StackRadar

CVE-2026-14457

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
60th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,770
of 17,790 indexed, latest versions
Container images
1,648
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,770 of 17,790 indexed charts deploy, on 1,648 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,190
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2447
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
OSV records
ALPINE-CVE-2026-14457DEBIAN-CVE-2026-14457UBUNTU-CVE-2026-14457
Also known as
USN-8678-1

Charts affected

1,770 by stars
ChartLatestAffected imagesRadar Score
haproxy-ingresswenerme0.16.11 of 1See more

haproxy-ingress wenerme 0.16.1

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.16fd744191ef6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

794
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.32.5b5a407a27f62
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

9,183
prometheus-nats-exporterwenerme2.23.21 of 1See more

prometheus-nats-exporter wenerme 2.23.2

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.20.2c623b608e148
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
vaultwenerme0.34.12 of 2See more

vault wenerme 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
openssl@3.5.7-r0
3.5.8-r0
hashicorp/vault-k8s:1.7.655e27b080c9b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

549
victoria-metrics-k8s-stackwenerme0.92.12 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,910
wexa-studiowexa-studio1.2.04 of 15See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/postgres:15-alpinefe0737ba566a
openssl@3.5.7-r0
3.5.8-r0
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.8-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.8-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

15,044
whereaboutswhereaboutsVerified publisher0.3.01 of 1See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

618
wikiwikijs3.0.02 of 2See more

wiki wikijs 3.0.0

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
requarks/wiki:268f0d1848261
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

5,483
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,640
ovh-exporterwiremindVerified publisher1.2.01 of 1See more

ovh-exporter wiremind 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/wiremind/ovh-exporter:v2.3.1609f955bd977
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

209
wordpress-alpinewordpress-alpine1.5.182 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/memcached:1.6.45dc561d52bb8a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,063
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,676
wicekxxczakiVerified publisher0.1.2551 of 2See more

wicek xxczaki 0.1.255

1 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

1,304
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

899
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

478
homerzekker6Verified publisher8.35.01 of 1See more

homer zekker6 8.35.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
b4bz/homer:v26.08.3febc8967c9f7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
language-toolzekker6Verified publisher1.12.12 of 2See more

language-tool zekker6 1.12.1

2 of the 2 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.8-r0
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,571
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,159
zoo-project-druzoo-projectOfficialVerified publisher0.10.43 of 6See more

zoo-project-dru zoo-project 0.10.4

3 of the 6 container images this version deploys carry CVE-2026-14457.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.4-alpine3.249a8afca54e78
openssl@3.5.7-r0
3.5.8-r0
library/rabbitmq:4.3.2-alpine835cbc6fabce
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

7,929

Container images carrying it

1,648 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
dpage/pgadmin4:9.11.050700ac17936
openssl@3.5.4-r0
3.5.8-r0
1
dragonflyoss/scheduler:v2.5.2-rc.06d710dc2bae0
openssl@3.5.6-r0
3.5.8-r0
1
drumsergio/duplicacy-container:0.1.0dd3ee9703969
openssl@3.5.5-r0
3.5.8-r0
1
drumsergio/duplicacy-exporter:0.3.4ca3476077215
openssl@3.5.5-r0
3.5.8-r0
1
drumsergio/lynxprompt:2.0.75c6afb6679301
openssl@3.5.6-r0
3.5.8-r0
1
drumsergio/pumperly:1.4.885bbc3915e9e
openssl@3.5.5-r0
3.5.8-r0
1
dunglas/mercure:v0.24.080fcb704a741
openssl@3.5.6-r0
3.5.8-r0
1
dvdlevanon/kubernetes-database-scaler:v0.0.361e79c1643fe4
openssl@3.5.0-r0
3.5.8-r0
1
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
openssl@3.5.5-r0
3.5.8-r0
1
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
1
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
openssl@3.5.5-r0
3.5.8-r0
1
eclipseaerios/management-portal-frontend:1.2.23a8e4cf60629
openssl@3.5.6-r0
3.5.8-r0
1
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
1
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2
1
edoburu/pgbouncer:latest4c1ca296ef52
openssl@3.5.6-r0
3.5.8-r0
1
eftechcombr/glpi:php-fpm-12.0.0-rc1f3d0ed01709e
openssl@3.5.4-r0
3.5.8-r0
1
elautoestopista/aeneabot:4.2.1125ba620d528
openssl@3.5.4-r0
3.5.8-r0
1
electriccoinco/lightwalletd:v0.5.42ae3a551e111
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
emirozbir/dashdns-admission-webhook:v2.0.56801ba2a3fc3
openssl@3.5.5-r0
3.5.8-r0
1
emqx/emqx:5.8.935b46f7aa7a0
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
1
epam/ai-dial-admin-frontend:0.20.021d91ad74755
openssl@3.5.7-r0
3.5.8-r0
1
epam/ai-dial-chat-themes:0.19.131af7cf96ee1
openssl@3.5.7-r0
3.5.8-r0
1
epamedp/edp-gerrit:3.14.249e8fe9c4855
openssl@3.5.7-r0
3.5.8-r0
1
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
openssl@3.5.1-1
3.5.7-1~deb13u2
1
erenozcan17/go_backend:v4.250b4f23422b6
openssl@3.5.1-r0
3.5.8-r0
1
erenozcan17/react_frontend:v4.56e1b14973f9b
openssl@3.5.1-r0
3.5.8-r0
1
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.8-r0
1
erudikaltd/para:latest_stable235e0bc53da2
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
erudikaltd/scoold:1.66.0949c56b57e8f
openssl@3.5.4-r0
3.5.8-r0
1
escaping/core-keeper-dedicated:latest87fa79255962
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
esphome/esphome:2026.7.44866347cb5b4
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
esphome/esphome:2026.8.285abea33854b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
espocrm/espocrm:9.3.101b5a24504ed9
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
esteban1930/frontend-1:1.8.0f9078279632c
openssl@3.5.1-r0
3.5.8-r0
1
ethereum/client-go:v1.16.532b878e4144a
openssl@3.5.4-r0
3.5.8-r0
1
ethereum/client-go:latest37575ec10fbc
openssl@3.5.7-r0
3.5.8-r0
1
ethereum/client-go:stableb8ab3451a117
openssl@3.5.7-r0
3.5.8-r0
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
nodejs@4.2.6~dfsg-1ubuntu4.1
no fix listed
1
etherpad/etherpad:latest6020e7b57f4b
openssl@3.5.7-r0
3.5.8-r0
1
etherpad/etherpad:2.7.2b723fe5f2594
openssl@3.5.6-r0
3.5.8-r0
1
ethpandaops/assertoor:latest1efa2fba6711
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ethpandaops/cbt-api:latest9dc0b50e6c27
openssl@3.5.7-r0
3.5.8-r0
1
ethpandaops/contributoor:latest1edd4074fd79
openssl@3.5.6-r0
3.5.8-r0
1
ethpandaops/ethereum-address-metrics-exporter:latest431cd3790ed2
openssl@3.5.6-r0
3.5.8-r0
1
ethpandaops/execution-processor:latest5c4832e9588f
openssl@3.5.7-r0
3.5.8-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.