StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,850
of 17,837 indexed, latest versions
Container images
3,342
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,850 of 17,837 indexed charts deploy, on 3,342 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more2,034
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r01,002
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm220
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+30 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7303
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,850 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

3,342 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
langgenius/dify-api:1.0.0066035f93856
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
langgenius/dify-api:0.6.11fca918260dd6
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
langgenius/dify-web:0.6.11a2a294743634
openssl@3.1.4-r5
3.1.8-r1
1
langgenius/dify-web:1.0.0d64914ff0d6d
openssl@3.3.3-r0
3.3.5-r0
1
lavandadelpatio/filebot-bot:0.0.1-SNAPSHOTd2cba20aa4d8
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
lavandadelpatio/torznab-atomohd:latest214eaef5444c
openssl@3.0.8-r3
3.0.19-r0
1
layer5/meshery:stable-latest78a8be21bef3
openssl@3.3.3-r0
3.3.5-r0
1
layer5/meshery-app-mesh:stable-latest77d59943b3d6
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
layer5/meshery-consul:stable-latest25a4cc38abcd
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
layer5/meshery-istio:stable-latestfde47c141ec6
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
layer5/meshery-kuma:stable-latest9d25f029a8a2
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
layer5/meshery-linkerd:stable-latestb99c73bac1f5
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
layer5/meshery-nginx-sm:stable-latestb3864dfd47ad
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
layer5/meshery-osm:stable-latestec898e5786c6
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
leantime/leantime:3.3.3ad4bfb0699d3
openssl@3.3.2-r1
3.3.5-r0
1
leonardomulticloud/svc-vault:v1.0.0e4acd2fbb7b1
openssl@3.0.15-r0
3.0.19-r0
1
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
openssl@3.3.2-r1
3.3.5-r0
1
leonardomulticloud/webhook:v1.0.0d119918900e8
openssl@3.0.15-r0
3.0.19-r0
1
lib42/deluge:20c4d1d326f95
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
lib42/jackett:latesta55596cda383
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
library/bash:5.2.21a422913be6a4
openssl@3.1.4-r2
3.1.8-r1
1
library/caddy:2.9-alpineb4e3952384eb
openssl@3.3.3-r0
3.3.5-r0
1
library/cassandra:3.11.10b095ff3248c6
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm1
1
library/docker:27.0.1-dind2416984b43dd
openssl@3.3.1-r0
3.3.5-r0
1
library/docker:20.10.21-dind3153fa63f546
openssl@3.0.7-r0
3.0.19-r0
1
library/docker:27-cli851f91d24121
openssl@3.3.3-r0
3.3.5-r0
1
library/docker:27-dindaa3df78ecf32
openssl@3.3.3-r0
3.3.5-r0
1
library/docker:23.0.1-dindd9a0fd8bdd15
openssl@3.0.8-r1
3.0.19-r0
1
library/docker:26.1-dinddd43b430341a
openssl@3.3.1-r3
3.3.5-r0
1
library/eclipse-mosquitto:2.0.2021421af7b32b
openssl@3.3.3-r0
3.3.5-r0
1
library/elasticsearch:8.17.32cc40b15dff8
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm1
1
library/elasticsearch:8.15.0310b9fc03b06
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24+esm1
1
library/elasticsearch:7.17.0332c6d416808
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm1
1
library/elasticsearch:7.17.1588c2ec10c7f2
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm1
1
library/elasticsearch:7.16.18d5fd89230d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm1
1
library/elasticsearch:7.17.8fdc73b3249c1
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm1
1
library/flink:1.14.6-scala_2.122461f02672b3
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.20
1
library/ghost:4.37.0767230c0f263
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
library/haproxy:2.3078319f4e37b
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
library/haproxy:3.1-bookworm49a0a0d6f0b8
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
library/haproxy:2.9.4-alpinea94fdb1ad868
openssl@3.1.4-r5
3.1.8-r1
1
library/haproxy:2.9.6fc5748ff7c72
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
library/httpd:2.4.631ae8051591a5
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
library/httpd:2.4.54ee2117e77c35
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
library/kibana:7.17.150172f1c538e7
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm1
1
library/kibana:8.18.004c0fc150f3a
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm1
1
library/kibana:7.17.8c5781ba340ef
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm1
1
library/kibana:7.17.3e2e2031c15be
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1
1
library/kong:3.8.0fd78090e9e77
openssl@3.0.2-0ubuntu1.29
no fix listed
1
library/logstash:7.17.817a4f64e9cf5
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm1
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.