StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,851
of 17,832 indexed, latest versions
Container images
3,349
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,851 of 17,832 indexed charts deploy, on 3,349 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more2,036
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r01,004
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm220
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+30 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7306
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,851 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

8,128

Container images carrying it

3,349 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
seafileltd/seafile-mc:11.0.12d0c66e4621bd
openssl@3.0.2-0ubuntu1.17
3.0.2-0ubuntu1.20
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm1
1
sealio/hermitcrab:v0.1.4a326a2f03660
openssl@3.1.4-r5
3.1.8-r1
1
seataio/seata-server:latest703b5de7f1a6
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
seldonio/locust-core:0.81d0da98a2d76
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm13
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
seyiogunniran/my-nginx:1.03a0ed39e5830
openssl@3.5.1-r0
3.5.4-r0
1
shamimkuet/nginx:1.0.2b82902a76a04
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
shaowenchen/ops-controller-manager:latest35575d4f2bfe
openssl@3.0.2-0ubuntu1.29
no fix listed
1
shaowenchen/ops-server:latest6bac5cebd125
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20
1
sharanalwar/redchef-backend:latest8d3cab80df49
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
sharanalwar/redchef-frontend:latest5e82950b16b7
openssl@3.3.3-r0
3.3.5-r0
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm6
1
shyamkrishna21/shopsync:latest3998b83def53
openssl@3.3.3-r0
3.3.5-r0
1
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
signald/signald:0.18.20ffad7ccc2eb
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
signald/signald:0.23.2edbff058278c
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
signoz/signoz:v0.142.149501b04d77a
openssl@3.3.2-r0
3.3.5-r0
1
sigp/lighthouse:v7.0.12cae720e9a35
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20
1
sigp/lighthouse:v7.1.0870934e38931
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20
1
sigp/lighthouse:v2.1.2ad501f02cfef
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm1
1
sigp/siren:v3.0.42c219b04758e
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
simpleidserver/faaswebsite:0.0.4367218ae760f
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
sinhasaurabh09/dcn-portal:v1.2c0d08847ddbb
openssl@3.3.2-r1
3.3.5-r0
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
sirrend/helmup-notifications-service:0.1.3997866417011
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
sismics/docs:v1.10f4b0ef019cf1
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm6
1
sissbruecker/linkding:1.35.00c5dddf0b37c
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
sky5367/locust-plugins-grafana:latestd51bf68d4b26
openssl@3.1.4-r5
3.1.8-r1
1
skylenet/ethereum-genesis-generator:latest210353ce7c89
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
skylenet/ethereum-testnet-homepage:latest8698903e379f
openssl@3.0.7-r0
3.0.19-r0
1
slagattollas/weatherservice-practica:latest68e7f56393fc
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm6
1
snipe/snipe-it:v8.3.1141ebf2386fe
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6
1
snipe/snipe-it:v6.0.1455fb7636a98c
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm1
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm1
1
socialmediamacroscope/classification_predict:0.1.24fb86885d64d
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
socialmediamacroscope/classification_split:0.1.24bfda60829fe
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
socialmediamacroscope/classification_train:0.1.207477060bba8
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
socialmediamacroscope/clowder_create_collection:0.1.0c969f7677983
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
socialmediamacroscope/clowder_create_dataset:0.1.09b4211832429
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
socialmediamacroscope/clowder_create_space:0.1.0999f2ff2c128
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
socialmediamacroscope/clowder_list:0.1.051cb17626519
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
socialmediamacroscope/clowder_upload_file:0.1.274e35f64db68
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
openssl@1.1.1-1ubuntu2.1~18.04.22
1.1.1-1ubuntu2.1~18.04.23+esm6
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
openssl@3.0.9-1
3.0.17-1~deb12u3
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
openssl@1.1.1-1ubuntu2.1~18.04.22
1.1.1-1ubuntu2.1~18.04.23+esm6
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
openssl@3.0.9-1
3.0.17-1~deb12u3
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
openssl@3.0.9-1
3.0.17-1~deb12u3
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.