StackRadar

CVE-2025-9820

Medium

Advisory

Published 25 Nov 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,496
of 17,790 indexed, latest versions
Container images
1,575
deployed by those charts
Fix available
3 of 3
affected packages

gnutls-3.8.11-1.1 on GA media

Carried by container images the latest versions of 1,496 of 17,790 indexed charts deploy, on 1,575 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+42 more3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.8+5 more1,546
gnutlsapk3.8.5-r0, 3.8.8-r03.8.12-r026
gnutlsrpm3.6.7-lp151.2.3.1, 3.8.3-150600.4.9.13.8.3-150600.4.12.1, 3.8.11-1.13
OSV records
ALPINE-CVE-2025-9820DEBIAN-CVE-2025-9820UBUNTU-CVE-2025-9820openSUSE-SU-2025:15765-1SUSE-SU-2025:4323-1
Also known as
USN-8043-1, USN-8502-1

Charts affected

1,496 by stars
ChartLatestAffected imagesRadar Score
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u6

Open the chart page →

3,963
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
gnutls28@3.7.3-4ubuntu1.8
no fix listed

Open the chart page →

2,154
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2

Open the chart page →

5,153
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
gnutls28@3.8.9-3
3.8.9-3+deb13u1

Open the chart page →

7,301
eolicplantseolicplantsVerified publisher0.1.03 of 7See more

eolicplants eolicplants 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3
library/rabbitmq:3-managemente582c0bc7766
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
oscarsotosanchez/weatherservice:v1.0911ec961d10b
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3

Open the chart page →

27,361
eoloPlanteolo-plannerVerified publisher0.1.04 of 7See more

eoloPlant eolo-planner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0-focal5e15a3f014ed
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.11-managementc3f70098e01d
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8
mastercloudapps/planner:v1.2340a950b311b2
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8

Open the chart page →

27,702
eoloplannereoloplannerVerified publisher0.1.04 of 7See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0.6-focal8e70544b6c76
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

32,372
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.04 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0-focal5e15a3f014ed
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.11-managementc3f70098e01d
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8
mastercloudapps/planner:v1.2340a950b311b2
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8

Open the chart page →

27,702
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.03 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3
library/rabbitmq:3-managemente582c0bc7766
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
oscarsotosanchez/weatherservice:v1.0911ec961d10b
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3

Open the chart page →

27,327
eoloplannereoloplanner-molynx-gat0.1.03 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:4.4.66efa05203990
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

28,549
eolo-plannereolo-planner-repo0.1.03 of 7See more

eolo-planner eolo-planner-repo 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0.6-focal8e70544b6c76
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

27,197
eoloplanteoloplant1.0.04 of 7See more

eoloplant eoloplant 1.0.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0-focal5e15a3f014ed
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.11-managementc3f70098e01d
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8
mastercloudapps/planner:v1.2340a950b311b2
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8

Open the chart page →

27,702
eoloplantseoloplants-urjcVerified publisher0.1.03 of 7See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0.6-focal8e70544b6c76
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

27,822
servereoloserverVerified publisher0.1.04 of 7See more

server eoloserver 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0.6-focal8e70544b6c76
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

32,372
flywayeosc-lot-1Verified publisher0.7.02 of 3See more

flyway eosc-lot-1 0.7.0

2 of the 3 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
alpine/git:v2.49.1c0280cf95723
gnutls@3.8.8-r0
3.8.12-r0
flyway/flyway:9.1545b5d7cdc75a
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2

Open the chart page →

9,402
mariadbeosc-lot-1Verified publisher0.2.01 of 2See more

mariadb eosc-lot-1 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

2,458
mariadb-backupeosc-lot-1Verified publisher0.5.01 of 2See more

mariadb-backup eosc-lot-1 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

2,458
mariadb-run-scripteosc-lot-1Verified publisher0.3.01 of 1See more

mariadb-run-script eosc-lot-1 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

2,458
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6

Open the chart page →

5,352
rabbitmqeosc-lot-1Verified publisher0.3.01 of 2See more

rabbitmq eosc-lot-1 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-managemente582c0bc7766
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

2,511
rediseosc-lot-1Verified publisher0.2.01 of 1See more

redis eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
redis/redis-stack-server:6.2.6-v251a58f32d412
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm2

Open the chart page →

3,103
untareosc-lot-1Verified publisher0.1.01 of 1See more

untar eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/debian:12.5-slim67f3931ad8cb
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u6

Open the chart page →

1,732
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
longhornio/upgrade-responder:v0.2.05875cef29348
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2

Open the chart page →

7,376
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:12.2.2b1cb255a9939
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

6,566
blutgangethereum-helm-chartsVerified publisher0.0.121 of 1See more

blutgang ethereum-helm-charts 0.0.12

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
makemake1337/blutgang:latest8a55174fc830
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u6

Open the chart page →

2,535
chaos-meshethereum-helm-chartsVerified publisher0.0.32 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

2 of the 4 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6

Open the chart page →

12,202
eleelethereum-helm-chartsVerified publisher0.1.71 of 1See more

eleel ethereum-helm-charts 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ethpandaops/eleel:mainb8f1b707aee0
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.5+Fips1.1

Open the chart page →

1,072
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6

Open the chart page →

4,479
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u6

Open the chart page →

3,483
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.8

Open the chart page →

4,967
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2

Open the chart page →

20,983
evobotevobotVerified publisher0.1.11 of 1See more

evobot evobot 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u6

Open the chart page →

3,009
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.8

Open the chart page →

6,041
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.01 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
grafana/promtail:3.5.165bfae480b57
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.5

Open the chart page →

5,813
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

2,838
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.21 of 18See more

farm-observability farm-observability 0.27.2

1 of the 18 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

13,409
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.8

Open the chart page →

13,502
rospoferama0.4.31 of 1See more

rospo ferama 0.4.3

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u6

Open the chart page →

6,049
vipienferama0.2.81 of 1See more

vipien ferama 0.2.8

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2

Open the chart page →

7,523
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
gnutls28@3.4.10-4ubuntu1.7
3.4.10-4ubuntu1.9+esm3

Open the chart page →

14,692
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6

Open the chart page →

10,814
fibfibonacci-cluster-appsVerified publisher1.0.03 of 5See more

fib fibonacci-cluster-apps 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
gnutls28@3.7.9-2
3.7.9-2+deb12u6
golenski/fibonacci-task-manager:2.0.03a2b36df247b
gnutls28@3.7.9-2
3.7.9-2+deb12u6
golenski/fibonacci-worker:2.0.0954caf4aaf6a
gnutls28@3.7.9-2
3.7.9-2+deb12u6

Open the chart page →

17,003
infrafibonacci-cluster-infraVerified publisher1.0.03 of 4See more

infra fibonacci-cluster-infra 1.0.0

3 of the 4 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.5
library/postgres:16.4e62fbf9d3e2b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
library/redis:7.4.1bb142a9c18ac
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6

Open the chart page →

12,538
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

1,395
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6

Open the chart page →

5,789
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2

Open the chart page →

64,668
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8

Open the chart page →

6,150
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

5,355
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6

Open the chart page →

4,672
flanksource-uiflanksourceVerified publisher1.4.3181 of 1See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.318891f21df54fb
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6

Open the chart page →

2,580

Container images carrying it

1,575 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
gcr.io/istio-release/pilot:1.11.1c552478f8f11
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
gnutls28@3.4.10-4ubuntu1.5
3.4.10-4ubuntu1.9+esm3
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.5
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
gnutls28@3.7.3-4ubuntu1.3
3.7.3-4ubuntu1.8
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
gnutls28@3.6.13-2ubuntu1.10
3.6.13-2ubuntu1.12+esm2
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.14.051404ef4419c
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2
1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
gnutls28@3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6+esm3
1
ghcr.io/98jan/smalland-server/smalland-server:deveb7be822d5b2
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
1
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.5
1
ghcr.io/aetrius/msockperf-server/msockperf-server:main46ae4ea003e0
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.5
1
ghcr.io/aklivity/zilla:2.4.289c4a2e74863
gnutls28@3.7.3-4ubuntu1.9
no fix listed
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.5
1
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
1
ghcr.io/apache/flink-kubernetes-operator:c703255e9c2ce635b89
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.8
1
ghcr.io/appscode/csi-driver-cacerts:v0.5.0b6bf1888f9d5
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
gnutls28@3.8.9-3
3.8.9-3+deb13u1
1
ghcr.io/appscode/inbox-server:MailetGroup4a2824296412
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8
1
ghcr.io/appscode/s3proxy:sha-a82ca6820518335f9f9
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.8
1
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.5
1
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
1
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
1
ghcr.io/atuinsh/atuin:18.12.0e953fa9e36ef
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
1
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.5+Fips1.1
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.8
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
gnutls28@3.7.3-4ubuntu1.3
3.7.3-4ubuntu1.8
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
1
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u6
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
1
ghcr.io/camunda-community-hub/zeebe-simple-monitor:2.6.2d9d796a1b846
gnutls28@3.7.3-4ubuntu1.3
3.7.3-4ubuntu1.8
1
ghcr.io/caninehq/canine:latesta058034ca006
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.