CVE-2026-14457

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.010; 61st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,769; of 17,792 indexed, latest versions
Container images: 1,643; deployed by those charts
Fix available: 2 of 3; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,769 of 17,792 indexed charts deploy, on 1,643 images.

Affected package	Affected versions	Fixed in	Images
opensslapk	3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more	3.5.8-r0	1,190
openssldeb	3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more	3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2	442
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 more	no fix listed	11

OSV records: ALPINE-CVE-2026-14457 DEBIAN-CVE-2026-14457 UBUNTU-CVE-2026-14457
Also known as: USN-8678-1

Charts affected

1,769 by stars

Chart

Latest

Affected images

Radar Score

juicefs-csi-driverwenerme

0.33.0

1 of 5 See more

juicefs-csi-driver wenerme 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
juicedata/csi-dashboard :v0.33.0	5e5edb62a010	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

8,944

prometheus-nats-exporterwenerme

2.23.2

1 of 1 See more

prometheus-nats-exporter wenerme 2.23.2

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
natsio/prometheus-nats-exporter :0.20.2	c623b608e148	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

165

vaultwenerme

0.34.1

2 of 2 See more

vault wenerme 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
hashicorp/vault :2.0.4	5be49781ecf7	openssl@3.5.7-r0	3.5.8-r0
hashicorp/vault-k8s :1.7.6	55e27b080c9b	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

549

victoria-metrics-k8s-stackwenerme

0.92.1

2 of 7 See more

victoria-metrics-k8s-stack wenerme 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.1	7cb8c64c4d57	openssl@3.5.7-r0	3.5.8-r0
quay.io/kiwigrid/k8s-sidecar :2.8.1	abb55b2165c6	openssl@3.5.6-r0	3.5.8-r0

Open the chart page →

1,915

wexa-studiowexa-studio

1.2.0

4 of 15 See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
library/postgres :15-alpine	fe0737ba566a	openssl@3.5.7-r0	3.5.8-r0
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	openssl@3.5.0-r0	3.5.8-r0
temporalio/server :1.29.1	c1e3326b2ce1	openssl@3.5.0-r0	3.5.8-r0
temporalio/ui :2.44.0	0b36e00aad30	openssl@3.5.4-r0	3.5.8-r0

Open the chart page →

15,056

whereaboutswhereabouts

0.3.0

1 of 1 See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/whereabouts :v0.9.4	f279fd7dc112	openssl@3.5.6-r0	3.5.8-r0

Open the chart page →

618

wikiwikijs

3.0.0

2 of 2 See more

wiki wikijs 3.0.0

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
library/postgres :18	4ef4dbc939d6	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
requarks/wiki :2	68f0d1848261	openssl@3.5.6-r0	3.5.8-r0

Open the chart page →

5,497

metabasewiremind

2.27.5-wiremind0

1 of 1 See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.61.1.x	9491ed11c901	openssl@3.5.6-r0	3.5.8-r0

Open the chart page →

1,635

ovh-exporterwiremind

1.2.0

1 of 1 See more

ovh-exporter wiremind 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/ovh-exporter :v2.3.1	609f955bd977	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

209

wordpress-alpinewordpress-alpine

1.5.18

2 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
library/memcached :1.6.45	dc561d52bb8a	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
ghcr.io/shesselink81/nginx-alpine :7.1.0.0	9783481cad2a	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

4,080

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

5,713

wicekxxczaki

0.1.257

1 of 2 See more

wicek xxczaki 0.1.257

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
library/alpine :3	28bd5fe8b56d	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

149

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	openssl@3.5.6-1~deb13u1	3.5.7-1~deb13u2

Open the chart page →

1,311

prometheus-monitoring-stackyotron-helm-charts

1.2.0

1 of 3 See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	f772d434e8fa	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

899

endlessh-gozekker6

0.4.0

1 of 1 See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
ghcr.io/shizunge/endlessh-go :2026.0730.0	8826dad32623	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

485

homerzekker6

8.35.0

1 of 1 See more

homer zekker6 8.35.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
b4bz/homer :v26.08.3	febc8967c9f7	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

149

language-toolzekker6

1.12.1

2 of 2 See more

language-tool zekker6 1.12.1

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	openssl@3.5.5-r0	3.5.8-r0
library/alpine :3	28bd5fe8b56d	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

1,565

zipkinzipkin

0.5.0

1 of 1 See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-slim :3.6.0	a69e1057df36	openssl@3.5.5-r0	3.5.8-r0

Open the chart page →

1,160

zoo-project-druzoo-project

0.10.4

3 of 6 See more

zoo-project-dru zoo-project 0.10.4

3 of the 6 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
curlimages/curl :8.21.0	7c12af72ceb3	openssl@3.5.7-r0	3.5.8-r0
library/postgres :18.4-alpine3.24	9a8afca54e78	openssl@3.5.7-r0	3.5.8-r0
library/rabbitmq :4.3.2-alpine	835cbc6fabce	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

7,936

Container images carrying it

1,643 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
yooooomi/your_spotify_server :1.20.0	624ea009f2ef	openssl@3.5.6-r0	3.5.8-r0	1
youssef11gaber10/flask-service :latest	9c727fcfde76	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u2	1
youssef11gaber10/react-service-k8s :latest	be23f058edb6	openssl@3.5.6-r0	3.5.8-r0	1
yukimochi/activity-relay :v2.0.11	5798afb69216	openssl@3.5.7-r0	3.5.8-r0	1
zachomedia/cert-manager-webhook-pdns :v2.5.5	4940e227a39b	openssl@3.5.5-r0	3.5.8-r0	1
zbalogh/reservation-angular-ui :1.0.9	5eb19e460b3c	openssl@3.5.1-r0	3.5.8-r0	1
zer0tonin/mikochi :1.11.0	09872bae1554	openssl@3.5.5-1ubuntu3.2	3.5.5-1ubuntu3.4	1
zimengxiong/excalidash-backend :0.4.27	1273af713c91	openssl@3.5.5-r0	3.5.8-r0	1
zimengxiong/excalidash-backend :0.6.0	cbdab75f31b2	openssl@3.5.7-r0	3.5.8-r0	1
zimengxiong/excalidash-frontend :0.4.27	242629350b06	openssl@3.5.5-r0	3.5.8-r0	1
zimengxiong/excalidash-frontend :0.6.0	4ec5b20c0303	openssl@3.5.7-r0	3.5.8-r0	1
zwavejs/zwave-js-ui :11.22.3	14d018bb689e	openssl@3.5.7-r0	3.5.8-r0	1
gcr.io/datadoghq/csi-driver :1.4.0	86c713de81d9	openssl@3.5.7-r0	3.5.8-r0	1
gcr.io/spotinst-artifacts/spot-ocean-metric-exporter :1.0.5	ae57b62291aa	openssl@3.5.1-r0	3.5.8-r0	1
ghcr.io/291-group/lan-orangutan :3.3.8	86b55c80eeb1	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/aardbol/opencode-server :v1.18.23-alpine	7930061993f7	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/absmach/magistrala/ui-backend :latest	4adf360dbf1e	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/advplyr/audiobookshelf :2.32.1	a52dc5db694a	openssl@3.5.4-r0	3.5.8-r0	1
ghcr.io/akpw/mktxp :latest	2b3ccb1c2bd9	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/akpw/mktxp :1.2.17	bd6f22f7db0a	openssl@3.5.5-r0	3.5.8-r0	1
ghcr.io/akpw/mktxp :1.2.20	f894f2457670	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/alam00000/bentopdf-simple :2.8.5	268f3e4a1aee	openssl@3.5.6-r0	3.5.8-r0	1
ghcr.io/alam00000/bentopdf-simple :2.8.4	2bae644d2735	openssl@3.5.6-r0	3.5.8-r0	1
ghcr.io/alekc/samba-docker :v1.1.0	cc9a028d9c43	openssl@3.5.4-r0	3.5.8-r0	1
ghcr.io/analogj/scrutiny :v0.9.2-web	71be54e99608	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u2	1
ghcr.io/appscode/ace :v0.2.0	b8e03da90e70	openssl@3.5.6-r0	3.5.8-r0	1
ghcr.io/appscode/acerproxy :v0.2.0	21de3771fdd5	openssl@3.5.4-r0	3.5.8-r0	1
ghcr.io/appscode/aceshifter :v0.0.3	e5f5c254a55a	openssl@3.5.5-r0	3.5.8-r0	1
ghcr.io/appscode/aws-credential-manager :v0.1.0	0511bbe501c3	openssl@3.5.6-r0	3.5.8-r0	1
ghcr.io/appscode/azure-credential-manager :v0.1.0	f5c797f7fbe7	openssl@3.5.6-r0	3.5.8-r0	1
ghcr.io/appscode/catalog-manager :v0.13.0	fc336c5b9655	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/appscode/cattleset :v0.0.1	45554a03e448	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/appscode/cert-manager-webhook-ace :v0.0.2	dc6b5fdcec06	openssl@3.5.4-r0	3.5.8-r0	1
ghcr.io/appscode/cluster-presets :v0.0.12	8fbdd2479645	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/appscode/cluster-ui :2.4.0	f527d10769ac	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/appscode/external-dns-operator :v0.4.0	5605f97e636d	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/appscode/falco-ui-server :v0.0.6	6ec488d89b56	openssl@3.5.4-r0	3.5.8-r0	1
ghcr.io/appscode/gcp-credential-manager :v0.1.0	b58345fe8209	openssl@3.5.5-r0	3.5.8-r0	1
ghcr.io/appscode/gotenberg :8.25	f9104080d9a7	openssl@3.5.4-1~deb13u1	3.5.7-1~deb13u2	1
ghcr.io/appscode/inbox-agent :v0.0.6	6b99ee9feece	openssl@3.5.6-r0	3.5.8-r0	1
ghcr.io/appscode/offline-license-server :v0.0.76	e4b66308d8f6	openssl@3.5.4-r0	3.5.8-r0	1
ghcr.io/appscode/operator-shard-manager :v0.0.6	4a16c6ccecb8	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/appscode/outboxsyncer :v0.5.0	150baab6115d	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/appscode/pgoutbox :v0.0.4	a96e06ec5e9f	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/appscode/platform-ui :2.4.0	668ee2682eaf	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/appscode/scanner :v0.0.21	16907aae5de1	openssl@3.5.4-r0	3.5.8-r0	1
ghcr.io/appscode/secrets-store-csi-driver-provider-virtual-secrets :v0.2.0	7afb394f9f97	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/appscode/sidekick :v0.0.16	d8d2a3c22ee7	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/appscode/storage-metrics-server :v0.1.0	9cb4acb742a9	openssl@3.5.7-r0	3.5.8-r0	1
ghcr.io/appscode/taskqueue :v0.0.3	6877c958a3c6	openssl@3.5.4-r0	3.5.8-r0	1