StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,851
of 17,832 indexed, latest versions
Container images
3,349
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,851 of 17,832 indexed charts deploy, on 3,349 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more2,036
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r01,004
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm220
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+30 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7306
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,851 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

8,128

Container images carrying it

3,349 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
openssl@3.1.6-r2
3.1.8-r1
1
quay.io/eclipse/che-operator:7.122.0d752a1c2a7b7
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
1
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
openssl@3.0.2-0ubuntu1.23
no fix listed
1
quay.io/everythingascode/apishift-backend:v0.3.014ff275b2e61
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.1~18.04.23+esm6
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.20
1
quay.io/fiware/apollo:0.0.1055330b1b60c1
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-14.el8_10
1
quay.io/fiware/canis-major:1.5.15bb40472e4ff5
openssl@1:1.1.1k-4.el8
1:1.1.1k-14.el8_10
1
quay.io/fiware/contract-management:3.3.122bcfcf874451
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
1
quay.io/fiware/credentials-config-service:3.4.3f2fbced76da8
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
1
quay.io/fiware/dsba-pdp:0.3.20cca71497e9e
openssl@3.0.7-r2
3.0.19-r0
1
quay.io/fiware/endpoint-configuration-service:0.4.30dc38a87b844
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-14.el8_10
1
quay.io/fiware/orion-ld:1.10.0b7ee7569a9a8
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
1
quay.io/fiware/orion-ld:1.0.1ea838e5b4051
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
quay.io/fiware/trusted-issuers-list:0.9.13c886ce5c056
openssl@1:3.2.2-6.el9_5.1
1:3.2.2-7.el9_6.1
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-14.el8_10
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.20
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/flomesh/osm-edge-controller-ubi8:1.2.1674f45865af1
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/flomesh/osm-edge-crds-ubi8:1.2.1c3bc5e7a70e6
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/flomesh/osm-edge-injector-ubi8:1.2.18e9c39c34e89
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/flomesh/osm-edge-preinstall-ubi8:1.2.1f94282a9cfec
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/flomesh/toolbox-ubi8:1.2.01f5e3161cb84
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_10
1
quay.io/fluentd_elasticsearch/fluentd:v4.2.399079df58561
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
quay.io/fossa/postgres:17.2-15af45ac79f38
openssl@1.1.1w-0+deb11u2
1.1.1w-0+deb11u4
1
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
openssl@1:3.0.7-28.el9_4
1:3.5.1-4.el9_7
1
quay.io/groundcover/caretta:v0.0.16ed8f5118e3a4
openssl@3.0.8-r0
3.0.19-r0
1
quay.io/groundcover/victoria-metrics:v1.85.380ddeb90d18d
openssl@3.0.7-r0
3.0.19-r0
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
openssl@1.1.1w-0+deb11u3
1.1.1w-0+deb11u4
1
quay.io/hpestorage/cosi-driver:v2.0.0a4d2667f2b6e
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7
1
quay.io/hpestorage/filex-csi-init:2.6.42d867eefb233
openssl@1:3.2.2-6.el9_5
1:3.5.1-4.el9_7
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
openssl@1:1.1.1c-15.el8
1:1.1.1k-14.el8_10
1
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
1
quay.io/jupyterhub/configurable-http-proxy:5.1.0eb10d5bf045c
openssl@3.3.4-r0
3.3.5-r0
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
quay.io/keycloak/keycloak:20.0.25227edcc7595
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.