StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,736
of 17,803 indexed, latest versions
Container images
3,257
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,736 of 17,803 indexed charts deploy, on 3,257 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more1,963
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0969
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm215
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+29 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7322
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,736 by stars
ChartLatestAffected imagesRadar Score
rabbitmq-stomprabbitmq-stompVerified publisher0.1.11 of 1See more

rabbitmq-stomp rabbitmq-stomp 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
spy86/rabbitmq-stomp:latestea649101b9fb
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

3,047
rabbitpingrabbitping1.3.01 of 1See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
udhos/rabbitping:1.3.0474c467bbf42
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,148
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

4,454
rada-platformrada-platform0.1.06 of 7See more

rada-platform rada-platform 0.1.0

6 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
trinodb/trino:45038c6f24ab1a4
openssl@1:3.0.7-27.el9
1:3.5.1-4.el9_7
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
openssl@3.1.4-r6
3.1.8-r1
ghcr.io/airflow-helm/postgresql-bitnami:11.22-patch.0df576862b7c0
openssl@3.1.4-r5
3.1.8-r1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
openssl@1:3.0.7-27.el9
1:3.5.1-4.el9_7
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4

Open the chart page →

21,370
app-config-frontendradar-baseVerified publisher2.4.11 of 1See more

app-config-frontend radar-base 2.4.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-app-config/radar-app-config-frontend:0.6.2c5f1e2ca5781
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

807
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
openssl@3.0.7-r0
3.0.19-r0

Open the chart page →

2,973
kubecostradar-baseVerified publisher1.0.06 of 7See more

kubecost radar-base 1.0.0

6 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
openssl@3.3.2-r0
3.3.5-r0
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7
gcr.io/kubecost1/frontend:prod-2.6.3a535f7de024b
openssl@3.4.1-r0
3.5.4-r0
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
openssl@1:3.2.2-6.el9_5
1:3.5.1-4.el9_7
gcr.io/kubecost1/kubecost-network-costs:v0.17.6ab6a54c53fd8
openssl@3.3.2-r0
3.5.4-r0
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
openssl@3.3.2-r4
3.3.5-r0

Open the chart page →

9,625
mockserverradar-baseVerified publisher5.15.01 of 1See more

mockserver radar-base 5.15.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-5.15.00f9ef78c9489
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

1,258
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_10

Open the chart page →

5,299
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,836
radar-homeradar-baseVerified publisher0.5.51 of 1See more

radar-home radar-base 0.5.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-home/radar-home:0.1.71cfe3da9d812
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

807
radar-hydraradar-baseVerified publisher0.3.42 of 2See more

radar-hydra radar-base 0.3.4

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
curlimages/curl:8.15.04026b29997dc
openssl@3.5.1-r0
3.5.4-r0
oryd/hydra:v2.3.0b94007e19a1f
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

2,196
radar-integrationradar-baseVerified publisher0.9.01 of 1See more

radar-integration radar-base 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6

Open the chart page →

2,913
radar-kafkaradar-baseVerified publisher0.4.12 of 2See more

radar-kafka radar-base 0.4.1

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
quay.io/strimzi/operator:0.46.0ac434a48ac2b
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7

Open the chart page →

4,254
radar-kratosradar-baseVerified publisher0.1.51 of 1See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

1,578
radar-mockserverradar-baseVerified publisher0.1.31 of 1See more

radar-mockserver radar-base 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-5.15.00f9ef78c9489
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

1,258
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6

Open the chart page →

3,077
radar-rest-sources-authorizerradar-baseVerified publisher2.3.41 of 1See more

radar-rest-sources-authorizer radar-base 2.3.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-rest-source-auth/radar-rest-source-authorizer:4.4.153e096497f7db
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

807
radar-upload-connect-frontendradar-baseVerified publisher0.8.11 of 1See more

radar-upload-connect-frontend radar-base 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,084
s3-proxyradar-baseVerified publisher0.6.01 of 1See more

s3-proxy radar-base 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.6

Open the chart page →

2,796
strimzi-kafka-operatorradar-baseVerified publisher0.46.01 of 1See more

strimzi-kafka-operator radar-base 0.46.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7

Open the chart page →

1,985
pagesranjinigogga1.0.02 of 3See more

pages ranjinigogga 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm1
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

20,261
raven_profilerraven-profilerVerified publisher0.1.621 of 1See more

raven_profiler raven-profiler 0.1.62

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
public.ecr.aws/t0u0d5o5/ecr_authenticator:latest077e4e57e41c
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

1,301
rdfoxrdfox-helm-chart0.1.22 of 2See more

rdfox rdfox-helm-chart 0.1.2

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
oxfordsemantic/rdfox:5.6db17910eb855
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1
oxfordsemantic/rdfox-init:5.6baf570ff968d
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

12,910
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

15,613
pagesrebecca-pages1.0.02 of 3See more

pages rebecca-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm1
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

20,261
recipe-apprecipe-app0.1.02 of 2See more

recipe-app recipe-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
openssl@3.3.3-r0
3.3.5-r0
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

3,568
helm-redchefredchef0.1.02 of 3See more

helm-redchef redchef 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
sharanalwar/redchef-backend:latest8d3cab80df49
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
sharanalwar/redchef-frontend:latest5e82950b16b7
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

4,956
ibm-mongodb-enterprise-helmredhat0.3.01 of 1See more

ibm-mongodb-enterprise-helm redhat 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
openssl@1:1.1.1g-12.el8_3
1:1.1.1k-14.el8_10

Open the chart page →

12,383
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
openssl@1:1.1.1g-18.el8_4
1:1.1.1k-14.el8_10

Open the chart page →

15,300
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
openssl@1:1.1.1g-18.el8_4
1:1.1.1k-14.el8_10

Open the chart page →

15,300
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
openssl@1:1.1.1c-19.el8_2
1:1.1.1k-14.el8_10

Open the chart page →

11,447
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.20

Open the chart page →

4,258
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
openssl@1:1.1.1k-12.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

16,391
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
openssl@1:1.1.1k-4.el8
1:1.1.1k-14.el8_10

Open the chart page →

29,584
redisredis-arm17.8.01 of 1See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4

Open the chart page →

1,906
relfinder-reformedrelfinderreformed2.0.02 of 2See more

relfinder-reformed relfinderreformed 2.0.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
openssl@3.3.1-r0
3.3.5-r0
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

6,356
remla23-team17remla23-team171.0.02 of 2See more

remla23-team17 remla23-team17 1.0.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4

Open the chart page →

4,448
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
reportportal/service-auto-analyzer:5.7.295ada4a216ce
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

25,720
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

2,202
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

7,469
juicepassproxyretsamedocVerified publisher2026.2.41 of 1See more

juicepassproxy retsamedoc 2026.2.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

3,981
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

7,160
claude-relayrevolution10.1.372 of 4See more

claude-relay revolution1 0.1.37

2 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
fluent/fluent-bit:2.2.00fa18c71d821
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

4,808
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

5,896
bookinforgnu1.0.03 of 7See more

bookinfo rgnu 1.0.0

3 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

20,539
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
openssl@1.0.2g-1ubuntu4.5
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

11,458
istio-bookinforgnu1.0.23 of 7See more

istio-bookinfo rgnu 1.0.2

3 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

20,539
istio-helloworldrgnu1.0.12 of 2See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
istio/examples-helloworld-v1:latest328b237e4fb1
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
istio/examples-helloworld-v2:latest0a7f02b2c7c9
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

9,504
mastodonrivals-spaceVerified publisher3.1.22 of 3See more

mastodon rivals-space 3.1.2

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
ghcr.io/rivals-space/rivals-nginx:1.6.1f376b96b82cc
openssl@3.0.7-r2
3.0.19-r0

Open the chart page →

6,034

Container images carrying it

3,257 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
iamdorsah/bastillion:v0.1db83a0254d81
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
ibmcom/app-nav-api:1.0.1ce9d2a564273
openssl@1:1.0.2k-16.el7_6.1
1:1.0.2k-26.el7_9.1
1
ibmcom/app-nav-controller:1.0.1ee4624ba513d
openssl@1:1.0.2k-16.el7_6.1
1:1.0.2k-26.el7_9.1
1
ibmcom/app-nav-init:1.0.1240ff499eb5b
openssl@1:1.0.2k-16.el7_6.1
1:1.0.2k-26.el7_9.1
1
ibmcom/app-nav-ui:1.0.1e2a86997b36b
openssl@1:1.0.2k-16.el7_6.1
1:1.0.2k-26.el7_9.1
1
ibmcom/app-nav-was-controller:1.0.1a6748792da26
openssl@1:1.0.2k-16.el7_6.1
1:1.0.2k-26.el7_9.1
1
ibmcom/bai-admin-dev:19.0.202d882f2836e
openssl@1:1.0.2k-19.el7
1:1.0.2k-26.el7_9.1
1
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
openssl@1:1.0.2k-19.el7
1:1.0.2k-26.el7_9.1
1
ibmcom/bai-flink-dev:19.0.2e31ff09e8aad
openssl@1:1.0.2k-19.el7
1:1.0.2k-26.el7_9.1
1
ibmcom/bai-flink-zookeeper-dev:19.0.258548034cf55
openssl@1:1.0.2k-19.el7
1:1.0.2k-26.el7_9.1
1
ibmcom/bai-init-dev:19.0.2b138f1eac0b1
openssl@1:1.0.2k-19.el7
1:1.0.2k-26.el7_9.1
1
ibmcom/bai-setup-dev:19.0.2b8e8df11072d
openssl@1:1.0.2k-19.el7
1:1.0.2k-26.el7_9.1
1
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
openssl@1:1.1.1c-15.el8
1:1.1.1k-14.el8_10
1
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
openssl@1:1.1.1c-15.el8
1:1.1.1k-14.el8_10
1
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
openssl@1:1.1.1g-12.el8_3
1:1.1.1k-14.el8_10
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.20+esm13
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
openssl@1.0.2g-1ubuntu4.12
1.0.2g-1ubuntu4.20+esm13
1
ibmcom/microclimate-theia:lateste17bdccc5030
nodejs@4.2.6~dfsg-1ubuntu4.1
openssl@1.0.2g-1ubuntu4.10
no fix listed
1.0.2g-1ubuntu4.20+esm13
1
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
openssl@1:1.1.1-8.el8
1:1.1.1k-14.el8_10
1
ibmcom/skydive:0.22.0395e60cc6e3d
openssl@1.1.0g-2ubuntu4.3
1.1.1-1ubuntu2.1~18.04.23+esm6
1
ibmcom/voice-gateway-mr:1.0.5.00762ab1df6c1
openssl@1:1.0.2k-19.el7
1:1.0.2k-26.el7_9.1
1
ibmcom/websphere-liberty:javaee8-ubi-min28ae40e05980
openssl@1:1.0.2k-19.el7
1:1.0.2k-26.el7_9.1
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
openssl@3.0.9-1
3.0.17-1~deb12u3
1
improwised/proxysql:master-6b26e59-171765063828940522e8b7
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
imroc/logrotate:3.21.0135c769e659f
openssl@3.1.4-r5
3.1.8-r1
1
indevlab/ejabberd:24.12-k8s8bc689d093a7
openssl@3.1.8-r0
3.1.8-r1
1
infiniflow/infinity:v0.7.0992c87a68612
openssl@3.0.2-0ubuntu1.23
no fix listed
1
inseefrlab/shelly:cloudshell31f04ca7436b
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.20
1
instill/console:0.68.54cd70e2df5c6
openssl@3.5.1-r0
3.5.4-r0
1
instructure/kinesalite:latest34400d82f28f
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm1
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
openssl@1.1.1f-1ubuntu2.15
1.1.1f-1ubuntu2.24+esm1
1
intelloop/atlas-cmms-frontend:v1.5.12409c2a00ab6
openssl@3.1.6-r2
3.1.8-r1
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm1
1
intel/trusted-certificate-issuer:0.5.0591a9db4a427
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm1
1
interlayhq/interbtc-hydra-processor:0.10.55b2c414307b9
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
iofog/router:2.0.17260cf861479
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm6
1
iomesh/blockdevice-monitor:v0.2.1376577ed98ac
openssl@3.0.7-r0
3.0.19-r0
1
iomesh/blockdevice-monitor:v0.1.0d86dab5611a7
openssl@3.0.7-r0
3.0.19-r0
1
iomesh/blockdevice-monitor-prober:v0.2.1026a1d87f6e9
openssl@3.0.7-r0
3.0.19-r0
1
iomesh/blockdevice-monitor-prober:v0.1.0584dbe19db7e
openssl@3.0.7-r0
3.0.19-r0
1
iomesh/csi-driver:v2.8.01a151f602451
openssl@3.0.2-0ubuntu1.16
3.0.2-0ubuntu1.20
1
iomesh/csi-driver:v2.7.25d3f9bf9240b
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.20
1
iomesh/deck:v0.2.0282d6c419ed3
openssl@3.3.1-r3
3.3.5-r0
1
iomesh/deck:v0.1.0a31e26b6ae22
openssl@3.1.4-r5
3.1.8-r1
1
iomesh/deck-plugin-iomesh:v0.1.00b13bf217110
openssl@3.1.4-r5
3.1.8-r1
1
iomesh/deck-plugin-iomesh:v0.2.0df149e4ab39f
openssl@3.3.1-r3
3.3.5-r0
1
iomesh/node-disk-manager:1.8.0-2292ad270082e
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.6
1
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.6
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1
1
iotaledger/hornet:2.001206f1ba89c
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.