StackRadar

CVE-2026-14456

High

Advisory

Published 13 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,773
of 17,792 indexed, latest versions
Container images
1,654
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,773 of 17,792 indexed charts deploy, on 1,654 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+19 more3.5.8-r0, 3.6.3-r51,200
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+13 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2443
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
OSV records
ALPINE-CVE-2026-14456CGA-35mx-c7ph-5wqgDEBIAN-CVE-2026-14456UBUNTU-CVE-2026-14456ECHO-67da-49b3-07ec
Also known as
CGA-93ch-6vxx-3pjv, CGA-fq88-94gm-g9r9, CGA-gc6w-2x98-r76w, CGA-qchw-xc4v-23mf, CGA-x4jp-5c7q-v482, USN-8678-1

Charts affected

1,773 by stars
ChartLatestAffected imagesRadar Score
wasabi-s3-operatorwasabi-s3-operatorVerified publisher0.2.71 of 1See more

wasabi-s3-operator wasabi-s3-operator 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
kenchrcum/wasabi-s3-operator:0.2.7ce657c622ce5
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

629
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
ethereum/client-go:latest37575ec10fbc
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,090
argocd-image-updaterwenerme1.3.11 of 1See more

argocd-image-updater wenerme 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

725
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

4,999
haproxy-ingresswenerme0.16.11 of 1See more

haproxy-ingress wenerme 0.16.1

1 of the 1 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.16fd744191ef6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

794
prometheus-nats-exporterwenerme2.23.21 of 1See more

prometheus-nats-exporter wenerme 2.23.2

1 of the 1 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.20.2c623b608e148
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
vaultwenerme0.34.12 of 2See more

vault wenerme 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
openssl@3.5.7-r0
3.5.8-r0
hashicorp/vault-k8s:1.7.655e27b080c9b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

549
victoria-metrics-k8s-stackwenerme0.92.12 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,910
wexa-studiowexa-studio1.2.04 of 15See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
library/postgres:15-alpinefe0737ba566a
openssl@3.5.7-r0
3.5.8-r0
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.8-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.8-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

15,044
whereaboutswhereaboutsVerified publisher0.3.01 of 1See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

618
wikiwikijs3.0.02 of 2See more

wiki wikijs 3.0.0

2 of the 2 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
requarks/wiki:268f0d1848261
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

5,483
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,640
ovh-exporterwiremindVerified publisher1.2.01 of 1See more

ovh-exporter wiremind 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
ghcr.io/wiremind/ovh-exporter:v2.3.1609f955bd977
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

209
wordpress-alpinewordpress-alpine1.5.182 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
library/memcached:1.6.45dc561d52bb8a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,063
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,676
wicekxxczakiVerified publisher0.1.2571See more

wicek xxczaki 0.1.257

1 container image this version deploys carries CVE-2026-14456.

Container imageDigestPackageFixed in
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

1,304
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

899
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

478
homerzekker6Verified publisher8.35.01 of 1See more

homer zekker6 8.35.0

1 of the 1 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
b4bz/homer:v26.08.3febc8967c9f7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
language-toolzekker6Verified publisher1.12.12 of 2See more

language-tool zekker6 1.12.1

2 of the 2 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.8-r0
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,571
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,159
zoo-project-druzoo-projectOfficialVerified publisher0.10.43 of 6See more

zoo-project-dru zoo-project 0.10.4

3 of the 6 container images this version deploys carry CVE-2026-14456.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.4-alpine3.249a8afca54e78
openssl@3.5.7-r0
3.5.8-r0
library/rabbitmq:4.3.2-alpine835cbc6fabce
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

7,929

Container images carrying it

1,654 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
linuxserver/calibre:version-v5.21.0a847b5b2d860
nodejs@14.17.0-1nodesource1
no fix listed
1
linuxserver/codimd:latestb801bbcf6386
nodejs@10.23.0-1nodesource1
no fix listed
1
linuxserver/deluge:2.2.09505c64720af
openssl@3.5.7-r0
3.5.8-r0
1
linuxserver/jackett:0.24.20929bca08e2e6f1
openssl@3.5.6-r0
3.5.8-r0
1
linuxserver/jackett:0.24.2066f1f23e0c9845
openssl@3.5.6-r0
3.5.8-r0
1
linuxserver/medusa:v1.0.26-ls2884477fb1ce3ca
openssl@3.5.7-r0
3.5.8-r0
1
linuxserver/overseerr:1.35.06108ed066d4a
openssl@3.5.5-r0
3.5.8-r0
1
linuxserver/prowlarr:version-2.4.0.53974fd7a166c8f4
openssl@3.5.7-r0
3.5.8-r0
1
linuxserver/prowlarr:2.4.0.5397-ls149a46d0ce0a823
openssl@3.5.6-r0
3.5.8-r0
1
linuxserver/qbittorrent:5.2.2dd24a5f3db32
openssl@3.5.7-r0
3.5.8-r0
1
linuxserver/radarr:version-6.2.1.10461549c4a075496
openssl@3.5.7-r0
3.5.8-r0
1
linuxserver/smokeping:2.9.02f4488c9afcd
openssl@3.5.7-r0
3.5.8-r0
1
linuxserver/sonarr:version-4.0.17.295202bc962946fe
openssl@3.5.7-r0
3.5.8-r0
1
lissy93/domain-locker:latestd3c95edc0a8b
openssl@3.5.6-r0
3.5.8-r0
1
lissy93/networking-toolbox:latest700862839553
openssl@3.5.5-r0
3.5.8-r0
1
listmonk/listmonk:v6.0.0bf3903d54a46
openssl@3.5.4-r0
3.5.8-r0
1
litellm/litellm-non_root:v1.82.3-stable09b217802ded
openssl@3.6.1-r3
3.6.3-r5
1
litlyx/litlyx-consumer:latest02225e77d316
openssl@3.5.4-r0
3.5.8-r0
1
litlyx/litlyx-dashboard:lateste64ff2d52385
openssl@3.5.4-r0
3.5.8-r0
1
litlyx/litlyx-producer:latest10407f36613f
openssl@3.5.4-r0
3.5.8-r0
1
livekit/livekit-server:v1.9.03602a85840d5
openssl@3.5.0-r0
3.5.8-r0
1
lmacka/snappass:2.1.293f5c048b7d4
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
loeken/home-assistant:2026.5.14ce6abc553b3
openssl@3.5.6-r0
3.5.8-r0
1
loeken/jellyfin:10.11.87efbc24e47b0
openssl@3.5.6-r0
3.5.8-r0
1
loeken/sonarr:4.0.18ad0528ab7ba0
openssl@3.5.7-r0
3.5.8-r0
1
looplj/axonhub:latest2c71eeaef295
openssl@3.5.7-r0
3.5.8-r0
1
louislam/its-mytabs:1.7.02e478d3170bd
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
lumenvox/admin-portal:7.112310cf52f79
openssl@3.5.6-r0
3.5.8-r0
1
lumenvox/deployment-portal:7.19d83efc340cf
openssl@3.5.7-r0
3.5.8-r0
1
lumenvox/file-store:7.138aa8711c9ef
openssl@3.5.6-r0
3.5.8-r0
1
makeplane/plane-mcp-server:v0.3.071b7252adef0
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
maponyacharles/sceptreai:postgresql-0.1.1258881351f309
openssl@3.5.7-r0
3.5.8-r0
1
maponyacharles/sceptreai:api-0.1.127b37b092130a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
openssl@3.5.7-r0
3.5.8-r0
1
maponyacharles/sceptreai:ui-0.1.127cd0f11c5e55
openssl@3.5.7-r0
3.5.8-r0
1
marcoimme/oidcmock:latestb6035c0721a8
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
mariusm/vingress:0.5.0b3db186c3d72
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
mawad98/backstage-pyactions:demo99422c56a274
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
1
mcpuse/inspector:latest91b25e3eb604
openssl@3.5.7-r0
3.5.8-r0
1
megaease/easegress:latestfad1c7452958
openssl@3.5.5-r0
3.5.8-r0
1
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
1
metabase/metabase:v0.63.1.124f150effd484
openssl@3.5.7-r0
3.5.8-r0
1
metacubex/mihomo:v1.19.29e1d7dadaa936
openssl@3.5.7-r0
3.5.8-r0
1
mindsdb/mindsdb:latest163011c09299
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
1
miniflux/miniflux:2.3.349d7b6098761
openssl@3.5.7-r0
3.5.8-r0
1
miniflux/miniflux:2.2.18a3ca6bbc1f74
openssl@3.5.5-r0
3.5.8-r0
1
missuo/deeplx:v1.2.232e492587678
openssl@3.5.6-r0
3.5.8-r0
1
moby/buildkit:v0.31.0a095b3d11ce1
openssl@3.5.7-r0
3.5.8-r0
1
moreillon/group-manager-front:latest5f0a38498271
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.