CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,737; of 17,790 indexed, latest versions
Container images: 3,261; deployed by those charts
Fix available: 6 of 7; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,737 of 17,790 indexed charts deploy, on 3,261 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more	1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more	1,966
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more	3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0	970
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm2	15
opensslrpm	1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+29 more	1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7	322
openssl-3rpm	3.2.3-150700.5.18.1	3.2.3-150700.5.21.1	3
openssl-1_1rpm	1.1.1w-150700.11.3.1	1.1.1w-150700.11.6.1	1

OSV records: ALPINE-CVE-2025-9230 CGA-c4v2-6rpm-vq95 DEBIAN-CVE-2025-9230 UBUNTU-CVE-2025-9230 RHSA-2025:21174 RHSA-2025:21255 RHSA-2026:0337 RHSA-2026:1720 RLSA-2025:21255 RLSA-2026:0337 DLA-4321-1 SUSE-SU-2025:03546-1 SUSE-SU-2025:03635-1
Also known as: CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,737 by stars

Chart

Latest

Affected images

Radar Score

metallbkubeblocks

0.14.4

2 of 3 See more

metallb kubeblocks 0.14.4

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.14.4	bbef1ee3e7d3	openssl@3.1.4-r5	3.1.8-r1
quay.io/metallb/speaker :v0.14.4	37611bde45a2	openssl@3.1.4-r5	3.1.8-r1

Open the chart page →

2,600

openebskubeblocks

3.10.0

2 of 3 See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.20
openebs/node-disk-operator :2.1.0	6afe2123c457	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.20

Open the chart page →

10,587

postgres-operatorkubeblocks

1.12.2

1 of 1 See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	openssl@3.3.0-r2	3.3.5-r0

Open the chart page →

1,555

smartfs-csi-driverkubeblocks

0.1.2

1 of 6 See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10

Open the chart page →

9,256

spiderpoolkubeblocks

1.2.0

3 of 4 See more

spiderpool kubeblocks 1.2.0

3 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.4	09fdfb7ce090	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

8,470

vaultkubeblocks

0.30.0

2 of 2 See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.19.0	bbb7f98dc67d	openssl@3.3.3-r0	3.3.5-r0
hashicorp/vault-k8s :1.6.2	103a2d817a74	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

2,751

kubeclaritykubeclarity

2.23.3

3 of 5 See more

kubeclarity kubeclarity 2.23.3

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	openssl@3.0.10-r0	3.0.19-r0
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	openssl@3.1.5-r0	3.1.8-r1
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	openssl@3.1.5-r0	3.1.8-r1

Open the chart page →

5,520

helm-controllerkubedex

0.4.0

1 of 1 See more

helm-controller kubedex 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubedex/helm-controller :v1.0.1	4f1008c51ef9	openssl@1:1.0.2k-16.el7_6.1	1:1.0.2k-26.el7_9.1

Open the chart page →

2,421

listener-operatorkubedoop

0.4.0

1 of 6 See more

listener-operator kubedoop 0.4.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	openssl@1:3.2.2-6.el9_5.1	1:3.2.2-7.el9_6.1

Open the chart page →

4,472

secret-operatorkubedoop

0.4.0

1 of 5 See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	openssl@1:3.2.2-6.el9_5.1	1:3.2.2-7.el9_6.1

Open the chart page →

4,414

juicefs-csi-driverkubegems

0.19.2

1 of 6 See more

juicefs-csi-driver kubegems 0.19.2

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4

Open the chart page →

4,838

juicefs-tenantkubegems

1.0.1

1 of 3 See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubegems/redis :7.2.5-debian-12-r2	870ee3a77add	openssl@3.0.13-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

4,306

kubegems-multus-cnikubegems

2.4.1

1 of 2 See more

kubegems-multus-cni kubegems 2.4.1

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.2.1	6bebbda31416	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

1,391

kubegems-paikubegems

1.0.18

1 of 1 See more

kubegems-pai kubegems 1.0.18

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubegems/mysql :8.0.33-debian-11-r0	19cb195b9a50	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4

Open the chart page →

1,052

volcanokubegems

1.12.1

3 of 3 See more

volcano kubegems 1.12.1

3 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
volcanosh/vc-controller-manager :v1.12.1	3815883c32f6	openssl@3.5.0-r0	3.5.4-r0
volcanosh/vc-scheduler :v1.12.1	b24ea8af2d16	openssl@3.5.0-r0	3.5.4-r0
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	openssl@3.5.0-r0	3.5.4-r0

Open the chart page →

5,036

gptchat-api-feishubotkubegemsapp

0.1.1

3 of 3 See more

gptchat-api-feishubot kubegemsapp 0.1.1

3 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubegems/chatgpt-api :latest	f3c492a938ad	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	openssl@3.0.7-r0	3.0.19-r0
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	openssl@3.0.7-r0	3.0.19-r0

Open the chart page →

8,487

kube-infokube-info

0.1.0

1 of 1 See more

kube-info kube-info 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
andreymileshin/kube-info :v0.1.0	f7b300bc9e66	openssl@3.1.7-r0	3.1.8-r1

Open the chart page →

518

kube-janitorkube-janitor

0.3.3

1 of 1 See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
hjacobs/kube-janitor :23.7.0	fbb303ed463c	openssl@3.0.9-1	3.0.17-1~deb12u3

Open the chart page →

4,310

kubemacpoolkubemacpool

0.3.0

1 of 1 See more

kubemacpool kubemacpool 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubemacpool :v0.45.0	eebb65b8a12c	openssl@1:3.2.2-6.el9_5	1:3.5.1-4.el9_7

Open the chart page →

1,624

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,208

kube-ovnkube-ovn-test

1.14.0

1 of 1 See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeovn/kube-ovn :v1.14.0	6722b54eb5c0	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.6

Open the chart page →

5,003

kubernetes-netskope-publisherkubernetes-netskope-publisher

1.5.0

1 of 2 See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
netskopeprivateaccess/publisher_u22 :latest	93e2fd164a93	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

3,586

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10

Open the chart page →

3,630

kube-httpcachekubernetes-replicator

0.9.1

1 of 1 See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kube-httpcache :stable	2169032c5840	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

4,463

whatsappkubernetes-whatsapp

0.1.8

1 of 4 See more

whatsapp kubernetes-whatsapp 0.1.8

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
library/python :3.8-alpine	3d93b1f77efc	openssl@3.3.2-r0	3.3.5-r0

Open the chart page →

1,574

testkube-apikubeshop

2.1.162

1 of 2 See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :2.1.162	e97dc620d9b4	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

1,670

testkube-logskubeshop

0.2.2

1 of 1 See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeshop/testkube-logs-server :latest	094186b19698	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

1,286

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	openssl@3.3.2-r0	3.3.5-r0

Open the chart page →

1,562

databend-metakubesphere-stable

0.7.3

1 of 1 See more

databend-meta kubesphere-stable 0.7.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
datafuselabs/databend-meta :v1.2.279	ba877ee6cb4d	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3

Open the chart page →

2,838

databend-querykubesphere-stable

0.8.3

1 of 1 See more

databend-query kubesphere-stable 0.8.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
datafuselabs/databend-query :v1.2.279	a936843b85b4	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3

Open the chart page →

2,838

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1
deepflowce/deepflow-agent :v6.2.6.5	29332fee7fc2	openssl@3.0.2-0ubuntu1.9	3.0.2-0ubuntu1.20
grafana/grafana :9.5.2	39c849cebccc	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

18,420

fpga-operatorkubesphere-stable

2.7.4

3 of 7 See more

fpga-operator kubesphere-stable 2.7.4

3 of the 7 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
inaccel/driver :latest	07271a5c2fe7	openssl@3.1.4-r5	3.1.8-r1
inaccel/mkrt :latest	187fd448b6f2	openssl@3.0.12-r1	3.0.19-r0
inaccel/monitor :2.1	34bb93de386f	openssl@3.1.4-r5	3.1.8-r1

Open the chart page →

5,770

iomeshkubesphere-stable

1.1.0

5 of 25 See more

iomesh kubesphere-stable 1.1.0

5 of the 25 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	openssl@3.0.7-r0	3.0.19-r0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	openssl@3.0.7-r0	3.0.19-r0
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.20
iomesh/deck :v0.1.0	a31e26b6ae22	openssl@3.1.4-r5	3.1.8-r1
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	openssl@3.1.4-r5	3.1.8-r1

Open the chart page →

48,954

IOMeshkubesphere-stable

1.2.0

7 of 25 See more

IOMesh kubesphere-stable 1.2.0

7 of the 25 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	openssl@3.0.7-r0	3.0.19-r0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	openssl@3.0.7-r0	3.0.19-r0
iomesh/csi-driver :v2.8.0	1a151f602451	openssl@3.0.2-0ubuntu1.16	3.0.2-0ubuntu1.20
iomesh/deck :v0.2.0	282d6c419ed3	openssl@3.3.1-r3	3.3.5-r0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	openssl@3.3.1-r3	3.3.5-r0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.6
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.6

Open the chart page →

46,639

pulsarkubesphere-stable

2.7.13

1 of 3 See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

14,401

clickhousekubesphere-test

0.1.1

1 of 2 See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
radondb/clickhouse-server :v21.1.3.32-stable	4732df471073	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

6,705

csi-neonsankubesphere-test

1.3.0

1 of 6 See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm13

Open the chart page →

18,526

mongodbkubesphere-test

0.3.2

1 of 2 See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
library/mongo :4.2.1	6ca49afbcb2b	openssl@1.1.1-1ubuntu2.1~18.04.4	1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

9,631

mysqlkubesphere-test

1.0.2

1 of 3 See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
xenondb/percona :5.7.33	0e26872a2b67	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,384

sample-bookinfokubesphere-test

1.0.0

1 of 4 See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubesphere/examples-bookinfo-reviews-v2 :1.13.0	6d93129beb32	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm13

Open the chart page →

9,388

xenondbkubesphere-test

1.0.0

1 of 3 See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
xenondb/percona :5.7.33	0e26872a2b67	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,384

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

4,456

kubestellar-uikubestellarui

0.1.1

3 of 4 See more

kubestellar-ui kubestellarui 0.1.1

3 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
library/redis :7.0-alpine	c9d92d840fd0	openssl@3.3.2-r0	3.3.5-r0
mavrick1/kubestellar-b :latest	45ca0429a1d4	openssl@3.3.3-r0	3.3.5-r0
mavrick1/kubestellar-f :latest	56bd8eaa53a4	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

4,773

sample-appkubeuest

0.1.3

1 of 1 See more

sample-app kubeuest 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
michaelepitech/sample-app :latest	af51d61c19f5	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4

Open the chart page →

1,427

workload-operatorkubevious

0.0.3

1 of 1 See more

workload-operator kubevious 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubevious/workload-operator :1.0.2	0b0f4c507eb6	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

2,009

network-enforcerkubewarden

0.1.2

1 of 3 See more

network-enforcer kubewarden 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
fluent/fluent-bit :4.0.4	ca08b7d2df5b	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

2,562

kube-workload-restarterkube-workload-restarter

0.0.4

1 of 1 See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
andreacioni/kube-workload-restarter :0.0.24	2938b310090a	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4

Open the chart page →

1,815

excalidrawkubitodev

1.0.3

1 of 1 See more

excalidraw kubitodev 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
excalidraw/excalidraw :latest	f7ee194addd6	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

840

penpotkubitodev

1.2.1

3 of 5 See more

penpot kubitodev 1.2.1

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
penpotapp/backend :2.2.1	47853d9bb9dd	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.20
penpotapp/exporter :2.2.1	5c835ffd87ab	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.20
penpotapp/frontend :2.2.1	8974882a0542	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4

Open the chart page →

16,976

kubiya-runnerkubiya-helm-charts

0.9.4

4 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

4 of the 9 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.6
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	openssl@3.1.8-r0	3.1.8-r1
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	openssl@3.1.8-r0	3.1.8-r1

Open the chart page →

20,386

Container images carrying it

3,261 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/containerd/nydus-snapshotter :v0.9.0	56f8617363b4	openssl@3.0.7-r0	3.0.19-r0	2
ghcr.io/cosmos/gaia :v25.1.0	f115777d1112	openssl@3.5.0-r0	3.5.4-r0	2
ghcr.io/cross-seed/cross-seed :6.13.3	81afafdd96a5	openssl@3.5.1-r0	3.5.4-r0	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.20	2
ghcr.io/eosc-lot-1/curl-jq :8	156beafae7ca	openssl@3.1.4-r5	3.1.8-r1	2
ghcr.io/eosc-lot-1/s3cmd :2-alpine	49bce0dd876d	openssl@3.1.4-r6	3.1.8-r1	2
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm1	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm1	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm1	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	openssl@3.0.13-1~deb12u1	3.0.17-1~deb12u3	2
ghcr.io/grafana/helm-chart-toolbox-kubectl :0.1.1	c137478627cc	openssl@3.5.1-r0	3.5.4-r0	2
ghcr.io/home-operations/readarr :0.4.18 :0.4.18.2805	8f7551205fbd	openssl@3.5.0-r0	3.5.4-r0	2
ghcr.io/immich-app/postgres :14-vectorchord0.4.3-pgvectors0.2.0	bcf63357191b	openssl@3.0.17-1~deb12u2	3.0.17-1~deb12u3	2
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.4	09fdfb7ce090	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4	2
ghcr.io/kiwigrid/k8s-sidecar :1.29.1	42002d66ddb3	openssl@3.3.2-r4	3.3.5-r0	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm6	2
ghcr.io/matrix-org/sliding-sync :v0.99.19	b940cab56435	openssl@3.0.13-r0	3.0.19-r0	2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss :unprivileged-oss-20250331	3db8145349a3	openssl@3.0.14-1~deb12u2	3.0.17-1~deb12u3	2
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3	2
ghcr.io/nucleuscloud/neosync/app :0.5.41	ca31ec35b829	openssl@3.5.0-r0	3.5.4-r0	2
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3	2
ghcr.io/postgresml/pgcat :main	245f9d2f5f5b	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3	2
ghcr.io/rss3-network/agentdata :0.1.0	fd8d3e6e4cdf	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	2
ghcr.io/salaboy/fmtok8s-agenda-service :v0.0.1-native	6c5efe150958	openssl@1.1.1-1ubuntu2.1~18.04.21	1.1.1-1ubuntu2.1~18.04.23+esm6	2
ghcr.io/salaboy/fmtok8s-c4p-service :v0.0.1-native	3f7cc45fd20b	openssl@1.1.1-1ubuntu2.1~18.04.21	1.1.1-1ubuntu2.1~18.04.23+esm6	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	openssl@3.0.2-0ubuntu1.2	3.0.2-0ubuntu1.20	2
ghcr.io/smarter-project/home-ha-mock :main	95ee018cf558	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	2
ghcr.io/smarter-project/home-orchestrator :main	d44135b02d77	openssl@3.1.8-r0	3.1.8-r1	2
ghcr.io/techno-tim/littlelink-server :latest	e84ea9d93b60	openssl@3.1.4-r5	3.1.8-r1	2
ghcr.io/thecatlady/webhook :2.8.0	f04718704dab	openssl@3.0.8-r0	3.0.19-r0	2
ghcr.io/wg-easy/wg-easy :14	5f26407fd2ed	openssl@3.5.0-r0	3.5.4-r0	2
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm1	2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	openssl@3.5.1-1	3.5.1-1+deb13u1	2
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.6	2
quay.io/coreos/etcd :v3.5.6	28cb0630cb85	openssl@1.1.1n-0+deb11u1	1.1.1w-0+deb11u4	2
quay.io/curl/curl :8.16.0	b17b13321678	openssl@3.5.2-r0	3.5.4-r0	2
quay.io/flomesh/curl-ubi8 :7.84.0	bef31fa5f5f3	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-14.el8_10	2
quay.io/hedgedoc/hedgedoc :1.9.4	e09967519a1d	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	2
quay.io/keycloak/keycloak :20.0	054ef67eb7da	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-14.el8_10	2
quay.io/keycloak/keycloak :17.0.1-legacy	68f9f38c8f30	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-14.el8_10	2
quay.io/kiwigrid/k8s-sidecar :1.26.1	b8d5067137fe	openssl@3.1.4-r5	3.1.8-r1	2
quay.io/kiwigrid/k8s-sidecar :1.27.4	f6ed71d0f9f1	openssl@3.3.0-r2	3.3.5-r0	2
quay.io/minio/mc :RELEASE.2023-09-29T16-41-22Z	a784ce6e3b1b	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10	2
quay.io/minio/mc :RELEASE.2023-01-28T20-29-38Z	ad34abeba912	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-14.el8_10	2
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10	2
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10	2
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-14.el8_10	2
quay.io/mongodb/mongodb-kubernetes-operator :0.13.0	2dcc6393e6f7	openssl@1:1.1.1k-14.el8_6	1:1.1.1k-14.el8_10	2
quay.io/opencloudio/ibm-mongodb :4.0.24	d8c631a6dc43	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-14.el8_10	2
quay.io/openshift/origin-cli :4.7	464a3af4dfe0	openssl@1:1.1.1g-18.el8_4	1:1.1.1k-14.el8_10	2