StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,801
of 17,821 indexed, latest versions
Container images
3,326
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,801 of 17,821 indexed charts deploy, on 3,326 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more2,006
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0993
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm221
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+30 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7324
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,801 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,966

Container images carrying it

3,326 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
belirta/beli-docker:v1.0.0f65ad0e23b4d
openssl@3.0.10-r0
3.0.19-r0
1
beopenit/door-agent:v3.0.5d24c323fe7c3
openssl@3.1.4-r2
3.1.8-r1
1
beopenit/door-helm:v3.0.1b4d9f9bee224
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
openssl@3.5.1-1
3.5.1-1+deb13u1
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
beyzkaya/blog-frontend:v1.0.0bf412d75c510
openssl@3.5.0-r0
3.5.4-r0
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm1
1
binwiederhier/ntfy:v2.11.04a7d0f0adc6d
openssl@3.1.4-r5
3.1.8-r1
1
biospheere/promcord:latest16d4fd269e66
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/clickhouse:24.12.3-debian-12-r13cf6544f6c6c
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/clickhouse:24.12.4c7e70bf1d3fb
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/git:latest4b08d0c5af8d
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/kafka:3.5.0-debian-11-r08657bb93a581
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4
1
bitnamilegacy/kafka:3.4.0-debian-11-r6ac64829e45b3
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
bitnamilegacy/kafka:2.8.1-debian-11-r7b6e381ffd6ae
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u4
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
bitnamilegacy/kubectl:1.301249fc292e84
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/kubectl:1.3164614ef8290f
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
bitnamilegacy/kubectl:1.22.13d0e426ccff33
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
bitnamilegacy/kube-state-metrics:204a3044b384b
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/mariadb:10.6.12-debian-11-r1315edb5643b73
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
bitnamilegacy/mariadb:10.6.12-debian-11-r1678847062532a
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/mariadb:latestbbd4e17f1ef8
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/mariadb-galera:10.6.12-debian-11-r1643a70df0e7c6
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/minio:2023.12.230b60b6565ab2
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
1
bitnamilegacy/minio:2022.12.12-debian-11-r90f7c8ac484ac
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
bitnamilegacy/minio:2023.12.23-debian-11-r25bb0aa825d16
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.