StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,735
of 17,797 indexed, latest versions
Container images
3,257
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,735 of 17,797 indexed charts deploy, on 3,257 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more1,963
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0969
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm215
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+29 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7322
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,735 by stars
ChartLatestAffected imagesRadar Score
rabbitpingrabbitping1.3.01 of 1See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
udhos/rabbitping:1.3.0474c467bbf42
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

889
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

4,497
rada-platformrada-platform0.1.06 of 7See more

rada-platform rada-platform 0.1.0

6 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
trinodb/trino:45038c6f24ab1a4
openssl@1:3.0.7-27.el9
1:3.5.1-4.el9_7
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
openssl@3.1.4-r6
3.1.8-r1
ghcr.io/airflow-helm/postgresql-bitnami:11.22-patch.0df576862b7c0
openssl@3.1.4-r5
3.1.8-r1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
openssl@1:3.0.7-27.el9
1:3.5.1-4.el9_7
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4

Open the chart page →

21,287
app-config-frontendradar-baseVerified publisher2.4.11 of 1See more

app-config-frontend radar-base 2.4.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-app-config/radar-app-config-frontend:0.6.2c5f1e2ca5781
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

807
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
openssl@3.0.7-r0
3.0.19-r0

Open the chart page →

2,972
kubecostradar-baseVerified publisher1.0.06 of 7See more

kubecost radar-base 1.0.0

6 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
openssl@3.3.2-r0
3.3.5-r0
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7
gcr.io/kubecost1/frontend:prod-2.6.3a535f7de024b
openssl@3.4.1-r0
3.5.4-r0
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
openssl@1:3.2.2-6.el9_5
1:3.5.1-4.el9_7
gcr.io/kubecost1/kubecost-network-costs:v0.17.6ab6a54c53fd8
openssl@3.3.2-r0
3.5.4-r0
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
openssl@3.3.2-r4
3.3.5-r0

Open the chart page →

9,418
mockserverradar-baseVerified publisher5.15.01 of 1See more

mockserver radar-base 5.15.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-5.15.00f9ef78c9489
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

1,258
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_10

Open the chart page →

5,269
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,679
radar-homeradar-baseVerified publisher0.5.51 of 1See more

radar-home radar-base 0.5.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-home/radar-home:0.1.71cfe3da9d812
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

807
radar-hydraradar-baseVerified publisher0.3.42 of 2See more

radar-hydra radar-base 0.3.4

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
curlimages/curl:8.15.04026b29997dc
openssl@3.5.1-r0
3.5.4-r0
oryd/hydra:v2.3.0b94007e19a1f
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

2,186
radar-integrationradar-baseVerified publisher0.9.01 of 1See more

radar-integration radar-base 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6

Open the chart page →

2,909
radar-kafkaradar-baseVerified publisher0.4.12 of 2See more

radar-kafka radar-base 0.4.1

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
quay.io/strimzi/operator:0.46.0ac434a48ac2b
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7

Open the chart page →

4,237
radar-kratosradar-baseVerified publisher0.1.51 of 1See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

1,568
radar-mockserverradar-baseVerified publisher0.1.31 of 1See more

radar-mockserver radar-base 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-5.15.00f9ef78c9489
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

1,258
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6

Open the chart page →

3,072
radar-rest-sources-authorizerradar-baseVerified publisher2.3.41 of 1See more

radar-rest-sources-authorizer radar-base 2.3.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-rest-source-auth/radar-rest-source-authorizer:4.4.153e096497f7db
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

807
radar-upload-connect-frontendradar-baseVerified publisher0.8.11 of 1See more

radar-upload-connect-frontend radar-base 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

939
s3-proxyradar-baseVerified publisher0.6.01 of 1See more

s3-proxy radar-base 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.6

Open the chart page →

2,792
strimzi-kafka-operatorradar-baseVerified publisher0.46.01 of 1See more

strimzi-kafka-operator radar-base 0.46.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7

Open the chart page →

1,969
pagesranjinigogga1.0.02 of 3See more

pages ranjinigogga 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm1
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

20,262
raven_profilerraven-profilerVerified publisher0.1.621 of 1See more

raven_profiler raven-profiler 0.1.62

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
public.ecr.aws/t0u0d5o5/ecr_authenticator:latest077e4e57e41c
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

1,301
rdfoxrdfox-helm-chart0.1.22 of 2See more

rdfox rdfox-helm-chart 0.1.2

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
oxfordsemantic/rdfox:5.6db17910eb855
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1
oxfordsemantic/rdfox-init:5.6baf570ff968d
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

12,900
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

15,552
pagesrebecca-pages1.0.02 of 3See more

pages rebecca-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm1
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

20,262
recipe-apprecipe-app0.1.02 of 2See more

recipe-app recipe-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
openssl@3.3.3-r0
3.3.5-r0
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

3,278
helm-redchefredchef0.1.02 of 3See more

helm-redchef redchef 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
sharanalwar/redchef-backend:latest8d3cab80df49
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
sharanalwar/redchef-frontend:latest5e82950b16b7
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

4,792
ibm-mongodb-enterprise-helmredhat0.3.01 of 1See more

ibm-mongodb-enterprise-helm redhat 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
openssl@1:1.1.1g-12.el8_3
1:1.1.1k-14.el8_10

Open the chart page →

12,383
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
openssl@1:1.1.1g-18.el8_4
1:1.1.1k-14.el8_10

Open the chart page →

15,299
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
openssl@1:1.1.1g-18.el8_4
1:1.1.1k-14.el8_10

Open the chart page →

15,299
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
openssl@1:1.1.1c-19.el8_2
1:1.1.1k-14.el8_10

Open the chart page →

11,446
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.20

Open the chart page →

4,254
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
openssl@1:1.1.1k-12.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

16,389
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
openssl@1:1.1.1k-4.el8
1:1.1.1k-14.el8_10

Open the chart page →

29,566
redisredis-arm17.8.01 of 1See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4

Open the chart page →

1,906
relfinder-reformedrelfinderreformed2.0.02 of 2See more

relfinder-reformed relfinderreformed 2.0.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
openssl@3.3.1-r0
3.3.5-r0
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

6,336
remla23-team17remla23-team171.0.02 of 2See more

remla23-team17 remla23-team17 1.0.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4

Open the chart page →

4,448
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
reportportal/service-auto-analyzer:5.7.295ada4a216ce
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

25,756
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

2,201
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

7,446
juicepassproxyretsamedocVerified publisher2026.2.41 of 1See more

juicepassproxy retsamedoc 2026.2.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

3,962
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

7,138
claude-relayrevolution10.1.372 of 4See more

claude-relay revolution1 0.1.37

2 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
fluent/fluent-bit:2.2.00fa18c71d821
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

4,633
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

5,876
bookinforgnu1.0.03 of 7See more

bookinfo rgnu 1.0.0

3 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

20,529
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
openssl@1.0.2g-1ubuntu4.5
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

11,454
istio-bookinforgnu1.0.23 of 7See more

istio-bookinfo rgnu 1.0.2

3 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

20,529
istio-helloworldrgnu1.0.12 of 2See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
istio/examples-helloworld-v1:latest328b237e4fb1
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
istio/examples-helloworld-v2:latest0a7f02b2c7c9
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

9,466
mastodonrivals-spaceVerified publisher3.1.22 of 3See more

mastodon rivals-space 3.1.2

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
ghcr.io/rivals-space/rivals-nginx:1.6.1f376b96b82cc
openssl@3.0.7-r2
3.0.19-r0

Open the chart page →

6,032
rke2-canal-1.19-1.20rke2-charts3.13.3-build20211022022 of 2See more

rke2-canal-1.19-1.20 rke2-charts 3.13.3-build2021102202

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
rancher/hardened-calico:v3.13.3-build20210223c678c25d47c8
openssl@1:1.0.2k-21.el7_9
1:1.0.2k-26.el7_9.1
rancher/hardened-flannel:v0.14.1-build20211022d6a47d394c03
openssl@1:1.0.2k-22.el7_9
1:1.0.2k-26.el7_9.1

Open the chart page →

5,956

Container images carrying it

3,257 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
ethereum/client-go:v1.15.101f36ca5922a5
openssl@3.3.3-r0
3.3.5-r0
1
ethereum/client-go:v1.14.8886ec69b35b0
openssl@3.3.1-r3
3.3.5-r0
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
openssl@1.0.2g-1ubuntu4.10
no fix listed
1.0.2g-1ubuntu4.20+esm13
1
ethersphere/bee:2.2.0a884fd84b72f
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
ethersphere/ethproxy:latest3a8a3926caa2
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
ethersphere/multichain-proxy:0.0.261f5419afbcd
openssl@3.3.3-r0
3.3.5-r0
1
ethpandaops/blobscan-indexer:latestc58eb9ffe446
openssl@3.0.7-r2
3.0.19-r0
1
ethpandaops/ethereumjs:masterfb84b718500f
openssl@3.3.3-r0
3.3.5-r0
1
ethpandaops/xatu:sentry-logs-latest6ce31bb0eafd
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
evgkrsk/postgres-controller:0.6.237f0e1f435c3
openssl@3.0.7-r2
3.0.19-r0
1
evk02/mlflow:2.2.1ef6ff257ef35
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
expediagroup/pitchfork:1.314f2cf61e7de9
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
extrim/perlite:1.5.99cb7eb5598b6
openssl@3.3.3-r0
3.3.5-r0
1
fabioformosa/hello-world-api:latest063873af085c
openssl@3.1.4-r5
3.1.8-r1
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
factly/mande-studio:0.34.19db4bee30e63
openssl@3.0.10-r0
3.0.19-r0
1
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
openssl@3.5.1-1
3.5.1-1+deb13u1
1
falcosecurity/falcosidekick:2.32.01976da721518
openssl@3.5.1-r0
3.5.4-r0
1
fallenbagel/jellyseerr:latest4538137bc5af
openssl@3.5.1-r0
3.5.4-r0
1
fanzynoodle/smeejas:0.0.15f9916c1a287
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
farberg/apache-knox-docker:1.6.14b4a22487394
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
featureformcom/quickstart-loader:latest82396f8fb5e8
openssl@3.3.0-r2
3.3.5-r0
1
featurehub/dacha2:1.9.1c8d5551b5e40
openssl@3.3.3-r0
3.3.5-r0
1
featurehub/edge:1.9.198ad426737f6
openssl@3.3.3-r0
3.3.5-r0
1
featurehub/mr:1.9.1477d8bf771a9
openssl@3.3.3-r0
3.3.5-r0
1
fedodo/fedodo.be.activitypub:14728dada8e3216
openssl@3.0.8-r3
3.0.19-r0
1
fedodo/fedodo.be.auth:208f8eb7a1207e
openssl@3.0.8-r3
3.0.19-r0
1
fedodo/fedodo.ui.home:3c69413c4d690
openssl@3.0.9-r1
3.0.19-r0
1
fedodo/fedodo.ui.micro:12b2b540081c21
openssl@3.0.9-r1
3.0.19-r0
1
felipecs8/app-db-connection-test:v129e06c9c6385
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
felipecs8/app-movies-series:v14e51693fcdf5
openssl@3.0.8-r3
3.0.19-r0
1
felipecs8/conversor-temperatura:v1f945423be36d
openssl@3.3.3-r0
3.3.5-r0
1
felipecs8/landing-page:v1db6d44e325a1
openssl@3.5.1-r0
3.5.4-r0
1
felipecs8/qrcode-generator:v1d5f4f17cb066
openssl@3.0.8-r0
3.0.19-r0
1
filegator/filegator:latestce163db220d4
openssl@1.1.1w-0+deb11u3
1.1.1w-0+deb11u4
1
firefart/requesttracker:5.0.40d6249906d8c
openssl@3.0.11-1~deb12u1
3.0.17-1~deb12u3
1
firefart/requesttracker:nginx-nightly-202307101028236b42a0
openssl@3.0.9-r1
3.0.19-r0
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm1
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
fiware/mintaka:0.7.092a3c5cf43c0
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-14.el8_10
1
fiware/mintaka:latestefc6793388cc
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-14.el8_10
1
fiware/orion-ld:1.10.03c490a746f65
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
1
flag5/clustersecret:0.0.94ad5748bfcc6
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
flanksource/apm-hub:v0.0.471dacc3195bf9
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.20
1
flanksource/batch-runner:v1.0.44689687a7cf95
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6
1
flashbots/mev-boost:1.8.07c486b5789da
openssl@3.3.1-r3
3.3.5-r0
1
fleetdm/fleet:v4.66.012e644b7f40e
openssl@3.3.3-r0
3.3.5-r0
1
flofree/base-project:2.1.16b6486c5f81e
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
flomesh/fsm-ingress-pipy:0.2.11cc39c96711c4
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4
1
flomesh/pipy:0.90.2-41-nonroot630afdbcce9b
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.