StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,801
of 17,821 indexed, latest versions
Container images
3,326
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,801 of 17,821 indexed charts deploy, on 3,326 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more2,006
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0993
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm221
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+30 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7324
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,801 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,966

Container images carrying it

3,326 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
passbolt/passbolt:3.4.0-ce-non-root655547e17263
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
pecan/bety:5.4.1f825d480cd62
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
percona/everest-helmtools:0.0.1904458d04a18
openssl@3.3.4-r0
3.3.5-r0
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.20
2
postgis/postgis:15-3.3a2fc46b52819
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
2
quickwit/quickwit:v0.8.2363ff56ce456
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
2
rajnandan1/kener:3.2.1930407afca731
openssl@3.0.17-1~deb12u1
3.0.17-1~deb12u3
2
rancher/local-path-provisioner:v0.0.299bebefa0b908
openssl@3.3.1-r3
3.3.5-r0
2
rclone/rclone:1.6874c51b8817e5
openssl@3.3.2-r0
3.3.5-r0
2
redislabs/redisinsight:1.14.0b03ab1426d0d
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.20
2
redis/redis-stack-server:7.4.0:7.4.0-v172035434f455
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.20
2
redis/redis-stack-server:7.2.0-v10e44b2b49d059
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.20
2
rookout/controller:latest4451a6f6b8ec
openssl@3.0.11-r0
3.0.19-r0
2
rookout/data-on-prem:latest51c0fce64467
openssl@3.0.11-r0
3.0.19-r0
2
scorpiobroker/scorpio:RegistrySubscriptionManager_2.1.001e11d800459
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
scorpiobroker/scorpio:eureka-server_2.1.03f05a113a4be
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
scorpiobroker/scorpio:AtContextServer_2.1.05073ceef2fa0
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
scorpiobroker/scorpio:gateway_2.1.062dae3dd0eeb
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
scorpiobroker/scorpio:RegistryManager_2.1.0a2cfcf0947fd
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
scorpiobroker/scorpio:QueryManager_2.1.0b742a53b2803
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
scorpiobroker/scorpio:HistoryManager_2.1.0b7fe27a06ff5
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
scorpiobroker/scorpio:config-server_1.1.0c46c1517e523
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
scorpiobroker/scorpio:SubscriptionManager_2.1.0e08036670d66
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
scorpiobroker/scorpio:EntityManager_2.1.0f02e8a429a08
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
2
shahanafarooqui/rtl:0.13.3e2195188a451
openssl@3.0.7-r0
3.0.19-r0
2
sigp/lighthouse:v8.1.344aa773dcf27
openssl@3.0.2-0ubuntu1.21
no fix listed
2
sigp/lighthouse:latest9a62bb870545
openssl@3.0.2-0ubuntu1.26
no fix listed
2
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm1
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
2
stakater/stakater-nordmart-review:1.0.35954d2be66e95
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-14.el8_10
2
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm1
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
openssl@3.0.2-0ubuntu1.5
3.0.2-0ubuntu1.20
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
openssl@3.3.3-r0
3.3.5-r0
2
taigaio/taiga-front:latest570c8792ce80
openssl@3.0.8-r3
3.0.19-r0
2
tzahi12345/youtubedl-material:4.3.2:latest2f943d584711
nodejs@16.14.2-deb-1nodesource1
openssl@3.0.2-0ubuntu1.9
no fix listed
3.0.2-0ubuntu1.20
2
uffizzi/controller:latest0344805f267b
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
2
uselagoon/docker-host:v3.6.12c89ed939b8b
openssl@3.3.3-r0
3.3.5-r0
2
vaultwarden/server:1.25.239f34c5159a2
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
2
vdiogov/glpi-conteiner:latest6945f84f0058
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
2
wolveix/satisfactory-server:latest:v1.9.10e103700ae6ae
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20
2
wurstmeister/zookeeper:latest7a7fd44a7210
openssl@1.0.1f-1ubuntu2.5
1.0.1f-1ubuntu2.27+esm11
2
xuxueli/xxl-job-admin:2.4.0640093c35fd6
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
2
yzhou442/equiz:latesta3f7ca69e28d
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
2
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.6
2
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
openssl@1.0.2g-1ubuntu4.8
1.0.2g-1ubuntu4.20+esm13
2
ghcr.io/airflow-helm/pgbouncer:1.22.1-patch.0c181abe1093d
openssl@3.1.4-r6
3.1.8-r1
2
ghcr.io/airflow-helm/postgresql-bitnami:11.22-patch.0df576862b7c0
openssl@3.1.4-r5
3.1.8-r1
2
ghcr.io/apollographql/router:v1.25.0a84f593d04ea
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4
2

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.