StackRadar

CVE-2026-18798

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,760
of 17,797 indexed, latest versions
Container images
1,625
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,760 of 17,797 indexed charts deploy, on 1,625 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,173
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2441
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
OSV records
ALPINE-CVE-2026-18798DEBIAN-CVE-2026-18798UBUNTU-CVE-2026-18798
Also known as
USN-8678-1

Charts affected

1,760 by stars
ChartLatestAffected imagesRadar Score
wordpress-alpinewordpress-alpine1.5.182 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/memcached:1.6.45dc561d52bb8a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,080
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,713
wicekxxczakiVerified publisher0.1.2581See more

wicek xxczaki 0.1.258

1 container image this version deploys carries CVE-2026-18798.

Container imageDigestPackageFixed in
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

—
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

1,311
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

899
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

485
homerzekker6Verified publisher8.35.01 of 1See more

homer zekker6 8.35.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
b4bz/homer:v26.08.3febc8967c9f7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
language-toolzekker6Verified publisher1.12.12 of 2See more

language-tool zekker6 1.12.1

2 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.8-r0
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,565
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,160
zoo-project-druzoo-projectOfficialVerified publisher0.10.43 of 6See more

zoo-project-dru zoo-project 0.10.4

3 of the 6 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.4-alpine3.249a8afca54e78
openssl@3.5.7-r0
3.5.8-r0
library/rabbitmq:4.3.2-alpine835cbc6fabce
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

7,936

Container images carrying it

1,625 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/michaelhaigh/pacman:latestb0931b1f085d
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/microboxlabs/miot-dashboard-server:latest19b910920ab1
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/microboxlabs/miot-docs:latest0307d2fd9f5c
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/microboxlabs/miot-docs:lateste09d92c61f43
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/microboxlabs/miot-harness:0.1.0d548e9ae4b84
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/middleware-labs/mw-kube-agent-config-updater:1.21.0d4edc3f244f4
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/middleware-labs/mw-lang-aggregator:0.1.0ae6e13970ec2
openssl@3.5.1-r0
3.5.8-r0
1
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/mkutlak/alluredeck-ui:0.41.0c19509b1b336
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/mondu-ai/gar-credential-provider:latest25090d37afa9
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/monicahq/monica-next:main8be69156acbb
openssl@3.5.1-1
3.5.7-1~deb13u2
1
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/nimbolus/terraform-backend:0.2.2bf876252fbe1
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/nmshd/backbone-admin-ui:7.2.169c9f075d2d9
openssl@3.5.6-1~deb13u2+dhi1
3.5.7-1~deb13u2
1
ghcr.io/nmshd/backbone-consumer-api:7.2.1b8f0ce01d057
openssl@3.5.6-1~deb13u2+dhi1
3.5.7-1~deb13u2
1
ghcr.io/nmshd/backbone-database-migrator:7.2.12c0c5e022714
openssl@3.5.6-1~deb13u2+dhi1
3.5.7-1~deb13u2
1
ghcr.io/nmshd/backbone-event-handler:7.2.1f4d6a2006530
openssl@3.5.6-1~deb13u2+dhi1
3.5.7-1~deb13u2
1
ghcr.io/nmshd/backbone-housekeeper:7.2.11c1dfe35447f
openssl@3.5.6-1~deb13u2+dhi1
3.5.7-1~deb13u2
1
ghcr.io/nmshd/backbone-identity-deletion-jobs:7.2.1da69941fa6b8
openssl@3.5.6-1~deb13u2+dhi1
3.5.7-1~deb13u2
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/obeone/ollama-exporter:latestf43af285c6e0
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/observal/observal-api:1.13.1153b8b893232
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/observal/observal-web:1.13.1738acf65cba7
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/okteto/buildkit:0.0.0-2026-08-03:0.0.0-2026-08-1714527ca5d2a9
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/okteto/frontend:0.0.0-2026-08-17c18f4a1bc90a
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/okteto/ingress-nginx-chroot:0.0.0-2026-08-17265eedb3954b
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/okteto/pipeline-runner:0.0.0-2026-08-03:0.0.0-2026-08-173e56bdd1b90d
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/okteto/redis:0.0.0-2026-08-03:0.0.0-2026-08-1761a0169cf291
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/okteto/registry:0.0.0-2026-08-1769131511501f
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2
1
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/openfaas/faas-netes:0.18.176cfe35401d25
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/openfaas/gateway:0.27.1382b15393116e
openssl@3.5.1-r0
3.5.8-r0
1
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
openssl@3.5.1-r0
3.5.8-r0
1
ghcr.io/openfaasltd/jetstream-queue-worker:0.5.10e9245a0bca88
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/openfaasltd/kafka-connector:0.7.160e58eac0e2f7
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
openssl@3.5.0-r0
3.5.8-r0
1
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/openrelik/openrelik-ui:latest7f91594d5eb3
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:3.0.0-shipping02602e60edbf
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/open-telemetry/demo:3.0.0-kafka0601750a3ca4
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:3.0.0-telemetry-docs3519858704e7
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:3.0.0-cart3f89a444250a
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:3.0.0-opamp-server62cfae32adb1
openssl@3.5.7-r0
3.5.8-r0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.