StackRadar

CVE-2025-9232

Medium

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.020
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,354
of 17,790 indexed, latest versions
Container images
1,584
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,354 of 17,790 indexed charts deploy, on 1,584 images.

Affected packageAffected versionsFixed inImages
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0967
openssldeb3.0.9-1, 3.0.11-1~deb12u1, 3.0.11-1~deb12u2, 3.0.13-1~deb12u1+6 more3.0.17-1~deb12u3, 3.5.1-1+deb13u1601
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
OSV records
ALPINE-CVE-2025-9232CGA-3j32-v297-mxhfDEBIAN-CVE-2025-9232UBUNTU-CVE-2025-9232
Also known as
CGA-vgxf-c52j-3xr7

Charts affected

1,354 by stars
ChartLatestAffected imagesRadar Score
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

2,674
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
openssl@3.0.9-r1
3.0.19-r0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
openssl@3.0.9-r1
3.0.19-r0

Open the chart page →

5,033
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.19-r0
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

5,847
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
openssl@3.1.7-r0
3.1.8-r1

Open the chart page →

569

Container images carrying it

1,584 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
linuxserver/heimdall:2.6.371597f4461e4
openssl@3.3.4-r0
3.3.5-r0
1
linuxserver/openssh-server:9.7_p1-r4-ls17153ea39d2485c
openssl@3.3.2-r0
3.3.5-r0
1
linuxserver/smokeping:2.8.2b7f906899cd3
openssl@3.3.3-r0
3.3.5-r0
1
lis314/project-zomboid-docker:latestaa2089c37920
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
lishimeng/hufu:v1.2.13d5752dac834
openssl@3.0.8-r0
3.0.19-r0
1
lishimeng/owl-console:v0.11.2c79a67657baf
openssl@3.0.8-r0
3.0.19-r0
1
lishimeng/owl-messager:v0.11.23d00485e64dc
openssl@3.0.8-r0
3.0.19-r0
1
lishimeng/passport:v0.2.163e7d05ded625
openssl@3.0.8-r0
3.0.19-r0
1
lishimeng/passport-profile:v0.2.160970dfe5dc8f
openssl@3.0.8-r0
3.0.19-r0
1
lishimeng/tabby:v1.0.48145c3dc83c8
openssl@3.0.8-r0
3.0.19-r0
1
lishimeng/tree:v0.2.89b2f8be6c7d3
openssl@3.0.8-r0
3.0.19-r0
1
lishimeng/zoo:v0.4.0e0b8d2d8ca28
openssl@3.0.8-r0
3.0.19-r0
1
litestream/litestream:0.3c5a1e1b01916
openssl@3.0.8-r0
3.0.19-r0
1
livekit/livekit-server:v1.9.03602a85840d5
openssl@3.5.0-r0
3.5.4-r0
1
localstack/localstack:3.19d278167f2b7
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
locustio/locust:2.24.151d866285170
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
loeken/radarr:5.27.0-nightlya24409d3846d
openssl@3.3.4-r0
3.3.5-r0
1
logiqai/flash:v3.10.265b996bc7bdc
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
lukasreining/open-api-schema-collector:0.1.050e021c42e33
openssl@3.0.7-r0
3.0.19-r0
1
luligu/matterbridge:3.0.28f97884bebc2
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
maildev/maildev:2.2.1180ef51f65ee
openssl@3.3.2-r4
3.3.5-r0
1
makemake1337/blutgang:latest8a55174fc830
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
makersquad/harp-proxy:0.8.1a40dd258c527
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
mathieuruellan/piwigo:latest04572c8a1b04
openssl@3.3.2-r1
3.3.5-r0
1
mathnao/certs:2.1.3b900e6b64684
openssl@3.3.4-r0
3.3.5-r0
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
matterlabs/external-node:v24.0.06cbfea4c694a
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
mauricenino/dashdot:5.9.2236997816917
openssl@3.3.3-r0
3.3.5-r0
1
mavrick1/kubestellar-b:latest45ca0429a1d4
openssl@3.3.3-r0
3.3.5-r0
1
mavrick1/kubestellar-f:latest56bd8eaa53a4
openssl@3.3.3-r0
3.3.5-r0
1
mccutchen/go-httpbin:v2.15.024528cf5229d
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
mcronce/oci-registry:v0.4.509519cd7bd2f
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
merlos/zookeeper:3.9.3a38fc7e09ed7
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
metabase/metabase:v0.53.4.17807bc5cad17
openssl@3.3.3-r0
3.3.5-r0
1
metabase/metabase:v0.46.09ebdc664a6b2
openssl@3.0.8-r1
3.0.19-r0
1
middlewareeng/middleware:0.3.1747d880812f1
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
mikefarah/yq:4.45.12c100efaca06
openssl@3.3.2-r4
3.3.5-r0
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
miqm/session-scaler:0.1.0c5c211717d9b
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
openssl@3.3.0-r2
3.3.5-r0
1
moreillon/api-proxy:latestd7d4a5463525
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
moreillon/camera-viewer:lateste418cc694bd5
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
moreillon/food-manager:lateste8fd856e593d
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
moreillon/user-manager-front:v5.1.06597e6b98d21
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
mpopoola1/nodejsapp:latest061fc532de7d
openssl@3.0.12-r1
3.0.19-r0
1
muhammedgamal/fp23:latest74b4cd69b6fa
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
muluder/prograncontrollermcord:0.1.843b597a93da7
nodejs@8.9.4-1nodesource1
no fix listed
1
muonsoft/openapi-mock:latestc9afe1295484
openssl@3.0.8-r0
3.0.19-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.