StackRadar

CVE-2026-18798

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.015
73rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,760
of 17,797 indexed, latest versions
Container images
1,625
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,760 of 17,797 indexed charts deploy, on 1,625 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,173
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2441
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
OSV records
ALPINE-CVE-2026-18798DEBIAN-CVE-2026-18798UBUNTU-CVE-2026-18798
Also known as
USN-8678-1

Charts affected

1,760 by stars
ChartLatestAffected imagesRadar Score
ms-locations-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-locations-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-locations-rest:latestb8d4447931f4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-microsoftgraph-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-microsoftgraph-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-microsoftgraph-rest:latestc314db2706e5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

248
ms-microsoftgraph-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-microsoftgraph-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-microsoftgraph-worker:latestc3568b61d762
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

248
ms-modules-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-modules-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-modules-rest:latest091de71a83df
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-notification-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-notification-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-notification-grpc:latestc7525541cb5f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

356
ms-payments-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-grpc:latest88ea9bbcb04c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-payments-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-rest:latest6a3591b82a40
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-payments-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-worker:latest50171f042666
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-rbac-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-rbac-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-rbac-grpc:latest85bee1edfe2a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-rbac-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-rbac-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-rbac-rest:latesta156d021775d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-roles-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-roles-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-roles-rest:latestc364711341a0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-services-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-services-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-services-grpc:latest1462eb1101db
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-services-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-services-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-services-rest:lateste0f8ef13842f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-tenants-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-grpc:latesta33d3361e60c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-tenants-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-rest:latest5762fc421070
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-tenants-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-worker:latestf476a3084860
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-users-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-users-grpc:latest2cff841dd824
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-users-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-users-rest:lateste9c7ab8d91ef
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-users-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
codedesignplus/ms-users-worker:latest94094b21a2c5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

13,359
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,145
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,145
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,145
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,796
loki-stackcommon-chartsVerified publisher1.0.34 of 12See more

loki-stack common-charts 1.0.3

4 of the 12 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
openssl@3.5.7-r0
3.5.8-r0
library/memcached:1.6.39-alpinec8503d4491ed
openssl@3.5.4-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.10.021b9fe7bb29d
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

5,425
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

3,823
conjur-k8s-csi-providerconjure0.2.51 of 1See more

conjur-k8s-csi-provider conjure 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
cyberark/conjur-k8s-csi-provider:latest737a967088d9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

295
cert-manager-webhook-bluecatcontainerooVerified publisher1.0.21 of 1See more

cert-manager-webhook-bluecat containeroo 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/containeroo/cert-manager-webhook-bluecat:latest96f82d5840d4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

441
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.11 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

1 of the 7 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

10,185
cors-proxycors-proxyVerified publisher1.2.01 of 1See more

cors-proxy cors-proxy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,601
cosanetcosanet1.0.01 of 1See more

cosanet cosanet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
openssl@3.5.1-1
3.5.7-1~deb13u2

Open the chart page →

2,227
job-databasecreate-databases0.1.361 of 1See more

job-database create-databases 0.1.36

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
csghubcsghubVerified publisher2.5.04 of 34See more

csghub csghub 2.5.0

4 of the 34 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
openssl@3.5.6-r0
3.5.8-r0
library/memcached:1.6.38-alpinee93269864a7d
openssl@3.5.1-r0
3.5.8-r0
opencsghq/csgbot:v0.6.9-ee7d0271e26521
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
opencsghq/postgres:15.19b98600564e07
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

49,244
csgshipcsghubVerified publisher0.4.62 of 10See more

csgship csghub 0.4.6

2 of the 10 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
openssl@3.5.6-r0
3.5.8-r0
opencsghq/postgres:15.19b98600564e07
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

11,573
dataflowcsghubVerified publisher2.5.01 of 7See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
opencsghq/postgres:15.19b98600564e07
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

6,768
csi-driver-ipfscsi-driver-ipfs0.2.01 of 6See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

1 of the 6 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,668
cspconsolecspconsole1.3.111 of 5See more

cspconsole cspconsole 1.3.11

1 of the 5 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/nginx:1.28-alpinea8b39bd9cf0f
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

12,440
cloudflaredcyberjakeVerified publisher0.3.201 of 1See more

cloudflared cyberjake 0.3.20

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.6.16d91c121b803
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

625
dakeradakera-helmVerified publisher0.11.1072 of 3See more

dakera dakera-helm 0.11.107

2 of the 3 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/dakera-ai/dakera:0.11.101af610992a416
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/dakera-ai/dakera-dashboard:0.3.292e059589f7f7
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

3,985
damap-chartdamapVerified publisher0.3.02 of 5See more

damap-chart damap 0.3.0

2 of the 5 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

14,458
kuberay-dashboarddanchevVerified publisher0.0.51 of 1See more

kuberay-dashboard danchev 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
quay.io/kuberay/dashboard:v1.7.07e43d4b4fd9f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

553
nvidia-gpu-exporterdanchevVerified publisher1.0.31 of 1See more

nvidia-gpu-exporter danchev 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4

Open the chart page →

1,238
dapr-agentsdapr-agents-devVerified publisher0.1.56 of 31See more

dapr-agents dapr-agents-dev 0.1.5

6 of the 31 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
openssl@3.5.5-r0
3.5.8-r0
kiwigrid/k8s-sidecar:1.30.98c06e1ba643a
openssl@3.5.1-r0
3.5.8-r0
library/memcached:1.6.39-alpinec8503d4491ed
openssl@3.5.4-r0
3.5.8-r0
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
openssl@3.5.6-r0
3.5.8-r0
redis/redisinsight:latestb5e19ee240ab
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

22,370
dara-chartsdara-charts0.1.01 of 2See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,616
dns-mesh-controllerdashdns2.0.81 of 2See more

dns-mesh-controller dashdns 2.0.8

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
emirozbir/dashdns-admission-webhook:v2.0.56801ba2a3fc3
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,103
dash-opsdash-ops0.0.41 of 1See more

dash-ops dash-ops 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
dashops/dash-ops:latest23537693ff05
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

507
metabasedasmeta0.1.01 of 1See more

metabase dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
metabase/metabase:v0.63.1.124f150effd484
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

798
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,227
datacube-dashboarddatacube-charts0.5.101 of 2See more

datacube-dashboard datacube-charts 0.5.10

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,667
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-18798.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

6,211

Container images carrying it

1,625 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

No deployed image carries CVE-2026-18798.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.