CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,851; of 17,832 indexed, latest versions
Container images: 3,349; deployed by those charts
Fix available: 6 of 7; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,851 of 17,832 indexed charts deploy, on 3,349 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more	1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more	2,036
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more	3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0	1,004
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 more	no fix listed	22
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	1.0.2n-1ubuntu5.13+esm2	20
opensslrpm	1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+30 more	1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7	306
openssl-3rpm	3.2.3-150700.5.18.1	3.2.3-150700.5.21.1	3
openssl-1_1rpm	1.1.1w-150700.11.3.1	1.1.1w-150700.11.6.1	1

OSV records: ALPINE-CVE-2025-9230 CGA-c4v2-6rpm-vq95 DEBIAN-CVE-2025-9230 UBUNTU-CVE-2025-9230 RHSA-2025:21174 RHSA-2025:21255 RHSA-2026:0337 RHSA-2026:1720 RLSA-2025:21255 RLSA-2026:0337 DLA-4321-1 SUSE-SU-2025:03546-1 SUSE-SU-2025:03635-1
Also known as: CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,851 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

8,128

Container images carrying it

3,349 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/nginx :1.27	6784fb0834aa	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3	1
library/nginx :1.25.1	67f9a4f10d14	openssl@3.0.9-1	3.0.17-1~deb12u3	1
library/nginx :1.25.4	9ff236ed47fe	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3	1
library/nginx :1.23.2	ab589a3c466e	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
library/nginx :1.23.3	f4e3b6489888	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4	1
library/nginx :1.23	f5747a42e3ad	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4	1
library/nginx :1.27.3	fb197595ebe7	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	1
library/node :18-alpine	8d6421d663b4	openssl@3.3.3-r0	3.3.5-r0	1
library/php :7.3-apache	b9872cd287ef	openssl@1.1.1k-1+deb11u2	1.1.1w-0+deb11u4	1
library/postgres :13.7	03652c675ae1	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
library/postgres :18.0	073e7c8b84e2	openssl@3.5.1-1	3.5.1-1+deb13u1	1
library/postgres :14.3	2d1e636f0778	openssl@1.1.1n-0+deb11u2	1.1.1w-0+deb11u4	1
library/postgres :17.4	304ab8135187	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	1
library/postgres :12.14-alpine3.17	4b100eafe128	openssl@3.0.8-r3	3.0.19-r0	1
library/postgres :16.6	557fea37a744	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	1
library/postgres :13.11-bullseye	5c265bf1fd30	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u4	1
library/postgres :17.5-alpine	6567bca8d7bc	openssl@3.5.1-r0	3.5.4-r0	1
library/postgres :17.4-alpine	7062a2109c4b	openssl@3.3.3-r0	3.3.5-r0	1
library/postgres :12-alpine	7c8f48705831	openssl@3.3.2-r4	3.3.5-r0	1
library/postgres :17.2-alpine	7e5df973a748	openssl@3.3.2-r4	3.3.5-r0	1
library/postgres :15.3	8775adb39f0d	openssl@3.0.9-1	3.0.17-1~deb12u3	1
library/postgres :16.2-alpine	951bfda46030	openssl@3.1.4-r5	3.1.8-r1	1
library/postgres :17.5	aadf2c0696f5	openssl@3.5.1-1	3.5.1-1+deb13u1	1
library/postgres :13.12	ced3ba927f4c	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3	1
library/postgres :14.0	db927beee892	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u4	1
library/postgres :15.3-alpine3.17	f3e018bec283	openssl@3.0.10-r0	3.0.19-r0	1
library/postgres :14.6	f565573d74ae	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4	1
library/postgres :17.5-bookworm	fbcea1bd13b6	openssl@3.0.17-1~deb12u2	3.0.17-1~deb12u3	1
library/python :3.8-alpine	3d93b1f77efc	openssl@3.3.2-r0	3.3.5-r0	1
library/python :3.8	d41127070014	openssl@3.0.14-1~deb12u2	3.0.17-1~deb12u3	1
library/python :3.12.9-bullseye	ed4450bab88f	openssl@1.1.1w-0+deb11u2	1.1.1w-0+deb11u4	1
library/rabbitmq :3.12.10	0742852455ad	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.20	1
library/rabbitmq :3.12-management-alpine	0b44fbcc3a4b	openssl@3.3.2-r0	3.3.5-r0	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1	1
library/rabbitmq :3.13.1-alpine	4bcec9fde55c	openssl@3.1.4-r5	3.1.8-r1	1
library/rabbitmq :3.12-alpine	97907aceae0a	openssl@3.3.2-r0	3.3.5-r0	1
library/rabbitmq :3.13.0-alpine	b4abd8d41c68	openssl@3.1.4-r5	3.1.8-r1	1
library/rabbitmq :3.7-management	b6dd45cc35b3	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm6	1
library/redis :7.0.4	091a7b5de688	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
library/redis :6.0.16-alpine	0f0e2fa71653	openssl@3.0.7-r2	3.0.19-r0	1
library/redis :7.0.15	352c1fdadc91	openssl@3.0.14-1~deb12u2	3.0.17-1~deb12u3	1
library/redis :8.2.1	5fa2edb1e408	openssl@3.0.17-1~deb12u2	3.0.17-1~deb12u3	1
library/redis :7-bullseye	6a5130174e14	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u4	1
library/redis :7.2.5-alpine	6aaf3f5e6bc8	openssl@3.3.2-r0	3.3.5-r0	1
library/redis	83edc2b8e9ff	openssl@3.0.17-1~deb12u2	3.0.17-1~deb12u3	1
library/redis :7.0.10	92b8b307ee28	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4	1
library/redis :8.0.2	b43d2dcbbdb1	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3	1
library/redis :7.4.1	bb142a9c18ac	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	1
library/redis :8.0.3	be0a135f1955	openssl@3.0.17-1~deb12u2	3.0.17-1~deb12u3	1
library/redis :7.4.1-alpine	c1e88455c852	openssl@3.3.2-r1	3.3.5-r0	1