StackRadar

CVE-2025-9820

Medium

Advisory

Published 25 Nov 2025In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,496
of 17,787 indexed, latest versions
Container images
1,573
deployed by those charts
Fix available
3 of 3
affected packages

gnutls-3.8.11-1.1 on GA media

Carried by container images the latest versions of 1,496 of 17,787 indexed charts deploy, on 1,573 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+42 more3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.8+5 more1,544
gnutlsapk3.8.5-r0, 3.8.8-r03.8.12-r026
gnutlsrpm3.6.7-lp151.2.3.1, 3.8.3-150600.4.9.13.8.3-150600.4.12.1, 3.8.11-1.13
OSV records
ALPINE-CVE-2025-9820DEBIAN-CVE-2025-9820UBUNTU-CVE-2025-9820openSUSE-SU-2025:15765-1SUSE-SU-2025:4323-1
Also known as
USN-8043-1, USN-8502-1

Charts affected

1,496 by stars
ChartLatestAffected imagesRadar Score
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u6

Open the chart page →

3,946
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
gnutls28@3.7.3-4ubuntu1.8
no fix listed

Open the chart page →

2,152
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2

Open the chart page →

5,150
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
gnutls28@3.8.9-3
3.8.9-3+deb13u1

Open the chart page →

7,265
eolicplantseolicplantsVerified publisher0.1.03 of 7See more

eolicplants eolicplants 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3
library/rabbitmq:3-managemente582c0bc7766
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
oscarsotosanchez/weatherservice:v1.0911ec961d10b
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3

Open the chart page →

27,349
eoloPlanteolo-plannerVerified publisher0.1.04 of 7See more

eoloPlant eolo-planner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0-focal5e15a3f014ed
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.11-managementc3f70098e01d
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8
mastercloudapps/planner:v1.2340a950b311b2
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8

Open the chart page →

27,667
eoloplannereoloplannerVerified publisher0.1.04 of 7See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0.6-focal8e70544b6c76
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

32,336
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.04 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0-focal5e15a3f014ed
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.11-managementc3f70098e01d
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8
mastercloudapps/planner:v1.2340a950b311b2
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8

Open the chart page →

27,667
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.03 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3
library/rabbitmq:3-managemente582c0bc7766
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
oscarsotosanchez/weatherservice:v1.0911ec961d10b
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3

Open the chart page →

27,314
eoloplannereoloplanner-molynx-gat0.1.03 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:4.4.66efa05203990
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

28,539
eolo-plannereolo-planner-repo0.1.03 of 7See more

eolo-planner eolo-planner-repo 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0.6-focal8e70544b6c76
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

27,188
eoloplanteoloplant1.0.04 of 7See more

eoloplant eoloplant 1.0.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0-focal5e15a3f014ed
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.11-managementc3f70098e01d
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8
mastercloudapps/planner:v1.2340a950b311b2
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8

Open the chart page →

27,667
eoloplantseoloplants-urjcVerified publisher0.1.03 of 7See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0.6-focal8e70544b6c76
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

27,812
servereoloserverVerified publisher0.1.04 of 7See more

server eoloserver 0.1.0

4 of the 7 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8
codeurjc/toposervice:v1.09fb4c11e6a49
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
library/mongo:5.0.6-focal8e70544b6c76
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:3.9-management8a279e9396a8
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.8

Open the chart page →

32,336
flywayeosc-lot-1Verified publisher0.7.02 of 3See more

flyway eosc-lot-1 0.7.0

2 of the 3 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
alpine/git:v2.49.1c0280cf95723
gnutls@3.8.8-r0
3.8.12-r0
flyway/flyway:9.1545b5d7cdc75a
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2

Open the chart page →

9,383
mariadbeosc-lot-1Verified publisher0.2.01 of 2See more

mariadb eosc-lot-1 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

2,455
mariadb-backupeosc-lot-1Verified publisher0.5.01 of 2See more

mariadb-backup eosc-lot-1 0.5.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

2,455
mariadb-run-scripteosc-lot-1Verified publisher0.3.01 of 1See more

mariadb-run-script eosc-lot-1 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

2,455
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6

Open the chart page →

5,316
rabbitmqeosc-lot-1Verified publisher0.3.01 of 2See more

rabbitmq eosc-lot-1 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-managemente582c0bc7766
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

2,505
rediseosc-lot-1Verified publisher0.2.01 of 1See more

redis eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
redis/redis-stack-server:6.2.6-v251a58f32d412
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm2

Open the chart page →

3,100
untareosc-lot-1Verified publisher0.1.01 of 1See more

untar eosc-lot-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/debian:12.5-slim67f3931ad8cb
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u6

Open the chart page →

1,554
upgrade-responderepinioVerified publisher0.2.01 of 5See more

upgrade-responder epinio 0.2.0

1 of the 5 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
longhornio/upgrade-responder:v0.2.05875cef29348
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2

Open the chart page →

7,366
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
library/mariadb:12.2.2b1cb255a9939
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

6,475
blutgangethereum-helm-chartsVerified publisher0.0.121 of 1See more

blutgang ethereum-helm-charts 0.0.12

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
makemake1337/blutgang:latest8a55174fc830
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u6

Open the chart page →

2,524
chaos-meshethereum-helm-chartsVerified publisher0.0.32 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

2 of the 4 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6

Open the chart page →

12,147
eleelethereum-helm-chartsVerified publisher0.1.71 of 1See more

eleel ethereum-helm-charts 0.1.7

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ethpandaops/eleel:mainb8f1b707aee0
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.5+Fips1.1

Open the chart page →

1,067
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6

Open the chart page →

4,117
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u6

Open the chart page →

3,469
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.8

Open the chart page →

4,964
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2

Open the chart page →

20,987
evobotevobotVerified publisher0.1.11 of 1See more

evobot evobot 0.1.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u6

Open the chart page →

2,998
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.8

Open the chart page →

6,038
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.01 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
grafana/promtail:3.5.165bfae480b57
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.5

Open the chart page →

5,787
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

2,824
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.21 of 18See more

farm-observability farm-observability 0.27.2

1 of the 18 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
grafana/alloy:v1.12.2f94b1c82957a
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

13,336
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.8

Open the chart page →

13,491
rospoferama0.4.31 of 1See more

rospo ferama 0.4.3

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u6

Open the chart page →

5,300
vipienferama0.2.81 of 1See more

vipien ferama 0.2.8

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2

Open the chart page →

7,519
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
gnutls28@3.4.10-4ubuntu1.7
3.4.10-4ubuntu1.9+esm3

Open the chart page →

14,688
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6

Open the chart page →

10,119
fibfibonacci-cluster-appsVerified publisher1.0.03 of 5See more

fib fibonacci-cluster-apps 1.0.0

3 of the 5 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
gnutls28@3.7.9-2
3.7.9-2+deb12u6
golenski/fibonacci-task-manager:2.0.03a2b36df247b
gnutls28@3.7.9-2
3.7.9-2+deb12u6
golenski/fibonacci-worker:2.0.0954caf4aaf6a
gnutls28@3.7.9-2
3.7.9-2+deb12u6

Open the chart page →

16,963
infrafibonacci-cluster-infraVerified publisher1.0.03 of 4See more

infra fibonacci-cluster-infra 1.0.0

3 of the 4 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.5
library/postgres:16.4e62fbf9d3e2b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
library/redis:7.4.1bb142a9c18ac
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6

Open the chart page →

12,510
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

1,394
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6

Open the chart page →

5,624
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2

Open the chart page →

64,192
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8

Open the chart page →

6,129
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5

Open the chart page →

5,340
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6

Open the chart page →

4,661
flanksource-uiflanksourceVerified publisher1.4.3181 of 1See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2025-9820.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.318891f21df54fb
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6

Open the chart page →

2,480

Container images carrying it

1,573 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u6
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.8
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.5
2
1dev/server:11.9.0cd5b12fe5471
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.5
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
gnutls28@3.7.9-2
3.7.9-2+deb12u6
1
5200710/hadoop:3.2.3-java8092d3088a5fb
gnutls28@3.6.13-2ubuntu1.9
3.6.13-2ubuntu1.12+esm2
1
a10networks/acos-prometheus-exporter:latest8dc58d434d71
gnutls28@3.5.18-1ubuntu1
3.5.18-1ubuntu1.6+esm3
1
aboogie/login_test_backend:new9c41a4483ac8
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
actualbudget/actual-server:25.3.158fecd9088b7
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
1
adorsys/keycloak-config-cli:6.3.0-26.1.085be7a45a94c
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.5
1
adorsys/keycloak-config-cli:6.1.6-25.0.1eb49a2dcbbb8
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.5
1
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.8
1
aibrix/metadata-service:v0.7.063fb81a64377
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
1
airbyte/manifest-server:7.23.73b3a670af168
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u6
1
airbyte/pod-sweeper:1.5.198d2c39d512e
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2
1
akaunting/akaunting:3.0.1552811b36ec3a
gnutls28@3.7.9-2
3.7.9-2+deb12u6
1
akeyless/base:latest759e4289fae8
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.5+Fips1.1
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
gnutls@3.8.8-r0
3.8.12-r0
1
aktosecurity/data-ingestion-service213aded7adc5
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
1
allegroai/clearml:2.0.0-613713ae38f7daf
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
gnutls28@3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6+esm3
1
alpine/git:v2.49.1c0280cf95723
gnutls@3.8.8-r0
3.8.12-r0
1
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.8
1
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.5
1
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.8
1
andrewmackrodt/firefox-x11:142.0.1-r133f9080470c9
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.8
1
anguda/ant-media:2.5c435285fc241
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2
1
ankane/pgvector:v0.5.1d3a9d8ac27bb
gnutls28@3.7.9-2
3.7.9-2+deb12u6
1
anujdatar/cups:25.07.01685df04a643b
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u6
1
apache/activemq-artemis:2.44.00305c26f19ed
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
1
apache/activemq-artemis:2.37.0bae523439ee3
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.5
1
apache/airflow:2.8.4-python3.964e58748b6b9
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u6
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u6
1
apache/airflow:2.8.1e5560ad0b86e
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u6
1
apache/apisix:3.16.0-ubuntu5e47692cac00
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.5+Fips1.1
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.8
1
apache/hertzbeat:1.8.075d48a62748f
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.5
1
apache/iotdb:0.13.3-nodeafa47bf1692a
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm2
1
apache/kafka:4.1.0bff074a5d005
gnutls@3.8.8-r0
3.8.12-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.