StackRadar

CVE-2025-9232

Medium

Advisory

Published 30 Sept 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.020
80th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,357
of 17,787 indexed, latest versions
Container images
1,587
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,357 of 17,787 indexed charts deploy, on 1,587 images.

Affected packageAffected versionsFixed inImages
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+38 more3.0.19-r0, 3.1.8-r1, 3.3.5-r0, 3.5.4-r0970
openssldeb3.0.9-1, 3.0.11-1~deb12u1, 3.0.11-1~deb12u2, 3.0.13-1~deb12u1+6 more3.0.17-1~deb12u3, 3.5.1-1+deb13u1601
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
OSV records
ALPINE-CVE-2025-9232CGA-3j32-v297-mxhfDEBIAN-CVE-2025-9232UBUNTU-CVE-2025-9232
Also known as
CGA-vgxf-c52j-3xr7

Charts affected

1,357 by stars
ChartLatestAffected imagesRadar Score
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
openssl@3.0.8-r0
3.0.19-r0

Open the chart page →

1,955
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
openssl@3.3.2-r0
3.3.5-r0
hamzaarshad10/querypodpy:1.7154f38e8668e
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
murtazashah46/helmfile:latest4d11726cf803
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

13,197
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
openssl@3.3.2-r0
3.3.5-r0

Open the chart page →

9,381
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3

Open the chart page →

2,674
zahori-consulzahoriVerified publisher1.0.12 of 2See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
openssl@3.0.9-r1
3.0.19-r0
hashicorp/consul-k8s-control-plane:1.1.262bed1bf8106
openssl@3.0.9-r1
3.0.19-r0

Open the chart page →

5,033
zahori-serverzahoriVerified publisher1.0.12 of 2See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
flyway/flyway:9.14.1-alpine80f12c80502b
openssl@3.0.7-r2
3.0.19-r0
zahoriaut/zahori-server:0.1.17b2de13916f3e
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

5,847
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-9232.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
openssl@3.1.7-r0
3.1.8-r1

Open the chart page →

569

Container images carrying it

1,587 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/nginx:1.24-alpine77e5d4a6ad90
openssl@3.0.12-r4
3.0.19-r0
2
library/nginx:1.27.098f8ec75657d
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
2
library/phpmyadmin:5.2.16e75aa8f767c
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
2
library/postgres:16.109f23e02d766
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
2
library/postgres:16.24aea012537ed
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
2
library/postgres:15.2-alpined9c304353c03
openssl@3.0.8-r3
3.0.19-r0
2
library/postgres:16.4e62fbf9d3e2b
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
2
library/postgres:11-alpineea50b9fd617b
openssl@3.1.4-r2
3.1.8-r1
2
library/python:3.7eedf63967cdb
openssl@3.0.9-1
3.0.17-1~deb12u3
2
library/rabbitmq:3.13.6-management-alpine611107e29cce
openssl@3.3.1-r3
3.3.5-r0
2
library/redis148bb5411c18
openssl@3.3.3-r0
3.3.5-r0
2
library/redis:7.2.3a7cee7c8178f
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
2
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
openssl@3.3.2-r0
3.3.5-r0
2
linuxserver/ubooquity:2.1.2-ls369932d6759112
openssl@3.3.1-r3
3.3.5-r0
2
lncm/bitcoind:v27.0324fec72192e
openssl@3.1.4-r5
3.1.8-r1
2
locustio/locust:2.32.2a0d4b88e42c1
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
2
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
openssl@3.0.17-1~deb12u2
3.0.17-1~deb12u3
2
metabase/metabase:v0.45.21fb334ce4820
openssl@3.0.7-r2
3.0.19-r0
2
mojaloop/reporting:v12.1.0d480a62103d6
openssl@3.3.3-r0
3.3.5-r0
2
mojaloop/reporting-aggregator-svc:v0.0.92635baf23298
openssl@3.3.3-r0
3.3.5-r0
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
openssl@3.5.1-r0
3.5.4-r0
2
mojaloop/reporting-hub-bop-experience-api-svc:v2.0.4265102a049d6
openssl@3.3.3-r0
3.3.5-r0
2
mojaloop/role-assignment-service:v2.1.0def4bf273721
openssl@3.1.4-r5
3.1.8-r1
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
openssl@3.0.13-1~deb12u1
3.0.17-1~deb12u3
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
2
natsio/nats-server-config-reloader:0.10.1e414cc7e6f59
openssl@3.0.7-r2
3.0.19-r0
2
natsio/prometheus-nats-exporter:0.17.326c826662ac8
openssl@3.3.3-r0
3.3.5-r0
2
natsio/prometheus-nats-exporter:0.11.031c02aac089a
openssl@3.0.8-r3
3.0.19-r0
2
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
openssl@3.3.3-r0
3.3.5-r0
2
opea/chatqna-conversation-ui:1.002d5674ca863
openssl@3.3.2-r0
3.3.5-r0
2
opea/embedding-tei:1.05c9639de61c1
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
2
opea/reranking-tei:1.0e48613afb191
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
2
opea/retriever-redis:1.0eb746b263705
openssl@3.0.14-1~deb12u2
3.0.17-1~deb12u3
2
opencloudeu/opencloud-rolling:2.1.0f9634bb04905
openssl@3.3.3-r0
3.3.5-r0
2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
2
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
2
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
2
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
2
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
openssl@3.0.15-1~deb12u1
3.0.17-1~deb12u3
2
openkruise/kruise-helm-hook:v0.1.0edc7cf9428fd
openssl@3.1.7-r1
3.1.8-r1
2
oryd/kratos:v1.3.1fe2428f103a6
openssl@3.3.2-r1
3.3.5-r0
2
outlinewiki/outline:0.69.1d060dcd8f9aa
openssl@3.0.8-r3
3.0.19-r0
2
percona/everest-helmtools:0.0.1904458d04a18
openssl@3.3.4-r0
3.3.5-r0
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
2
quickwit/quickwit:v0.8.2363ff56ce456
openssl@3.0.11-1~deb12u2
3.0.17-1~deb12u3
2
rajnandan1/kener:3.2.1930407afca731
openssl@3.0.17-1~deb12u1
3.0.17-1~deb12u3
2
rancher/local-path-provisioner:v0.0.299bebefa0b908
openssl@3.3.1-r3
3.3.5-r0
2
rclone/rclone:1.6874c51b8817e5
openssl@3.3.2-r0
3.3.5-r0
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.