccel/mkrt :latest	187fd448b6f2	openssl@3.0.12-r1	3.0.19-r0
inaccel/monitor :2.1	34bb93de386f	openssl@3.1.4-r5	3.1.8-r1

Open the chart page →

5,770

iomeshkubesphere-stable

1.1.0

5 of 25 See more

iomesh kubesphere-stable 1.1.0

5 of the 25 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	openssl@3.0.7-r0	3.0.19-r0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	openssl@3.0.7-r0	3.0.19-r0
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.20
iomesh/deck :v0.1.0	a31e26b6ae22	openssl@3.1.4-r5	3.1.8-r1
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	openssl@3.1.4-r5	3.1.8-r1

Open the chart page →

48,954

IOMeshkubesphere-stable

1.2.0

7 of 25 See more

IOMesh kubesphere-stable 1.2.0

7 of the 25 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	openssl@3.0.7-r0	3.0.19-r0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	openssl@3.0.7-r0	3.0.19-r0
iomesh/csi-driver :v2.8.0	1a151f602451	openssl@3.0.2-0ubuntu1.16	3.0.2-0ubuntu1.20
iomesh/deck :v0.2.0	282d6c419ed3	openssl@3.3.1-r3	3.3.5-r0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	openssl@3.3.1-r3	3.3.5-r0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.6
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.6

Open the chart page →

46,639

pulsarkubesphere-stable

2.7.13

1 of 3 See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

14,401

clickhousekubesphere-test

0.1.1

1 of 2 See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
radondb/clickhouse-server :v21.1.3.32-stable	4732df471073	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

6,705

csi-neonsankubesphere-test

1.3.0

1 of 6 See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm13

Open the chart page →

18,526

mongodbkubesphere-test

0.3.2

1 of 2 See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
library/mongo :4.2.1	6ca49afbcb2b	openssl@1.1.1-1ubuntu2.1~18.04.4	1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

9,631

mysqlkubesphere-test

1.0.2

1 of 3 See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
xenondb/percona :5.7.33	0e26872a2b67	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,384

sample-bookinfokubesphere-test

1.0.0

1 of 4 See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubesphere/examples-bookinfo-reviews-v2 :1.13.0	6d93129beb32	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm13

Open the chart page →

9,388

xenondbkubesphere-test

1.0.0

1 of 3 See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
xenondb/percona :5.7.33	0e26872a2b67	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,384

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

4,456

kubestellar-uikubestellarui

0.1.1

3 of 4 See more

kubestellar-ui kubestellarui 0.1.1

3 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
library/redis :7.0-alpine	c9d92d840fd0	openssl@3.3.2-r0	3.3.5-r0
mavrick1/kubestellar-b :latest	45ca0429a1d4	openssl@3.3.3-r0	3.3.5-r0
mavrick1/kubestellar-f :latest	56bd8eaa53a4	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

4,773

sample-appkubeuest

0.1.3

1 of 1 See more

sample-app kubeuest 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
michaelepitech/sample-app :latest	af51d61c19f5	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4

Open the chart page →

1,427

workload-operatorkubevious

0.0.3

1 of 1 See more

workload-operator kubevious 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubevious/workload-operator :1.0.2	0b0f4c507eb6	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

2,009

network-enforcerkubewarden

0.1.2

1 of 3 See more

network-enforcer kubewarden 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
fluent/fluent-bit :4.0.4	ca08b7d2df5b	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

2,562

kube-workload-restarterkube-workload-restarter

0.0.4

1 of 1 See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
andreacioni/kube-workload-restarter :0.0.24	2938b310090a	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4

Open the chart page →

1,815

excalidrawkubitodev

1.0.3

1 of 1 See more

excalidraw kubitodev 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
excalidraw/excalidraw :latest	f7ee194addd6	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

840

penpotkubitodev

1.2.1

3 of 5 See more

penpot kubitodev 1.2.1

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
penpotapp/backend :2.2.1	47853d9bb9dd	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.20
penpotapp/exporter :2.2.1	5c835ffd87ab	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.20
penpotapp/frontend :2.2.1	8974882a0542	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4

Open the chart page →

16,976

kubiya-runnerkubiya-helm-charts

0.9.4

4 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

4 of the 9 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.6
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	openssl@3.1.8-r0	3.1.8-r1
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	openssl@3.1.8-r0	3.1.8-r1

Open the chart page →

20,386

lethe-stackkuoss

0.2.3

1 of 3 See more

lethe-stack kuoss 0.2.3

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/lethe :v0.3.1	c59f082ba8b2	openssl@3.3.4-r0	3.3.5-r0

Open the chart page →

1,762

ctrlmeshkusionstack

0.2.0

1 of 1 See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kusionstack/ctrlmesh-manager :v0.2.0	65e3c32b64d7	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

3,469

kuperatorkusionstack

0.7.4

1 of 1 See more

kuperator kusionstack 0.7.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kusionstack/kuperator :v0.7.4	d2f72ae1d2f2	openssl@3.0.15-r0	3.0.19-r0

Open the chart page →

980

kusionkusionstack

0.14.1

1 of 3 See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.20

Open the chart page →

6,913

operatingkusionstack

0.5.1

1 of 1 See more

operating kusionstack 0.5.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kusionstack/operating :v0.5.0	c28bd96b986b	openssl@3.0.13-r0	3.0.19-r0

Open the chart page →

1,881

kustomize-patcherkustomize-patcher

1.0.2

1 of 2 See more

kustomize-patcher kustomize-patcher 1.0.2

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/themesama/kubernetes-kustomize-patcher :latest	b1bf0669e3a0	openssl@3.0.17-1~deb12u2	3.0.17-1~deb12u3

Open the chart page →

891

Container images carrying it

3,248 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container image	Digest	Package	Fixed in	Used by
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	openssl@1.1.1-1ubuntu2.1~18.04.19 openssl1.0@1.0.2n-1ubuntu5.10	1.1.1-1ubuntu2.1~18.04.23+esm6 1.0.2n-1ubuntu5.13+esm2	1
allegroai/clearml-serving-inference :1.3.0	fca885e8cfc6	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4	1
allegroai/clearml-serving-statistics :1.3.0	c58d9da7bdf8	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4	1
alpine/curl :8.5.0	513c4f0d7123	openssl@3.1.4-r5	3.1.8-r1	1
alpine/curl :8.12.0	8943e8c7e8e4	openssl@3.3.2-r4	3.3.5-r0	1
alpine/helm	105741fa6621	openssl@3.3.1-r3	3.3.5-r0	1
alpine/k8s :1.31.10	6dbe6f391eda	openssl@3.5.0-r0	3.5.4-r0	1
alpine/k8s :1.31.13	7a319b15cfc9	openssl@3.5.1-r0	3.5.4-r0	1
alpine/k8s :1.32.4	7e1e7d5b7a96	openssl@3.3.3-r0	3.3.5-r0	1
alpine/k8s :1.31.4	9c4976d47656	openssl@3.3.2-r4	3.3.5-r0	1
alpine/k8s :1.30.0	bd01dae02676	openssl@3.1.4-r5	3.1.8-r1	1
alpine/k8s :1.30.2	cd560fce90f7	openssl@3.3.1-r0	3.3.5-r0	1
alpine/k8s :1.28.13	e5c0b053fed7	openssl@3.3.1-r3	3.3.5-r0	1
alpine/k8s :1.32.3	eec354133193	openssl@3.3.3-r0	3.3.5-r0	1
alpine/kubectl :1.33.3	2c59a3f0726c	openssl@3.5.1-r0	3.5.4-r0	1
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10	1
altinity/clickhouse-operator :0.20.0	8f0f582d41f0	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10	1
altinity/clickhouse-operator :0.16.1	db7dde971407	openssl@1:1.0.2k-22.el7_9	1:1.0.2k-26.el7_9.1	1
altinity/clickhouse-server :25.3.6.10034.altinitystable	3396b15c51a2	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.20	1
altinity/metrics-exporter :0.20.0	1a46d104406d	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10	1
altinity/metrics-exporter :0.16.1	85b4fdbae053	openssl@1:1.0.2k-22.el7_9	1:1.0.2k-26.el7_9.1	1
anamskenneth/recipe_backend :2025-06-07	9b7d2cd389b7	openssl@3.3.3-r0	3.3.5-r0	1
anamskenneth/recipe_frontend :2025-06-07	9ecf04f42cc3	openssl@3.3.3-r0	3.3.5-r0	1
anchore/anchore-engine :v0.10.0	bde9eedf639d	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-14.el8_10	1
anchore/anchore-engine :v0.7.1	ed9b3badd17c	openssl@1:1.1.1c-2.el8_1.1	1:1.1.1k-14.el8_10	1
andreacioni/kube-workload-restarter :0.0.24	2938b310090a	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4	1
andrewgaul/s3proxy :sha-85b0f98	7dc1d34174a5	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.6	1
andrewgolikov55/intel-gpu-exporter :latest	fcc001b61c0e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.20	1
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.20	1
andreymileshin/kube-info :v0.1.0	f7b300bc9e66	openssl@3.1.7-r0	3.1.8-r1	1
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	openssl@3.1.7-r0	3.1.8-r1	1
andrianrf/backoffice :latest	047a7837651e	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-14.el8_10	1
andrianrf/backoffice-be :latest	6036614803d4	openssl@1:3.0.7-6.el9_2	1:3.5.1-4.el9_7	1
andrianrf/bpjstk-service :latest	46abe878d9d8	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
andrianrf/bpjstk-simulator :latest	b63fdb51d39d	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
andrianrf/iso-client :latest	ba560086ce15	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
andrianrf/iso-server :latest	7da47f525c7d	openssl@1:3.0.7-6.el9_2	1:3.5.1-4.el9_7	1
anguda/ant-media :2.5	c435285fc241	openssl@1.1.1f-1ubuntu2.17	1.1.1f-1ubuntu2.24+esm1	1
ankane/pgvector :v0.5.1	d3a9d8ac27bb	openssl@3.0.11-1~deb12u1	3.0.17-1~deb12u3	1
anujdatar/cups :25.07.01	685df04a643b	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3	1
apache/activemq-artemis :2.37.0	bae523439ee3	openssl@3.0.13-0ubuntu3.2	3.0.13-0ubuntu3.6	1
apache/airflow :2.8.4-python3.9	64e58748b6b9	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3	1
apache/airflow :airflow-pgbouncer-2025.03.05-1.23.1	8fbd1a66c5f2	openssl@3.1.8-r0	3.1.8-r1	1
apache/airflow :airflow-pgbouncer-exporter-2025.03.05-0.18.0	adf7260c2c5f	openssl@3.1.8-r0	3.1.8-r1	1
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	openssl@3.0.14-1~deb12u2	3.0.17-1~deb12u3	1
apache/airflow :2.8.1	e5560ad0b86e	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3	1
apache/camel-k :1.10.4	3bb13d14f64a	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-14.el8_10	1
apache/drill :1.21.1	1f96558fd292	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
apache/gravitino-iceberg-rest :1.3.0	80136ae753ee	openssl@3.0.2-0ubuntu1.20	no fix listed	1
apache/iotdb :0.13.3-node	afa47bf1692a	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1	1