CVE-2025-9231
MediumAdvisory
Published 30 Sept 2025In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.5
- base score, highest
- EPSS
- 0.022
- 82nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 567
- of 17,781 indexed, latest versions
- Container images
- 598
- deployed by those charts
- Fix available
- 2 of 3
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 567 of 17,781 indexed charts deploy, on 598 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensslapk | 3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+15 more | 3.3.5-r0, 3.5.4-r0 | 561 |
| openssldeb | 3.5.1-1 | 3.5.1-1+deb13u1 | 21 |
| nodejsdeb | 4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more | no fix listed | 16 |
- OSV records
- ALPINE-CVE-2025-9231CGA-cpj2-wf29-8hr5DEBIAN-CVE-2025-9231UBUNTU-CVE-2025-9231
- Also known as
- CGA-j26c-v69v-qpfw
Charts affected
567 by stars
Container images carrying it
598 by charts deploying them
A fixed version is listed for 2 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | 4768ea1c5fd2 | openssl | 3.3.5-r0 | 2 |
| ghcr.io/ | 5be52524664c | nodejs | no fix listed | 2 |
| ghcr.io/ | f115777d1112 | openssl | 3.5.4-r0 | 2 |
| ghcr.io/ | 81afafdd96a5 | openssl | 3.5.4-r0 | 2 |
| ghcr.io/ | c137478627cc | openssl | 3.5.4-r0 | 2 |
| ghcr.io/ | 8f7551205fbd | openssl | 3.5.4-r0 | 2 |
| ghcr.io/ | 42002d66ddb3 | openssl | 3.3.5-r0 | 2 |
| ghcr.io/ | ca31ec35b829 | openssl | 3.5.4-r0 | 2 |
| ghcr.io/ | 5f26407fd2ed | openssl | 3.5.4-r0 | 2 |
| public.ecr.aws/ | 26ac7263a823 | openssl | 3.5.1-1+deb13u1 | 2 |
| quay.io/ | b17b13321678 | openssl | 3.5.4-r0 | 2 |
| quay.io/ | f6ed71d0f9f1 | openssl | 3.3.5-r0 | 2 |
| registry.k8s.io/ | 695d79381ee6 | openssl | 3.5.4-r0 | 2 |
| registry.k8s.io/ | d2fbc4ec70d8 | openssl | 3.3.5-r0 | 2 |
| 2martens/ | bf1cdb80239d | openssl | 3.3.5-r0 | 1 |
| 2martens/ | bd1ba6ab84c9 | openssl | 3.5.4-r0 | 1 |
| 2martens/ | ba2c3040dab0 | openssl | 3.5.4-r0 | 1 |
| abdullahkhawer/ | 28a6c3f7e0a9 | openssl | 3.3.5-r0 | 1 |
| abhinavsingh/ | 51adc989fd03 | openssl | 3.3.5-r0 | 1 |
| abiondevelopment/ | c741988fbd23 | openssl | 3.3.5-r0 | 1 |
| adguard/ | d765078d2140 | openssl | 3.3.5-r0 | 1 |
| aktosecurity/ | 853e37321e6e | openssl | 3.5.4-r0 | 1 |
| alpine/ | 8943e8c7e8e4 | openssl | 3.3.5-r0 | 1 |
| alpine/ | 105741fa6621 | openssl | 3.3.5-r0 | 1 |
| alpine/ | 6dbe6f391eda | openssl | 3.5.4-r0 | 1 |
| alpine/ | 7a319b15cfc9 | openssl | 3.5.4-r0 | 1 |
| alpine/ | 7e1e7d5b7a96 | openssl | 3.3.5-r0 | 1 |
| alpine/ | 9c4976d47656 | openssl | 3.3.5-r0 | 1 |
| alpine/ | cd560fce90f7 | openssl | 3.3.5-r0 | 1 |
| alpine/ | e5c0b053fed7 | openssl | 3.3.5-r0 | 1 |
| alpine/ | eec354133193 | openssl | 3.3.5-r0 | 1 |
| alpine/ | 2c59a3f0726c | openssl | 3.5.4-r0 | 1 |
| anamskenneth/ | 9b7d2cd389b7 | openssl | 3.3.5-r0 | 1 |
| anamskenneth/ | 9ecf04f42cc3 | openssl | 3.3.5-r0 | 1 |
| apache/ | bff074a5d005 | openssl | 3.5.4-r0 | 1 |
| apache/ | fbc7d7c428e3 | openssl | 3.3.5-r0 | 1 |
| apache/ | 9a9d16e60894 | openssl | 3.5.4-r0 | 1 |
| apecloud/ | 8ac9947a2c84 | openssl | 3.5.1-1+deb13u1 | 1 |
| apecloud/ | b3ae37840ace | openssl | 3.3.5-r0 | 1 |
| apecloud/ | 5832d1a9097a | openssl | 3.3.5-r0 | 1 |
| appwrite/ | aaa11ceab999 | openssl | 3.3.5-r0 | 1 |
| artifacthub/ | 2a746b289fcd | openssl | 3.3.5-r0 | 1 |
| artifacthub/ | 111918d8c399 | openssl | 3.3.5-r0 | 1 |
| artifacthub/ | 323d026e78c3 | openssl | 3.3.5-r0 | 1 |
| automatischio/ | 3bace7a12d5f | openssl | 3.3.5-r0 | 1 |
| b3log/ | 95c0d129bc19 | openssl | 3.3.5-r0 | 1 |
| b4bz/ | 4b44a4a9e329 | openssl | 3.3.5-r0 | 1 |
| b4bz/ | c367265313f9 | openssl | 3.3.5-r0 | 1 |
| behnambm/ | bd3ad88afff9 | openssl | 3.3.5-r0 | 1 |
| berkeleyskypilot/ | 8da2f3cda472 | openssl | 3.5.1-1+deb13u1 | 1 |