StackRadar

CVE-2025-9232

Medium

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.020
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,354
of 17,790 indexed, latest versions
Container images
1,584
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,354 of 17,790 indexed charts deploy, on 1,584 images.

Affected packageAffected versionsFixed inImages
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0967
openssldeb3.0.9-1, 3.0.11-1~deb12u1, 3.0.11-1~deb12u2, 3.0.13-1~deb12u1+6 more3.0.17-1~deb12u3, 3.5.1-1+deb13u1601
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
OSV records
ALPINE-CVE-2025-9232CGA-3j32-v297-mxhfDEBIAN-CVE-2025-9232UBUNTU-CVE-2025-9232
Also known as
CGA-vgxf-c52j-3xr7

Charts affected

1,354 by stars
ChartLatestAffected imagesRadar Score
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

2,674
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
openssl@3.0.9-r1
3.0.19-r0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
openssl@3.0.9-r1
3.0.19-r0

Open the chart page →

5,033
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.19-r0
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

5,847
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
openssl@3.1.7-r0
3.1.8-r1

Open the chart page →

569

Container images carrying it

1,584 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
openssl@3.3.2-r0
3.3.5-r0
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
1
okaforuchena/uo-docker:V1.0.0004e81250f48
openssl@3.0.10-r0
3.0.19-r0
1
oled01/automx2:2025.1.105d3e398e675
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
omecproject/onos-progran:1.0.05715e5648aa0
nodejs@8.9.4-1nodesource1
no fix listed
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
ooghenekaro/hans-docker:v1.0.0d1f972aa844a
openssl@3.0.9-r1
3.0.19-r0
1
ooghenekaro/nodejswebapp:latestea5b71588a76
openssl@3.0.8-r3
3.0.19-r0
1
ooghenekaro/nodejswebappoct:lateste010f5fecbc7
openssl@3.0.10-r0
3.0.19-r0
1
opea/asr:1.025dd26d9cd09
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
opea/chatqna:1.038c51b791efa
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
opea/chatqna-conversation-ui:v0.9bdb9ec215872
openssl@3.3.1-r3
3.3.5-r0
1
opea/codegen:1.058f91683892d
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
opea/codegen-ui:1.02bee4eb66f3e
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
opea/codetrans:1.0e2436483b73d
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
opea/codetrans-ui:1.03ef121f34610
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
opea/docsum:1.03eaa91849512
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
opea/docsum-ui:1.07f854e9bffaf
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
opea/guardrails-tgi:1.0262c6048aab8
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
opea/guardrails-tgi:latestf68bec6a1271
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
opea/speecht5:1.0249afad3d268
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
opea/tts:1.0257ae94709e9
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
opea/web-retriever-chroma:1.0fe08165d7770
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
openbas/caldera-server:5.1.0a277796d9724
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
opencsghq/csgship-portal:v1.2.1865814dc87a1
openssl@3.3.3-r0
3.3.5-r0
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
1
openebs/lvm-driver:1.10.141f73aba7f31
openssl@3.5.1-r0
3.5.4-r0
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
openssl@3.0.8-r3
3.0.19-r0
1
openkruise/kruise-game-manager:v1.1.0d3c6d69d2c39
openssl@3.3.3-r0
3.3.5-r0
1
openkruise/kruise-rollout:v0.6.2a75e6739ea7d
openssl@3.0.15-r1
3.0.19-r0
1
openkruise/kruise-state-metrics:v0.2.0a8108f771287
openssl@3.0.12-r1
3.0.19-r0
1
openmined/syft-backend:0.9.5b72f74a68b32
openssl@3.4.1-r0
3.5.4-r0
1
openmined/syft-frontend:0.9.5d11524a3854a
openssl@3.4.1-r0
3.5.4-r0
1
openmined/syft-seaweedfs:0.9.53a4144c0bb82
openssl@3.1.6-r2
3.1.8-r1
1
opennode/waldur-site-agent:1.0.76d2e3b97c8d2
openssl@3.3.2-r1
3.3.5-r0
1
openproject/hocuspocus:release-338001b288dc1359dfb5
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
1
openruntimes/executor:0.11.42228f186dcbb
openssl@3.1.7-r0
3.1.8-r1
1
openspeedtest/latest:v2.0.0d4d62f4b7d85
openssl@3.0.9-r1
3.0.19-r0
1
openthread/otbr:latestf307f59f6432
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed
1
openzipkin/zipkin:2.24197a9692f6a9
openssl@3.1.4-r2
3.1.8-r1
1
operaton/operaton:1.0.0-beta-4b35867ffe4d8
openssl@3.3.3-r0
3.3.5-r0
1
oranhack7/solidproject:77c6453942223f
openssl@3.1.4-r5
3.1.8-r1
1
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
openssl@3.3.3-r0
3.3.5-r0
1
oryd/hydra:v2.3.0b94007e19a1f
openssl@3.3.2-r1
3.3.5-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.