StackRadar

CVE-2025-9231

Medium

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.022
82nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
573
of 17,787 indexed, latest versions
Container images
605
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 573 of 17,787 indexed charts deploy, on 605 images.

Affected packageAffected versionsFixed inImages
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+15 more3.3.5-r0, 3.5.4-r0568
openssldeb3.5.1-13.5.1-1+deb13u121
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
OSV records
ALPINE-CVE-2025-9231CGA-cpj2-wf29-8hr5DEBIAN-CVE-2025-9231UBUNTU-CVE-2025-9231
Also known as
CGA-j26c-v69v-qpfw

Charts affected

573 by stars
ChartLatestAffected imagesRadar Score
gitea-sonarqube-botgitea-sonarqube-botOfficialVerified publisher0.4.01 of 1See more

gitea-sonarqube-bot gitea-sonarqube-bot 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
justusbunsi/gitea-sonarqube-bot:v0.4.018dd43b470d9
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

1,145
gridgaingridgainOfficialVerified publisher1.0.61 of 1See more

gridgain gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
gridgain/community:8.9.11d32d182a0e6a
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

4,679
app-blueprinthelm-app-blueprintVerified publisher0.2.11 of 1See more

app-blueprint helm-app-blueprint 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

840
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
nodejs@24.13.1-1nodesource1
no fix listed

Open the chart page →

12,461
backendikusi-bk-chart1.0.32 of 3See more

backend ikusi-bk-chart 1.0.3

2 of the 3 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
openssl@3.5.1-1
3.5.1-1+deb13u1
kyovint/kyoimgusers:1.0.080084149156e
openssl@3.5.1-1
3.5.1-1+deb13u1

Open the chart page →

5,976
webhook-broker-chartimytech0.2.41 of 1See more

webhook-broker-chart imytech 0.2.4

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
public.ecr.aws/optimizely/webhook-broker:v0.2.3cfc92cc2de65
openssl@3.3.4-r0
3.3.5-r0

Open the chart page →

1,246
ingress-nginx-validate-jwtingress-nginx-validate-jwtVerified publisher1.13.991 of 1See more

ingress-nginx-validate-jwt ingress-nginx-validate-jwt 1.13.99

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ivanjosipovic/ingress-nginx-validate-jwt:1.13.995089339a68ae
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

345
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
library/rabbitmq:3.12-management-alpine0b44fbcc3a4b
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

11,794
traccarjeffrescVerified publisher0.2.01 of 2See more

traccar jeffresc 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
traccar/traccar:6.7-alpine621c8d6d46fd
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,342
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.27.6db85bd553253
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

7,393
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.321 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

1 of the 17 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
curlimages/curl:8.9.18addc281f0ea
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

15,459
readarrk8s-home-lab-repo7.2.11 of 1See more

readarr k8s-home-lab-repo 7.2.1

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.188f7551205fbd
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

1,099
nginx-php-fpmkokuwa0.1.41 of 2See more

nginx-php-fpm kokuwa 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

1,840
kubebrowsekubebrowse1.7.02 of 5See more

kubebrowse kubebrowse 1.7.0

2 of the 5 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
openssl@3.3.3-r0
3.3.5-r0
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

4,143
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

4,101
kubeseckubesecVerified publisher1.1.01 of 1See more

kubesec kubesec 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
kubesec/kubesec:latest025a365d9f18
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

1,075
mesherykubesphere-stable0.5.01 of 13See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

24,690
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.01 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

1 of the 5 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/kubeservice-stack/customlimitrange-manager:v1.3.0d3ed97d142d4
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

5,941
chibisafel4gVerified publisher0.1.12 of 3See more

chibisafe l4g 0.1.1

2 of the 3 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
chibisafe/chibisafe:latest836467a50792
openssl@3.5.0-r0
3.5.4-r0
chibisafe/chibisafe-server:latest3da4fcbc1a18
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

5,657
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

2,113
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
openssl@3.5.2-r0
3.5.4-r0

Open the chart page →

4,390
plane-enterprisemakeplaneOfficialVerified publisher3.7.22 of 13See more

plane-enterprise makeplane 3.7.2

2 of the 13 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine468d34fefd63
openssl@3.3.1-r3
3.3.5-r0
library/rabbitmq:3.13.6-management-alpine611107e29cce
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

4,942
mimir-syncmimir-sync3.1.01 of 1See more

mimir-sync mimir-sync 3.1.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/antnsn/mal-sync:v1.0.52f06e72cef36
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

1,293
miniapiminiapi1.3.21 of 1See more

miniapi miniapi 1.3.2

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
udhos/miniapi:1.3.28a7042db82ce
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

854
model-manager-loadermodel-manager-loader1.27.01 of 1See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
openssl@3.5.1-1
3.5.1-1+deb13u1

Open the chart page →

2,678
anki-servermt1905022.2.01 of 1See more

anki-server mt190502 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/mt190502/docker-anki-sync-server:25.09.2824245fd5a57
openssl@3.3.2-r4
3.3.5-r0

Open the chart page →

382
octopuso7studios-octopus-helm-chartsOfficialVerified publisher1.2.33 of 5See more

octopus o7studios-octopus-helm-charts 1.2.3

3 of the 5 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
library/nats:2.11.9-alpine777787bbb4c7
openssl@3.5.1-r0
3.5.4-r0
natsio/nats-box:0.18.0abdc9f9f0120
openssl@3.5.0-r0
3.5.4-r0
natsio/nats-server-config-reloader:0.19.181edf32a3680
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

6,110
oadaoadaVerified publisher5.0.510 of 11See more

oada oada 5.0.5

10 of the 11 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
oada/auth:4.0.0c0d077e79ef4
openssl@3.5.1-r0
3.5.4-r0
oada/http-handler:4.0.0d87efe8ba4b0
openssl@3.5.1-r0
3.5.4-r0
oada/rev-graph-update:4.0.0ebc8343f05ff
openssl@3.5.1-r0
3.5.4-r0
oada/shares:4.0.0c6ffb4e8ed63
openssl@3.5.1-r0
3.5.4-r0
oada/startup:4.0.0fc09495e2f3c
openssl@3.5.1-r0
3.5.4-r0
oada/sync-handler:4.0.0b7a2cfc137cf
openssl@3.5.1-r0
3.5.4-r0
oada/users:4.0.0b6c562fa5b1b
openssl@3.5.1-r0
3.5.4-r0
oada/webhooks:4.0.06590c60de347
openssl@3.5.1-r0
3.5.4-r0
oada/well-known:4.0.07943fde43b19
openssl@3.5.1-r0
3.5.4-r0
oada/write-handler:4.0.08464c7f48aae
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

13,319
dashdotoben01Verified publisher1.5.01 of 1See more

dashdot oben01 1.5.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
mauricenino/dashdot:5.9.2236997816917
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,237
openrouter-botopenrouter-botVerified publisher0.2.01 of 1See more

openrouter-bot openrouter-bot 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
lifailon/openrouter-bot:latestea37e4b6b952
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

1,059
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

6,899
opikopikOfficialVerified publisher2.2.611 of 13See more

opik opik 2.2.61

1 of the 13 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
curlimages/curl:8.12.194e9e444bcba
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

14,422
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

2,279
patchworkpatchworkVerified publisher0.8.61 of 2See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/patchwork:mainc01e018bced4
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

2,084
phpipamphpipam-helmVerified publisher1.0.122 of 3See more

phpipam phpipam-helm 1.0.12

2 of the 3 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:v1.7.354468713454e
openssl@3.3.2-r1
3.3.5-r0
phpipam/phpipam-www:v1.7.3ace0efd24830
openssl@3.3.2-r1
3.3.5-r0

Open the chart page →

3,778
readarrpree-helm-chartsVerified publisher1.17.11 of 1See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.18.28058f7551205fbd
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

1,099
prometheus-sql-exporterprometheus-communityVerified publisher0.5.01 of 1See more

prometheus-sql-exporter prometheus-community 0.5.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,199
psa-restricted-patcherpsa-restricted-patcherVerified publisher0.10.11 of 1See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

1,402
rclonercloneVerified publisher2.2.01 of 1See more

rclone rclone 2.2.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

1,672
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

6,640
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

2,823
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
openssl@3.5.1-1
3.5.1-1+deb13u1

Open the chart page →

3,942
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
getmeili/meilisearch:v1.11.0b9be3d2d4251
openssl@3.3.2-r0
3.3.5-r0
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
openssl@3.3.2-r4
3.3.5-r0

Open the chart page →

30,310
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

5,214
scaffoldsigstoreVerified publisher0.6.1141 of 15See more

scaffold sigstore 0.6.114

1 of the 15 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
library/redisdigest-pinned148bb5411c18
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

7,711
artifact-hubsoftonic1.19.04 of 8See more

artifact-hub softonic 1.19.0

4 of the 8 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
artifacthub/db-migrator:v1.19.02a746b289fcd
openssl@3.3.1-r0
3.3.5-r0
artifacthub/hub:v1.19.0111918d8c399
openssl@3.3.1-r0
3.3.5-r0
artifacthub/postgres:latest4fd34fa635cc
openssl@3.5.1-1
3.5.1-1+deb13u1
artifacthub/scanner:v1.19.0323d026e78c3
openssl@3.3.1-r0
3.3.5-r0

Open the chart page →

14,504
ocean-metric-exporterspot1.1.11 of 1See more

ocean-metric-exporter spot 1.1.1

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
gcr.io/spotinst-artifacts/spot-ocean-metric-exporter:1.0.5ae57b62291aa
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

1,482
gethstakewise2.5.81 of 3See more

geth stakewise 2.5.8

1 of the 3 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ethereum/client-go:v1.15.101f36ca5922a5
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,142
upbot-operatorupbot-operator0.0.201 of 2See more

upbot-operator upbot-operator 0.0.20

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
alpine/k8s:1.28.13e5c0b053fed7
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

4,461
vault-gcp-secretsvault-gcp-secrets1.19.51 of 1See more

vault-gcp-secrets vault-gcp-secrets 1.19.5

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/tjm/vault-gcp-secrets:v1.19.59f157fe035f1
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

2,291

Container images carrying it

605 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
openssl@3.5.1-1
3.5.1-1+deb13u1
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
openssl@3.5.2-r0
3.5.4-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
openssl@3.5.1-r0
3.5.4-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
openssl@3.3.2-r0
3.3.5-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.5-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.