DSA-6015-1
UnscoredAdvisory
Published 1 Oct 2025In the index since 5 Sept 2026
- Severity
- Unscored
- worst across findings
- CVSS
- —
- base score, highest
- EPSS
- 0.020
- 80th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 525
- of 17,787 indexed, latest versions
- Container images
- 597
- deployed by those charts
- Fix available
- 1 of 1
- affected package
openssl - security update
Carried by container images the latest versions of 525 of 17,787 indexed charts deploy, on 597 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openssldeb | 3.0.9-1, 3.0.11-1~deb12u1, 3.0.11-1~deb12u2, 3.0.13-1~deb12u1+6 more | 3.0.17-1~deb12u3, 3.5.1-1+deb13u1 | 597 |
- OSV records
- DSA-6015-1
Charts affected
525 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| kenerkenerVerified publisher | 0.2.0 | 1 of 1See more | 5,228 |
| difykubeblocksVerified publisher | 0.5.1 | 2 of 5See more | 20,403 |
| kubeseal-webguikubeseal-webgui | 6.0.4 | 1 of 2See more | 4,095 |
| kuma-ingress-watcherkuma-ingress-watcherVerified publisher | 1.4.0 | 1 of 1See more | 2,662 |
| flaresolverrlib42Verified publisher | 2.0.0 | 1 of 1See more | 35,050 |
| locustlocustVerified publisher | 0.1.4 | 1 of 1See more | 2,757 |
| drillmagasin-drill | 0.9.0 | 1 of 3See more | 5,734 |
| model-manager-loadermodel-manager-loader | 1.27.0 | 1 of 1See more | 2,680 |
| food-managermoreillonVerified publisher | 0.5.0 | 1 of 2See more | 13,738 |
| clowder2ncsaVerified publisher | 1.9.7 | 2 of 12See more | 37,373 |
| node-provider-labelernode-provider-labelerVerified publisher | 0.20.0 | 1 of 1See more | 1,088 |
| nginx-s3olopostVerified publisher | 0.2.1 | 1 of 1See more | 5,039 |
| opencatalogiopencatalogi | 1.0.6 | 2 of 8See more | 14,838 |
| librechatopenshift | 1.9.0 | 1 of 3See more | 5,779 |
| openvaultopenvaultVerified publisher | 0.8.1 | 1 of 2See more | 6,873 |
| paperless-ngxpaperlessVerified publisher | 0.4.0 | 1 of 3See more | 8,489 |
| portraitportraitVerified publisher | 0.2.13 | 1 of 8See more | 31,844 |
| pzserverpzserver | 0.1.17 | 1 of 2See more | 3,201 |
| redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher | 1.0.2 | 1 of 1See more | 2,652 |
| reportportalreportportal-ioOfficialVerified publisher | 26.8.12 | 1 of 15See more | 11,869 |
| atuinrm3lVerified publisher | 0.11.0 | 1 of 3See more | 6,521 |
| dev-feedrm3lVerified publisher | 3.1.2 | 1 of 3See more | 9,837 |
| kube-state-metricsromanow-helm-chartsVerified publisher | 1.7.2 | 1 of 1See more | 2,654 |
| mealiertomik-helm-chartsVerified publisher | 0.0.2 | 1 of 1See more | 3,929 |
| baikalrubxkubeVerified publisher | 1.3.1 | 1 of 1See more | 5,315 |
| kyoorubxkubeVerified publisher | 0.1.10 | 4 of 9See more | 30,234 |
| sentry-k8ssentry-k8sVerified publisher | 1.4.1 | 1 of 11See more | 16,449 |
| vuiseriohub | 1.0.6 | 2 of 3See more | 11,532 |
| mongodb-backupsinextraVerified publisher | 1.1.0 | 1 of 1See more | 4,238 |
| slo-reportingslo-reportingVerified publisher | 0.3.34 | 1 of 2See more | 2,928 |
| artifact-hubsoftonic | 1.19.0 | 1 of 8See more | 14,491 |
| nginx-chartsomnath-chartVerified publisher | 0.1.9 | 1 of 1See more | 5,676 |
| speckle-serverspeckleVerified publisher | 2.26.3 | 3 of 4See more | 10,380 |
| graph-nodestakewise | 3.1.0 | 1 of 3See more | 4,661 |
| jenkinstestchart | 0.1.9 | 1 of 2See more | 9,102 |
| jenkinstest-jenkins | 9.1.0 | 1 of 2See more | 9,102 |
| unitycatalogunitycatalogVerified publisher | 0.0.2 | 1 of 4See more | 12,581 |
| varnish-cachevarnishVerified publisher | 1.1.1 | 1 of 1See more | 4,249 |
| devportal-admin-uiveecode-platformVerified publisher | 0.5.4 | 1 of 1See more | 5,225 |
| backendzymtraceOfficialVerified publisher | 26.9.1 | 1 of 6See more | 10,323 |
| abstract-nodeabstract-nodeVerified publisher | 0.1.49 | 1 of 2See more | 4,554 |
| pod-sweeperairbyteVerified publisher | 1.5.1 | 1 of 1See more | 4,922 |
| esphomealexmorbo-esphomeVerified publisher | 1.0.0 | 1 of 1See more | 6,324 |
| redisalexvanderberkelVerified publisher | 2.2.0 | 1 of 1See more | 1,846 |
| anchore-admission-controlleranchore-charts | 0.8.5 | 1See more | — |
| ddosifyanteonVerified publisher | 1.7.5 | 2 of 13See more | 25,669 |
| kubedb-oneappscodeVerified publisher | 2023.12.28 | 1 of 10See more | 15,200 |
| haproxyappuio | 2.7.2 | 1 of 1See more | 5,657 |
| dokuwikiarea-42Verified publisher | 0.1.8 | 1 of 1See more | 7,489 |
| arlas-aiasarlas-stackVerified publisher | 28.8.0 | 9 of 22See more | 40,238 |
Container images carrying it
597 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | ab255bea133e | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 40a00a6456ae | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 627761f6dcbc | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 2b993cb232eb | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 67f99a5beab7 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | ed07e7ca098d | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | e5a7ec714acc | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 1eee8e20a87f | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 14d45b2a1f00 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | e230e6ac0722 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 8bf880fe8c73 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | b1bf0669e3a0 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 50ea1cf0086f | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | a3c27ee3fb2f | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 6df27f944fe8 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | dbaa8527bf4c | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | d19d886d5090 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 344f53763b25 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | efb69ec3330c | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 5a6fe78d4d15 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 5afcab98d9d7 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | fbba58ddb1a6 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 416e980f76a6 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | f7e607f24071 | openssl | 3.0.17-1~deb12u3 | 1 |
| ghcr.io/ | 7dc0ee57b628 | openssl | 3.0.17-1~deb12u3 | 1 |
| public.ecr.aws/ | b1493760c716 | openssl | 3.0.17-1~deb12u3 | 1 |
| public.ecr.aws/ | 34823c8abe00 | openssl | 3.0.17-1~deb12u3 | 1 |
| public.ecr.aws/ | 5cd62142d6ed | openssl | 3.0.17-1~deb12u3 | 1 |
| public.ecr.aws/ | f8fb4eea4071 | openssl | 3.0.17-1~deb12u3 | 1 |
| public.ecr.aws/ | 046ef5c9ed50 | openssl | 3.0.17-1~deb12u3 | 1 |
| public.ecr.aws/ | 36d051110158 | openssl | 3.0.17-1~deb12u3 | 1 |
| public.ecr.aws/ | 9e14a72b066d | openssl | 3.0.17-1~deb12u3 | 1 |
| public.ecr.aws/ | 71697b5ff713 | openssl | 3.0.17-1~deb12u3 | 1 |
| public.ecr.aws/ | f7567ce3419d | openssl | 3.0.17-1~deb12u3 | 1 |
| public.ecr.aws/ | f74851ce31f5 | openssl | 3.0.17-1~deb12u3 | 1 |
| public.ecr.aws/ | 27f8de509169 | openssl | 3.0.17-1~deb12u3 | 1 |
| quay.io/ | a9f835d1b241 | openssl | 3.0.17-1~deb12u3 | 1 |
| quay.io/ | 935f97598255 | openssl | 3.0.17-1~deb12u3 | 1 |
| quay.io/ | 37d2ef21e3e5 | openssl | 3.0.17-1~deb12u3 | 1 |
| quay.io/ | 2169032c5840 | openssl | 3.0.17-1~deb12u3 | 1 |
| quay.io/ | e0d9b93dbf2b | openssl | 3.0.17-1~deb12u3 | 1 |
| registry.gitlab.com/ | 5a9334f371f3 | openssl | 3.0.17-1~deb12u3 | 1 |
| registry.k8s.io/ | 81a13703d6b8 | openssl | 3.0.17-1~deb12u3 | 1 |
| registry.k8s.io/ | e3dccb1a21d1 | openssl | 3.0.17-1~deb12u3 | 1 |
| registry.k8s.io/ | 0e64aedb0d0a | openssl | 3.5.1-1+deb13u1 | 1 |
| registry.k8s.io/ | fd9722fd02e3 | openssl | 3.0.17-1~deb12u3 | 1 |
| registry.k8s.io/ | ce5b5ccd5eb0 | openssl | 3.0.17-1~deb12u3 | 1 |