StackRadar

CVE-2026-14457

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
61st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,751
of 17,803 indexed, latest versions
Container images
1,624
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,751 of 17,803 indexed charts deploy, on 1,624 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,176
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2437
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
OSV records
ALPINE-CVE-2026-14457DEBIAN-CVE-2026-14457UBUNTU-CVE-2026-14457
Also known as
USN-8678-1

Charts affected

1,751 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.43 of 6See more

zoo-project-dru zoo-project 0.10.4

3 of the 6 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.4-alpine3.249a8afca54e78
openssl@3.5.7-r0
3.5.8-r0
library/rabbitmq:4.3.2-alpine835cbc6fabce
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

7,949

Container images carrying it

1,624 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/sergelogvinov/proxmox-csi-node:v0.20.0e0151137a1c5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/sergelogvinov/tabix:22.05.17a6e3e996a4ae
openssl@3.5.0-r0
3.5.8-r0
1
ghcr.io/sergelogvinov/tailscale:1.102.3d91287e83d1a
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/shuguet/pacman:latesta0ec71732c3c
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/sikalabs/hello-world-server:latestcf8538bf6489
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/silverbulletmd/silverbullet:2.10.027b5724cc367
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/solucteam/outscale-s3-explorer:v1.0.09665c3e71889
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins:19f19457ae7cec86457b0411543a3cf21dd9f95a8edc39be1e22
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/stefanprodan/podinfo:6.15.0ec73780a8425
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/subshell/group-challenge:0.14.19a64f1db04da
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/techwolf12/pocketbase:0.29.3106099641679
openssl@3.5.1-r0
3.5.8-r0
1
ghcr.io/telepresenceio/tel2:2.31.26f1d705594ba
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/teq-cloud/iteq-api:0.3.3-beta0d9587179ed5
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/teq-cloud/iteq-web:0.3.3-beta0acbe2f2e1ea
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/terminus-io/enforcer:v1.1.0f21b905610d6
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/theconnman/docker-hub-rss:0.6.238eba84b2be8
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/traefik/hub-manager:v0.45.1d1cff2560c67
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/trow-registry/trow:0.10.075b7d2dcdb91
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/umami-software/umami:3.0.328f263fe06f7
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/umami-software/umami:postgresql-v2.20.173ca19b41745
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/umami-software/umami:3.3.1fa32d116cf20
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/upcloudltd/upcloud-csi5af91c663788
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/upcloud-tools/upcloud-csi:v3.5.0a7ed150ed7e1
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4
1
ghcr.io/valkey-io/valkey:9.0.4-alpine3.23107b203169a2
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/vinny1892/octantis:latest45459c0910fc
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/voidmind-io/voidllm:0.0.250df11dd20c28
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/vvanouytsel/jetspotter:1.48.1ec0e17a94f61
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/wachd/wachd:0.4.1805b05c56da94
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/wasilak/kube-ingress-dash:0.3.1ff55992f905c
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/wenisch-tech/chronoreaper:1.1.10447726cec07b
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/wgbh-mla/dream-aapb:main288a4774aa90
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
openssl@3.5.0-r0
3.5.8-r0
1
ghcr.io/wiremind/ovh-exporter:v2.3.1609f955bd977
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.5282f840612d9
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/xmv-solutions-gmbh/strapi:latesta288b4571142
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/zalando/postgres-operator:v2.0.275f69eac43ac
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/zalando/skipper:v0.27.883a357a2a4bef
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/zazuko/fuseki-geosparql:v5.2.06fbd8983f750
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/zeroclaw-labs/zeroclaw:v0.1.7497893753e16
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/zokeber/velero-notifications:0.0.176d84f6c4ce20
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.29a32b89c0c19
openssl@3.5.0-r0
3.5.8-r0
1
mcr.microsoft.com/azure-storage/azurite:latest830430c1da1a
openssl@3.5.7-r0
3.5.8-r0
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.