StackRadar

CVE-2026-14457

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,770
of 17,790 indexed, latest versions
Container images
1,648
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,770 of 17,790 indexed charts deploy, on 1,648 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,190
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2447
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
OSV records
ALPINE-CVE-2026-14457DEBIAN-CVE-2026-14457UBUNTU-CVE-2026-14457
Also known as
USN-8678-1

Charts affected

1,770 by stars
ChartLatestAffected imagesRadar Score
haproxy-ingresswenerme0.16.11 of 1See more

haproxy-ingress wenerme 0.16.1

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.16fd744191ef6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

794
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.32.5b5a407a27f62
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

9,183
prometheus-nats-exporterwenerme2.23.21 of 1See more

prometheus-nats-exporter wenerme 2.23.2

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.20.2c623b608e148
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
vaultwenerme0.34.12 of 2See more

vault wenerme 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
openssl@3.5.7-r0
3.5.8-r0
hashicorp/vault-k8s:1.7.655e27b080c9b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

549
victoria-metrics-k8s-stackwenerme0.92.12 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,910
wexa-studiowexa-studio1.2.04 of 15See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/postgres:15-alpinefe0737ba566a
openssl@3.5.7-r0
3.5.8-r0
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.8-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.8-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

15,044
whereaboutswhereaboutsVerified publisher0.3.01 of 1See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

618
wikiwikijs3.0.02 of 2See more

wiki wikijs 3.0.0

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
requarks/wiki:268f0d1848261
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

5,483
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,640
ovh-exporterwiremindVerified publisher1.2.01 of 1See more

ovh-exporter wiremind 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/wiremind/ovh-exporter:v2.3.1609f955bd977
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

209
wordpress-alpinewordpress-alpine1.5.182 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/memcached:1.6.45dc561d52bb8a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,063
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,676
wicekxxczakiVerified publisher0.1.2551 of 2See more

wicek xxczaki 0.1.255

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

1,304
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

899
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

478
homerzekker6Verified publisher8.35.01 of 1See more

homer zekker6 8.35.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
b4bz/homer:v26.08.3febc8967c9f7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
language-toolzekker6Verified publisher1.12.12 of 2See more

language-tool zekker6 1.12.1

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.8-r0
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,571
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,159
zoo-project-druzoo-projectOfficialVerified publisher0.10.43 of 6See more

zoo-project-dru zoo-project 0.10.4

3 of the 6 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.4-alpine3.249a8afca54e78
openssl@3.5.7-r0
3.5.8-r0
library/rabbitmq:4.3.2-alpine835cbc6fabce
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

7,929

Container images carrying it

1,648 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
folioci/mod-finance:latest14450bc15430
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-finance-storage:latest4bc4057abaea
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-gobi:latestc58c989dac44
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-inn-reach:latestcc8584e43382
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-inventory-update:latestba84812b4d58
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-invoice:latest45b7b13e81e1
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-invoice-storage:latest0bc720abcb78
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-login:latest88de493f86db
openssl@3.5.6-r0
3.5.8-r0
1
folioci/mod-login-saml:latest5f3358ccaa0f
openssl@3.5.6-r0
3.5.8-r0
1
folioci/mod-ncip:latest8ed83674352b
openssl@3.5.6-r0
3.5.8-r0
1
folioci/mod-oai-pmh:latest5cd5ef063f2a
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-orders:latestfc4528220fb8
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-orders-storage:latestceeaacc3bf16
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-organizations:latest7dc9ccf3d937
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-organizations-storage:lateste46892405fde
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-password-validator:latestb31d75f2bf7b
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-patron:latest5f213acfe2f8
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-patron-blocks:latestde7318069a67
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-permissions:latest5363e98c6299
openssl@3.5.6-r0
3.5.8-r0
1
folioci/mod-pubsub:latest0a4fa4ad5d72
openssl@3.5.6-r0
3.5.8-r0
1
folioci/mod-remote-storage:latest4f12177123dc
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-search:latest44d7ee9acdf6
openssl@3.5.1-r0
3.5.8-r0
1
folioci/mod-sender:latestd88a675dddf0
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-tags:latest6e8beeb70272
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-template-engine:latestd105c585da30
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-user-import:latest1807734472bd
openssl@3.5.6-r0
3.5.8-r0
1
folioci/mod-users:latest6f60033321b0
openssl@3.5.7-r0
3.5.8-r0
1
folioci/mod-users-bl:latest4e2d96c9340d
openssl@3.5.6-r0
3.5.8-r0
1
folioci/mod-z3950:latest2493041ce880
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
1
foomo/contentserver:1.21.0824f41463e9b
openssl@3.5.7-r0
3.5.8-r0
1
fosrl/newt:1.10.4ccd2b0e9a049
openssl@3.5.5-r0
3.5.8-r0
1
fosrl/pangolin:1.13.0c32ad797ab96
openssl@3.5.4-r0
3.5.8-r0
1
freshrss/freshrss:1.30.0-alpinefcff0b573f2b
openssl@3.5.7-r0
3.5.8-r0
1
fthomas/scala-steward:latest367afe974b7a
openssl@3.5.7-r0
3.5.8-r0
1
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
1
garethgeorge/backrest:v1.14.1b85297975428
openssl@3.5.7-r0
3.5.8-r0
1
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
openssl@3.5.4-r0
3.5.8-r0
1
gdrocha/togglr-frontend:1.0.0ffbc1571c234
openssl@3.5.4-r0
3.5.8-r0
1
geonode/geoserver_data:2.28.4-latest435cbc5f3f05
openssl@3.5.6-r0
3.5.8-r0
1
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
gethue/hue:4.10.05702b2c37ff9
nodejs@14.17.0-1nodesource1
no fix listed
1
getmeili/meilisearch:v1.53.18d6643d86d71
openssl@3.5.7-r0
3.5.8-r0
1
getmeili/meilisearch:v1.53.0a59e984fd90b
openssl@3.5.7-r0
3.5.8-r0
1
getmeili/meilisearch:v1.30.0f3ecbc8c5bfb
openssl@3.5.4-r0
3.5.8-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.