StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,736
of 17,803 indexed, latest versions
Container images
3,257
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,736 of 17,803 indexed charts deploy, on 3,257 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more1,963
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0969
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm215
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+29 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7322
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,736 by stars
ChartLatestAffected imagesRadar Score
rabbitmq-stomprabbitmq-stompVerified publisher0.1.11 of 1See more

rabbitmq-stomp rabbitmq-stomp 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
spy86/rabbitmq-stomp:latestea649101b9fb
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

3,047
rabbitpingrabbitping1.3.01 of 1See more

rabbitping rabbitping 1.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
udhos/rabbitping:1.3.0474c467bbf42
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,148
nginx-chartrabsnginx0.1.01 of 1See more

nginx-chart rabsnginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/nginx:1.276784fb0834aa
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

4,454
rada-platformrada-platform0.1.06 of 7See more

rada-platform rada-platform 0.1.0

6 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
trinodb/trino:45038c6f24ab1a4
openssl@1:3.0.7-27.el9
1:3.5.1-4.el9_7
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
openssl@3.1.4-r6
3.1.8-r1
ghcr.io/airflow-helm/postgresql-bitnami:11.22-patch.0df576862b7c0
openssl@3.1.4-r5
3.1.8-r1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
openssl@1:3.0.7-27.el9
1:3.5.1-4.el9_7
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4

Open the chart page →

21,370
app-config-frontendradar-baseVerified publisher2.4.11 of 1See more

app-config-frontend radar-base 2.4.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-app-config/radar-app-config-frontend:0.6.2c5f1e2ca5781
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

807
kratos-selfservice-ui-noderadar-baseVerified publisher0.43.11 of 1See more

kratos-selfservice-ui-node radar-base 0.43.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v0.13.0-20d454c21c11bc
openssl@3.0.7-r0
3.0.19-r0

Open the chart page →

2,973
kubecostradar-baseVerified publisher1.0.06 of 7See more

kubecost radar-base 1.0.0

6 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
grafana/grafana:11.4.0d8ea37798ccc
openssl@3.3.2-r0
3.3.5-r0
gcr.io/kubecost1/cost-model:prod-2.6.39e507ac0aebb
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7
gcr.io/kubecost1/frontend:prod-2.6.3a535f7de024b
openssl@3.4.1-r0
3.5.4-r0
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
openssl@1:3.2.2-6.el9_5
1:3.5.1-4.el9_7
gcr.io/kubecost1/kubecost-network-costs:v0.17.6ab6a54c53fd8
openssl@3.3.2-r0
3.5.4-r0
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
openssl@3.3.2-r4
3.3.5-r0

Open the chart page →

9,625
mockserverradar-baseVerified publisher5.15.01 of 1See more

mockserver radar-base 5.15.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-5.15.00f9ef78c9489
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

1,258
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_10

Open the chart page →

5,299
radar-grafanaradar-baseVerified publisher0.1.41 of 2See more

radar-grafana radar-base 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
grafana/grafana:11.6.062d2b9d20a19
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,836
radar-homeradar-baseVerified publisher0.5.51 of 1See more

radar-home radar-base 0.5.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-home/radar-home:0.1.71cfe3da9d812
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

807
radar-hydraradar-baseVerified publisher0.3.42 of 2See more

radar-hydra radar-base 0.3.4

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
curlimages/curl:8.15.04026b29997dc
openssl@3.5.1-r0
3.5.4-r0
oryd/hydra:v2.3.0b94007e19a1f
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

2,196
radar-integrationradar-baseVerified publisher0.9.01 of 1See more

radar-integration radar-base 0.9.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6

Open the chart page →

2,913
radar-kafkaradar-baseVerified publisher0.4.12 of 2See more

radar-kafka radar-base 0.4.1

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/lsst-sqre/strimzi-registry-operator:0.6.07e25f7048aff
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
quay.io/strimzi/operator:0.46.0ac434a48ac2b
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7

Open the chart page →

4,254
radar-kratosradar-baseVerified publisher0.1.51 of 1See more

radar-kratos radar-base 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
oryd/kratos:v1.3.1fe2428f103a6
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

1,578
radar-mockserverradar-baseVerified publisher0.1.31 of 1See more

radar-mockserver radar-base 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
mockserver/mockserver:mockserver-5.15.00f9ef78c9489
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

1,258
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6

Open the chart page →

3,077
radar-rest-sources-authorizerradar-baseVerified publisher2.3.41 of 1See more

radar-rest-sources-authorizer radar-base 2.3.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-rest-source-auth/radar-rest-source-authorizer:4.4.153e096497f7db
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

807
radar-upload-connect-frontendradar-baseVerified publisher0.8.11 of 1See more

radar-upload-connect-frontend radar-base 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend:0.6.47e27863545fc
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,084
s3-proxyradar-baseVerified publisher0.6.01 of 1See more

s3-proxy radar-base 0.6.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.6

Open the chart page →

2,796
strimzi-kafka-operatorradar-baseVerified publisher0.46.01 of 1See more

strimzi-kafka-operator radar-base 0.46.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7

Open the chart page →

1,985
pagesranjinigogga1.0.02 of 3See more

pages ranjinigogga 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm1
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

20,261
raven_profilerraven-profilerVerified publisher0.1.621 of 1See more

raven_profiler raven-profiler 0.1.62

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
public.ecr.aws/t0u0d5o5/ecr_authenticator:latest077e4e57e41c
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

1,301
rdfoxrdfox-helm-chart0.1.22 of 2See more

rdfox rdfox-helm-chart 0.1.2

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
oxfordsemantic/rdfox:5.6db17910eb855
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1
oxfordsemantic/rdfox-init:5.6baf570ff968d
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

12,910
javareact-java0.1.01 of 1See more

java react-java 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
project2team4/react:latest3ff031a08887
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

15,613
pagesrebecca-pages1.0.02 of 3See more

pages rebecca-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm1
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

20,261
recipe-apprecipe-app0.1.02 of 2See more

recipe-app recipe-app 0.1.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
anamskenneth/recipe_backend:2025-06-079b7d2cd389b7
openssl@3.3.3-r0
3.3.5-r0
anamskenneth/recipe_frontend:2025-06-079ecf04f42cc3
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

3,568
helm-redchefredchef0.1.02 of 3See more

helm-redchef redchef 0.1.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
sharanalwar/redchef-backend:latest8d3cab80df49
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
sharanalwar/redchef-frontend:latest5e82950b16b7
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

4,956
ibm-mongodb-enterprise-helmredhat0.3.01 of 1See more

ibm-mongodb-enterprise-helm redhat 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
openssl@1:1.1.1g-12.el8_3
1:1.1.1k-14.el8_10

Open the chart page →

12,383
ansible-automation-platformredhat-cop0.0.91 of 1See more

ansible-automation-platform redhat-cop 0.0.9

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
openssl@1:1.1.1g-18.el8_4
1:1.1.1k-14.el8_10

Open the chart page →

15,300
argocd-operatorredhat-cop1.2.21 of 1See more

argocd-operator redhat-cop 1.2.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.7464a3af4dfe0
openssl@1:1.1.1g-18.el8_4
1:1.1.1k-14.el8_10

Open the chart page →

15,300
ploigosredhat-cop0.0.91 of 2See more

ploigos redhat-cop 0.0.9

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/openshift/origin-cli:4.66722d5041b47
openssl@1:1.1.1c-19.el8_2
1:1.1.1k-14.el8_10

Open the chart page →

11,447
sonarquberedhat-cop0.1.131 of 1See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/sonarqube:10.7.0-community0842dcd4c8f8
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.20

Open the chart page →

4,258
sonatype-nexusredhat-cop1.1.131 of 2See more

sonatype-nexus redhat-cop 1.1.13

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
openssl@1:1.1.1k-12.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

16,391
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
openssl@1:1.1.1k-4.el8
1:1.1.1k-14.el8_10

Open the chart page →

29,584
redisredis-arm17.8.01 of 1See more

redis redis-arm 17.8.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/zcube/bitnami-compat/redis:7.0-debian-11-r55118a403046f7
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4

Open the chart page →

1,906
relfinder-reformedrelfinderreformed2.0.02 of 2See more

relfinder-reformed relfinderreformed 2.0.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/woodenmaiden/relfinderreformedapi:1.1.20708d30433d4
openssl@3.3.1-r0
3.3.5-r0
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

6,356
remla23-team17remla23-team171.0.02 of 2See more

remla23-team17 remla23-team17 1.0.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4

Open the chart page →

4,448
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
reportportal/service-auto-analyzer:5.7.295ada4a216ce
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

25,720
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

2,202
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

7,469
juicepassproxyretsamedocVerified publisher2026.2.41 of 1See more

juicepassproxy retsamedoc 2026.2.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

3,981
retromretsamedocVerified publisher2026.2.51 of 1See more

retrom retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

7,160
claude-relayrevolution10.1.372 of 4See more

claude-relay revolution1 0.1.37

2 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
fluent/fluent-bit:2.2.00fa18c71d821
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
ghcr.io/wei-shaw/claude-relay-service:v1.1.292398c34934453
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

4,808
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

5,896
bookinforgnu1.0.03 of 7See more

bookinfo rgnu 1.0.0

3 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

20,539
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
openssl@1.0.2g-1ubuntu4.5
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

11,458
istio-bookinforgnu1.0.23 of 7See more

istio-bookinfo rgnu 1.0.2

3 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

20,539
istio-helloworldrgnu1.0.12 of 2See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
istio/examples-helloworld-v1:latest328b237e4fb1
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
istio/examples-helloworld-v2:latest0a7f02b2c7c9
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

9,504
mastodonrivals-spaceVerified publisher3.1.22 of 3See more

mastodon rivals-space 3.1.2

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/rivals-space/rivals-mastodon:1.6.143b23d55e4be
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
ghcr.io/rivals-space/rivals-nginx:1.6.1f376b96b82cc
openssl@3.0.7-r2
3.0.19-r0

Open the chart page →

6,034

Container images carrying it

3,257 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/chatwoot/pgvector:14.4.0-debian-11-r0f759f1510d09
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u4
1
ghcr.io/chgl/magnifhir:v1.5.213f121613edd
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.20
1
ghcr.io/chronicleprotocol/challenger-go:0.1.2c8d5a3c0e966
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/chronicleprotocol/oracles-updates-exporter:0.0.4992d0e793af6
openssl@3.3.2-r0
3.3.5-r0
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
openssl@3.3.2-r4
3.3.5-r0
1
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
openssl@3.3.2-r4
3.3.5-r0
1
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
openssl@3.3.2-r4
3.3.5-r0
1
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
openssl@3.5.0-r0
3.5.4-r0
1
ghcr.io/cndoit18/lxcfs-manager:latest6bb61ded2625
openssl@3.5.0-r0
3.5.4-r0
1
ghcr.io/codingducksrl/wordpress:6.0.23113c0960507
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
ghcr.io/colanode/web:latestbcad696f03ee
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/conductionnl/berichtservice-nginx:latest833d26df3840
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/contactcatalogus-nginx:latest480c84fa9e63
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/digispoof-interface-nginx:latest8fa4597217a4
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/eav-component-nginx:latestd785c893096c
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/education-component-nginx:latest38900bc76ee0
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/medewerkercatalogus-nginx:latest06c3b27462e6
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/skeleton-pip:devce1ebe9387a2
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/user-component-nginx:latestb721579df8c3
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/waardepapieren-nginx:latestaf31cf6cd59f
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/conductionnl/webresourcecatalogus-nginx:latest6de60c83128d
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
openssl@3.5.1-1
3.5.1-1+deb13u1
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
openssl@1:1.1.1k-5.el8_5
1:1.1.1k-14.el8_10
1
ghcr.io/ctron/kubectl:1.25e37d61b5277c
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_10
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
ghcr.io/cunningpike/fediblockhole:0.4.22abc5f0350dc
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
ghcr.io/curium-rocks/k8s-mutating-webhook:mainaaab005242ae
openssl@3.1.4-r5
3.1.8-r1
1
ghcr.io/curium-rocks/k8s-validating-webhook:main8344061b2f22
openssl@3.1.4-r5
3.1.8-r1
1
ghcr.io/dani-garcia/vaultwarden:1.33.2-alpine63cce7624f65
openssl@3.3.2-r5
3.3.5-r0
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/daocloud/crproxy/crproxy:v0.8.0ee1eb3c9c9a1
openssl@3.3.1-r0
3.3.5-r0
1
ghcr.io/daocloud/dao-2048:v1.4.121275bc02f75
openssl@3.0.8-r0
3.0.19-r0
1
ghcr.io/dask/dask:2024.1.0080150de7d86
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm1
1
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.20
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm1
1
ghcr.io/data-fair/notify:3c739b74dabb0
openssl@3.3.3-r0
3.3.5-r0
1
ghcr.io/data-fair/portals:18b621866ceb2
openssl@3.0.8-r3
3.0.19-r0
1
ghcr.io/debridmediamanager/zurg-testing:v0.9.3-final5c47ef99443a
openssl@3.3.1-r0
3.3.5-r0
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
openssl@3.3.2-r4
3.3.5-r0
1
ghcr.io/devops-ia/kafka-cruise-control-ui:0.4.096c25035cb02
openssl@3.1.4-r6
3.1.8-r1
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.