StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,851
of 17,832 indexed, latest versions
Container images
3,349
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,851 of 17,832 indexed charts deploy, on 3,349 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more2,036
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r01,004
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm220
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+30 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7306
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,851 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

8,128

Container images carrying it

3,349 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
phntom/postgresql-backup-s3:1.0.2249b6488f618b
openssl@3.0.7-r0
3.0.19-r0
1
photoprism/photoprism:220629-jammy2954334adbda
openssl@3.0.2-0ubuntu1.5
3.0.2-0ubuntu1.20
1
photoprism/photoprism:240711-cefc6fd632ca74
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.6
1
phpipam/phpipam-cron:v1.7.354468713454e
openssl@3.3.2-r1
3.3.5-r0
1
phpipam/phpipam-www:v1.7.3ace0efd24830
openssl@3.3.2-r1
3.3.5-r0
1
phpmyadmin/phpmyadmin:5.138437e021deb
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
openssl@3.5.1-1
3.5.1-1+deb13u1
1
pihole/pihole:2023.05.0b83258064f54
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
pk910/powfaucet:v2-stable3dcae6a62896
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
platform9community/admin-server:latestde3fa9b70df1
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm6
1
platform9community/api-gateway:latest40a4970de568
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm6
1
platform9community/customers-service:latest2089811e5cc6
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm6
1
platform9community/vets-service:latestd1165c94dfb3
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm6
1
platform9community/visits-service:latest8d11b50368c6
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm6
1
platzio/backend:v0.6.5d5e5972f344b
openssl@3.5.1-r0
3.5.4-r0
1
platzio/frontend:v0.6.073083749b46a
openssl@3.5.1-r0
3.5.4-r0
1
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm1
1
plexinc/pms-docker:1.19.5.3112-b23ab3896b598abb134ad
openssl@1.0.2g-1ubuntu4.16
1.0.2g-1ubuntu4.20+esm13
1
pmoscode/axelor-open-suite:v7.2.57a58f4d762f5c
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
1
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
1
pnnlmiscscripts/k8s-node-image:1.22.17-nginx-362b3ae9b5ec25
openssl@3.1.5-r0
3.1.8-r1
1
pnnlmiscscripts/k8s-node-image:1.24.17-nginx-23952d87cca3d2
openssl@3.1.5-r0
3.1.8-r1
1
pnnlmiscscripts/k8s-node-image:1.23.17-nginx-36a5ee1dea30e4
openssl@3.1.5-r0
3.1.8-r1
1
pnnlmiscscripts/k8s-node-image:1.21.14-nginx-36c19a40d7435d
openssl@3.1.5-r0
3.1.8-r1
1
pnnlmiscscripts/k8s-node-image9:1.28.15-nginx-72b91d6a46e06
openssl@3.3.2-r0
3.3.5-r0
1
pnnlmiscscripts/k8s-node-image9:1.25.16-nginx-772c202c43c0aa
openssl@3.3.2-r0
3.3.5-r0
1
pnnlmiscscripts/k8s-node-image9:1.24.17-nginx-882c8dc938b2f9
openssl@3.3.2-r0
3.3.5-r0
1
pnnlmiscscripts/k8s-node-image9:1.27.16-nginx-306e1a36d646a3
openssl@3.3.2-r0
3.3.5-r0
1
pnnlmiscscripts/k8s-node-image9:1.23.17-nginx-3479ada675515f
openssl@3.0.10-r0
3.0.19-r0
1
pnnlmiscscripts/k8s-node-image9:1.26.15-nginx-579785e5b82334
openssl@3.3.2-r0
3.3.5-r0
1
pnnlmiscscripts/k8s-node-image9:1.22.17-nginx-34b85e437ae261
openssl@3.0.10-r0
3.0.19-r0
1
pnnlmiscscripts/k8s-node-image9:1.31.7-nginx-7e3e189d9d519
openssl@3.3.3-r0
3.3.5-r0
1
pnnlmiscscripts/k8s-node-image9:1.30.11-nginx-7f9297eea817d
openssl@3.3.3-r0
3.3.5-r0
1
pnnlmiscscripts/k8s-node-image9:1.21.14-nginx-33fa8f5906d36a
openssl@3.0.10-r0
3.0.19-r0
1
pnnlmiscscripts/k8s-node-image9:1.29.10-nginx-7fcd82530bc8b
openssl@3.3.2-r0
3.3.5-r0
1
pococze/python-hello-elos:2.0.07a1aab425e51
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
pomerium/pomerium:v0.22.19c69b10a2126
openssl@1.1.1k-1+deb11u2
1.1.1w-0+deb11u4
1
postgis/postgis:17-3.4-alpine5a1dbedac34e
openssl@3.3.2-r0
3.3.5-r0
1
pozetroninc/keydb:v6.0.1653ae64f29da8
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm6
1
praravind1801/helmimages:3.0.0f29d637b9ce1
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
prodrigestivill/postgres-backup-local:12-alpine-8d72d2d6ed2afadc326
openssl@3.0.8-r3
3.0.19-r0
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
openssl@3.5.1-1
3.5.1-1+deb13u1
1
project2team4/react:latest3ff031a08887
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.6
1
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
openssl@3.1.4-r5
3.1.8-r1
1
promzeus/redis-sentinel-gateway:v182f6d56e280b
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
proxysql/proxysql:2.5.537eb7e46d947
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4
1
proxysql/proxysql:2.3.08d710e80c77b
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.