StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,801
of 17,821 indexed, latest versions
Container images
3,326
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,801 of 17,821 indexed charts deploy, on 3,326 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more2,006
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0993
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm221
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+30 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7324
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,801 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,966

Container images carrying it

3,326 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/kubectl:1.26.4a0a972324d93
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
2
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
2
bitnamilegacy/os-shell:11-debian-11-r722cb5982dcbf4
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4
2
bitnamilegacy/postgresql:14.4.0-debian-11-r237e7ebb082031
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
2
bitnamilegacy/redis:latest5927ff3702df
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
2
bitnamilegacy/zookeeper:3.9.0-debian-11-r1110ed1ea3c8d1
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4
2
bitpoke/mysql-operator:v0.6.3f44fa86ab27e
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
bitpoke/mysql-operator-orchestrator:v0.6.3d86560c75bed
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
blakeblackshear/frigate:0.11.18330b0a265b8
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
2
cculianu/fulcrum:v1.9.76445fb75abea
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
2
clickhouse/clickhouse-server:24.2ed9640bfff07
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm1
2
clickhouse/clickhouse-server:24.3.3.102-alpinef226fe41f057
openssl@3.1.4-r5
3.1.8-r1
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
2
confluentinc/cp-zookeeper:latest7610a50b13e7
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
2
cs3org/wopiserver:v9.4.202a9e78757b4
openssl@3.0.8-r0
3.0.19-r0
2
curlimages/curl:8.15.04026b29997dc
openssl@3.5.1-r0
3.5.4-r0
2
curlimages/curl:8.6.0c3b8bee303c6
openssl@3.1.4-r5
3.1.8-r1
2
daniacobext/airports-frontend:latest9eae4d39fc33
openssl@3.0.9-r1
3.0.19-r0
2
datagrok/grok_connect:latestf5876d3aebb8
openssl@3.0.2-0ubuntu1.26
no fix listed
2
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm1
2
dependencytrack/apiserver:4.6.3485ac0952c02
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
2
devopsfaith/krakend:latestf8bdaa8a1a43
openssl@3.3.3-r0
3.3.5-r0
2
dtzar/helm-kubectl:3.14.455429449408e
openssl@3.1.4-r6
3.1.8-r1
2
epamedp/krci-portal:0.8.0687acf641097
openssl@3.1.4-r5
3.1.8-r1
2
eqalpha/keydb:latest6537505c4235
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm1
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm1
2
ethersphere/bee-localchain:latest0558799ca992
openssl@3.1.4-r5
3.1.8-r1
2
excalidraw/excalidraw:latestf7ee194addd6
openssl@3.3.3-r0
3.3.5-r0
2
falcosecurity/falco-no-driver:0.33.10d427b8d5fc6
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
2
free5gc/upf:v3.4.3b6b362a39fdd
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
2
free5gc/webui:v3.4.39adeb18492cb
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm6
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm1
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm1
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm1
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm1
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm1
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm1
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
openssl@3.0.9-1
3.0.17-1~deb12u3
2
gradiant/open5gs-webui:2.7.5fbd10c017541
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
2
gradiant/ueransim:3.2.6015b30d5fa0f
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.20
2
grafana/agent-operator:v0.25.1a136c6208aa3
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u4
2
grafana/alloy:v1.8.17790f6f7fbd8
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6
2
grafana/grafana:11.1.0079600c9517b
openssl@3.1.4-r5
3.1.8-r1
2
grafana/grafana:11.1.4886b56d5534e
openssl@3.1.4-r5
3.1.8-r1
2
grafana/grafana:11.4.0d8ea37798ccc
openssl@3.3.2-r0
3.3.5-r0
2
grafana/promtail:3.0.0d3de3da9431c
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
2

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.