StackRadar

CVE-2026-18798

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,752
of 17,792 indexed, latest versions
Container images
1,619
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,752 of 17,792 indexed charts deploy, on 1,619 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,171
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2437
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
OSV records
ALPINE-CVE-2026-18798DEBIAN-CVE-2026-18798UBUNTU-CVE-2026-18798
Also known as
USN-8678-1

Charts affected

1,752 by stars
ChartLatestAffected imagesRadar Score
aws-web-service-proxifiedaws-web-service-proxified1.8.01 of 2See more

aws-web-service-proxified aws-web-service-proxified 1.8.0

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,031
axosyslogaxosyslogVerified publisher0.21.01 of 1See more

axosyslog axosyslog 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/axoflow/axosyslog:4.27.00379598e9ad2
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

394
azure-voteazure-sample0.1.11 of 2See more

azure-vote azure-sample 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,248
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

2,760
audiobookshelfbdclark-helm-chartsVerified publisher0.1.41 of 1See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,722
mealiebdclark-helm-chartsVerified publisher0.1.151 of 1See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

4,059
mosquittobdclark-helm-chartsVerified publisher0.6.11 of 1See more

mosquitto bdclark-helm-charts 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:2.0.22212f89e1eaeb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
qbittorrent-vpnbdclark-helm-chartsVerified publisher0.7.61 of 2See more

qbittorrent-vpn bdclark-helm-charts 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
qmcgaw/gluetun:v3.41.11a5bf4b4820a
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,010
bluesky-pdsbear0.4.2081 of 1See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

2,137
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
nodejs@14.17.0-1nodesource1
no fix listed

Open the chart page →

22,929
tenzu-frontbiru-scop3.1.01 of 1See more

tenzu-front biru-scop 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/biru-scop/tenzu-front:latest16759fa523f8
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

853
bdbablackduck2026.6.35 of 9See more

bdba blackduck 2026.6.3

5 of the 9 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
blackducksoftware/bdba-fluentd:2026.6.3c14bbbf45536
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
blackducksoftware/bdba-frontend:2026.6.3b10eaea94fd3
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
fluent/fluent-bit:4.2.6a52221a2a3eb
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/memcached:1.6.42-trixiee2a8683c7fbb
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
versity/versitygw:v1.6.0d6ec798f66ca
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

9,667
blackduck-alertblackduck8.4.03 of 4See more

blackduck-alert blackduck 8.4.0

3 of the 4 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
openssl@3.5.6-r0
3.5.8-r0
blackducksoftware/blackduck-alert-db:8.4.06310fac39d53
openssl@3.5.6-r0
3.5.8-r0
blackducksoftware/blackduck-alert-rabbitmq:8.4.08f422b18d171
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

4,297
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-nti:logc947c3629371
openssl@3.5.7-r0
3.5.8-r0
sysnet4admin/colosseum-rwd:log74ded2d92f07
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2

Open the chart page →

27,215
bitmagnetbrandan-schmitz-helm-chartsVerified publisher1.0.61 of 2See more

bitmagnet brandan-schmitz-helm-charts 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,721
Filebrowserbrandan-schmitz-helm-chartsVerified publisher1.3.11 of 1See more

Filebrowser brandan-schmitz-helm-charts 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.63.15-s6dbac07403040
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

995
overseerrbrandan-schmitz-helm-chartsVerified publisher1.4.01 of 1See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
linuxserver/overseerr:1.35.06108ed066d4a
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

3,072
prowlarrbrandan-schmitz-helm-chartsVerified publisher2.1.01 of 1See more

prowlarr brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
linuxserver/prowlarr:version-2.4.0.53974fd7a166c8f4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

414
qbittorrentbrandan-schmitz-helm-chartsVerified publisher2.2.01 of 1See more

qbittorrent brandan-schmitz-helm-charts 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
linuxserver/qbittorrent:5.2.2dd24a5f3db32
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

956
radarrbrandan-schmitz-helm-chartsVerified publisher3.1.01 of 1See more

radarr brandan-schmitz-helm-charts 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
linuxserver/radarr:version-6.2.1.10461549c4a075496
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

481
sonarrbrandan-schmitz-helm-chartsVerified publisher2.0.101 of 1See more

sonarr brandan-schmitz-helm-charts 2.0.10

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
linuxserver/sonarr:version-4.0.17.295202bc962946fe
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

866
tautullibryanalves0.1.01 of 1See more

tautulli bryanalves 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
tautulli/tautulli:latest670e68dd9efc
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,929
syslog-portalbryopsida0.3.11 of 1See more

syslog-portal bryopsida 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

1,307
casepack-apibysamioVerified publisher0.31.01 of 1See more

casepack-api bysamio 0.31.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/bysamio/casepack-api:0.31.00eb3ad229c2c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

340
casepack-docsbysamioVerified publisher0.8.01 of 1See more

casepack-docs bysamio 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/bysamio/casepack-docs:0.8.0443d9850a688
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

371
casepack-spabysamioVerified publisher0.30.01 of 1See more

casepack-spa bysamio 0.30.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/bysamio/casepack-spa:0.30.0129212faf248
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

371
gotenbergbysamioVerified publisher0.2.01 of 1See more

gotenberg bysamio 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8-chromiuma40f92d7419a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

9,270
caddycaddyVerified publisher0.0.41 of 1See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/caddy:2.11.2-alpine834468128c76
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,684
kafkacagriekinVerified publisher0.2.01 of 2See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
apache/kafka:4.1.0bff074a5d005
openssl@3.5.2-r0
3.5.8-r0

Open the chart page →

2,399
rediscagriekinVerified publisher1.5.21 of 2See more

redis cagriekin 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/redis:8.8.1-trixie3eafabb4c93f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,394
lamphttpdcamptocamp31.0.111 of 1See more

lamphttpd camptocamp3 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/httpd:2.4-alpine1b766f17b840
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

902
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/traefik:v3.7.16b9cbca6fac4
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

14,179
traefikcanine40.2.01 of 1See more

traefik canine 40.2.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/traefik:v3.7.16b9cbca6fac4
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,028
castai-hibernatecastaiVerified publisher0.2.121 of 1See more

castai-hibernate castai 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
castai/hibernate:v0.14da62858c8381
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,169
catalyst-agentscatalyst-agents0.1.332See more

catalyst-agents catalyst-agents 0.1.33

2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
grafana/grafana:13.1.3ab5cb380e3ff
openssl@3.5.7-r0
3.5.8-r0
kiwigrid/k8s-sidecar:2.10.17eac5c4fed71
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

—
ceems-api-serverceemsVerified publisher0.9.01 of 2See more

ceems-api-server ceems 0.9.0

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
quay.io/ceems/ceems:v0.16.0aa343a9803b0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

153
ceems-exporterceemsVerified publisher0.8.01 of 1See more

ceems-exporter ceems 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
quay.io/ceems/ceems:v0.16.0aa343a9803b0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

153
ceems-lbceemsVerified publisher0.8.01 of 1See more

ceems-lb ceems 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
quay.io/ceems/ceems:v0.16.0aa343a9803b0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

153
kube-ceemsceemsOfficialVerified publisher1.40.01 of 5See more

kube-ceems ceems 1.40.0

1 of the 5 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
quay.io/ceems/ceems:v0.16.0aa343a9803b0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

647
cert-manager-alidns-webhookcert-manager-alidns-webhook0.1.41 of 1See more

cert-manager-alidns-webhook cert-manager-alidns-webhook 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/crazygit/cert-manager-alidns-webhook:0.1.4976be6506eb6
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,328
cert-manager-webhook-pdnscert-manager-webhook-pdns3.2.51 of 1See more

cert-manager-webhook-pdns cert-manager-webhook-pdns 3.2.5

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
zachomedia/cert-manager-webhook-pdns:v2.5.54940e227a39b
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,080
cert-manager-webhook-solidservercert-manager-webhook-solidserverVerified publisher1.0.21 of 1See more

cert-manager-webhook-solidserver cert-manager-webhook-solidserver 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

527
cross-seedcfi20176.13.61 of 1See more

cross-seed cfi2017 6.13.6

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,339
getoutlinecfi20171.2.01 of 4See more

getoutline cfi2017 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/postgres:18.06f3e42ad37de
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2

Open the chart page →

4,459
opencvecfi20170.1.22 of 7See more

opencve cfi2017 0.1.2

2 of the 7 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/postgres:18.06f3e42ad37de
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2
ghcr.io/cfi2017/opencve-web:3.0.06961eab190a2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

15,490
qbittorrentcfi20176.13.31 of 1See more

qbittorrent cfi2017 6.13.3

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,339
charon-relaycharonOfficialVerified publisher0.8.02 of 2See more

charon-relay charon 0.8.0

2 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
openssl@3.5.5-r0
3.5.8-r0
obolnetwork/charon:v1.10.0278c7e2897b6
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,440
dv-podcharonOfficialVerified publisher0.19.12 of 5See more

dv-pod charon 0.19.1

2 of the 5 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
obolnetwork/charon-dkg-sidecar:maine263be0a7440
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

7,501
ghostchart-ghost0.1.52 of 2See more

ghost chart-ghost 0.1.5

2 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/ghost:6.22.0-alpine3.23ac533a6988ee
openssl@3.5.5-r0
3.5.8-r0
registry.gitlab.com/gitlab-ci-utils/curl-jq:latestb564745b6cb0
openssl@3.5.7-r1
3.5.8-r0

Open the chart page →

4,083
kitchenowlchart-kitchenowl0.1.122 of 2See more

kitchenowl chart-kitchenowl 0.1.12

2 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
tombursch/kitchenowl-web:v0.7.8517f808eee66
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

4,829

Container images carrying it

1,619 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

No deployed image carries CVE-2026-18798.

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.