CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,737; of 17,790 indexed, latest versions
Container images: 3,261; deployed by those charts
Fix available: 6 of 7; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,737 of 17,790 indexed charts deploy, on 3,261 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more	1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more	1,966
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more	3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0	970
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm2	15
opensslrpm	1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+29 more	1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7	322
openssl-3rpm	3.2.3-150700.5.18.1	3.2.3-150700.5.21.1	3
openssl-1_1rpm	1.1.1w-150700.11.3.1	1.1.1w-150700.11.6.1	1

OSV records: ALPINE-CVE-2025-9230 CGA-c4v2-6rpm-vq95 DEBIAN-CVE-2025-9230 UBUNTU-CVE-2025-9230 RHSA-2025:21174 RHSA-2025:21255 RHSA-2026:0337 RHSA-2026:1720 RLSA-2025:21255 RLSA-2026:0337 DLA-4321-1 SUSE-SU-2025:03546-1 SUSE-SU-2025:03635-1
Also known as: CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,737 by stars

Chart

Latest

Affected images

Radar Score

metallbkubeblocks

0.14.4

2 of 3 See more

metallb kubeblocks 0.14.4

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.14.4	bbef1ee3e7d3	openssl@3.1.4-r5	3.1.8-r1
quay.io/metallb/speaker :v0.14.4	37611bde45a2	openssl@3.1.4-r5	3.1.8-r1

Open the chart page →

2,600

openebskubeblocks

3.10.0

2 of 3 See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.20
openebs/node-disk-operator :2.1.0	6afe2123c457	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.20

Open the chart page →

10,587

postgres-operatorkubeblocks

1.12.2

1 of 1 See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	openssl@3.3.0-r2	3.3.5-r0

Open the chart page →

1,555

smartfs-csi-driverkubeblocks

0.1.2

1 of 6 See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10

Open the chart page →

9,256

spiderpoolkubeblocks

1.2.0

3 of 4 See more

spiderpool kubeblocks 1.2.0

3 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.4	09fdfb7ce090	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

8,470

vaultkubeblocks

0.30.0

2 of 2 See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.19.0	bbb7f98dc67d	openssl@3.3.3-r0	3.3.5-r0
hashicorp/vault-k8s :1.6.2	103a2d817a74	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

2,751

kubeclaritykubeclarity

2.23.3

3 of 5 See more

kubeclarity kubeclarity 2.23.3

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	openssl@3.0.10-r0	3.0.19-r0
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	openssl@3.1.5-r0	3.1.8-r1
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	openssl@3.1.5-r0	3.1.8-r1

Open the chart page →

5,520

helm-controllerkubedex

0.4.0

1 of 1 See more

helm-controller kubedex 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubedex/helm-controller :v1.0.1	4f1008c51ef9	openssl@1:1.0.2k-16.el7_6.1	1:1.0.2k-26.el7_9.1

Open the chart page →

2,421

listener-operatorkubedoop

0.4.0

1 of 6 See more

listener-operator kubedoop 0.4.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	openssl@1:3.2.2-6.el9_5.1	1:3.2.2-7.el9_6.1

Open the chart page →

4,472

secret-operatorkubedoop

0.4.0

1 of 5 See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	openssl@1:3.2.2-6.el9_5.1	1:3.2.2-7.el9_6.1

Open the chart page →

4,414

juicefs-csi-driverkubegems

0.19.2

1 of 6 See more

juicefs-csi-driver kubegems 0.19.2

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4

Open the chart page →

4,838

juicefs-tenantkubegems

1.0.1

1 of 3 See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubegems/redis :7.2.5-debian-12-r2	870ee3a77add	openssl@3.0.13-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

4,306

kubegems-multus-cnikubegems

2.4.1

1 of 2 See more

kubegems-multus-cni kubegems 2.4.1

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.2.1	6bebbda31416	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

1,391

kubegems-paikubegems

1.0.18

1 of 1 See more

kubegems-pai kubegems 1.0.18

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubegems/mysql :8.0.33-debian-11-r0	19cb195b9a50	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4

Open the chart page →

1,052

volcanokubegems

1.12.1

3 of 3 See more

volcano kubegems 1.12.1

3 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
volcanosh/vc-controller-manager :v1.12.1	3815883c32f6	openssl@3.5.0-r0	3.5.4-r0
volcanosh/vc-scheduler :v1.12.1	b24ea8af2d16	openssl@3.5.0-r0	3.5.4-r0
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	openssl@3.5.0-r0	3.5.4-r0

Open the chart page →

5,036

gptchat-api-feishubotkubegemsapp

0.1.1

3 of 3 See more

gptchat-api-feishubot kubegemsapp 0.1.1

3 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubegems/chatgpt-api :latest	f3c492a938ad	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	openssl@3.0.7-r0	3.0.19-r0
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	openssl@3.0.7-r0	3.0.19-r0

Open the chart page →

8,487

kube-infokube-info

0.1.0

1 of 1 See more

kube-info kube-info 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
andreymileshin/kube-info :v0.1.0	f7b300bc9e66	openssl@3.1.7-r0	3.1.8-r1

Open the chart page →

518

kube-janitorkube-janitor

0.3.3

1 of 1 See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
hjacobs/kube-janitor :23.7.0	fbb303ed463c	openssl@3.0.9-1	3.0.17-1~deb12u3

Open the chart page →

4,310

kubemacpoolkubemacpool

0.3.0

1 of 1 See more

kubemacpool kubemacpool 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubemacpool :v0.45.0	eebb65b8a12c	openssl@1:3.2.2-6.el9_5	1:3.5.1-4.el9_7

Open the chart page →

1,624

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,208

kube-ovnkube-ovn-test

1.14.0

1 of 1 See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeovn/kube-ovn :v1.14.0	6722b54eb5c0	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.6

Open the chart page →

5,003

kubernetes-netskope-publisherkubernetes-netskope-publisher

1.5.0

1 of 2 See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
netskopeprivateaccess/publisher_u22 :latest	93e2fd164a93	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

3,586

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10

Open the chart page →

3,630

kube-httpcachekubernetes-replicator

0.9.1

1 of 1 See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kube-httpcache :stable	2169032c5840	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

4,463

whatsappkubernetes-whatsapp

0.1.8

1 of 4 See more

whatsapp kubernetes-whatsapp 0.1.8

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
library/python :3.8-alpine	3d93b1f77efc	openssl@3.3.2-r0	3.3.5-r0

Open the chart page →

1,574

testkube-apikubeshop

2.1.162

1 of 2 See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :2.1.162	e97dc620d9b4	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

1,670

testkube-logskubeshop

0.2.2

1 of 1 See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeshop/testkube-logs-server :latest	094186b19698	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

1,286

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	openssl@3.3.2-r0	3.3.5-r0

Open the chart page →

1,562

databend-metakubesphere-stable

0.7.3

1 of 1 See more

databend-meta kubesphere-stable 0.7.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
datafuselabs/databend-meta :v1.2.279	ba877ee6cb4d	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3

Open the chart page →

2,838

databend-querykubesphere-stable

0.8.3

1 of 1 See more

databend-query kubesphere-stable 0.8.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
datafuselabs/databend-query :v1.2.279	a936843b85b4	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3

Open the chart page →

2,838

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1
deepflowce/deepflow-agent :v6.2.6.5	29332fee7fc2	openssl@3.0.2-0ubuntu1.9	3.0.2-0ubuntu1.20
grafana/grafana :9.5.2	39c849cebccc	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

18,420

fpga-operatorkubesphere-stable

2.7.4

3 of 7 See more

fpga-operator kubesphere-stable 2.7.4

3 of the 7 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
inaccel/driver :latest	07271a5c2fe7	openssl@3.1.4-r5	3.1.8-r1
inaccel/mkrt :latest	187fd448b6f2	openssl@3.0.12-r1	3.0.19-r0
inaccel/monitor :2.1	34bb93de386f	openssl@3.1.4-r5	3.1.8-r1

Open the chart page →

5,770

iomeshkubesphere-stable

1.1.0

5 of 25 See more

iomesh kubesphere-stable 1.1.0

5 of the 25 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	openssl@3.0.7-r0	3.0.19-r0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	openssl@3.0.7-r0	3.0.19-r0
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.20
iomesh/deck :v0.1.0	a31e26b6ae22	openssl@3.1.4-r5	3.1.8-r1
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	openssl@3.1.4-r5	3.1.8-r1

Open the chart page →

48,954

IOMeshkubesphere-stable

1.2.0

7 of 25 See more

IOMesh kubesphere-stable 1.2.0

7 of the 25 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	openssl@3.0.7-r0	3.0.19-r0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	openssl@3.0.7-r0	3.0.19-r0
iomesh/csi-driver :v2.8.0	1a151f602451	openssl@3.0.2-0ubuntu1.16	3.0.2-0ubuntu1.20
iomesh/deck :v0.2.0	282d6c419ed3	openssl@3.3.1-r3	3.3.5-r0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	openssl@3.3.1-r3	3.3.5-r0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.6
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.6

Open the chart page →

46,639

pulsarkubesphere-stable

2.7.13

1 of 3 See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

14,401

clickhousekubesphere-test

0.1.1

1 of 2 See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
radondb/clickhouse-server :v21.1.3.32-stable	4732df471073	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

6,705

csi-neonsankubesphere-test

1.3.0

1 of 6 See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm13

Open the chart page →

18,526

mongodbkubesphere-test

0.3.2

1 of 2 See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
library/mongo :4.2.1	6ca49afbcb2b	openssl@1.1.1-1ubuntu2.1~18.04.4	1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

9,631

mysqlkubesphere-test

1.0.2

1 of 3 See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
xenondb/percona :5.7.33	0e26872a2b67	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,384

sample-bookinfokubesphere-test

1.0.0

1 of 4 See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubesphere/examples-bookinfo-reviews-v2 :1.13.0	6d93129beb32	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm13

Open the chart page →

9,388

xenondbkubesphere-test

1.0.0

1 of 3 See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
xenondb/percona :5.7.33	0e26872a2b67	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,384

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

4,456

kubestellar-uikubestellarui

0.1.1

3 of 4 See more

kubestellar-ui kubestellarui 0.1.1

3 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
library/redis :7.0-alpine	c9d92d840fd0	openssl@3.3.2-r0	3.3.5-r0
mavrick1/kubestellar-b :latest	45ca0429a1d4	openssl@3.3.3-r0	3.3.5-r0
mavrick1/kubestellar-f :latest	56bd8eaa53a4	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

4,773

sample-appkubeuest

0.1.3

1 of 1 See more

sample-app kubeuest 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
michaelepitech/sample-app :latest	af51d61c19f5	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4

Open the chart page →

1,427

workload-operatorkubevious

0.0.3

1 of 1 See more

workload-operator kubevious 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubevious/workload-operator :1.0.2	0b0f4c507eb6	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

2,009

network-enforcerkubewarden

0.1.2

1 of 3 See more

network-enforcer kubewarden 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
fluent/fluent-bit :4.0.4	ca08b7d2df5b	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

2,562

kube-workload-restarterkube-workload-restarter

0.0.4

1 of 1 See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
andreacioni/kube-workload-restarter :0.0.24	2938b310090a	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4

Open the chart page →

1,815

excalidrawkubitodev

1.0.3

1 of 1 See more

excalidraw kubitodev 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
excalidraw/excalidraw :latest	f7ee194addd6	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

840

penpotkubitodev

1.2.1

3 of 5 See more

penpot kubitodev 1.2.1

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
penpotapp/backend :2.2.1	47853d9bb9dd	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.20
penpotapp/exporter :2.2.1	5c835ffd87ab	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.20
penpotapp/frontend :2.2.1	8974882a0542	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4

Open the chart page →

16,976

kubiya-runnerkubiya-helm-charts

0.9.4

4 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

4 of the 9 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.6
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	openssl@3.1.8-r0	3.1.8-r1
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	openssl@3.1.8-r0	3.1.8-r1

Open the chart page →

20,386

Container images carrying it

3,261 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container image	Digest	Package	Fixed in	Used by
apache/kafka :3.9.0	fbc7d7c428e3	openssl@3.3.2-r1	3.3.5-r0	1
apache/kafka-native :4.1.0	9a9d16e60894	openssl@3.5.1-r0	3.5.4-r0	1
apache/nifi-registry :1.27.0	63b8e3e40742	openssl@3.0.2-0ubuntu1.16	3.0.2-0ubuntu1.20	1
apachepinot/pinot :latest-jdk11	0018bb04ced7	openssl@1.1.1k-1+deb11u2	1.1.1w-0+deb11u4	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.20	1
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm1	1
apachepulsar/pulsar :3.0.7	9c9947de139d	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.20	1
apachepulsar/pulsar :2.9.0	d056c89b7131	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm1	1
apachepulsar/pulsar :2.8.2	d538416d5afe	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm1	1
apache/ranger :2.7.0	76c176e8a0e4	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.20	1
apache/rocketmq :5.3.0	434d8398f996	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.6	1
apache/rocketmq-exporter :0.0.2	c8fb51195444	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.20	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.20	1
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm1	1
apache/skywalking-ui :9.2.0	295f1dc87d98	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.20	1
apache/skywalking-ui :8.9.1	80530f0308a5	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm1	1
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u4	1
apache/superset :4.0.1	ab9467fd712c	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3	1
apache/tika :2.9.0.0	92d055a84e9e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.20	1
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	openssl@3.5.1-1	3.5.1-1+deb13u1	1
apecloud/aperag-frontend :v0.0.0-nightly	b3ae37840ace	openssl@3.3.2-r0	3.3.5-r0	1
apecloud/gemini-scheduler :0.1.1	5832d1a9097a	openssl@3.3.1-r3	3.3.5-r0	1
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10	1
apicurio/apicurio-registry-kafkasql :2.1.0.Final	a97d67487532	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-14.el8_10	1
apicurio/apicurio-studio-api :0.2.62.Final	302d202ed149	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10	1
apicurio/apicurio-studio-ui :0.2.62.Final	349c845270c2	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10	1
apicurio/apicurio-studio-ws :0.2.62.Final	27a91978a388	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10	1
apimap/api :v1.8.11	ae2b3ab00177	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
apimap/developer :v1.3.1	406d3858e20c	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
apimap/portal :v2.4.0	041a4790c65c	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
appwrite/console :7.5.7	aaa11ceab999	openssl@3.3.3-r0	3.3.5-r0	1
aquasec/harbor-scanner-trivy :0.31.2	6e790e233872	openssl@3.1.4-r5	3.1.8-r1	1
archish27/python-fastapi-postgres :latest	6610071a2101	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
arconixforge/mongodb-secure-backup :v1.1	c08d7c438966	openssl@1.1.1w-0+deb11u2	1.1.1w-0+deb11u4	1
arilot/docker-bitcoind :0.17.1	27a4f7e0f9f1	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm13	1
aristidetm/basic-notebook :3.6.5	469dbc951224	openssl@3.0.13-1~deb12u1	3.0.17-1~deb12u3	1
aristidetm/k8s-hub :3.3.7	ccb516cb8474	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4	1
aroralalit/student-producer :1.0.0	2a094f597b36	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
arthurjguerra18/revwallet :v0.7.12	f540af20b307	openssl@3.0.13-1~deb12u1	3.0.17-1~deb12u3	1
artifacthub/db-migrator :v1.19.0	2a746b289fcd	openssl@3.3.1-r0	3.3.5-r0	1
artifacthub/hub :v1.19.0	111918d8c399	openssl@3.3.1-r0	3.3.5-r0	1
artifacthub/scanner :v1.19.0	323d026e78c3	openssl@3.3.1-r0	3.3.5-r0	1
artifacthub/tracker :v1.19.0	6596c8c4d955	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3	1
arturisimo/planner :v1.0	fff9de644941	openssl@1.1.1n-0+deb11u1	1.1.1w-0+deb11u4	1
arunvelsriram/utils :latest	655ad18fd8d6	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.6	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm1	1
assistiot/cybersecurity-monitoring_ir-ctx :latest	ae8b3d72eb5d	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u4	1
assistiot/cybersecurity-monitoring_ir-thv :latest	c8b6c7eaa0cd	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1	1