CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.016; 74th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,737; of 17,790 indexed, latest versions
Container images: 3,261; deployed by those charts
Fix available: 6 of 7; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,737 of 17,790 indexed charts deploy, on 3,261 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more	1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more	1,966
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more	3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0	970
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm2	15
opensslrpm	1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+29 more	1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7	322
openssl-3rpm	3.2.3-150700.5.18.1	3.2.3-150700.5.21.1	3
openssl-1_1rpm	1.1.1w-150700.11.3.1	1.1.1w-150700.11.6.1	1

OSV records: ALPINE-CVE-2025-9230 CGA-c4v2-6rpm-vq95 DEBIAN-CVE-2025-9230 UBUNTU-CVE-2025-9230 RHSA-2025:21174 RHSA-2025:21255 RHSA-2026:0337 RHSA-2026:1720 RLSA-2025:21255 RLSA-2026:0337 DLA-4321-1 SUSE-SU-2025:03546-1 SUSE-SU-2025:03635-1
Also known as: CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,737 by stars

Chart

Latest

Affected images

Radar Score

metallbkubeblocks

0.14.4

2 of 3 See more

metallb kubeblocks 0.14.4

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/metallb/controller :v0.14.4	bbef1ee3e7d3	openssl@3.1.4-r5	3.1.8-r1
quay.io/metallb/speaker :v0.14.4	37611bde45a2	openssl@3.1.4-r5	3.1.8-r1

Open the chart page →

2,600

openebskubeblocks

3.10.0

2 of 3 See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.20
openebs/node-disk-operator :2.1.0	6afe2123c457	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.20

Open the chart page →

10,587

postgres-operatorkubeblocks

1.12.2

1 of 1 See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.12.2	d81cda253f5c	openssl@3.3.0-r2	3.3.5-r0

Open the chart page →

1,555

smartfs-csi-driverkubeblocks

0.1.2

1 of 6 See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10

Open the chart page →

9,256

spiderpoolkubeblocks

1.2.0

3 of 4 See more

spiderpool kubeblocks 1.2.0

3 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.1.4	09fdfb7ce090	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4
ghcr.io/spidernet-io/spiderpool/spiderpool-agent :v1.2.0	8bb9411e47e0	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm1
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

8,470

vaultkubeblocks

0.30.0

2 of 2 See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
hashicorp/vault :1.19.0	bbb7f98dc67d	openssl@3.3.3-r0	3.3.5-r0
hashicorp/vault-k8s :1.6.2	103a2d817a74	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

2,751

kubeclaritykubeclarity

2.23.3

3 of 5 See more

kubeclarity kubeclarity 2.23.3

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/openclarity/grype-server :v0.6.0	79412399f301	openssl@3.0.10-r0	3.0.19-r0
ghcr.io/openclarity/kubeclarity :v2.23.3	14450f52a708	openssl@3.1.5-r0	3.1.8-r1
ghcr.io/openclarity/kubeclarity-sbom-db :v2.23.3	cef2b88bfc76	openssl@3.1.5-r0	3.1.8-r1

Open the chart page →

5,520

helm-controllerkubedex

0.4.0

1 of 1 See more

helm-controller kubedex 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubedex/helm-controller :v1.0.1	4f1008c51ef9	openssl@1:1.0.2k-16.el7_6.1	1:1.0.2k-26.el7_9.1

Open the chart page →

2,421

listener-operatorkubedoop

0.4.0

1 of 6 See more

listener-operator kubedoop 0.4.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	openssl@1:3.2.2-6.el9_5.1	1:3.2.2-7.el9_6.1

Open the chart page →

4,472

secret-operatorkubedoop

0.4.0

1 of 5 See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	openssl@1:3.2.2-6.el9_5.1	1:3.2.2-7.el9_6.1

Open the chart page →

4,414

juicefs-csi-driverkubegems

0.19.2

1 of 6 See more

juicefs-csi-driver kubegems 0.19.2

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.23.0	d915e899e322	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4

Open the chart page →

4,838

juicefs-tenantkubegems

1.0.1

1 of 3 See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubegems/redis :7.2.5-debian-12-r2	870ee3a77add	openssl@3.0.13-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

4,306

kubegems-multus-cnikubegems

2.4.1

1 of 2 See more

kubegems-multus-cni kubegems 2.4.1

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/multus-cni :v4.2.1	6bebbda31416	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

1,391

kubegems-paikubegems

1.0.18

1 of 1 See more

kubegems-pai kubegems 1.0.18

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubegems/mysql :8.0.33-debian-11-r0	19cb195b9a50	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4

Open the chart page →

1,052

volcanokubegems

1.12.1

3 of 3 See more

volcano kubegems 1.12.1

3 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
volcanosh/vc-controller-manager :v1.12.1	3815883c32f6	openssl@3.5.0-r0	3.5.4-r0
volcanosh/vc-scheduler :v1.12.1	b24ea8af2d16	openssl@3.5.0-r0	3.5.4-r0
volcanosh/vc-webhook-manager :v1.12.1	f8b50088a732	openssl@3.5.0-r0	3.5.4-r0

Open the chart page →

5,036

gptchat-api-feishubotkubegemsapp

0.1.1

3 of 3 See more

gptchat-api-feishubot kubegemsapp 0.1.1

3 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubegems/chatgpt-api :latest	f3c492a938ad	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4
kubegems/chatgpt-api-feishubot :latest	7c93c84b2055	openssl@3.0.7-r0	3.0.19-r0
kubegems/chatgpt-api-proxy :latest	8905c9dbbb5d	openssl@3.0.7-r0	3.0.19-r0

Open the chart page →

8,487

kube-infokube-info

0.1.0

1 of 1 See more

kube-info kube-info 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
andreymileshin/kube-info :v0.1.0	f7b300bc9e66	openssl@3.1.7-r0	3.1.8-r1

Open the chart page →

518

kube-janitorkube-janitor

0.3.3

1 of 1 See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
hjacobs/kube-janitor :23.7.0	fbb303ed463c	openssl@3.0.9-1	3.0.17-1~deb12u3

Open the chart page →

4,310

kubemacpoolkubemacpool

0.3.0

1 of 1 See more

kubemacpool kubemacpool 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/kubemacpool :v0.45.0	eebb65b8a12c	openssl@1:3.2.2-6.el9_5	1:3.5.1-4.el9_7

Open the chart page →

1,624

apm-serverkube-ops

0.1.2

1 of 1 See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
elastic/apm-server :7.17.6	c7a1c63257d0	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,208

kube-ovnkube-ovn-test

1.14.0

1 of 1 See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeovn/kube-ovn :v1.14.0	6722b54eb5c0	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.6

Open the chart page →

5,003

kubernetes-netskope-publisherkubernetes-netskope-publisher

1.5.0

1 of 2 See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
netskopeprivateaccess/publisher_u22 :latest	93e2fd164a93	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

3,586

brudi-operatorkubernetes-replicator

0.2.3

1 of 1 See more

brudi-operator kubernetes-replicator 0.2.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-14.el8_10

Open the chart page →

3,630

kube-httpcachekubernetes-replicator

0.9.1

1 of 1 See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
quay.io/mittwald/kube-httpcache :stable	2169032c5840	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

4,463

whatsappkubernetes-whatsapp

0.1.8

1 of 4 See more

whatsapp kubernetes-whatsapp 0.1.8

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
library/python :3.8-alpine	3d93b1f77efc	openssl@3.3.2-r0	3.3.5-r0

Open the chart page →

1,574

testkube-apikubeshop

2.1.162

1 of 2 See more

testkube-api kubeshop 2.1.162

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeshop/testkube-api-server :2.1.162	e97dc620d9b4	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

1,670

testkube-logskubeshop

0.2.2

1 of 1 See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeshop/testkube-logs-server :latest	094186b19698	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

1,286

tracetestkubeshop

0.3.39

1 of 2 See more

tracetest kubeshop 0.3.39

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubeshop/tracetest :v1.7.1	73d7e3a2db43	openssl@3.3.2-r0	3.3.5-r0

Open the chart page →

1,562

databend-metakubesphere-stable

0.7.3

1 of 1 See more

databend-meta kubesphere-stable 0.7.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
datafuselabs/databend-meta :v1.2.279	ba877ee6cb4d	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3

Open the chart page →

2,838

databend-querykubesphere-stable

0.8.3

1 of 1 See more

databend-query kubesphere-stable 0.8.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
datafuselabs/databend-query :v1.2.279	a936843b85b4	openssl@3.0.11-1~deb12u2	3.0.17-1~deb12u3

Open the chart page →

2,838

deepflowkubesphere-stable

6.2.606

3 of 8 See more

deepflow kubesphere-stable 6.2.606

3 of the 8 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
deepflowce/clickhouse-server :22.8.6.71	bc1882f75c18	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm1
deepflowce/deepflow-agent :v6.2.6.5	29332fee7fc2	openssl@3.0.2-0ubuntu1.9	3.0.2-0ubuntu1.20
grafana/grafana :9.5.2	39c849cebccc	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

18,420

fpga-operatorkubesphere-stable

2.7.4

3 of 7 See more

fpga-operator kubesphere-stable 2.7.4

3 of the 7 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
inaccel/driver :latest	07271a5c2fe7	openssl@3.1.4-r5	3.1.8-r1
inaccel/mkrt :latest	187fd448b6f2	openssl@3.0.12-r1	3.0.19-r0
inaccel/monitor :2.1	34bb93de386f	openssl@3.1.4-r5	3.1.8-r1

Open the chart page →

5,770

iomeshkubesphere-stable

1.1.0

5 of 25 See more

iomesh kubesphere-stable 1.1.0

5 of the 25 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.1.0	d86dab5611a7	openssl@3.0.7-r0	3.0.19-r0
iomesh/blockdevice-monitor-prober :v0.1.0	584dbe19db7e	openssl@3.0.7-r0	3.0.19-r0
iomesh/csi-driver :v2.7.2	5d3f9bf9240b	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.20
iomesh/deck :v0.1.0	a31e26b6ae22	openssl@3.1.4-r5	3.1.8-r1
iomesh/deck-plugin-iomesh :v0.1.0	0b13bf217110	openssl@3.1.4-r5	3.1.8-r1

Open the chart page →

48,954

IOMeshkubesphere-stable

1.2.0

7 of 25 See more

IOMesh kubesphere-stable 1.2.0

7 of the 25 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
iomesh/blockdevice-monitor :v0.2.1	376577ed98ac	openssl@3.0.7-r0	3.0.19-r0
iomesh/blockdevice-monitor-prober :v0.2.1	026a1d87f6e9	openssl@3.0.7-r0	3.0.19-r0
iomesh/csi-driver :v2.8.0	1a151f602451	openssl@3.0.2-0ubuntu1.16	3.0.2-0ubuntu1.20
iomesh/deck :v0.2.0	282d6c419ed3	openssl@3.3.1-r3	3.3.5-r0
iomesh/deck-plugin-iomesh :v0.2.0	df149e4ab39f	openssl@3.3.1-r3	3.3.5-r0
iomesh/node-disk-manager :1.8.0-2	292ad270082e	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.6
iomesh/node-disk-operator :1.8.0-1	de4aa40684ad	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.6

Open the chart page →

46,639

pulsarkubesphere-stable

2.7.13

1 of 3 See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

14,401

clickhousekubesphere-test

0.1.1

1 of 2 See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
radondb/clickhouse-server :v21.1.3.32-stable	4732df471073	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

6,705

csi-neonsankubesphere-test

1.3.0

1 of 6 See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm13

Open the chart page →

18,526

mongodbkubesphere-test

0.3.2

1 of 2 See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
library/mongo :4.2.1	6ca49afbcb2b	openssl@1.1.1-1ubuntu2.1~18.04.4	1.1.1-1ubuntu2.1~18.04.23+esm6

Open the chart page →

9,631

mysqlkubesphere-test

1.0.2

1 of 3 See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
xenondb/percona :5.7.33	0e26872a2b67	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,384

sample-bookinfokubesphere-test

1.0.0

1 of 4 See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubesphere/examples-bookinfo-reviews-v2 :1.13.0	6d93129beb32	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm13

Open the chart page →

9,388

xenondbkubesphere-test

1.0.0

1 of 3 See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
xenondb/percona :5.7.33	0e26872a2b67	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm1

Open the chart page →

7,384

kubestellar-consolekubestellar-console

0.3.41

1 of 2 See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
alpine/k8s :1.32.4	7e1e7d5b7a96	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

4,456

kubestellar-uikubestellarui

0.1.1

3 of 4 See more

kubestellar-ui kubestellarui 0.1.1

3 of the 4 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
library/redis :7.0-alpine	c9d92d840fd0	openssl@3.3.2-r0	3.3.5-r0
mavrick1/kubestellar-b :latest	45ca0429a1d4	openssl@3.3.3-r0	3.3.5-r0
mavrick1/kubestellar-f :latest	56bd8eaa53a4	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

4,773

sample-appkubeuest

0.1.3

1 of 1 See more

sample-app kubeuest 0.1.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
michaelepitech/sample-app :latest	af51d61c19f5	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4

Open the chart page →

1,427

workload-operatorkubevious

0.0.3

1 of 1 See more

workload-operator kubevious 0.0.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
kubevious/workload-operator :1.0.2	0b0f4c507eb6	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

2,009

network-enforcerkubewarden

0.1.2

1 of 3 See more

network-enforcer kubewarden 0.1.2

1 of the 3 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
fluent/fluent-bit :4.0.4	ca08b7d2df5b	openssl@3.0.16-1~deb12u1	3.0.17-1~deb12u3

Open the chart page →

2,562

kube-workload-restarterkube-workload-restarter

0.0.4

1 of 1 See more

kube-workload-restarter kube-workload-restarter 0.0.4

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
andreacioni/kube-workload-restarter :0.0.24	2938b310090a	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4

Open the chart page →

1,815

excalidrawkubitodev

1.0.3

1 of 1 See more

excalidraw kubitodev 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
excalidraw/excalidraw :latest	f7ee194addd6	openssl@3.3.3-r0	3.3.5-r0

Open the chart page →

840

penpotkubitodev

1.2.1

3 of 5 See more

penpot kubitodev 1.2.1

3 of the 5 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
penpotapp/backend :2.2.1	47853d9bb9dd	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.20
penpotapp/exporter :2.2.1	5c835ffd87ab	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.20
penpotapp/frontend :2.2.1	8974882a0542	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4

Open the chart page →

16,976

kubiya-runnerkubiya-helm-charts

0.9.4

4 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

4 of the 9 container images this version deploys carry CVE-2025-9230.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.5.1	01a63f4e032c	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.6
ghcr.io/kubiyabot/kubernetes :1.32.0	b5ade0d9cc6b	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3
ghcr.io/kubiyabot/tool-manager :0.5.8	0cca6760763a	openssl@3.1.8-r0	3.1.8-r1
ghcr.io/kubiyabot/workflow-engine :v1.46.2	560a16a56d4e	openssl@3.1.8-r0	3.1.8-r1

Open the chart page →

20,386

Container images carrying it

3,261 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/openshift/origin-cli :4.8	bb5e052770e5	openssl@1:1.1.1g-18.el8_4	1:1.1.1k-14.el8_10	2
quay.io/strimzi/operator :0.39.0	02f6f143fc6d	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-14.el8_10	2
quay.io/strimzi/operator :0.46.0	ac434a48ac2b	openssl@1:3.2.2-6.el9_5.1	1:3.5.1-4.el9_7	2
quay.io/zncdatadev/tools :1.0.0-kubedoop0.0.0-dev	382fca2054c9	openssl@1:3.2.2-6.el9_5.1	1:3.2.2-7.el9_6.1	2
registry.k8s.io/ingress-nginx/controller :v1.11.8	695d79381ee6	openssl@3.5.0-r0	3.5.4-r0	2
registry.k8s.io/ingress-nginx/controller :v1.9.5	b3aba22b1da8	openssl@3.1.4-r2	3.1.8-r1	2
registry.k8s.io/ingress-nginx/controller :v1.12.1	d2fbc4ec70d8	openssl@3.3.3-r0	3.3.5-r0	2
0hlov3/semaphore :v1.0.0	50f874ec096b	openssl@3.0.8-r0	3.0.19-r0	1
1dev/server :11.9.0	cd5b12fe5471	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.6	1
1password/connect-api :1.7.2	6aa94cf713f9	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u4	1
1password/connect-sync :1.7.2	fe527ed9d81f	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u4	1
2martens/configserver :latest	bf1cdb80239d	openssl@3.3.1-r3	3.3.5-r0	1
2martens/timetable :latest	bd1ba6ab84c9	openssl@3.5.1-r0	3.5.4-r0	1
2martens/wahlrecht :latest	ba2c3040dab0	openssl@3.5.1-r0	3.5.4-r0	1
48n6e/camellia-redis-proxy :1.4.0-jdk-21-0.0.1	a6ed886fddfc	openssl@3.0.9-1	3.0.17-1~deb12u3	1
5200710/hadoop :3.2.3-java8	092d3088a5fb	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm1	1
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm6	1
abdullahkhabir/radio :latest	56526d0cc929	openssl@3.0.7-r2	3.0.19-r0	1
abdullahkhawer/simple-elasticsearch-cleaner :2.1.0	28a6c3f7e0a9	openssl@3.3.2-r4	3.3.5-r0	1
abhinavsingh/proxy.py :latest	51adc989fd03	openssl@3.3.3-r0	3.3.5-r0	1
abiondevelopment/cert-manager-webhook-abion :latest	c741988fbd23	openssl@3.3.4-r0	3.3.5-r0	1
abohatyrenko/bucket-backup-restore :latest	fa98af15a13e	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4	1
aboogie/login_test_backend :new	9c41a4483ac8	openssl@3.0.13-1~deb12u1	3.0.17-1~deb12u3	1
activepieces/activepieces :0.23.0	c26188b44e62	openssl@1.1.1w-0+deb11u1	1.1.1w-0+deb11u4	1
adagber/planner :v1.0	e5c1ed097752	openssl@1.1.1n-0+deb11u1	1.1.1w-0+deb11u4	1
adguard/adguardhome :v0.107.65	d765078d2140	openssl@3.3.4-r0	3.3.5-r0	1
adityaprasadpathak/myapp :3.0	7e3b9777362c	openssl@1.1.1n-0+deb11u1	1.1.1w-0+deb11u4	1
adolfintel/speedtest :latest	1f828fe83374	openssl@1.1.1k-1+deb11u1	1.1.1w-0+deb11u4	1
adorsys/keycloak-config-cli :6.3.0-26.1.0	85be7a45a94c	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.6	1
adorsys/keycloak-config-cli :6.1.6-25.0.1	eb49a2dcbbb8	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.6	1
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm1	1
aeron/ikev2-strongswan-vpn :23.0	b48f25541f79	openssl@1.1.1n-0+deb11u4	1.1.1w-0+deb11u4	1
ahmetfurkandemir/iceberg-rest-fixture-postgresql :1.10.0	142231a0b8b7	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.20	1
ahmetgrbzz/result_server :1.0	08e10f9c0f53	openssl@3.1.4-r6	3.1.8-r1	1
ahmetgrbzz/result_server :2.0	35c37ae2bafd	openssl@3.1.4-r6	3.1.8-r1	1
ahmetgrbzz/web_server :1.0	2e7fef69c29f	openssl@3.1.4-r6	3.1.8-r1	1
ahmetgrbzz/web_server :2.0	f018bafd2b0c	openssl@3.1.4-r6	3.1.8-r1	1
aibrix/metadata-service :v0.7.0	63fb81a64377	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	1
aidasi/swpapi :v1-1-net6-k8s-test-beta	838b5e2080bc	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
aidasi/swpbom :v1-1-net6-k8s-test-beta	fee6857b9bc9	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
aidasi/swpgateway :v1-1-net6-k8s-test-beta	5ce8dbff7fdc	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
aidasi/swpidentity :v1-1-net6-k8s-test-beta	d433285c7d5a	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
aidasi/swpspa :v1-1-net6-k8s-test-beta	dee4ec566312	openssl@1.1.1n-0+deb11u3	1.1.1w-0+deb11u4	1
airbyte/pod-sweeper :1.5.1	98d2c39d512e	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	1
airsonicadvanced/airsonic-advanced :latest	f7cbafac2806	openssl@1.1.1f-1ubuntu2.2	1.1.1f-1ubuntu2.24+esm1	1
akaunting/akaunting :3.0.15	52811b36ec3a	openssl@3.0.9-1	3.0.17-1~deb12u3	1
akeyless/base-rhel :0.0.1	4ba8900a0061	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-14.el8_10	1
aktosecurity/akto-puppeteer-replay :doom_latest	853e37321e6e	openssl@3.5.1-r0	3.5.4-r0	1
allegroai/clearml :2.0.0-613	713ae38f7daf	openssl@3.0.15-1~deb12u1	3.0.17-1~deb12u3	1
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	openssl@1.1.1-1ubuntu2.1~18.04.19 openssl1.0@1.0.2n-1ubuntu5.10	1.1.1-1ubuntu2.1~18.04.23+esm6 1.0.2n-1ubuntu5.13+esm2	1