StackRadar

CVE-2025-9230

High

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.016
74th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,801
of 17,821 indexed, latest versions
Container images
3,326
deployed by those charts
Fix available
6 of 7
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,801 of 17,821 indexed charts deploy, on 3,326 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm11, 1.0.2g-1ubuntu4.20+esm13, 1.1.1-1ubuntu2.1~18.04.23+esm6, 1.1.1f-1ubuntu2.24+esm1+5 more2,006
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0993
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm221
opensslrpm1:1.0.2k-16.el7_6.1, 1:1.0.2k-19.el7, 1:1.0.2k-21.el7_9, 1:1.0.2k-22.el7_9+30 more1:1.0.2k-26.el7_9.1, 1:1.1.1k-14.el8_10, 1:3.2.2-7.el9_6.1, 1:3.5.1-4.el9_7324
openssl-3rpm3.2.3-150700.5.18.13.2.3-150700.5.21.13
openssl-1_1rpm1.1.1w-150700.11.3.11.1.1w-150700.11.6.11
OSV records
ALPINE-CVE-2025-9230CGA-c4v2-6rpm-vq95DEBIAN-CVE-2025-9230UBUNTU-CVE-2025-9230RHSA-2025:21174RHSA-2025:21255RHSA-2026:0337RHSA-2026:1720RLSA-2025:21255RLSA-2026:0337DLA-4321-1SUSE-SU-2025:03546-1SUSE-SU-2025:03635-1
Also known as
CGA-qm4c-c7mv-j233, RHSA-2025:21562, RHSA-2026:0602, RHSA-2026:0714, RHSA-2026:0794, RHSA-2026:0887, RHSA-2026:1475, USN-7786-1

Charts affected

2,801 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2025-9230.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,966

Container images carrying it

3,326 by charts deploying them

A fixed version is listed for 6 of the 7 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
2
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-14.el8_10
2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-14.el8_10
2
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-14.el8_10
2
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-14.el8_10
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
openssl@1:1.1.1g-18.el8_4
1:1.1.1k-14.el8_10
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
openssl@1:1.1.1g-18.el8_4
1:1.1.1k-14.el8_10
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-14.el8_10
2
quay.io/strimzi/operator:0.46.0ac434a48ac2b
openssl@1:3.2.2-6.el9_5.1
1:3.5.1-4.el9_7
2
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
openssl@1:3.2.2-6.el9_5.1
1:3.2.2-7.el9_6.1
2
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.4-r0
2
registry.k8s.io/ingress-nginx/controller:v1.9.5b3aba22b1da8
openssl@3.1.4-r2
3.1.8-r1
2
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
openssl@3.3.3-r0
3.3.5-r0
2
0hlov3/semaphore:v1.0.050f874ec096b
openssl@3.0.8-r0
3.0.19-r0
1
1dev/server:11.9.0cd5b12fe5471
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.6
1
1password/connect-api:1.7.26aa94cf713f9
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4
1
1password/connect-sync:1.7.2fe527ed9d81f
openssl@1.1.1n-0+deb11u5
1.1.1w-0+deb11u4
1
2martens/configserver:latestbf1cdb80239d
openssl@3.3.1-r3
3.3.5-r0
1
2martens/timetable:latestbd1ba6ab84c9
openssl@3.5.1-r0
3.5.4-r0
1
2martens/wahlrecht:latestba2c3040dab0
openssl@3.5.1-r0
3.5.4-r0
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
openssl@3.0.9-1
3.0.17-1~deb12u3
1
5200710/hadoop:3.2.3-java8092d3088a5fb
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm1
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm6
1
abdullahkhabir/radio:latest56526d0cc929
openssl@3.0.7-r2
3.0.19-r0
1
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
openssl@3.3.2-r4
3.3.5-r0
1
abhinavsingh/proxy.py:latest51adc989fd03
openssl@3.3.3-r0
3.3.5-r0
1
abiondevelopment/cert-manager-webhook-abion:latestc741988fbd23
openssl@3.3.4-r0
3.3.5-r0
1
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
1
aboogie/login_test_backend:new9c41a4483ac8
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
activepieces/activepieces:0.23.0c26188b44e62
openssl@1.1.1w-0+deb11u1
1.1.1w-0+deb11u4
1
adagber/planner:v1.0e5c1ed097752
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
adguard/adguardhome:v0.107.65d765078d2140
openssl@3.3.4-r0
3.3.5-r0
1
adityaprasadpathak/myapp:3.07e3b9777362c
openssl@1.1.1n-0+deb11u1
1.1.1w-0+deb11u4
1
adolfintel/speedtest:latest1f828fe83374
openssl@1.1.1k-1+deb11u1
1.1.1w-0+deb11u4
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.6
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.6
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm1
1
aeron/ikev2-strongswan-vpn:23.0b48f25541f79
openssl@1.1.1n-0+deb11u4
1.1.1w-0+deb11u4
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.20
1
ahmetgrbzz/result_server:1.008e10f9c0f53
openssl@3.1.4-r6
3.1.8-r1
1
ahmetgrbzz/result_server:2.035c37ae2bafd
openssl@3.1.4-r6
3.1.8-r1
1
ahmetgrbzz/web_server:1.02e7fef69c29f
openssl@3.1.4-r6
3.1.8-r1
1
ahmetgrbzz/web_server:2.0f018bafd2b0c
openssl@3.1.4-r6
3.1.8-r1
1
aibrix/metadata-service:v0.7.063fb81a64377
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
aidasi/swpapi:v1-1-net6-k8s-test-beta838b5e2080bc
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
aidasi/swpbom:v1-1-net6-k8s-test-betafee6857b9bc9
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
aidasi/swpgateway:v1-1-net6-k8s-test-beta5ce8dbff7fdc
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1
aidasi/swpidentity:v1-1-net6-k8s-test-betad433285c7d5a
openssl@1.1.1n-0+deb11u3
1.1.1w-0+deb11u4
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.