StackRadar

CVE-2025-9231

Medium

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.022
82nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
573
of 17,787 indexed, latest versions
Container images
605
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 573 of 17,787 indexed charts deploy, on 605 images.

Affected packageAffected versionsFixed inImages
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+15 more3.3.5-r0, 3.5.4-r0568
openssldeb3.5.1-13.5.1-1+deb13u121
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
OSV records
ALPINE-CVE-2025-9231CGA-cpj2-wf29-8hr5DEBIAN-CVE-2025-9231UBUNTU-CVE-2025-9231
Also known as
CGA-j26c-v69v-qpfw

Charts affected

573 by stars
ChartLatestAffected imagesRadar Score
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

2,862
goinceptiondoubanVerified publisher0.3.11 of 2See more

goinception douban 0.3.1

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
hanchuanchuan/goinception:latestb3c0dd26fb50
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

1,201
kafka-uidoubanVerified publisher1.5.21 of 1See more

kafka-ui douban 1.5.2

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,269
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
openssl@3.5.1-1
3.5.1-1+deb13u1

Open the chart page →

3,426
dumpstoredumpstore0.1.12 of 2See more

dumpstore dumpstore 0.1.1

2 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
openssl@3.5.0-r0
3.5.4-r0
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

4,253
kubernetes-database-scalerdvdlevanonVerified publisher0.1.21 of 1See more

kubernetes-database-scaler dvdlevanon 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
dvdlevanon/kubernetes-database-scaler:v0.0.361e79c1643fe4
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

1,022
dyff-frontenddyff-frontendVerified publisher0.20.11 of 1See more

dyff-frontend dyff-frontend 0.20.1

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-frontend:0.20.152549f52ae53
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

973
openfaas2eclipse-aeriosVerified publisher12.0.52 of 6See more

openfaas2 eclipse-aerios 12.0.5

2 of the 6 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
openssl@3.3.2-r4
3.3.5-r0
ghcr.io/openfaas/gateway:0.27.1382b15393116e
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

6,678
dashboardedu1.0.01 of 1See more

dashboard edu 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,344
cert-manager-cpanel-dns-webhookegebackVerified publisher1.0.61 of 1See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

1,284
heimdallegebackVerified publisher2.0.41 of 1See more

heimdall egeback 2.0.4

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.6.371597f4461e4
openssl@3.3.4-r0
3.3.5-r0

Open the chart page →

1,663
eggybyte-chaineggybyte-hcr1.0.01 of 1See more

eggybyte-chain eggybyte-hcr 1.0.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
curlimages/curl:8.15.04026b29997dc
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

806
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
library/node:18-alpine8d6421d663b4
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

2,960
kube-ecp-stackemqx-operator2.5.12 of 16See more

kube-ecp-stack emqx-operator 2.5.1

2 of the 16 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
emqx/ecp-emqx-agent-downloader:2.5.1a8431baa7950
openssl@3.3.2-r0
3.3.5-r0
emqxecp/otelcol:2.5.04c31d9bec846
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

22,845
network-exporterenixVerified publisher0.3.01 of 1See more

network-exporter enix 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
syepes/network_exporter:1.8.000af1691570e
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

1,372
postgresql-backupeosc-lot-1Verified publisher0.4.21 of 2See more

postgresql-backup eosc-lot-1 0.4.2

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine3.20468d34fefd63
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

1,467
chaos-meshethereum-helm-chartsVerified publisher0.0.31 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

1 of the 4 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
openssl@3.3.4-r0
3.3.5-r0

Open the chart page →

12,147
rpc-proxyethereum-helm-chartsVerified publisher0.1.21 of 1See more

rpc-proxy ethereum-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/gochain/rpc-proxy/rpc-proxy:latestca01f5ab95f7
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

1,464
multichain-proxyethersphereVerified publisher0.1.01 of 1See more

multichain-proxy ethersphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ethersphere/multichain-proxy:0.0.261f5419afbcd
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

795
gradle-build-cacheeugen0.1.21 of 1See more

gradle-build-cache eugen 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
gradle/build-cache-node:21.25bacbee677a9
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

345
perliteextrim-helm-chartsVerified publisher0.1.01 of 1See more

perlite extrim-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
extrim/perlite:1.5.99cb7eb5598b6
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,439
siyuanextrim-helm-chartsVerified publisher0.1.11 of 2See more

siyuan extrim-helm-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
b3log/siyuan:v3.1.2595c0d129bc19
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,247
quickstartfeatureformVerified publisher0.1.11 of 3See more

quickstart featureform 0.1.1

1 of the 3 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
featureformcom/quickstart-loader:latest82396f8fb5e8
openssl@3.3.0-r2
3.3.5-r0

Open the chart page →

3,554
findery-marketfindery-market0.1.01 of 7See more

findery-market findery-market 0.1.0

1 of the 7 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
chandanteekinavar/findery-market-frontend:1.06de5bd44a325
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

7,691
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
apache/fineract:1.12.1a83cf1980609
openssl@3.3.4-r0
3.3.5-r0

Open the chart page →

7,848
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
openssl@3.3.2-r5
3.3.5-r0

Open the chart page →

1,394
floating-serverfloating-server1.6.31 of 2See more

floating-server floating-server 1.6.3

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
censedata/floating-server:v1.6.3ebfffb9dd4c0
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,452
mod-agreementsfolio-org0.1.321 of 1See more

mod-agreements folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
folioci/mod-agreements:latest29c3f233a498
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

1,874
mod-ldpfolio-org0.1.331 of 1See more

mod-ldp folio-org 0.1.33

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
folioci/mod-ldp:latestb55696fd9065
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

1,938
mod-licensesfolio-org0.1.321 of 1See more

mod-licenses folio-org 0.1.32

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
folioci/mod-licenses:latestcfd6109bf477
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

1,760
mod-oafolio-org0.1.21 of 1See more

mod-oa folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
folioci/mod-oa:latestae3b069d4ba5
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

1,733
mod-searchfolio-org0.1.351 of 1See more

mod-search folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
folioci/mod-search:latest44d7ee9acdf6
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

1,531
mod-serials-managementfolio-org0.1.11 of 1See more

mod-serials-management folio-org 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
folioci/mod-serials-management:latest571fa1ffe8c9
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

1,733
mod-service-interactionfolio-org0.1.61 of 1See more

mod-service-interaction folio-org 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
folioci/mod-service-interaction:latestf53c327a48e8
openssl@3.3.1-r3
3.3.5-r0

Open the chart page →

1,733
borgmaticgabe565Verified publisher0.10.11 of 1See more

borgmatic gabe565 0.10.1

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
openssl@3.3.2-r4
3.3.5-r0

Open the chart page →

2,437
castsponsorskipgabe565Verified publisher0.8.11 of 1See more

castsponsorskip gabe565 0.8.1

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/gabe565/castsponsorskip:0.8.15f7b4c6dd299
openssl@3.3.2-r4
3.3.5-r0

Open the chart page →

1,229
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

2,154
monitoringgaloymoney0.12.211 of 6See more

monitoring galoymoney 0.12.21

1 of the 6 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

5,295
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

2,154
monitoringgaloymoney20.12.211 of 6See more

monitoring galoymoney2 0.12.21

1 of the 6 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
grafana/grafana:11.3.0a0f881232a6f
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

5,295
skypilotgeek-cookbookVerified publisher0.0.12 of 3See more

skypilot geek-cookbook 0.0.1

2 of the 3 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
openssl@3.5.1-1
3.5.1-1+deb13u1
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.4-r0

Open the chart page →

8,955
glassflow-etlglassflowVerified publisher0.5.211 of 16See more

glassflow-etl glassflow 0.5.21

1 of the 16 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.17.326c826662ac8
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

12,072
kube-hookglenndehaanVerified publisher1.0.31 of 1See more

kube-hook glenndehaan 1.0.3

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
glenndehaan/kube-hook:latest0a7116f48bfe
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

923
gnp-stackgnp-stack0.0.52 of 14See more

gnp-stack gnp-stack 0.0.5

2 of the 14 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.329289da488b07
openssl@3.5.1-r0
3.5.4-r0
quay.io/kiwigrid/k8s-sidecar:1.30.10835d79d8fbae
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

7,662
go-file-servergo-file-server1.0.01 of 2See more

go-file-server go-file-server 1.0.0

1 of the 2 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
goccx/go-file-server-ui:latest784b35910d52
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

2,215
opentelemetry-demogpg-dev0.33.87 of 27See more

opentelemetry-demo gpg-dev 0.33.8

7 of the 27 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
grafana/grafana:11.3.1fa801ab6e1ae
openssl@3.3.2-r0
3.3.5-r0
ghcr.io/open-telemetry/demo:1.12.0-productcatalogservice008b9b662289
openssl@3.3.2-r0
3.3.5-r0
ghcr.io/open-telemetry/demo:1.12.0-checkoutservice380eccdc29e9
openssl@3.3.2-r0
3.3.5-r0
ghcr.io/open-telemetry/demo:1.12.0-cartservice89730afa0b5d
openssl@3.3.2-r0
3.3.5-r0
ghcr.io/open-telemetry/demo:1.12.0-frontend8b348f00ca4c
openssl@3.3.2-r0
3.3.5-r0
ghcr.io/open-telemetry/demo:1.12.0-paymentserviceb0f13eef3abf
openssl@3.3.0-r2
3.3.5-r0
ghcr.io/open-telemetry/demo:1.12.0-flagduif6bdafaa9075
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

47,117
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

4,657
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
openssl@3.5.1-r0
3.5.4-r0

Open the chart page →

8,226
armada-executorgresearch0.22.81 of 1See more

armada-executor gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
gresearch/armada-executor:latest393aff4aa8f2
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

707
armada-lookout-ingestergresearch0.22.81 of 1See more

armada-lookout-ingester gresearch 0.22.8

1 of the 1 container images this version deploys carry CVE-2025-9231.

Container imageDigestPackageFixed in
gresearch/armada-lookout-ingester:latest3df14cda1855
openssl@3.3.3-r0
3.3.5-r0

Open the chart page →

707

Container images carrying it

605 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
openssl@3.5.1-1
3.5.1-1+deb13u1
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
openssl@3.5.2-r0
3.5.4-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
openssl@3.5.1-r0
3.5.4-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
openssl@3.3.2-r0
3.3.5-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.5-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.