StackRadar

CVE-2026-18798

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,769
of 17,792 indexed, latest versions
Container images
1,643
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,769 of 17,792 indexed charts deploy, on 1,643 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,190
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2442
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
OSV records
ALPINE-CVE-2026-18798DEBIAN-CVE-2026-18798UBUNTU-CVE-2026-18798
Also known as
USN-8678-1

Charts affected

1,769 by stars
ChartLatestAffected imagesRadar Score
juicefs-csi-driverwenerme0.33.01 of 5See more

juicefs-csi-driver wenerme 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.33.05e5edb62a010
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

8,944
prometheus-nats-exporterwenerme2.23.21 of 1See more

prometheus-nats-exporter wenerme 2.23.2

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.20.2c623b608e148
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
vaultwenerme0.34.12 of 2See more

vault wenerme 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
openssl@3.5.7-r0
3.5.8-r0
hashicorp/vault-k8s:1.7.655e27b080c9b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

549
victoria-metrics-k8s-stackwenerme0.92.12 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,915
wexa-studiowexa-studio1.2.04 of 15See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/postgres:15-alpinefe0737ba566a
openssl@3.5.7-r0
3.5.8-r0
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.8-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.8-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

15,056
whereaboutswhereaboutsVerified publisher0.3.01 of 1See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

618
wikiwikijs3.0.02 of 2See more

wiki wikijs 3.0.0

2 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
requarks/wiki:268f0d1848261
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

5,497
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,635
ovh-exporterwiremindVerified publisher1.2.01 of 1See more

ovh-exporter wiremind 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/wiremind/ovh-exporter:v2.3.1609f955bd977
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

209
wordpress-alpinewordpress-alpine1.5.182 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/memcached:1.6.45dc561d52bb8a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,080
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,713
wicekxxczakiVerified publisher0.1.2571 of 2See more

wicek xxczaki 0.1.257

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

1,311
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

899
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

485
homerzekker6Verified publisher8.35.01 of 1See more

homer zekker6 8.35.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
b4bz/homer:v26.08.3febc8967c9f7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
language-toolzekker6Verified publisher1.12.12 of 2See more

language-tool zekker6 1.12.1

2 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.8-r0
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,565
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,160
zoo-project-druzoo-projectOfficialVerified publisher0.10.43 of 6See more

zoo-project-dru zoo-project 0.10.4

3 of the 6 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.4-alpine3.249a8afca54e78
openssl@3.5.7-r0
3.5.8-r0
library/rabbitmq:4.3.2-alpine835cbc6fabce
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

7,936

Container images carrying it

1,643 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/chroma-core/chroma:1.5.3cfd193653bd6
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/cjmalloy/jasper-ui:v1.3.623246dc2160efe
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/cloudprober/cloudprober:v0.14.540c6d960ae4f
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/cloudquery/cloudquery:6.40.040b804fce7f9
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/cloudscript-technology/k8s-monitoring-app:v0.0.25cab66a6b3574
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/cncf/clowarden/dbmigrator:v0.2.3c022fd42de45
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/cncf/clowarden/server:v0.2.3f9379427b917
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/cncf/gitvote/dbmigrator:v1.5.0f1e7efe440da
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/cncf/gitvote/server:v1.5.026167f01c898
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
openssl@3.5.0-r0
3.5.8-r0
1
ghcr.io/cndoit18/lxcfs-manager:latest6bb61ded2625
openssl@3.5.0-r0
3.5.8-r0
1
ghcr.io/cobbler/cobbler-web:v1.1.0c17978fb13dd
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/colanode/server:latest7006cac874fd
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/comet-ml/opik/opik-frontend:2.2.66564fa9e9aa26
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/comet-ml/opik/opik-python-backend:2.2.6621a1a8d61d1a
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/containeroo/cert-manager-webhook-bluecat:latest96f82d5840d4
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
openssl@3.5.1-1
3.5.7-1~deb13u2
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/crossplane-contrib/crossview:v4.6.07b54c5ba60e5
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/cross-seed/cross-seed:6.13.7a1fed512261f
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/csepulveda/trivy-webhook-aws-security-hub:v0.1.206836b779b060
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/curium-rocks/k8s-jacoco-operator:maina558ceae6cdb
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/d0ugal/internet-perf-exporter:v0.2.91f5c9a96fe52a
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/dakera-ai/dakera:0.11.101af610992a416
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/dakera-ai/dakera-dashboard:0.3.292e059589f7f7
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/danielgines/brightdata-exporter:0.2.176920d17cf6ff
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/deven96/ahnlich-db:latest45d8b5aab491
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
openssl@3.5.1-r0
3.5.8-r0
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2
1
ghcr.io/dictionarry-hub/profilarr:2.2.0ddcdd0f34004
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/drakkan/sftpgo:v2.7.46cb60f08fede
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/druggeri/nut_exporter:3.3.0276460d141c7
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/duyet/clickhouse-monitoring:latest84edfe8a67a8
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/egos-tech/smtp:1.2.2b5451793ad91
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/elastiflow/mermin:v0.4.1205053c8a3e2
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/elk-zone/elk:main046dfdb8550c
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/elk-zone/elk:v1.0.1236faedcb68a
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/eminaktas/oom-tracer:v0.1.0c90ca8389c87
openssl@3.5.1-r0
3.5.8-r0
1
ghcr.io/ente/server:0472c929b6070e61fecaf2013d47efce2dcda462f646b68a1b8d
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.