StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,735
of 17,792 indexed, latest versions
Container images
3,257
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,735 of 17,792 indexed charts deploy, on 3,257 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more1,963
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0969
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm215
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+29 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7322
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,735 by stars
ChartLatestAffected imagesRadar Score
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.20

Open the chart page →

13,033
calertdevtron-labs0.0.11 of 1See more

calert devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

4,699
calicodevtron-labs0.1.11 of 4See more

calico devtron-labs 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/devtron/calico-networking:node-v3.19.1bc4aa22272ef
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10

Open the chart page →

10,094
clairdevtron-labs0.1.141 of 2See more

clair devtron-labs 0.1.14

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/devtron/clair:4.3.675fb847ac045
openssl@1:1.1.1k-5.el8_5
1:1.1.1k-14.el8_10

Open the chart page →

6,237
devtron-enterprisedevtron-labs48.0.09 of 28See more

devtron-enterprise devtron-labs 48.0.0

9 of the 28 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
quay.io/devtron/devtron-utils:geni-v1.1.4f6269309455a
openssl@3.1.4-r5
3.1.8-r1
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
openssl@3.3.2-r4
3.3.5-r0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
openssl@3.3.2-r4
3.3.5-r0
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm13
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
openssl@3.3.2-r4
3.3.5-r0
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
openssl@3.3.2-r4
3.3.5-r0
quay.io/devtron/postgres:14.91b594392f7cb
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
quay.io/devtron/silver-surfer:e3b9a2f6-1191-387899640e2dc4316
openssl@3.0.15-r0
3.0.19-r0

Open the chart page →

68,765
devtron-logs-dumpdevtron-labs0.1.01 of 1See more

devtron-logs-dump devtron-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.20

Open the chart page →

4,979
devtron-operatordevtron-labs0.23.32 of 11See more

devtron-operator devtron-labs 0.23.3

2 of the 11 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
quay.io/devtron/postgres:14.91b594392f7cb
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

33,219
dgraphdevtron-labs0.0.201 of 1See more

dgraph devtron-labs 0.0.20

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

11,981
jcmhproxy-ingressdevtron-labs0.14.61 of 1See more

jcmhproxy-ingress devtron-labs 0.14.6

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/devtron/jcmhproxy-ingress:v0.14.64286bcccda3e
openssl@3.1.4-r4
3.1.8-r1

Open the chart page →

1,379
migration-incluster-cddevtron-labs0.10.01 of 1See more

migration-incluster-cd devtron-labs 0.10.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

3,927
eoloplannerdfa-amm-eoloplannerVerified publisher0.1.02 of 7See more

eoloplanner dfa-amm-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm6
oscarsotosanchez/weatherservice:v1.0911ec961d10b
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

27,676
dial-admindialVerified publisher0.18.01 of 3See more

dial-admin dial 0.18.0

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

4,083
difydify1.0.03 of 4See more

dify dify 1.0.0

3 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
langgenius/dify-sandbox:0.2.009b7e8705673
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
langgenius/dify-web:1.0.0d64914ff0d6d
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

19,513
pagesdipak1.0.02 of 3See more

pages dipak 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm1
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

20,262
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

4,553
direktivdirektivVerified publisher0.10.02 of 6See more

direktiv direktiv 0.10.0

2 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
victoriametrics/victoria-logs:v1.15.0-victorialogsd7435244eb19
openssl@3.3.3-r0
3.3.5-r0
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.5-r0

Open the chart page →

3,480
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
postgis/postgis:15-3.3a2fc46b52819
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4

Open the chart page →

7,549
alertifydjjudas21Verified publisher0.1.01 of 1See more

alertify djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
djjudas21/alertify:0.1.0ba22be670c37
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

2,402
bearhugmugsdjjudas21Verified publisher0.1.01 of 1See more

bearhugmugs djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
djjudas21/bearhugmugs:0.1.14fa898a52d97
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

704
dbdumpdjjudas21Verified publisher0.0.171 of 1See more

dbdump djjudas21 0.0.17

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
djjudas21/dbdump:0.0.917fc245e29bd
openssl@3.1.4-r5
3.1.8-r1

Open the chart page →

654
domainmoddjjudas21Verified publisher1.0.01 of 1See more

domainmod djjudas21 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.04017bfe4c597
openssl@3.0.9-1
3.0.17-1~deb12u3

Open the chart page →

7,322
ecowitt-exporterdjjudas21Verified publisher2.2.21 of 1See more

ecowitt-exporter djjudas21 2.2.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
djjudas21/ecowitt-exporter:2.2.073aab45ef10d
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

1,006
hammonddjjudas21Verified publisher0.3.91 of 1See more

hammond djjudas21 0.3.9

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
alfhou/hammond:v0.0.24c85dc0293aa1
openssl@3.1.4-r2
3.1.8-r1

Open the chart page →

1,807
liturgical-colourdjjudas21Verified publisher99.99.991 of 1See more

liturgical-colour djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
djjudas21/liturgical-colour-app:0.7.2954935971d42
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

873
nova-exporterdjjudas21Verified publisher0.1.161 of 1See more

nova-exporter djjudas21 0.1.16

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
djjudas21/nova-exporter:0.0.10e9094580885c
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

1,412
ownclouddjjudas21Verified publisher0.3.232 of 3See more

owncloud djjudas21 0.3.23

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
owncloud/server:10.16.3b3f9efdcd7f7
openssl@3.0.2-0ubuntu1.25
no fix listed

Open the chart page →

10,199
photoprismdjjudas21Verified publisher99.99.991 of 1See more

photoprism djjudas21 99.99.99

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
photoprism/photoprism:240711-cefc6fd632ca74
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.6

Open the chart page →

17,129
smokepingdjjudas21Verified publisher0.1.31 of 1See more

smokeping djjudas21 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
linuxserver/smokeping:2.8.2b7f906899cd3
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

2,054
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
openssl@3.5.1-1
3.5.1-1+deb13u1

Open the chart page →

5,304
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

14,713
dnation-kubernetes-jsonnet-translatordnationcloud2.0.11 of 1See more

dnation-kubernetes-jsonnet-translator dnationcloud 2.0.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

3,845
dnation-kubernetes-monitoringdnationcloud3.0.21 of 1See more

dnation-kubernetes-monitoring dnationcloud 3.0.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

3,845
dnation-kubernetes-monitoring-stackdnationcloud4.0.26 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

6 of the 17 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
openssl@3.3.2-r0
3.3.5-r0
library/memcached:1.6.32-alpine0a27d9d5084f
openssl@3.3.2-r1
3.3.5-r0
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
openssl@3.3.3-r0
3.3.5-r0
quay.io/minio/mc:RELEASE.2022-10-20T23-26-33Z50ee58bc9770
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

21,767
api-postsdniel0.9.11 of 1See more

api-posts dniel 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dniel/api-posts:master45a667852f2a
openssl@1.1.1-1ubuntu2.1~18.04.4
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

9,003
docker-authdocker-auth1.14.01 of 1See more

docker-auth docker-auth 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.14.098e0307e0d2d
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

1,514
sshddocker-sshdVerified publisher0.1.01 of 1See more

sshd docker-sshd 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
registry.gitlab.com/vicamo/docker-sshd/sshd:3.0-stable22c33d693fe2
openssl@1.1.1k-1
1.1.1w-0+deb11u4

Open the chart page →

829
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

2,865
dominodomino-iisasVerified publisher0.3.11 of 3See more

domino domino-iisas 0.3.1

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/iisas/domino-frontend:k8s8e53861be292
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

10,393
doris-foundationdbdorisVerified publisher25.8.01 of 4See more

doris-foundationdb doris 25.8.0

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
foundationdb/fdb-kubernetes-operator:v2.3.07d7b6985291e
openssl@1:3.2.2-6.el9_5
1:3.5.1-4.el9_7

Open the chart page →

3,195
codecovdoubanVerified publisher0.2.42 of 8See more

codecov douban 0.2.4

2 of the 8 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
codecov/self-hosted-frontend:24.4.1534bc4778073
openssl@3.0.12-r4
3.0.19-r0
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.20

Open the chart page →

24,986
goinceptiondoubanVerified publisher0.3.11 of 2See more

goinception douban 0.3.1

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
hanchuanchuan/goinception:latestb3c0dd26fb50
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

1,208
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

4,551
kafka-uidoubanVerified publisher1.5.21 of 1See more

kafka-ui douban 1.5.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,270
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

11,848
tinyproxy-exporterdoubanVerified publisher0.1.21 of 1See more

tinyproxy-exporter douban 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/leoquote/tinyproxy_exporter:master6b4103d88dbb
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

3,422
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.02 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

2 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm6
oscarsotosanchez/weatherservice:v1.0911ec961d10b
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

24,781
drogue-cloud-coredrogue-iotVerified publisher0.7.1120 of 22See more

drogue-cloud-core drogue-iot 0.7.11

20 of the 22 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
openssl@1:3.0.1-43.el9_0
1:3.5.1-4.el9_7
quay.io/keycloak/keycloak:20.0054ef67eb7da
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

55,991
drogue-cloud-examplesdrogue-iotVerified publisher0.7.114 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

4 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
openssl@3.0.2-0ubuntu1.2
3.0.2-0ubuntu1.20
ghcr.io/ctron/kubectl:1.25e37d61b5277c
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_10
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
openssl@1:1.1.1k-5.el8_5
1:1.1.1k-14.el8_10
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
openssl@1:1.1.1k-5.el8_5
1:1.1.1k-14.el8_10

Open the chart page →

30,778
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

6,916
duckdb-uiduckdb-ui0.5.21 of 1See more

duckdb-ui duckdb-ui 0.5.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

4,465

Container images carrying it

3,257 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
victoriametrics/victoria-logs:v1.15.0-victorialogsd7435244eb19
openssl@3.3.3-r0
3.3.5-r0
1
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
openssl@3.5.0-r0
3.5.4-r0
1
victoriametrics/vmalert:v1.96.0150cd08fde94
openssl@3.1.4-r2
3.1.8-r1
1
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
openssl@1.1.1-1ubuntu2.1~18.04.10
1.1.1-1ubuntu2.1~18.04.23+esm6
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nodejs@16.19.1-deb-1nodesource1
openssl@1.1.1-1ubuntu2.1~18.04.21
no fix listed
1.1.1-1ubuntu2.1~18.04.23+esm6
1
vincentgwzhang/k8sforjava:latesta9139f2cd98f
openssl@3.3.2-r0
3.3.5-r0
1
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-14.el8_10
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
visualregressiontracker/ui:5.0.4ca7835844257
openssl@3.0.10-r0
3.0.19-r0
1
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
1
vlebediantsev/config-server-another:lateste7f20450d2ae
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
vlebediantsev/file-system-ms-final:latest10393a89b4a8
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
vlebediantsev/logic-ms:latestdf8bf38c535b
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
vlebediantsev/notes-admin-front:latest007c6670ff48
openssl@3.0.9-1
3.0.17-1~deb12u3
1
vlebediantsev/notes-project-front:latest945675fd2636
openssl@3.0.9-1
3.0.17-1~deb12u3
1
vlebediantsev/registration-ms-final:latest427af418b75e
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
openssl@3.0.9-1
3.0.17-1~deb12u3
1
vlebediantsev/user-data-ms-final-final:latest9319437f3c8f
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
volcanosh/vc-controller-manager:v1.12.13815883c32f6
openssl@3.5.0-r0
3.5.4-r0
1
volcanosh/vc-scheduler:v1.12.1b24ea8af2d16
openssl@3.5.0-r0
3.5.4-r0
1
volcanosh/vc-webhook-manager:v1.12.1f8b50088a732
openssl@3.5.0-r0
3.5.4-r0
1
volkerraschek/postfixadmin:3.3.13c4f10aebf87b
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
volkerraschek/postfixadmin-fetchmail:0.3.0e4cf12c6249d
openssl@3.0.7-r2
3.0.19-r0
1
voltha/voltha-cli:1.6.0c4e41e92f046
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.20+esm13
1
voltha/voltha-envoy:1.6.059ab2a00f712
openssl@1.0.1f-1ubuntu2.27
1.0.1f-1ubuntu2.27+esm11
1
voltha/voltha-netconf:1.6.037f80524c207
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.20+esm13
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.20+esm13
1
voltha/voltha-onos:5.1.8e038acb950d3
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm6
1
voltha/voltha-tester:1.7.0655c3048a602
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm13
1
voltha/voltha-voltha:1.6.0ff596b62de59
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.20+esm13
1
vrijbrp/haal-centraal-brp-bevragen:develop5c770c2ae48c
openssl@3.0.8-r0
3.0.19-r0
1
wagnermanganelli164/webserver-hello-world:0.3.0d4ef27a4f180
openssl@3.3.1-r3
3.3.5-r0
1
wait4x/wait4x:3.3.14dcd86307de1
openssl@3.3.3-r0
3.3.5-r0
1
wallarm/ingress-tarantool:4.6.0-1ba00516618ea
openssl@3.0.8-r0
3.0.19-r0
1
wallarm/kong:3.1.0-ubuntu-4.6.0ea9608c82e40
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm1
1
wallarm/node-next:0.5.24314f3d2b918
openssl@3.3.2-r0
3.3.5-r0
1
wallarm/sidecar-controller:1.8.0524f7e6e8c35
openssl@3.3.4-r0
3.3.5-r0
1
wateim/lighthouse-launch:latest2520149ee574
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.20
1
wavefronthq/proxy:9.2d1064d28f6eb
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm6
1
wazuh/wazuh-manager:4.4.121994f40e0da
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm1
1
wistefan/mvf:lateste0887302b2d8
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.20
1
witcherek7/pav:0.0.342a744f29ac0
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
wmbusmeters/wmbusmeters:release-1.18.0d82715d9ae22
openssl@3.3.2-r0
3.3.5-r0
1
wolveix/satisfactory-server:v1.9.1199be1064b18
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.20
1
wolveix/satisfactory-server:v1.9.9464d11e36e10
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20
1
woojoong/wowza:latestec230db19652
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm6
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
openssl@3.0.2-0ubuntu1.16
no fix listed
3.0.2-0ubuntu1.20
1
xeladock/mysql_dns:latest4baf531453f1
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.20
1
xeladock/nginx2:latestc259a67b1dff
openssl@3.0.2-0ubuntu1
3.0.2-0ubuntu1.20
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.