StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,736
of 17,803 indexed, latest versions
Container images
3,257
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,736 of 17,803 indexed charts deploy, on 3,257 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more1,963
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0969
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm215
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+29 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7322
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,736 by stars
ChartLatestAffected imagesRadar Score
postgres-operatorkubeblocksVerified publisher1.12.21 of 1See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
openssl@3.3.0-r2
3.3.5-r0

Open the chart page →

1,555
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10

Open the chart page →

9,257
spiderpoolkubeblocksVerified publisher1.2.03 of 4See more

spiderpool kubeblocks 1.2.0

3 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.1.409fdfb7ce090
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

8,498
vaultkubeblocksVerified publisher0.30.02 of 2See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
hashicorp/vault:1.19.0bbb7f98dc67d
openssl@3.3.3-r0
3.3.5-r0
hashicorp/vault-k8s:1.6.2103a2d817a74
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

3,042
kubeclaritykubeclarity2.23.33 of 5See more

kubeclarity kubeclarity 2.23.3

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/openclarity/grype-server:v0.6.079412399f301
openssl@3.0.10-r0
3.0.19-r0
ghcr.io/openclarity/kubeclarity:v2.23.314450f52a708
openssl@3.1.5-r0
3.1.8-r1
ghcr.io/openclarity/kubeclarity-sbom-db:v2.23.3cef2b88bfc76
openssl@3.1.5-r0
3.1.8-r1

Open the chart page →

5,521
helm-controllerkubedex0.4.01 of 1See more

helm-controller kubedex 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kubedex/helm-controller:v1.0.14f1008c51ef9
openssl@1:1.0.2k-16.el7_6.1
1:1.0.2k-26.el7_9.1

Open the chart page →

2,421
listener-operatorkubedoopVerified publisher0.4.01 of 6See more

listener-operator kubedoop 0.4.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
openssl@1:3.2.2-6.el9_5.1
1:3.2.2-7.el9_6.1

Open the chart page →

4,534
secret-operatorkubedoopVerified publisher0.4.01 of 5See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
openssl@1:3.2.2-6.el9_5.1
1:3.2.2-7.el9_6.1

Open the chart page →

4,453
juicefs-csi-driverkubegems0.19.21 of 6See more

juicefs-csi-driver kubegems 0.19.2

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

4,865
juicefs-tenantkubegems1.0.11 of 3See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kubegems/redis:7.2.5-debian-12-r2870ee3a77add
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

4,333
kubegems-multus-cnikubegems2.4.11 of 2See more

kubegems-multus-cni kubegems 2.4.1

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.16bebbda31416
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

1,404
kubegems-paikubegems1.0.181 of 1See more

kubegems-pai kubegems 1.0.18

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kubegems/mysql:8.0.33-debian-11-r019cb195b9a50
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4

Open the chart page →

1,053
volcanokubegems1.12.13 of 3See more

volcano kubegems 1.12.1

3 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
volcanosh/vc-controller-manager:v1.12.13815883c32f6
openssl@3.5.0-r0
3.5.4-r0
volcanosh/vc-scheduler:v1.12.1b24ea8af2d16
openssl@3.5.0-r0
3.5.4-r0
volcanosh/vc-webhook-manager:v1.12.1f8b50088a732
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

5,045
gptchat-api-feishubotkubegemsapp0.1.13 of 3See more

gptchat-api-feishubot kubegemsapp 0.1.1

3 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kubegems/chatgpt-api:latestf3c492a938ad
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
kubegems/chatgpt-api-feishubot:latest7c93c84b2055
openssl@3.0.7-r0
3.0.19-r0
kubegems/chatgpt-api-proxy:latest8905c9dbbb5d
openssl@3.0.7-r0
3.0.19-r0

Open the chart page →

8,491
kube-infokube-info0.1.01 of 1See more

kube-info kube-info 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
andreymileshin/kube-info:v0.1.0f7b300bc9e66
openssl@3.1.7-r0
3.1.8-r1

Open the chart page →

518
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
openssl@3.0.9-1
3.0.17-1~deb12u3

Open the chart page →

4,338
kubemacpoolkubemacpoolVerified publisher0.3.01 of 1See more

kubemacpool kubemacpool 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubemacpool:v0.45.0eebb65b8a12c
openssl@1:3.2.2-6.el9_5
1:3.5.1-4.el9_7

Open the chart page →

1,641
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,221
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6

Open the chart page →

5,245
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

35,292
brudi-operatorkubernetes-replicator0.2.31 of 1See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/mittwald/brudi-operator:v0.2.3edb322094359
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10

Open the chart page →

3,632
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

4,507
whatsappkubernetes-whatsappVerified publisher0.1.81 of 4See more

whatsapp kubernetes-whatsapp 0.1.8

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/python:3.8-alpine3d93b1f77efc
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

1,574
testkube-apikubeshop2.1.1621 of 2See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,670
testkube-logskubeshop0.2.21 of 1See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kubeshop/testkube-logs-server:latest094186b19698
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,430
tracetestkubeshop0.3.391 of 2See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kubeshop/tracetest:v1.7.173d7e3a2db43
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

1,569
databend-metakubesphere-stable0.7.31 of 1See more

databend-meta kubesphere-stable 0.7.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
datafuselabs/databend-meta:v1.2.279ba877ee6cb4d
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

2,864
databend-querykubesphere-stable0.8.31 of 1See more

databend-query kubesphere-stable 0.8.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
datafuselabs/databend-query:v1.2.279a936843b85b4
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

2,864
deepflowkubesphere-stable6.2.6063 of 8See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm1
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
openssl@3.0.2-0ubuntu1.9
3.0.2-0ubuntu1.20
grafana/grafana:9.5.239c849cebccc
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

18,476
fpga-operatorkubesphere-stable2.7.43 of 7See more

fpga-operator kubesphere-stable 2.7.4

3 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
inaccel/driver:latest07271a5c2fe7
openssl@3.1.4-r5
3.1.8-r1
inaccel/mkrt:latest187fd448b6f2
openssl@3.0.12-r1
3.0.19-r0
inaccel/monitor:2.134bb93de386f
openssl@3.1.4-r5
3.1.8-r1

Open the chart page →

5,759
iomeshkubesphere-stable1.1.05 of 25See more

iomesh kubesphere-stable 1.1.0

5 of the 25 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.1.0d86dab5611a7
openssl@3.0.7-r0
3.0.19-r0
iomesh/blockdevice-monitor-prober:v0.1.0584dbe19db7e
openssl@3.0.7-r0
3.0.19-r0
iomesh/csi-driver:v2.7.25d3f9bf9240b
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.20
iomesh/deck:v0.1.0a31e26b6ae22
openssl@3.1.4-r5
3.1.8-r1
iomesh/deck-plugin-iomesh:v0.1.00b13bf217110
openssl@3.1.4-r5
3.1.8-r1

Open the chart page →

49,027
IOMeshkubesphere-stable1.2.07 of 25See more

IOMesh kubesphere-stable 1.2.0

7 of the 25 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
iomesh/blockdevice-monitor:v0.2.1376577ed98ac
openssl@3.0.7-r0
3.0.19-r0
iomesh/blockdevice-monitor-prober:v0.2.1026a1d87f6e9
openssl@3.0.7-r0
3.0.19-r0
iomesh/csi-driver:v2.8.01a151f602451
openssl@3.0.2-0ubuntu1.16
3.0.2-0ubuntu1.20
iomesh/deck:v0.2.0282d6c419ed3
openssl@3.3.1-r3
3.3.5-r0
iomesh/deck-plugin-iomesh:v0.2.0df149e4ab39f
openssl@3.3.1-r3
3.3.5-r0
iomesh/node-disk-manager:1.8.0-2292ad270082e
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.6
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.6

Open the chart page →

46,717
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

86,937
clickhousekubesphere-testVerified publisher0.1.11 of 2See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
radondb/clickhouse-server:v21.1.3.32-stable4732df471073
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

6,716
csi-neonsankubesphere-testVerified publisher1.3.01 of 6See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

18,542
mongodbkubesphere-testVerified publisher0.3.21 of 2See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/mongo:4.2.16ca49afbcb2b
openssl@1.1.1-1ubuntu2.1~18.04.4
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

9,643
mysqlkubesphere-testVerified publisher1.0.21 of 3See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,397
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

9,416
xenondbkubesphere-testVerified publisher1.0.01 of 3See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,397
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

4,614
kubestellar-uikubestellaruiVerified publisher0.1.13 of 4See more

kubestellar-ui kubestellarui 0.1.1

3 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/redis:7.0-alpinec9d92d840fd0
openssl@3.3.2-r0
3.3.5-r0
mavrick1/kubestellar-b:latest45ca0429a1d4
openssl@3.3.3-r0
3.3.5-r0
mavrick1/kubestellar-f:latest56bd8eaa53a4
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

5,068
sample-appkubeuest0.1.31 of 1See more

sample-app kubeuest 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
michaelepitech/sample-app:latestaf51d61c19f5
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

1,427
workload-operatorkubevious0.0.31 of 1See more

workload-operator kubevious 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kubevious/workload-operator:1.0.20b0f4c507eb6
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

2,011
network-enforcerkubewardenVerified publisher0.1.21 of 3See more

network-enforcer kubewarden 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0.4ca08b7d2df5b
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

2,691
kube-workload-restarterkube-workload-restarterVerified publisher0.0.41 of 1See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
andreacioni/kube-workload-restarter:0.0.242938b310090a
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4

Open the chart page →

1,815
excalidrawkubitodevVerified publisher1.0.31 of 1See more

excalidraw kubitodev 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
excalidraw/excalidraw:latestf7ee194addd6
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

988
penpotkubitodevVerified publisher1.2.13 of 5See more

penpot kubitodev 1.2.1

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.20
penpotapp/exporter:2.2.15c835ffd87ab
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.20
penpotapp/frontend:2.2.18974882a0542
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4

Open the chart page →

17,037
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.44 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

4 of the 9 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
grafana/alloy:v1.5.101a63f4e032c
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.6
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
ghcr.io/kubiyabot/tool-manager:0.5.80cca6760763a
openssl@3.1.8-r0
3.1.8-r1
ghcr.io/kubiyabot/workflow-engine:v1.46.2560a16a56d4e
openssl@3.1.8-r0
3.1.8-r1

Open the chart page →

20,515
lethe-stackkuossOfficialVerified publisher0.2.31 of 3See more

lethe-stack kuoss 0.2.3

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/kuoss/lethe:v0.3.1c59f082ba8b2
openssl@3.3.4-r0
3.3.5-r0

Open the chart page →

1,762
ctrlmeshkusionstackVerified publisher0.2.01 of 1See more

ctrlmesh kusionstack 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kusionstack/ctrlmesh-manager:v0.2.065e3c32b64d7
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

3,481

Container images carrying it

3,257 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u4
1
ghcr.io/chgl/magnifhir:v1.5.213f121613edd
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.20
1
ghcr.io/chronicleprotocol/challenger-go:0.1.2c8d5a3c0e966
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/chronicleprotocol/oracles-updates-exporter:0.0.4992d0e793af6
openssl@3.3.2-r0
3.3.5-r0
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
openssl@3.3.2-r4
3.3.5-r0
1
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
openssl@3.3.2-r4
3.3.5-r0
1
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
openssl@3.3.2-r4
3.3.5-r0
1
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
openssl@3.5.0-r0
3.5.4-r0
1
ghcr.io/cndoit18/lxcfs-manager:latest6bb61ded2625
openssl@3.5.0-r0
3.5.4-r0
1
ghcr.io/codingducksrl/wordpress:6.0.23113c0960507
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
ghcr.io/colanode/web:latestbcad696f03ee
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/conductionnl/berichtservice-nginx:latest833d26df3840
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/contactcatalogus-nginx:latest480c84fa9e63
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/digispoof-interface-nginx:latest8fa4597217a4
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/eav-component-nginx:latestd785c893096c
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/education-component-nginx:latest38900bc76ee0
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/medewerkercatalogus-nginx:latest06c3b27462e6
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/user-component-nginx:latestb721579df8c3
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/waardepapieren-nginx:latestaf31cf6cd59f
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
openssl@3.5.1-1
3.5.1-1+deb13u1
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
openssl@1:1.1.1k-5.el8_5
1:1.1.1k-14.el8_10
1
ghcr.io/ctron/kubectl:1.25e37d61b5277c
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_10
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
ghcr.io/cunningpike/fediblockhole:0.4.22abc5f0350dc
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
ghcr.io/curium-rocks/k8s-mutating-webhook:mainaaab005242ae
openssl@3.1.4-r5
3.1.8-r1
1
ghcr.io/curium-rocks/k8s-validating-webhook:main8344061b2f22
openssl@3.1.4-r5
3.1.8-r1
1
ghcr.io/dani-garcia/vaultwarden:1.33.2-alpine63cce7624f65
openssl@3.3.2-r5
3.3.5-r0
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/daocloud/crproxy/crproxy:v0.8.0ee1eb3c9c9a1
openssl@3.3.1-r0
3.3.5-r0
1
ghcr.io/daocloud/dao-2048:v1.4.121275bc02f75
openssl@3.0.8-r0
3.0.19-r0
1
ghcr.io/dask/dask:2024.1.0080150de7d86
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm1
1
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.20
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm1
1
ghcr.io/data-fair/notify:3c739b74dabb0
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/data-fair/portals:18b621866ceb2
openssl@3.0.8-r3
3.0.19-r0
1
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
openssl@3.3.1-r0
3.3.5-r0
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
openssl@3.3.2-r4
3.3.5-r0
1
ghcr.io/devops-ia/kafka-cruise-control-ui:0.4.096c25035cb02
openssl@3.1.4-r6
3.1.8-r1
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.