CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,801; of 17,821 indexed, latest versions
Container images: 3,326; deployed by those charts
Fix available: 6 of 7; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,801 of 17,821 indexed charts deploy, on 3,326 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more	1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more	2,006
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more	3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0	993
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 more	no fix listed	22
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	1.0.2n-1ubuntu5.13+esm2	21
opensslrpm	1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+30 more	1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7	324
openssl-3rpm	3.2.3-150700.5.18.1	3.2.3-150700.5.21.1	3
openssl-1_1rpm	1.1.1w-150700.11.3.1	1.1.1w-150700.11.6.1	1

OSV records: ALPINE-CVE-2025-9230 CGA-c4v2-6rpm-vq95 DEBIAN-CVE-2025-9230 UBUNTU-CVE-2025-9230 RHSA-2025:21174 RHSA-2025:21255 RHSA-2026:0337 RHSA-2026:1720 RLSA-2025:21255 RLSA-2026:0337 DLA-4321-1 SUSE-SU-2025:03546-1 SUSE-SU-2025:03635-1
Also known as: CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,801 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,966

Container images carrying it

3,326 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container image	Digest	Package	Fixed in	Used by
grafana/tempo :2.5.0	f0200a9bff6d	openssl@3.3.0-r2	3.3.5-r0	2
hanchuanchuan/goinception :latest	b3c0dd26fb50	openssl@3.3.2-r0	3.3.5-r0	2
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	openssl@3.0.9-1	3.0.17-1~deb12u3	2
hookiesolutions/webhookie :latest	0629694246ba	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm1	2
hoppscotch/hoppscotch :2024.8.2	f1da831950b7	openssl@3.1.7-r0	3.1.8-r1	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1	2
ilum/mongodb :6.0.5	42b6d774c37d	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4	2
inaccel/driver :latest	07271a5c2fe7	openssl@3.1.4-r5	3.1.8-r1	2
inaccel/mkrt :latest	187fd448b6f2	openssl@3.0.12-r1	3.0.19-r0	2
inaccel/monitor :2.1	34bb93de386f	openssl@3.1.4-r5	3.1.8-r1	2
interlayhq/interbtc :latest	a66d0e35e70f	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm1	2
interlayhq/interbtc-clients :vault-master	c3e311de67da	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm1	2
istio/examples-bookinfo-reviews-v1 :1.15.0	40e8aba77c1b	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm13	2
istio/examples-bookinfo-reviews-v1 :1.14.0	ee156b8aefd6	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm13	2
istio/examples-bookinfo-reviews-v2 :1.15.0	e86d247b7ac2	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm13	2
istio/examples-bookinfo-reviews-v2 :1.14.0	eab80bcd2132	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm13	2
istio/examples-bookinfo-reviews-v3 :1.14.0	1e37fca43550	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm13	2
istio/examples-bookinfo-reviews-v3 :1.15.0	e454cab754cf	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm13	2
istio/proxyv2 :1.18.0	757d28c24100	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.20	2
istio/proxyv2 :1.10.3	a78b7a165744	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm6	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3	2
juicedata/juicefs-csi-driver :v0.33.0	f918e7331c05	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	2
kiwigrid/k8s-sidecar :1.30.9	8c06e1ba643a	openssl@3.5.1-r0	3.5.4-r0	2
kodekloud/examplevotingapp_vote :v1	3a856afb02a3	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	2
krtk6160/galoy-nostr	cc82a694f818	openssl@3.0.8-r0	3.0.19-r0	2
lachlanevenson/k8s-kubectl :v1.25.4	af5cea3f2e40	openssl@3.0.7-r0	3.0.19-r0	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3	2
ldapaccountmanager/lam :8.0.1	d46cf25d1dda	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	2
library/adminer :4.8.1-standalone	34d37131366c	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4	2
library/cassandra :3.11.6	5aa8400b4b3b	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm6	2
library/cassandra :4.1.3	7cbcec0086ac	openssl@3.0.2-0ubuntu1.13	3.0.2-0ubuntu1.20	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm1	2
library/influxdb :2.6.1-alpine	44a366dd7724	openssl@3.0.8-r3	3.0.19-r0	2
library/mariadb :10.8.3	0abf60f81588	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.20	2
library/mariadb :10.10	334b315c10e5	openssl@3.0.2-0ubuntu1.13	3.0.2-0ubuntu1.20	2
library/mariadb :10.6	92e50059ea0a	openssl@3.0.2-0ubuntu1.26	no fix listed	2
library/mariadb :11.3.2	e101f9db3191	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.20	2
library/mongo :5.0	41108d183e97	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm1	2
library/mongo :4.2.3	58b25d51baa1	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm6	2
library/mongo :7	b096b4cb9269	openssl@3.0.2-0ubuntu1.29	no fix listed	2
library/neo4j :5.20.0	52d3dec8d455	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4	2
library/neo4j :4.3.2-enterprise	56a9453c4064	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	2
library/nginx :1.24-alpine	77e5d4a6ad90	openssl@3.0.12-r4	3.0.19-r0	2
library/nginx :1.27.0	98f8ec75657d	openssl@3.0.13-1~deb12u1	3.0.17-1~deb12u3	2
library/nginx :1.24.0	f6daac2445b0	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4	2
library/phpmyadmin :5.2.1	6e75aa8f767c	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	2
library/postgres :16.1	09f23e02d766	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3	2
library/postgres :16.2	4aea012537ed	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3	2
library/postgres :15.2-alpine	d9c304353c03	openssl@3.0.8-r3	3.0.19-r0	2
library/postgres :16.4	e62fbf9d3e2b	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	2