StackRadar

CVE-2026-14457

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,752
of 17,792 indexed, latest versions
Container images
1,619
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,752 of 17,792 indexed charts deploy, on 1,619 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,171
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2437
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
OSV records
ALPINE-CVE-2026-14457DEBIAN-CVE-2026-14457UBUNTU-CVE-2026-14457
Also known as
USN-8678-1

Charts affected

1,752 by stars
ChartLatestAffected imagesRadar Score
cap-captcha-serverf3k-techVerified publisher0.21.01 of 1See more

cap-captcha-server f3k-tech 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
tiago2/cap:2.159f5ae4e261e
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,686
taigafermosit0.0.112 of 7See more

taiga fermosit 0.0.11

2 of the 7 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
taigaio/taiga-protected:latestfd4568a97a59
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

8,541
ferriskeyferriskey0.8.01See more

ferriskey ferriskey 0.8.0

1 container image this version deploys carries CVE-2026-14457.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

—
contentserverfoomoVerified publisher0.7.01 of 1See more

contentserver foomo 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
foomo/contentserver:1.21.0824f41463e9b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

271
adguard-homegabe565Verified publisher0.3.251 of 2See more

adguard-home gabe565 0.3.25

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

964
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,139
garage-uigarage-uiVerified publisher0.12.11 of 1See more

garage-ui garage-ui 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
noooste/garage-ui:v0.12.10b68a9237da6
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

764
gateboardgateboard1.12.51 of 1See more

gateboard gateboard 1.12.5

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
udhos/gateboard:1.12.53acc0e7599bf
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,471
gateboard-discoverygateboard1.9.51 of 1See more

gateboard-discovery gateboard 1.9.5

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
udhos/gateboard-discovery:1.9.55567c9363c4c
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,197
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
nodejs@14.17.0-1nodesource1
no fix listed

Open the chart page →

22,792
gollumgeek-cookbookVerified publisher3.4.22 of 3See more

gollum geek-cookbook 3.4.2

2 of the 3 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
alpine/git:latest4f9488b7295b
openssl@3.5.7-r0
3.5.8-r0
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,631
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

4,913
geo-checkergeo-checkerVerified publisher5.0.01 of 1See more

geo-checker geo-checker 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ymuski/geo-checker:5.0.05ba7fd8c7bdc
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,456
greenkubegreenkubeVerified publisher0.3.01 of 3See more

greenkube greenkube 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/postgres:18-alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,826
haproxy-unified-gatewayhaproxytechVerified publisher1.2.01 of 1See more

haproxy-unified-gateway haproxytech 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
haproxytech/haproxy-unified-gateway:1.0.7b9bffe2d0fd1
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

681
cert-manager-webhook-hetznerhcloud0.9.01 of 1See more

cert-manager-webhook-hetzner hcloud 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
hetzner/cert-manager-webhook-hetzner:v0.9.0b64db89ba4c1
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

213
clickstackhdx-oss-v21.1.11 of 5See more

clickstack hdx-oss-v2 1.1.1

1 of the 5 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.7-alpine258d43821508
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

4,754
headscale-uiheadscale-uiVerified publisher0.2.91 of 1See more

headscale-ui headscale-ui 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,483
guacamolehelmforgeVerified publisher1.5.21 of 5See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

8,825
kafkahelmforgeVerified publisher1.3.141 of 1See more

kafka helmforge 1.3.14

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

550
hivemq-platform-operatorhivemqOfficialVerified publisher0.2.261 of 1See more

hivemq-platform-operator hivemq 0.2.26

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
hivemq/hivemq-platform-operator:2.2.2a919f990141b
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

925
homer-operatorhomer-operator0.3.42 of 2See more

homer-operator homer-operator 0.3.4

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
b4bz/homer:v26.08.3febc8967c9f7
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/arch-anes/homer-operator:0.3.404e3b7d1bfa6
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

298
refineryhoneycomb3.4.01 of 2See more

refinery honeycomb 3.4.0

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/redis:8.48df317692c59
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

988
cyberchefhv-helm-repo0.3.31 of 1See more

cyberchef hv-helm-repo 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/gchq/cyberchef:11.0.045082a0ac41d
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,110
osrmhypnoglowVerified publisher0.6.01 of 2See more

osrm hypnoglow 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/bash:5a19c811ee9e9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

467
backendikusi-bk-chart1.0.33 of 3See more

backend ikusi-bk-chart 1.0.3

3 of the 3 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
openssl@3.5.1-1
3.5.7-1~deb13u2
kyovint/kyoimgusers:1.0.080084149156e
openssl@3.5.1-1
3.5.7-1~deb13u2
library/postgres:159b1d34adbce1
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

6,009
ilum-coreilumOfficialVerified publisher6.7.31 of 5See more

ilum-core ilum 6.7.3

1 of the 5 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
alpine/kubectl:1.34.18413f8890d19
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

3,557
odooimioVerified publisher3.0.22 of 3See more

odoo imio 3.0.2

2 of the 3 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/nginx:1.29.8-alpine5616878291a2
openssl@3.5.6-r0
3.5.8-r0
library/postgres:17.10ebba4f4de37f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,091
immichimmich-helm0.3.02 of 4See more

immich immich-helm 0.3.0

2 of the 4 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
valkey/valkey:8.1.481db6d39e1bb
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2

Open the chart page →

15,793
invidiousinvidious2.3.01 of 4See more

invidious invidious 2.3.0

1 of the 4 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
quay.io/invidious/invidious:latest6f5c81c1e29d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

254
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2

Open the chart page →

11,842
tailscale-operatorjacobcolvinVerified publisher0.1.01 of 1See more

tailscale-operator jacobcolvin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
tailscale/k8s-operator:unstablecc9b8f6d9dea
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

242
jellyfinjellyfinVerified publisher0.3.301 of 1See more

jellyfin jellyfin 0.3.30

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

2,626
jessejesse-chartVerified publisher0.0.463 of 6See more

jesse jesse-chart 0.0.46

3 of the 6 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
alpine/git:latest6f3b5029566d
openssl@3.5.7-r0
3.5.8-r0
library/postgres:alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0
library/redis:alpinebecdda6c7f4b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,423
chronoreaperjfwenischVerified publisher1.1.101 of 1See more

chronoreaper jfwenisch 1.1.10

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/wenisch-tech/chronoreaper:1.1.10447726cec07b
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,022
git-configmap-syncjulb-meVerified publisher1.0.11 of 2See more

git-configmap-sync julb-me 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
alpine/git:latest4f9488b7295b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,619
ejabberdjuniorjpdj0.1.471 of 1See more

ejabberd juniorjpdj 0.1.47

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/containers/ejabberd-captcha:26.07-r110c57cbc7ad0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

277
junos-exporterjunos-exporter0.16.21 of 1See more

junos-exporter junos-exporter 0.16.2

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
czerwonk/junos_exporter:v0.16.2cb2279ae53d7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

203
jupyterhub-outpostjupyter-jscVerified publisher2.4.11 of 1See more

jupyterhub-outpost jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,679
bentopdfk8s-chartsVerified publisher2.0.01 of 1See more

bentopdf k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/alam00000/bentopdf-simple:2.8.5268f3e4a1aee
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

351
qbittorrentk8s-chartsVerified publisher3.1.01 of 2See more

qbittorrent k8s-charts 3.1.0

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,271
k8s-grafana-stackk8s-grafana-stackVerified publisher0.2.323 of 17See more

k8s-grafana-stack k8s-grafana-stack 0.2.32

3 of the 17 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
openssl@3.5.4-r0
3.5.8-r0
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
openssl@3.5.6-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

15,535
radarrk8s-home-lab-repo17.6.11 of 1See more

radarr k8s-home-lab-repo 17.6.1

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/home-operations/radarr:6.2.1a566e7d364b9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

752
sonarrk8s-home-lab-repo17.3.11 of 1See more

sonarr k8s-home-lab-repo 17.3.1

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.171989718e9fce
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

765
tautullik8s-home-lab-repo12.3.01 of 1See more

tautulli k8s-home-lab-repo 12.3.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/home-operations/tautulli:2.17.12183820d45a1
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,130
kangalkangal2.3.11 of 2See more

kangal kangal 2.3.1

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:latest9ae209e3791e
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

371
kikplatekikplateVerified publisher0.22.02 of 3See more

kikplate kikplate 0.22.0

2 of the 3 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/kikplate/kikplate-web:main34bbb61e8e42
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,794
netbirdkitstream-netbird0.7.01 of 3See more

netbird kitstream-netbird 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.91.0aae926912ca4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,342
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
glpi/glpi:latest4b681082a79e
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,929
powerdns-recursorklicktippVerified publisher0.4.101 of 1See more

powerdns-recursor klicktipp 0.4.10

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
powerdns/pdns-recursor-54:5.4.533aadc74a8d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,906

Container images carrying it

1,619 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/shesselink81/hesselinkme-nginx:v1.31.114f43beb13fc2
openssl@3.5.7-r0
3.5.8-r0
1
quay.io/shivering-isles/postfix:3.11.70f40af2070c8
openssl@3.5.7-r0
3.5.8-r0
1
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
openssl@3.5.1-r0
3.5.8-r0
1
quay.io/zncdatadev/kafka-operator:0.4.00a0b4c39c1ba
openssl@3.5.7-r0
3.5.8-r0
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
registry.gitlab.com/evolves-fr/s3-browser:0.4.1c350c941fe7b
openssl@3.5.6-r0
3.5.8-r0
1
registry.gitlab.com/gitlab-ci-utils/curl-jq:latestb564745b6cb0
openssl@3.5.7-r1
3.5.8-r0
1
registry.gitlab.com/gitlab-org/ci-cd/gitlab-runner-pod-cleanup:latest4369f3ba1d9a
openssl@3.5.6-r0
3.5.8-r0
1
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
openssl@3.5.5-r0
3.5.8-r0
1
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
openssl@3.5.5-r0
3.5.8-r0
1
registry.gitlab.com/technostructures/posca/posca:latesta693021686ca
openssl@3.5.6-r0
3.5.8-r0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
openssl@3.5.7-r0
3.5.8-r0
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
openssl@3.5.1-1
3.5.7-1~deb13u2
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
openssl@3.5.2-r0
3.5.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
openssl@3.5.1-r0
3.5.8-r0
1
registry.k8s.io/kwok/kwok:v0.8.06d25aa8fbdfe
openssl@3.5.7-r0
3.5.8-r0
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
openssl@3.5.4-r0
3.5.8-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.