CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,840; of 17,837 indexed, latest versions
Container images: 3,331; deployed by those charts
Fix available: 6 of 7; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,840 of 17,837 indexed charts deploy, on 3,331 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more	1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more	2,023
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more	3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0	1,001
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 more	no fix listed	22
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	1.0.2n-1ubuntu5.13+esm2	20
opensslrpm	1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+30 more	1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7	304
openssl-3rpm	3.2.3-150700.5.18.1	3.2.3-150700.5.21.1	3
openssl-1_1rpm	1.1.1w-150700.11.3.1	1.1.1w-150700.11.6.1	1

OSV records: ALPINE-CVE-2025-9230 CGA-c4v2-6rpm-vq95 DEBIAN-CVE-2025-9230 UBUNTU-CVE-2025-9230 RHSA-2025:21174 RHSA-2025:21255 RHSA-2026:0337 RHSA-2026:1720 RLSA-2025:21255 RLSA-2026:0337 DLA-4321-1 SUSE-SU-2025:03546-1 SUSE-SU-2025:03635-1
Also known as: CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,840 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

3,331 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/matomo :5.1.2-apache	2415789e1602	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	1
library/memcached :1.6.29-alpine	462ae4a35c26	openssl@3.3.1-r3	3.3.5-r0	1
library/memcached :1.6.26-alpine	8906e7654a20	openssl@3.1.4-r5	3.1.8-r1	1
library/memcached :1.6.38-alpine	e93269864a7d	openssl@3.5.1-r0	3.5.4-r0	1
library/memcached :1.6.24-alpine	eff78098089f	openssl@3.1.4-r5	3.1.8-r1	1
library/mongo :7.0.14	0032d2ca20db	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.20	1
library/mongo :4.4.13	05678ae4e5e1	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm1	1
library/mongo :3.6	146c1fd999a6	openssl@1.0.2g-1ubuntu4.19	1.0.2g-1ubuntu4.20+esm13	1
library/mongo :5.0.32-focal	3b6c281e1c08	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm1	1
library/mongo :4.4-bionic	3d0e6df9fd5b	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm6	1
library/mongo :5.0.14-focal	50cae5081ab4	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1	1
library/mongo :6.0.12	646902910d6a	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.20	1
library/mongo :4.2	699d652ed674	openssl@1.1.1-1ubuntu2.1~18.04.23	1.1.1-1ubuntu2.1~18.04.23+esm6	1
library/mongo :4.2.1	6ca49afbcb2b	openssl@1.1.1-1ubuntu2.1~18.04.4	1.1.1-1ubuntu2.1~18.04.23+esm6	1
library/mongo :6.0.2	71a63fc2438e	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1	1
library/mongo :5.0.21	7c81758cb295	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm1	1
library/mongo :7.0.28-jammy	88785f6f665a	openssl@3.0.2-0ubuntu1.20	no fix listed	1
library/mongo :4.2.21-bionic	9cb28f7291d9	openssl@1.1.1-1ubuntu2.1~18.04.20	1.1.1-1ubuntu2.1~18.04.23+esm6	1
library/mongo :7.0.12	ae1cf99fa7bf	openssl@3.0.2-0ubuntu1.17	3.0.2-0ubuntu1.20	1
library/mongo :4.4.18	d23ec07162ca	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1	1
library/mongo :8.0.11	dca8d11fe467	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.6	1
library/mongo-express :1.0.2-20-alpine3.19	1aae00775251	openssl@3.1.7-r0	3.1.8-r1	1
library/monica :3.7.0-apache	ceb1ba4196ab	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
library/nats :2.10.25-alpine	3290c829aa05	openssl@3.3.3-r0	3.3.5-r0	1
library/nats :2.11.9-alpine	777787bbb4c7	openssl@3.5.1-r0	3.5.4-r0	1
library/nats :2.10.17-alpine	b7752304692b	openssl@3.3.1-r0	3.3.5-r0	1
library/nats :2.10.12-alpine	bca70839d953	openssl@3.1.4-r5	3.1.8-r1	1
library/nats :2.9.11-alpine	ccbe811b8575	openssl@3.0.7-r2	3.0.19-r0	1
library/neo4j :4.2.4	348e3f56faa2	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
library/neo4j :4.4.4	3c9fea42bd5a	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
library/neo4j :5.18.1	8f01f7bb053e	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4	1
library/nextcloud :31.0.6-apache	588609d76b21	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3	1
library/nginx :1.27.4	09369da6b103	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	1
library/nginx :1.27.0-alpine3.19	208b70eefac1	openssl@3.1.6-r2	3.1.8-r1	1
library/nginx :1.25.5-alpine-slim	22414422d1ba	openssl@3.1.4-r6	3.1.8-r1	1
library/nginx :1.23.0	3536d368b898	openssl@1.1.1n-0+deb11u2	1.1.1w-0+deb11u4	1
library/nginx :1.27-alpine	65645c7bb6a0	openssl@3.3.3-r0	3.3.5-r0	1
library/nginx :1.27	6784fb0834aa	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3	1
library/nginx :1.25.1	67f9a4f10d14	openssl@3.0.9-1	3.0.17-1~deb12u3	1
library/nginx :1.25.4	9ff236ed47fe	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3	1
library/nginx :1.23.2	ab589a3c466e	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
library/nginx :1.23.3	f4e3b6489888	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4	1
library/nginx :1.23	f5747a42e3ad	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4	1
library/nginx :1.27.3	fb197595ebe7	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	1
library/node :18-alpine	8d6421d663b4	openssl@3.3.3-r0	3.3.5-r0	1
library/php :7.3-apache	b9872cd287ef	openssl@1.1.1k-1+deb11u2	1.1.1w-0+deb11u4	1
library/postgres :13.7	03652c675ae1	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
library/postgres :18.0	073e7c8b84e2	openssl@3.5.1-1	3.5.1-1+deb13u1	1
library/postgres :14.3	2d1e636f0778	openssl@1.1.1n-0+deb11u2	1.1.1w-0+deb11u4	1
library/postgres :17.4	304ab8135187	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	1