StackRadar

CVE-2026-14457

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,770
of 17,790 indexed, latest versions
Container images
1,648
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,770 of 17,790 indexed charts deploy, on 1,648 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,190
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2447
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
OSV records
ALPINE-CVE-2026-14457DEBIAN-CVE-2026-14457UBUNTU-CVE-2026-14457
Also known as
USN-8678-1

Charts affected

1,770 by stars
ChartLatestAffected imagesRadar Score
haproxy-ingresswenerme0.16.11 of 1See more

haproxy-ingress wenerme 0.16.1

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.16fd744191ef6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

794
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.32.5b5a407a27f62
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

9,183
prometheus-nats-exporterwenerme2.23.21 of 1See more

prometheus-nats-exporter wenerme 2.23.2

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.20.2c623b608e148
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
vaultwenerme0.34.12 of 2See more

vault wenerme 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
openssl@3.5.7-r0
3.5.8-r0
hashicorp/vault-k8s:1.7.655e27b080c9b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

549
victoria-metrics-k8s-stackwenerme0.92.12 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,910
wexa-studiowexa-studio1.2.04 of 15See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/postgres:15-alpinefe0737ba566a
openssl@3.5.7-r0
3.5.8-r0
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.8-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.8-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

15,044
whereaboutswhereaboutsVerified publisher0.3.01 of 1See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

618
wikiwikijs3.0.02 of 2See more

wiki wikijs 3.0.0

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
requarks/wiki:268f0d1848261
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

5,483
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,640
ovh-exporterwiremindVerified publisher1.2.01 of 1See more

ovh-exporter wiremind 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/wiremind/ovh-exporter:v2.3.1609f955bd977
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

209
wordpress-alpinewordpress-alpine1.5.182 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/memcached:1.6.45dc561d52bb8a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,063
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,676
wicekxxczakiVerified publisher0.1.2551 of 2See more

wicek xxczaki 0.1.255

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

1,304
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

899
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

478
homerzekker6Verified publisher8.35.01 of 1See more

homer zekker6 8.35.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
b4bz/homer:v26.08.3febc8967c9f7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
language-toolzekker6Verified publisher1.12.12 of 2See more

language-tool zekker6 1.12.1

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.8-r0
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,571
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,159
zoo-project-druzoo-projectOfficialVerified publisher0.10.43 of 6See more

zoo-project-dru zoo-project 0.10.4

3 of the 6 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.4-alpine3.249a8afca54e78
openssl@3.5.7-r0
3.5.8-r0
library/rabbitmq:4.3.2-alpine835cbc6fabce
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

7,929

Container images carrying it

1,648 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ethpandaops/forky:debian-latestc937f4ba737c
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ethpandaops/panda-pulse:latestad6fc3b3e6b8
openssl@3.5.7-r0
3.5.8-r0
1
ethpandaops/rpc-snooper:latestc0b30fcf64bc
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ethpandaops/spamoor:latest5f731b20ec50
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ethpandaops/xatu-cbt-api:latestf7dec2e07091
openssl@3.5.4-r0
3.5.8-r0
1
evcc/evcc:0.315.0327318279998
openssl@3.5.6-r0
3.5.8-r0
1
evcc/evcc:0.300.8ddf2a25afce5
openssl@3.5.5-r0
3.5.8-r0
1
evoapicloud/evolution-api:latest966625532d90
openssl@3.5.6-r0
3.5.8-r0
1
evoapicloud/evolution-manager:latestcbfeb314afb9
openssl@3.5.4-r0
3.5.8-r0
1
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
openssl@3.5.1-1
3.5.7-1~deb13u2
1
falcosecurity/falcosidekick:2.32.01976da721518
openssl@3.5.1-r0
3.5.8-r0
1
fallenbagel/jellyseerr:latest4538137bc5af
openssl@3.5.1-r0
3.5.8-r0
1
felipecs8/landing-page:v1db6d44e325a1
openssl@3.5.1-r0
3.5.8-r0
1
ffutop/ddc-ph-kafka-egress:latest319d94c8481a
openssl@3.5.4-r0
3.5.8-r0
1
ffutop/ddc-ph-kafka-ingress:latest15832d4f19be
openssl@3.5.4-r0
3.5.8-r0
1
ffutop/ddc-transport-udp-receive:latest651ca530d787
openssl@3.5.4-r0
3.5.8-r0
1
ffutop/ddc-transport-udp-send:latest4222eb5ee847
openssl@3.5.4-r0
3.5.8-r0
1
filebrowser/filebrowser:v2.63.15-s6dbac07403040
openssl@3.5.7-r0
3.5.8-r0
1
filiparag/hetzner_ddns:1.0.15a9cbae7997c
openssl@3.5.4-r0
3.5.8-r0
1
fireflyiii/core:version-6.6.6ae69fdd95cde
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
flashcatcloud/nightingale:8.5.1421acb36181b
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
1
fluent/fluent-bit:4.2.6a52221a2a3eb
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
fluent/fluent-bit:5.1.1a941bdd5ca55
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
fluent/fluentd-kubernetes-daemonset:v1.19.3-debian-elasticsearch7-1.1de9cf5f1127a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
fluent/fluentd-kubernetes-daemonset:v1-debian-graylogfda93f768f98
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
fluxcd/flux-cli:v2.9.5704d55295355
openssl@3.5.7-r0
3.5.8-r0
1
foggbh/stocky:latest8b7a2e5ecf4e
openssl@3.5.7-r0
3.5.8-r0
1
folioci/edge-caiasoft:latestc3cfa89eee2f
openssl@3.5.7-r0
3.5.8-r0
1
folioci/edge-connexion:latestb4863d135524
openssl@3.5.6-r0
3.5.8-r0
1
folioci/edge-dematic:latest48c9b1d180d4
openssl@3.5.7-r0
3.5.8-r0
1
folioci/edge-inn-reach:latestc64e4d9dd3fc
openssl@3.5.7-r0
3.5.8-r0
1
folioci/edge-ncip:lateste760dbb81d1a
openssl@3.5.7-r0
3.5.8-r0
1
folioci/edge-oai-pmh:latesteedfcbc29792
openssl@3.5.7-r0
3.5.8-r0
1
folioci/edge-orders:latest1ef654ee9f23
openssl@3.5.7-r0
3.5.8-r0
1
folioci/edge-patron:latest682b852e056d
openssl@3.5.7-r0
3.5.8-r0
1
folioci/edge-rtac:latest15ef73b1abd0
openssl@3.5.7-r0
3.5.8-r0
1
folioci/edge-sip2:latest86106f20ef51
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-authtoken:latest995a25a33133
openssl@3.5.5-r0
3.5.8-r0
1
folioci/mod-calendar:latest22f65982efd7
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-circulation-storage:latest6bdddcafbc0f
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-configuration:latestdd0cdc89670a
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-copycat:latest1513fad2b799
openssl@3.5.6-r0
3.5.8-r0
1
folioci/mod-courses:latest68ca414f5596
openssl@3.5.5-r0
3.5.8-r0
1
folioci/mod-data-export:latest0cc86bf09755
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-data-export-spring:latestf1d7caf4544b
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-ebsconet:latest3ae8cb99daa3
openssl@3.5.6-r0
3.5.8-r0
1
folioci/mod-email:latest79ea8e2e7ebf
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-entities-links:latest3e2412815c0f
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-eusage-reports:latest15de67587091
openssl@3.5.6-r0
3.5.8-r0
1
folioci/mod-event-config:latest0192adad3897
openssl@3.5.7-r0
3.5.8-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.