StackRadar

CVE-2025-9820

Medium

Advisory

Published 25 Nov 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,496
of 17,787 indexed, latest versions
Container images
1,573
deployed by those charts
Fix available
3 of 3
affected packages

gnutls-3.8.11-1.1 on GA media

Carried by container images the latest versions of 1,496 of 17,787 indexed charts deploy, on 1,573 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+42 more3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.8+5 more1,544
gnutlsapk3.8.5-r0, 3.8.8-r03.8.12-r026
gnutlsrpm3.6.7-lp151.2.3.1, 3.8.3-150600.4.9.13.8.3-150600.4.12.1, 3.8.11-1.13
OSV records
ALPINE-CVE-2025-9820DEBIAN-CVE-2025-9820UBUNTU-CVE-2025-9820openSUSE-SU-2025:15765-1SUSE-SU-2025:4323-1
Also known as
USN-8043-1, USN-8502-1

Charts affected

1,496 by stars
ChartLatestAffected imagesRadar Score
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u6

Open the chart page →

3,946
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
gnutls28@3.7.3-4ubuntu1.8
no fix listed

Open the chart page →

2,152
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2

Open the chart page →

5,150
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
gnutls28@3.8.9-3
3.8.9-3+deb13u1

Open the chart page →

7,265
eolicplantseolicplantsVerified publisher0.1.03 of 7See more

eolicplants eolicplants 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3
library/rabbitmq:3-managemente582c0bc7766
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
oscarsotosanchez/weatherservice:v1.0911ec961d10b
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3

Open the chart page →

27,349
eoloPlanteolo-plannerVerified publisher0.1.04 of 7See more

eoloPlant eolo-planner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0-focal5e15a3f014ed
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.11-managementc3f70098e01d
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8
mastercloudapps/planner:v1.2340a950b311b2
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8

Open the chart page →

27,667
eoloplannereoloplannerVerified publisher0.1.04 of 7See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0.6-focal8e70544b6c76
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

32,336
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.04 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0-focal5e15a3f014ed
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.11-managementc3f70098e01d
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8
mastercloudapps/planner:v1.2340a950b311b2
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8

Open the chart page →

27,667
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.03 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3
library/rabbitmq:3-managemente582c0bc7766
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
oscarsotosanchez/weatherservice:v1.0911ec961d10b
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3

Open the chart page →

27,314
eoloplannereoloplanner-molynx-gat0.1.03 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:4.4.66efa05203990
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

28,539
eolo-plannereolo-planner-repo0.1.03 of 7See more

eolo-planner eolo-planner-repo 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0.6-focal8e70544b6c76
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

27,188
eoloplanteoloplant1.0.04 of 7See more

eoloplant eoloplant 1.0.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0-focal5e15a3f014ed
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.11-managementc3f70098e01d
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8
mastercloudapps/planner:v1.2340a950b311b2
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8

Open the chart page →

27,667
eoloplantseoloplants-urjcVerified publisher0.1.03 of 7See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0.6-focal8e70544b6c76
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

27,812
servereoloserverVerified publisher0.1.04 of 7See more

server eoloserver 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0.6-focal8e70544b6c76
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

32,336
flywayeosc-lot-1Verified publisher0.7.02 of 3See more

flyway eosc-lot-1 0.7.0

2 of the 3 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
alpine/git:v2.49.1c0280cf95723
gnutls@3.8.8-r0
3.8.12-r0
flyway/flyway:9.1545b5d7cdc75a
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2

Open the chart page →

9,383
mariadbeosc-lot-1Verified publisher0.2.01 of 2See more

mariadb eosc-lot-1 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

2,455
mariadb-backupeosc-lot-1Verified publisher0.5.01 of 2See more

mariadb-backup eosc-lot-1 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

2,455
mariadb-run-scripteosc-lot-1Verified publisher0.3.01 of 1See more

mariadb-run-script eosc-lot-1 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

2,455
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6

Open the chart page →

5,316
rabbitmqeosc-lot-1Verified publisher0.3.01 of 2See more

rabbitmq eosc-lot-1 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-managemente582c0bc7766
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

2,505
rediseosc-lot-1Verified publisher0.2.01 of 1See more

redis eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
redis/redis-stack-server:6.2.6-v251a58f32d412
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm2

Open the chart page →

3,100
untareosc-lot-1Verified publisher0.1.01 of 1See more

untar eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/debian:12.5-slim67f3931ad8cb
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u6

Open the chart page →

1,554
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
longhornio/upgrade-responder:v0.2.05875cef29348
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2

Open the chart page →

7,366
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:12.2.2b1cb255a9939
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

6,475
blutgangethereum-helm-chartsVerified publisher0.0.121 of 1See more

blutgang ethereum-helm-charts 0.0.12

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
makemake1337/blutgang:latest8a55174fc830
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u6

Open the chart page →

2,524
chaos-meshethereum-helm-chartsVerified publisher0.0.32 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

2 of the 4 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6

Open the chart page →

12,147
eleelethereum-helm-chartsVerified publisher0.1.71 of 1See more

eleel ethereum-helm-charts 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ethpandaops/eleel:mainb8f1b707aee0
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.5+Fips1.1

Open the chart page →

1,067
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6

Open the chart page →

4,117
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u6

Open the chart page →

3,469
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.8

Open the chart page →

4,964
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2

Open the chart page →

20,987
evobotevobotVerified publisher0.1.11 of 1See more

evobot evobot 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u6

Open the chart page →

2,998
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.8

Open the chart page →

6,038
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.01 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
grafana/promtail:3.5.165bfae480b57
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.5

Open the chart page →

5,787
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

2,824
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.21 of 18See more

farm-observability farm-observability 0.27.2

1 of the 18 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

13,336
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.8

Open the chart page →

13,491
rospoferama0.4.31 of 1See more

rospo ferama 0.4.3

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u6

Open the chart page →

5,300
vipienferama0.2.81 of 1See more

vipien ferama 0.2.8

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2

Open the chart page →

7,519
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
gnutls28@3.4.10-4ubuntu1.7
3.4.10-4ubuntu1.9+esm3

Open the chart page →

14,688
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6

Open the chart page →

10,119
fibfibonacci-cluster-appsVerified publisher1.0.03 of 5See more

fib fibonacci-cluster-apps 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
gnutls28@3.7.9-2
3.7.9-2+deb12u6
golenski/fibonacci-task-manager:2.0.03a2b36df247b
gnutls28@3.7.9-2
3.7.9-2+deb12u6
golenski/fibonacci-worker:2.0.0954caf4aaf6a
gnutls28@3.7.9-2
3.7.9-2+deb12u6

Open the chart page →

16,963
infrafibonacci-cluster-infraVerified publisher1.0.03 of 4See more

infra fibonacci-cluster-infra 1.0.0

3 of the 4 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.5
library/postgres:16.4e62fbf9d3e2b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
library/redis:7.4.1bb142a9c18ac
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6

Open the chart page →

12,510
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

1,394
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6

Open the chart page →

5,624
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2

Open the chart page →

64,192
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8

Open the chart page →

6,129
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

5,340
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6

Open the chart page →

4,661
flanksource-uiflanksourceVerified publisher1.4.3181 of 1See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.318891f21df54fb
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6

Open the chart page →

2,480

Container images carrying it

1,573 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
envoyproxy/envoy:v1.31.02bf7f042e396
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.8
3
gchq/hdfs:3.3.35ec58edbb2db
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.5
3
guacamole/guacamole:1.6.0f344085e618b
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.5
3
jacobalberty/unifi:v10.0.162896c0ab82d33
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2
3
library/nginx:1.25:1.25.5a484819eb602
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u6
3
omecproject/cdn-video-repo:1.0.0:remote-v3d59ccb138ffb
gnutls28@3.4.10-4ubuntu1.4
3.4.10-4ubuntu1.9+esm3
3
selenium/hub:3.141.5902f251d48d5f
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2
3
sigp/lighthouse:latest-amd6450f66cfebb6d
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.8
3
xenondb/percona:5.7.330e26872a2b67
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2
3
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
gnutls28@3.7.9-2
3.7.9-2+deb12u6
3
ghcr.io/huggingface/text-embeddings-inference:cpu-1.50502794a4d86
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
3
quay.io/devtron/ai-agent:0.0.16545dac92173
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
3
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.8
3
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.5
3
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.5
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.5
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.5
3
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.5
3
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
gnutls28@3.4.10-4ubuntu1.9
3.4.10-4ubuntu1.9+esm3
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.5
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.5
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
3
alazidis/kube-netlag:1.1.00e8c84152201
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.5+Fips1.1
2
alpine/git:2.47.2062a01ad7a0e
gnutls@3.8.8-r0
3.8.12-r0
2
apache/nifi-registry:1.26.07cdfd8deec92
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.8
2
apache/rocketmq:5.4.0319cd8a81ed1
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.5
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
2
bitnamilegacy/etcd:latest99b408c15272
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
2
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
2
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
2
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
2
bitnamilegacy/redis:latest5927ff3702df
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
2
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
2
blockstack/stacks-core:3.2.0.0.0f79944317326
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u6
2
clickhouse/clickhouse-server:24.2ed9640bfff07
gnutls28@3.6.13-2ubuntu1.11
3.6.13-2ubuntu1.12+esm2
2
clickhouse/clickhouse-server:26.8.2:latestfa394da808cc
gnutls28@3.7.3-4ubuntu1.9
no fix listed
2
datagrok/grok_connect:latestf5876d3aebb8
gnutls28@3.7.3-4ubuntu1.9
no fix listed
2
eqalpha/keydb:latest6537505c4235
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2
2
eqalpha/keydb:x86_64_v6.3.4eceb1806730c
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2
2
freeradius/freeradius-server:3.0.2121c8bfa904d8
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm3
2
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.