StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,737
of 17,790 indexed, latest versions
Container images
3,261
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,737 of 17,790 indexed charts deploy, on 3,261 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more1,966
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0970
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm215
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+29 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7322
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,737 by stars
ChartLatestAffected imagesRadar Score
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.23 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
openssl@3.0.17-1~deb12u1
3.0.17-1~deb12u3
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

10,625
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
instill/console:0.68.54cd70e2df5c6
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

31,122
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.6

Open the chart page →

4,363
wireguardk8s-home-lab-repo1.6.01 of 1See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,378
k8s-sftp-gcsk8s-sftp-gcsVerified publisher0.1.41 of 1See more

k8s-sftp-gcs k8s-sftp-gcs 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
danuk/k8s-sftp-gcs:latestdd0e6585c44f
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

1,606
kraken-cikraken-ciVerified publisher1.7.361 of 10See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

7,303
me-untethr-nostr-relaykronkltdVerified publisher0.1.41 of 1See more

me-untethr-nostr-relay kronkltd 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

2,073
kubebadgeskubebadges0.1.31 of 2See more

kubebadges kubebadges 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
neosu/kubebadges:v0.0.5256530d8e5c6
openssl@3.1.4-r2
3.1.8-r1

Open the chart page →

1,799
radondb-mysqlkubesphere-testVerified publisher1.0.11 of 3See more

radondb-mysql kubesphere-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,384
kubeviouskubevious1.2.24 of 7See more

kubevious kubevious 1.2.2

4 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
openssl@3.1.4-r5
3.1.8-r1
kubevious/guard:1.2.19bf567704de2
openssl@3.0.8-r3
3.0.19-r0
kubevious/parser:1.2.299ae7a5168c2
openssl@3.1.4-r5
3.1.8-r1
redislabs/redisearch:2.4.1433561794c5c8
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

14,212
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

11,675
karporkusionstackVerified publisher0.7.61 of 3See more

karpor kusionstack 0.7.6

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kusionstack/karpor:v0.6.4b707d3bf0abd
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

3,310
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

15,340
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,944
lxcfs-on-kuberneteslxcfs-on-kubernetes0.2.72 of 2See more

lxcfs-on-kubernetes lxcfs-on-kubernetes 0.2.7

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
openssl@3.5.0-r0
3.5.4-r0
ghcr.io/cndoit18/lxcfs-manager:latest6bb61ded2625
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

2,095
mariadbmariadbVerified publisher0.4.01 of 1See more

mariadb mariadb 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

2,458
veleromesosphere3.2.51 of 1See more

velero mesosphere 3.2.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4

Open the chart page →

1,871
kubecostmesosphere-stable0.37.54 of 9See more

kubecost mesosphere-stable 0.37.5

4 of the 9 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
grafana/grafana:9.4.71a359d92f40e
openssl@3.0.8-r0
3.0.19-r0
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
openssl@3.3.2-r0
3.3.5-r0
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.20

Open the chart page →

17,799
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

2,635
kea-dhcpmglants0.7.11 of 1See more

kea-dhcp mglants 0.7.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
openssl@3.1.4-r5
3.1.8-r1

Open the chart page →

1,132
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.51 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

2,175
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

3,803
openobservemshade-openobserve0.1.101 of 1See more

openobserve mshade-openobserve 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
public.ecr.aws/zinclabs/openobserve:v0.8.127f8de509169
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

1,316
nebraskanebraska3.0.02 of 2See more

nebraska nebraska 3.0.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
ghcr.io/flatcar/nebraska:4.0.05c9e99ff7167
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

4,077
keycloak-operatornewsaktuell0.1.71 of 1See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

5,066
gateway-apinicklasfrahm-gateway-apiVerified publisher0.2.01 of 1See more

gateway-api nicklasfrahm-gateway-api 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
alpine/kubectl:1.33.32c59a3f0726c
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

1,258
observalobservalVerified publisher1.13.12 of 8See more

observal observal 1.13.1

2 of the 8 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.3810861a2e2d0
openssl@3.0.2-0ubuntu1.29
no fix listed
curlimages/curl:8.8.073e4d532ea62
openssl@3.1.5-r0
3.1.8-r1

Open the chart page →

5,916
kobotoolboxone-acre-fundVerified publisher0.7.43 of 9See more

kobotoolbox one-acre-fund 0.7.4

3 of the 9 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
kobotoolbox/kpi:2.022.24dbcacc01bccd4
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
library/nginx:1.212bcabc23b454
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u4

Open the chart page →

18,519
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

5,244
opentelemetry-ebpfopentelemetry-helmVerified publisher0.1.74 of 4See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

4 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
otel/opentelemetry-ebpf-k8s-relay:v0.10.20980d0ab28bf
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
otel/opentelemetry-ebpf-k8s-watcher:v0.10.263a0d1dd2cac
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
otel/opentelemetry-ebpf-kernel-collector:v0.10.269e19991e328
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
otel/opentelemetry-ebpf-reducer:v0.10.26c49acfbc6f1
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

2,580
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

4,046
oesopsmxVerified publisher4.0.328 of 25See more

oes opsmx 4.0.32

8 of the 25 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
openssl@3.0.8-r4
3.0.19-r0
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm13
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
quay.io/opsmxpublic/ubi8-oes-ui:isd-spin-2025.10.01-e6f6f01-2025121006405d934bb66884
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

108,315
kratos-selfservice-ui-nodeory0.64.01 of 1See more

kratos-selfservice-ui-node ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v26.2.046a7bac1ad0c
openssl@3.0.7-r0
3.0.19-r0

Open the chart page →

1,967
redispascaliskeVerified publisher2.1.01 of 1See more

redis pascaliske 2.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/redis:8.0.3be0a135f1955
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

1,869
platzioplatz-ioVerified publisher0.6.52 of 2See more

platzio platz-io 0.6.5

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
openssl@3.5.1-r0
3.5.4-r0
platzio/frontend:v0.6.073083749b46a
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

2,877
ipmi-exporterpnnl-miscscripts0.1.151 of 1See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10

Open the chart page →

2,994
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
openssl@1.1.1k-1+deb11u2
1.1.1w-0+deb11u4

Open the chart page →

1,948
proxysqlproxysql-cluster1.7.01 of 1See more

proxysql proxysql-cluster 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
proxysql/proxysql:2.3.08d710e80c77b
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

989
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

5,465
repoflowrepoflow-helm-public0.9.13 of 8See more

repoflow repoflow-helm-public 0.9.1

3 of the 8 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.48.10f6c1c4b957d2
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20
library/elasticsearch:8.15.0310b9fc03b06
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24+esm1
library/postgres:16.24aea012537ed
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

13,647
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

8,783
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
openssl@1:3.2.2-6.el9_5.1
1:3.2.2-7.el9_6.1

Open the chart page →

6,400
qbittorrent-vpnrtomik-helm-chartsVerified publisher0.0.21 of 2See more

qbittorrent-vpn rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
qmcgaw/gluetun:v3.40.02b42bfa04675
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

1,218
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

24,566
satisfactory-serversatisfactoryVerified publisher0.1.61 of 1See more

satisfactory-server satisfactory 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.10e103700ae6ae
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20

Open the chart page →

3,469
lldapself-hosters-by-nightVerified publisher0.5.21 of 2See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/lldap/lldap:2025-05-193de697c3ba57
openssl@3.1.8-r0
3.1.8-r1

Open the chart page →

3,423
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

5,926
soketisoketi2.0.01 of 1See more

soketi soketi 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/soketi/soketi:1.6-16-debian713223456cf1
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4

Open the chart page →

1,636
freeradiusstartechnicaVerified publisher1.2.01 of 1See more

freeradius startechnica 1.2.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.2.8af6fd34a5b78
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20

Open the chart page →

5,810
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

15,564

Container images carrying it

3,261 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/appscode/marketplace-ui:0.3.1d52177072013
openssl@3.3.2-r1
3.3.5-r0
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.20
1
ghcr.io/appuio/cloud-portal:v0.2.18c7e08d32d70
openssl@1.1.1k-1+deb11u2
1.1.1w-0+deb11u4
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
1
ghcr.io/argelbargel/vault-raft-snapshot-agent:v0.12.5345174727a2b
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/astriaorg/flame:0.1.0c8af1c5aae40
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6
1
ghcr.io/astriaorg/seq-faucet:0.9.0bf3cb9b505b6
openssl@3.3.2-r0
3.3.5-r0
1
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/bakito/sealed-secrets-web:v3.0.574aff24d4b97
openssl@3.0.7-r0
3.0.19-r0
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.20
1
ghcr.io/bastienwirtz/homer:v25.02.1cf4ae752adbb
openssl@3.3.2-r1
3.3.5-r0
1
ghcr.io/beluga-cloud/actual/actualserver:23.12.1c8a0d5ec5a12
openssl@3.1.4-r6
3.1.8-r1
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.20
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
openssl@3.5.2-r0
3.5.4-r0
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
ghcr.io/bitmagnet-io/bitmagnet:v0.10.0cf2c16fac5b5
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
openssl@3.5.0-r0
3.5.4-r0
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/blakeblackshear/frigate:0.13.07a5244e4c8dc
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
openssl@3.3.2-r4
3.3.5-r0
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm1
1
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
openssl@3.5.1-r0
3.5.4-r0
1
ghcr.io/bryopsida/openmct:main38b6a50a62b2
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/bryopsida/patchwork:mainc01e018bced4
openssl@3.5.0-r0
3.5.4-r0
1
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
openssl@3.5.1-r0
3.5.4-r0
1
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
openssl@3.5.0-r0
3.5.4-r0
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/cableship/argocd-source-tracker:0.0.6ff7dd45aa774
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/cableship/chart-sentinel:0.1.0a037f1042b28
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.20
1
ghcr.io/caninehq/canine:latesta058034ca006
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/celestiaorg/celestia-app:v3.7.0-arabica23a9ec9b1879
openssl@3.1.8-r0
3.1.8-r1
1
ghcr.io/celestiaorg/celestia-app:v6.1.0-rc0a604aefa3fae
openssl@3.5.1-r0
3.5.4-r0
1
ghcr.io/celestiaorg/celestia-node:v0.16.041177982c584
openssl@3.3.1-r3
3.3.5-r0
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.