StackRadar

CVE-2025-9232

Medium

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.020
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,357
of 17,790 indexed, latest versions
Container images
1,587
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,357 of 17,790 indexed charts deploy, on 1,587 images.

Affected packageAffected versionsFixed inImages
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0970
openssldeb3.0.9-1, 3.0.11-1~deb12u1, 3.0.11-1~deb12u2, 3.0.13-1~deb12u1+6 more3.0.17-1~deb12u3, 3.5.1-1+deb13u1601
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
OSV records
ALPINE-CVE-2025-9232CGA-3j32-v297-mxhfDEBIAN-CVE-2025-9232UBUNTU-CVE-2025-9232
Also known as
CGA-vgxf-c52j-3xr7

Charts affected

1,357 by stars
ChartLatestAffected imagesRadar Score
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
openssl@3.0.8-r0
3.0.19-r0

Open the chart page →

1,955
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
openssl@3.3.2-r0
3.3.5-r0
hamzaarshad10/querypodpy:1.7154f38e8668e
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
murtazashah46/helmfile:latest4d11726cf803
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

13,783
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

9,395
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

2,684
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
openssl@3.0.9-r1
3.0.19-r0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
openssl@3.0.9-r1
3.0.19-r0

Open the chart page →

5,047
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.19-r0
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

5,852
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
openssl@3.1.7-r0
3.1.8-r1

Open the chart page →

569

Container images carrying it

1,587 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
syepes/network_exporter:1.8.000af1691570e
openssl@3.5.1-r0
3.5.4-r0
1
sysintelligent/hello-app:2.0.177fb30df847d
openssl@3.0.7-r0
3.0.19-r0
1
sysnet4admin/colosseum-cms:loge74b43c7f492
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
tawfiq58/express-server:latestc707555f6853
openssl@3.0.8-r3
3.0.19-r0
1
teknas09/bird-pod:latest12a1fa85c4aa
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
tektonops/ipup-dynu:latestc2198746cf8f
openssl@3.3.1-r3
3.3.5-r0
1
temporalio/admin-tools:1.26.237e2e33dbd7b
openssl@3.3.2-r0
3.3.5-r0
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.4-r0
1
temporalio/admin-tools:1.25.0-tctl-1.18.1-cli-1.0.0cda4901bab53
openssl@3.1.4-r5
3.1.8-r1
1
temporalio/auto-setup:1.29.15b3502a3b685
openssl@3.5.0-r0
3.5.4-r0
1
temporalio/auto-setup:1.27.2b44cbfeb43db
openssl@3.3.3-r0
3.3.5-r0
1
temporalio/server:1.26.21e2626efcbc1
openssl@3.3.2-r0
3.3.5-r0
1
temporalio/server:1.25.08a5798191dea
openssl@3.1.4-r5
3.1.8-r1
1
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.4-r0
1
temporalio/ui:2.30.25c2a3645d09c
openssl@3.1.4-r5
3.1.8-r1
1
temporalio/ui:2.33.05c586a3c8ec5
openssl@3.1.4-r5
3.1.8-r1
1
temporalio/ui:2.39.0b768f87f18b5
openssl@3.3.3-r0
3.3.5-r0
1
thecloudspark/app-result:1.09a5302cb8312
openssl@3.3.0-r2
3.3.5-r0
1
thecloudspark/app-vote:1.0c7da7417a86a
openssl@3.3.0-r2
3.3.5-r0
1
thecloudspark/app-worker:1.0dbfcfe02bf36
openssl@3.1.5-r0
3.1.8-r1
1
thelande/apcupsd:v1.0.635e3b7caf54d
openssl@3.1.4-r5
3.1.8-r1
1
thelande/kasa_exporter:v0.2.3a1fdb8baa152
openssl@3.3.0-r2
3.3.5-r0
1
thelande/openmeteo_exporter:v1.0.77e9072ace15f
openssl@3.5.1-r0
3.5.4-r0
1
theradius/loggia:0.463ba348546ec
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
1
thirtythreeforty/neolink:latestf564c4f538de
openssl@3.0.8-r3
3.0.19-r0
1
thmmniii/fbs-collab:v1.27.15d389e3c5ce6
openssl@3.5.1-r0
3.5.4-r0
1
thmmniii/fbs-qcm-backend:v1.27.1afbe511e5c24
openssl@3.5.1-r0
3.5.4-r0
1
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
openssl@3.5.1-r0
3.5.4-r0
1
thongngo3301/stakefish:latesta341af5976e3
openssl@3.0.9-1
3.0.17-1~deb12u3
1
timberio/vector:0.42.0-alpine913878963fde
openssl@3.3.2-r0
3.3.5-r0
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
nodejs@7.10.1-2nodesource1~xenial1
no fix listed
1
tiredofit/freescout:php8.2-1.17.725b7cc0658f07
openssl@3.1.4-r6
3.1.8-r1
1
tobiasehlert/teslamateapi:1.20.2cf09259ad0ea
openssl@3.3.3-r0
3.3.5-r0
1
tobirachel/node-project3:v17d9f37154994
openssl@3.0.9-r1
3.0.19-r0
1
tomsajan/netio-exporter:0.0.5fb61907707b8
openssl@3.1.4-r6
3.1.8-r1
1
traccar/traccar:6.7-alpine621c8d6d46fd
openssl@3.3.3-r0
3.3.5-r0
1
tranhailong/nfs-server:4.2-2-gcsfuse028662749be2
openssl@3.0.8-r0
3.0.19-r0
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
1
tundeficky/nodejs-app:v1.0.03cf9a9ce54e8
openssl@3.0.10-r0
3.0.19-r0
1
udhos/lambdaping:1.0.46bd2cf2ac732
openssl@3.3.2-r1
3.3.5-r0
1
udhos/miniapi:1.3.28a7042db82ce
openssl@3.3.2-r1
3.3.5-r0
1
udhos/mongoping:1.3.103b08b63f524
openssl@3.3.3-r0
3.3.5-r0
1
udhos/prime:1.0.0e432012dd34a
openssl@3.0.8-r3
3.0.19-r0
1
udhos/rabbitping:1.3.0474c467bbf42
openssl@3.3.3-r0
3.3.5-r0
1
udhos/secrets:1.0.6daa2b4eaac09
openssl@3.3.3-r0
3.3.5-r0
1
udhos/snsping:1.2.96ae70677b6a3
openssl@3.3.2-r1
3.3.5-r0
1
udhos/token-server:1.0.9728013f2fac1
openssl@3.5.2-r0
3.5.4-r0
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
openssl@3.0.16-1~deb12u1
3.0.17-1~deb12u3
1
unleashorg/unleash-proxy:v1.4.82538f89e2685
openssl@3.3.2-r0
3.3.5-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.