CVE-2026-14457

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.010; 61st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,751; of 17,803 indexed, latest versions
Container images: 1,624; deployed by those charts
Fix available: 2 of 3; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,751 of 17,803 indexed charts deploy, on 1,624 images.

Affected package	Affected versions	Fixed in	Images
opensslapk	3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more	3.5.8-r0	1,176
openssldeb	3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more	3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2	437
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 more	no fix listed	11

OSV records: ALPINE-CVE-2026-14457 DEBIAN-CVE-2026-14457 UBUNTU-CVE-2026-14457
Also known as: USN-8678-1

Charts affected

1,751 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

3 of 6 See more

zoo-project-dru zoo-project 0.10.4

3 of the 6 container images this version deploys carry CVE-2026-14457.

Container image	Digest	Package	Fixed in
curlimages/curl :8.21.0	7c12af72ceb3	openssl@3.5.7-r0	3.5.8-r0
library/postgres :18.4-alpine3.24	9a8afca54e78	openssl@3.5.7-r0	3.5.8-r0
library/rabbitmq :4.3.2-alpine	835cbc6fabce	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

7,949

Container images carrying it

1,624 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/promhippie/scw-exporter :2.15.1	1952125f8423	openssl@3.5.7-r0	3.5.8-r0	1
quay.io/reactiveops/rbac-manager :v1.9.5	87e3f461446f	openssl@3.5.4-r0	3.5.8-r0	1
quay.io/seamware/did-helper :0.6.0	799c5f566952	openssl@3.5.7-r0	3.5.8-r0	1
quay.io/seamware/fdsc-dashboard :0.6.0	f7706c316c5a	openssl@3.5.6-r0	3.5.8-r0	1
quay.io/shesselink81/anna-nginx :v1.31.11	20c19fa8a918	openssl@3.5.7-r0	3.5.8-r0	1
quay.io/shesselink81/hesselinkme-nginx :v1.31.11	4f43beb13fc2	openssl@3.5.7-r0	3.5.8-r0	1
quay.io/shivering-isles/postfix :3.11.7	0f40af2070c8	openssl@3.5.7-r0	3.5.8-r0	1
quay.io/wraft/wraft-frontend :latest	f1bbbd5e9bb9	openssl@3.5.1-r0	3.5.8-r0	1
quay.io/zncdatadev/kafka-operator :0.4.0	0a0b4c39c1ba	openssl@3.5.7-r0	3.5.8-r0	1
registry.gitlab.com/dyff/workflows-aggregator :0.16.9	b7984253b128	openssl@3.5.5-1ubuntu3.3	3.5.5-1ubuntu3.4	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	openssl@3.5.5-1~deb13u1	3.5.7-1~deb13u2	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user :1.0.31	d8a9cd4e1ae3	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	1
registry.gitlab.com/evolves-fr/s3-browser :0.4.1	c350c941fe7b	openssl@3.5.6-r0	3.5.8-r0	1
registry.gitlab.com/gitlab-ci-utils/curl-jq :latest	b564745b6cb0	openssl@3.5.7-r1	3.5.8-r0	1
registry.gitlab.com/gitlab-org/ci-cd/gitlab-runner-pod-cleanup :latest	4369f3ba1d9a	openssl@3.5.6-r0	3.5.8-r0	1
registry.gitlab.com/shortlink-org/shortlink/bff :latest	f2194e526915	openssl@3.5.5-r0	3.5.8-r0	1
registry.gitlab.com/shortlink-org/shortlink/link :latest	86d87291ffd4	openssl@3.5.5-r0	3.5.8-r0	1
registry.gitlab.com/technostructures/posca/posca :latest	a693021686ca	openssl@3.5.6-r0	3.5.8-r0	1
registry.gitlab.com/xrow-public/helm-smtp/postfix :1.3.3	7eea4f0883dd	openssl@3.5.7-r0	3.5.8-r0	1
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	openssl@3.5.1-1	3.5.7-1~deb13u2	1
registry.k8s.io/ingress-nginx/controller :v1.13.2	1f7eaeb01933	openssl@3.5.2-r0	3.5.8-r0	1
registry.k8s.io/ingress-nginx/controller :v1.13.1	37e489b22ac7	openssl@3.5.1-r0	3.5.8-r0	1
registry.k8s.io/kwok/kwok :v0.8.0	6d25aa8fbdfe	openssl@3.5.7-r0	3.5.8-r0	1
registry.k8s.io/provider-os/manila-csi-plugin :v1.36.0	190976e2e2fe	openssl@3.5.4-r0	3.5.8-r0	1