StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,832
of 17,828 indexed, latest versions
Container images
3,341
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,832 of 17,828 indexed charts deploy, on 3,341 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more2,030
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0999
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm220
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+30 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7309
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,832 by stars
ChartLatestAffected imagesRadar Score
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

2,479
gitvotegitvoteVerified publisher1.5.01 of 6See more

gitvote gitvote 1.5.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
openssl@3.5.1-1
3.5.1-1+deb13u1

Open the chart page →

5,692
graphql-hivegraphql-hive1.0.01 of 17See more

graphql-hive graphql-hive 1.0.0

1 of the 17 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
supertokens/supertokens-postgresql:3.1418d34c781347
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u4

Open the chart page →

10,341
hazelcasthazelcastVerified publisher5.10.31 of 2See more

hazelcast hazelcast 5.10.3

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
hazelcast/hazelcast:5.5.05dd5d31c7a06
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

2,684
hive-metastoreheva-helm-chartsVerified publisher0.2.01 of 2See more

hive-metastore heva-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
sslhep/hive-metastore:3.1.39e80af083079
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

7,348
typesensehmphuVerified publisher0.1.61 of 1See more

typesense hmphu 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
typesense/typesense:0.23.03accb727cbe2
openssl@1.0.2g-1ubuntu4.19
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

3,919
hpe-cosi-driverhpe-storageVerified publisher2.0.01 of 2See more

hpe-cosi-driver hpe-storage 2.0.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/hpestorage/cosi-driver:v2.0.0a4d2667f2b6e
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7

Open the chart page →

1,696
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.23 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
openssl@3.0.17-1~deb12u1
3.0.17-1~deb12u3
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

10,755
coreinstill-aiOfficialVerified publisher0.1.751 of 15See more

core instill-ai 0.1.75

1 of the 15 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
instill/console:0.68.54cd70e2df5c6
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

31,052
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.6

Open the chart page →

4,587
wireguardk8s-home-lab-repo1.6.01 of 1See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,566
k8s-sftp-gcsk8s-sftp-gcsVerified publisher0.1.41 of 1See more

k8s-sftp-gcs k8s-sftp-gcs 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
danuk/k8s-sftp-gcs:latestdd0e6585c44f
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

1,607
me-untethr-nostr-relaykronkltdVerified publisher0.1.41 of 1See more

me-untethr-nostr-relay kronkltd 0.1.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
duck1123/me.untethr.nostr-relay:0.2.1119fc5d4cbfb
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

2,060
kubebadgeskubebadges0.1.31 of 2See more

kubebadges kubebadges 0.1.3

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
neosu/kubebadges:v0.0.5256530d8e5c6
openssl@3.1.4-r2
3.1.8-r1

Open the chart page →

1,566
radondb-mysqlkubesphere-testVerified publisher1.0.11 of 3See more

radondb-mysql kubesphere-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,427
kubeviouskubevious1.2.24 of 7See more

kubevious kubevious 1.2.2

4 of the 7 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kubevious/backend:1.2.22d9ba6eb46b6
openssl@3.1.4-r5
3.1.8-r1
kubevious/guard:1.2.19bf567704de2
openssl@3.0.8-r3
3.0.19-r0
kubevious/parser:1.2.299ae7a5168c2
openssl@3.1.4-r5
3.1.8-r1
redislabs/redisearch:2.4.1433561794c5c8
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4

Open the chart page →

14,254
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

56,636
karporkusionstackVerified publisher0.7.61 of 3See more

karpor kusionstack 0.7.6

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kusionstack/karpor:v0.6.4b707d3bf0abd
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

3,327
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm13

Open the chart page →

15,570
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,999
lumigo-operatorlumigo-operatorOfficialVerified publisher69.0.03 of 8See more

lumigo-operator lumigo-operator 69.0.0

3 of the 8 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
public.ecr.aws/lumigo/lumigo-kubernetes-operator:69491c39346b19
openssl@3.5.1-r0
3.5.4-r0
public.ecr.aws/lumigo/lumigo-kubernetes-telemetry-proxy:691d548e59c2c8
openssl@3.5.1-r0
3.5.4-r0
public.ecr.aws/lumigo/lumigo-kubernetes-watchdog:696458fcd61e0c
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

7,797
lxcfs-on-kuberneteslxcfs-on-kubernetes0.2.82 of 2See more

lxcfs-on-kubernetes lxcfs-on-kubernetes 0.2.8

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/cndoit18/lxcfs-agent:v0.2.8154741f8596e
openssl@3.5.0-r0
3.5.4-r0
ghcr.io/cndoit18/lxcfs-manager:v0.2.82f167eacf5e4
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

2,106
mariadbmariadbVerified publisher0.4.01 of 1See more

mariadb mariadb 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/mariadb:10.117f22313fc130
openssl@3.0.2-0ubuntu1.29
no fix listed

Open the chart page →

2,375
veleromesosphere3.2.51 of 1See more

velero mesosphere 3.2.5

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.26.4a0a972324d93
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4

Open the chart page →

1,871
kubecostmesosphere-stable0.37.54 of 9See more

kubecost mesosphere-stable 0.37.5

4 of the 9 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
grafana/grafana:9.4.71a359d92f40e
openssl@3.0.8-r0
3.0.19-r0
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
openssl@3.3.2-r0
3.3.5-r0
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.20

Open the chart page →

17,975
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

2,649
kea-dhcpmglants0.7.11 of 1See more

kea-dhcp mglants 0.7.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/mglants/kea-dhcp:2.5.8e1b6eb9e37f9
openssl@3.1.4-r5
3.1.8-r1

Open the chart page →

1,133
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.51 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

2,184
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

3,829
openobservemshade-openobserve0.1.101 of 1See more

openobserve mshade-openobserve 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
public.ecr.aws/zinclabs/openobserve:v0.8.127f8de509169
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

1,330
nebraskanebraska3.0.02 of 2See more

nebraska nebraska 3.0.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
ghcr.io/flatcar/nebraska:4.0.05c9e99ff7167
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

4,275
keycloak-operatornewsaktuell0.1.71 of 1See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

5,071
mariadbnicholaswildeVerified publisher1.0.61 of 1See more

mariadb nicholaswilde 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/mariadb:version-110.4.21mariabionic7a94d7e89f52
openssl@1.1.1-1ubuntu2.1~18.04.10
1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

9,709
gateway-apinicklasfrahm-gateway-apiVerified publisher0.2.01 of 1See more

gateway-api nicklasfrahm-gateway-api 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
alpine/kubectl:1.33.32c59a3f0726c
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

1,260
observalobservalVerified publisher1.13.12 of 8See more

observal observal 1.13.1

2 of the 8 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.3810861a2e2d0
openssl@3.0.2-0ubuntu1.29
no fix listed
curlimages/curl:8.8.073e4d532ea62
openssl@3.1.5-r0
3.1.8-r1

Open the chart page →

6,243
kobotoolboxone-acre-fundVerified publisher0.7.43 of 9See more

kobotoolbox one-acre-fund 0.7.4

3 of the 9 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
kobotoolbox/kpi:2.022.24dbcacc01bccd4
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
library/nginx:1.212bcabc23b454
openssl@1.1.1n-0+deb11u2
1.1.1w-0+deb11u4

Open the chart page →

18,564
opentelemetry-ebpfopentelemetry-helmOfficialVerified publisher0.1.74 of 4See more

opentelemetry-ebpf opentelemetry-helm 0.1.7

4 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
otel/opentelemetry-ebpf-k8s-relay:v0.10.20980d0ab28bf
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
otel/opentelemetry-ebpf-k8s-watcher:v0.10.263a0d1dd2cac
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
otel/opentelemetry-ebpf-kernel-collector:v0.10.269e19991e328
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
otel/opentelemetry-ebpf-reducer:v0.10.26c49acfbc6f1
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

2,581
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

4,051
oesopsmxVerified publisher4.0.328 of 25See more

oes opsmx 4.0.32

8 of the 25 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/create-secret:v4.0.4defc3263e0e9
openssl@3.0.8-r4
3.0.19-r0
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm13
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
quay.io/opsmxpublic/ubi8-oes-ui:isd-spin-2025.10.01-e6f6f01-2025121006405d934bb66884
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10

Open the chart page →

101,240
kratos-selfservice-ui-nodeory0.64.01 of 1See more

kratos-selfservice-ui-node ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
oryd/kratos-selfservice-ui-node:v26.2.046a7bac1ad0c
openssl@3.0.7-r0
3.0.19-r0

Open the chart page →

1,971
redispascaliskeVerified publisher2.1.01 of 1See more

redis pascaliske 2.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/redis:8.0.3be0a135f1955
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

1,893
platzioplatz-ioVerified publisher0.6.52 of 2See more

platzio platz-io 0.6.5

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
openssl@3.5.1-r0
3.5.4-r0
platzio/frontend:v0.6.073083749b46a
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

2,906
ipmi-exporterpnnl-miscscripts0.1.151 of 1See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10

Open the chart page →

2,996
pomeriumpomerium34.0.11 of 1See more

pomerium pomerium 34.0.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
pomerium/pomerium:v0.22.19c69b10a2126
openssl@1.1.1k-1+deb11u2
1.1.1w-0+deb11u4

Open the chart page →

1,949
proxysqlproxysql-cluster1.7.01 of 1See more

proxysql proxysql-cluster 1.7.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
proxysql/proxysql:2.3.08d710e80c77b
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4

Open the chart page →

989
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3

Open the chart page →

5,526
repoflowrepoflow-helm-public0.9.13 of 8See more

repoflow repoflow-helm-public 0.9.1

3 of the 8 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.48.10f6c1c4b957d2
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20
library/elasticsearch:8.15.0310b9fc03b06
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24+esm1
library/postgres:16.24aea012537ed
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

12,747
nominatimrobjuz6.4.21 of 4See more

nominatim robjuz 6.4.2

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

50,212
rocketmq-clusterrocketmq12.6.01 of 2See more

rocketmq-cluster rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
openssl@1:3.2.2-6.el9_5.1
1:3.2.2-7.el9_6.1

Open the chart page →

6,471
qbittorrent-vpnrtomik-helm-chartsVerified publisher0.0.21 of 2See more

qbittorrent-vpn rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
qmcgaw/gluetun:v3.40.02b42bfa04675
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

1,219

Container images carrying it

3,341 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
openssl@1:1.1.1k-4.el8
1:1.1.1k-14.el8_10
1
quay.io/seamware/consent-facade:0.0.14be844c750c7e
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
1
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
openssl@3.3.1-r3
3.3.5-r0
1
quay.io/snowdrop/spring-boot-rest-http-example:2.7b1a054613715
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
quay.io/soketi/k8soketi:0.1-18-debian4cd9ea9434c4
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
quay.io/soketi/soketi:1.6-16-debian713223456cf1
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4
1
quay.io/sshaaf/keycloak-mcp-server:0.4.0b7e9cba72f8a
openssl@1:3.2.2-6.el9_5
1:3.5.1-4.el9_7
1
quay.io/strimzi/operator:0.45.158c727cd2e68
openssl@1:3.2.2-6.el9_5.1
1:3.2.2-7.el9_6.1
1
quay.io/strimzi/operator:0.32.0c5e0e5dca750
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
1
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
openssl@3.3.3-r0
3.3.5-r0
1
quay.io/wi_stefan/dsba-db-migrations:0.0.125b986cd14a08
openssl@3.0.7-r0
3.0.19-r0
1
quay.io/wi_stefan/dss-validation-service:0.0.18e928db29ee1
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
openssl@3.5.1-r0
3.5.4-r0
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
openssl@3.0.9-1
3.0.17-1~deb12u3
1
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
openssl@1.1.1-1ubuntu2.1~18.04.17
1.1.1-1ubuntu2.1~18.04.23+esm6
1
registry.gitlab.com/dyff/dyff-frontend:0.20.2481be0beaafe
openssl@3.3.3-r0
3.3.5-r0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq:3.12.145a9334f371f3
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator:0.5.136b19b72120e
openssl@1:1.1.1k-5.el8_5
1:1.1.1k-14.el8_10
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
openssl@1.1.1f-1ubuntu2.2
1.1.1f-1ubuntu2.24+esm1
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
registry.gitlab.com/purelb/purelb/allocator:v0.0.0-106-ipv6-lbip-052cedab9d1fcb78f529
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-14.el8_10
1
registry.gitlab.com/vicamo/docker-sshd/sshd:3.0-stable22c33d693fe2
openssl@1.1.1k-1
1.1.1w-0+deb11u4
1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller:2.1.2301847adfe16
openssl@1:3.2.2-6.el9_5.1
1:3.2.2-7.el9_6.1
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
openssl@3.0.11-1~deb12u1
3.0.17-1~deb12u3
1
registry.k8s.io/dns/k8s-dns-node-cache:1.23.1e3dccb1a21d1
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
openssl@3.5.1-1
3.5.1-1+deb13u1
1
registry.k8s.io/git-sync/git-sync:v3.6.96fa9042f6128
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
openssl@3.0.11-1~deb12u1
3.0.17-1~deb12u3
1
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
openssl@3.0.8-r0
3.0.19-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
openssl@3.5.2-r0
3.5.4-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
openssl@3.5.1-r0
3.5.4-r0
1
registry.k8s.io/ingress-nginx/controller:v1.10.042b3f0e5d084
openssl@3.1.4-r5
3.1.8-r1
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
openssl@3.0.8-r1
3.0.19-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
openssl@3.3.2-r0
3.3.5-r0
1
registry.k8s.io/ingress-nginx/controller:v1.10.1e24f39d3eed6
openssl@3.1.4-r6
3.1.8-r1
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.5-r0
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
registry.k8s.io/sig-storage/volume-data-source-validator:v1.0.0d35884236461
openssl@1.1.1k-1+deb11u2
1.1.1w-0+deb11u4
1

syft 1.42.1 · advisories as of 22 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.