CVE-2026-14457

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.010; 60th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,752; of 17,792 indexed, latest versions
Container images: 1,619; deployed by those charts
Fix available: 2 of 3; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,752 of 17,792 indexed charts deploy, on 1,619 images.

Affected package	Affected versions	Fixed in	Images
opensslapk	3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more	3.5.8-r0	1,171
openssldeb	3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more	3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2	437
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 more	no fix listed	11

OSV records: ALPINE-CVE-2026-14457 DEBIAN-CVE-2026-14457 UBUNTU-CVE-2026-14457
Also known as: USN-8678-1

Charts affected

1,752 by stars

Chart

Latest

Affected images

Radar Score

zipkinzipkin

0.5.0

1 of 1 See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-slim :3.6.0	a69e1057df36	openssl@3.5.5-r0	3.5.8-r0

Open the chart page →

1,159

zoo-project-druzoo-project

0.10.4

3 of 6 See more

zoo-project-dru zoo-project 0.10.4

3 of the 6 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
curlimages/curl :8.21.0	7c12af72ceb3	openssl@3.5.7-r0	3.5.8-r0
library/postgres :18.4-alpine3.24	9a8afca54e78	openssl@3.5.7-r0	3.5.8-r0
library/rabbitmq :4.3.2-alpine	835cbc6fabce	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

7,929

Container images carrying it

1,619 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
cloudflare/cloudflared :2026.6.1	6d91c121b803	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
curlimages/curl :8.15.0	4026b29997dc	openssl@3.5.1-r0	3.5.8-r0	2
curlimages/curl :8.20.0	b3f1fb2a51d9	openssl@3.5.6-r0	3.5.8-r0	2
dunglas/mercure :v0 :v0.24.2	916834e49961	openssl@3.5.6-r0	3.5.8-r0	2
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	openssl@3.5.5-1~deb13u1	3.5.7-1~deb13u2	2
fireflyiii/data-importer :version-2.2.3	ab52bf932546	openssl@3.5.5-1~deb13u1	3.5.7-1~deb13u2	2
gisaia/arlas-wui :28.0.3	b83b3e067173	openssl@3.5.7-r0	3.5.8-r0	2
gisaia/arlas-wui-builder :28.0.1	a35977a5bb7d	openssl@3.5.7-r0	3.5.8-r0	2
gisaia/arlas-wui-hub :28.0.2	1a3cc43d822f	openssl@3.5.6-r0	3.5.8-r0	2
gotenberg/gotenberg :8.36.0	87c16b9f3642	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
gotson/komga :1.26.3	6c2a967bbe9a	openssl@3.5.5-1ubuntu3.3	3.5.5-1ubuntu3.4	2
grafana/grafana :12.3.1	2175aaa91c96	openssl@3.5.4-r0	3.5.8-r0	2
grafana/grafana :12.3.3	9e1e77ade304	openssl@3.5.5-r0	3.5.8-r0	2
grafana/grafana :12.4.1	e932bd6ed0e0	openssl@3.5.5-r0	3.5.8-r0	2
hashicorp/vault :2.0.4	5be49781ecf7	openssl@3.5.7-r0	3.5.8-r0	2
hashicorp/vault-k8s :1.7.6	55e27b080c9b	openssl@3.5.7-r0	3.5.8-r0	2
helmforge/kubectl :1.35.3	c3f97e954c47	openssl@3.5.5-r0	3.5.8-r0	2
hetznercloud/hcloud-cloud-controller-manager :v1.37.0	c139e7220dbc	openssl@3.5.7-r0	3.5.8-r0	2
ilum/api :6.7.3	624fd09528c8	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
ilum/ui :6.7.3	998937726679	openssl@3.5.5-r0	3.5.8-r0	2
jenkins/jenkins :2.541.3-jdk21	c4098086090c	openssl@3.5.5-1~deb13u1	3.5.7-1~deb13u2	2
jhaals/yopass :14.9.0	934e4f2c016f	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
jupyterhub/configurable-http-proxy :5.3.0 :latest	69a7170eeeda	openssl@3.5.7-r0	3.5.8-r0	2
kiwigrid/k8s-sidecar :1.30.9	8c06e1ba643a	openssl@3.5.1-r0	3.5.8-r0	2
kubeshop/testkube-api-server :2.13.2	44166c28422f	openssl@3.5.7-r0	3.5.8-r0	2
kutt/kutt :latest :v3.2.6	fa3d24a89b04	openssl@3.5.7-r0	3.5.8-r0	2
library/alpine :3.23	fd791d74b689	openssl@3.5.7-r0	3.5.8-r0	2
library/bash :5 :latest	a19c811ee9e9	openssl@3.5.7-r0	3.5.8-r0	2
library/buildpack-deps :curl	04907bdd423b	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
library/caddy :2.11.4-alpine :2-alpine	5f5c8640aae0	openssl@3.5.7-r0	3.5.8-r0	2
library/caddy :latest	df7f1c2fb114	openssl@3.5.7-r0	3.5.8-r0	2
library/debian :stable-slim	04634311a8d5	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
library/eclipse-mosquitto :2 :2.1.2-alpine	6f8d8a947c50	openssl@3.5.7-r0	3.5.8-r0	2
library/nginx :latest	6e23479198b9	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u2	2
library/nginx :1.29.4	9dd288848f44	openssl@3.5.4-1~deb13u2	3.5.7-1~deb13u2	2
library/node :24.21.0-alpine3.23	159fe6464903	openssl@3.5.7-r0	3.5.8-r0	2
library/node :24.21.0-alpine	be80f76cf40e	openssl@3.5.7-r0	3.5.8-r0	2
library/postgres :18.1	1090bc3a8ccf	openssl@3.5.4-1~deb13u2	3.5.7-1~deb13u2	2
library/postgres :18.0	6f3e42ad37de	openssl@3.5.1-1+deb13u1	3.5.7-1~deb13u2	2
library/postgres :13-alpine	fb9065b6e3e2	openssl@3.5.4-r0	3.5.8-r0	2
library/redis :8.6.6-alpine	75934ddb37bf	openssl@3.5.7-r0	3.5.8-r0	2
library/redmine :6.1.3-trixie	f474a901faec	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
library/telegraf :1.40-alpine	e2f55b0afaa3	openssl@3.5.7-r0	3.5.8-r0	2
library/traefik :v3.7.1	6b9cbca6fac4	openssl@3.5.6-r0	3.5.8-r0	2
library/traefik :v3.7.13	f86a2cab1b5c	openssl@3.5.7-r0	3.5.8-r0	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	openssl@3.5.4-1~deb13u1	3.5.7-1~deb13u2	2
linuxserver/ddclient :4.0.0	6468911d00b1	openssl@3.5.7-r0	3.5.8-r0	2
listmonk/listmonk :latest :v6.2.0	f535d59e1499	openssl@3.5.7-r0	3.5.8-r0	2
mesosphere/kubectl :v1.35.0-alpine	ea01a9387771	openssl@3.5.4-r0	3.5.8-r0	2
metabase/metabase :v0.61.1.x	9491ed11c901	openssl@3.5.6-r0	3.5.8-r0	2