StackRadar

CVE-2026-22795

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,149
of 17,803 indexed, latest versions
Container images
2,405
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-22795 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 2,149 of 17,803 indexed charts deploy, on 2,405 images.

Affected packageAffected versionsFixed inImages
openssldeb1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more1,469
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0930
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
opensslrpm3.3.5-1.azl33.3.5-31
OSV records
ALPINE-CVE-2026-22795CGA-67w2-pcw9-33w2DEBIAN-CVE-2026-22795UBUNTU-CVE-2026-22795AZL-75275
Also known as
CGA-j87x-qhgx-7pf8, USN-7980-1, USN-7980-2

Charts affected

2,149 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,405 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2
1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm2
1
maildev/maildev:2.2.1180ef51f65ee
openssl@3.3.2-r4
3.3.6-r0
1
makemake1337/blutgang:latest8a55174fc830
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
makersquad/harp-proxy:0.8.1a40dd258c527
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm2
1
maptiler/server:4.8.07e206140057b
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm2
1
margays/eir:v1.7.22883fdd06fd7
openssl@3.0.17-1~deb12u3
3.0.18-1~deb12u2
1
mathieuruellan/piwigo:latest04572c8a1b04
openssl@3.3.2-r1
3.3.6-r0
1
mathnao/certs:2.1.3b900e6b64684
openssl@3.3.4-r0
3.3.6-r0
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
openssl@3.0.14-1~deb12u2
3.0.18-1~deb12u2
1
matterlabs/external-node:v24.0.06cbfea4c694a
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
mauricenino/dashdot:5.9.2236997816917
openssl@3.3.3-r0
3.3.6-r0
1
mavrick1/kubestellar-b:latest45ca0429a1d4
openssl@3.3.3-r0
3.3.6-r0
1
mavrick1/kubestellar-f:latest56bd8eaa53a4
openssl@3.3.3-r0
3.3.6-r0
1
mbround18/valheim:3.1.070bd4da591cd
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.21
1
mccutchen/go-httpbin:v2.15.024528cf5229d
openssl@3.0.14-1~deb12u2
3.0.18-1~deb12u2
1
mcronce/oci-registry:v0.4.509519cd7bd2f
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
mediagis/nominatim:3.7c15e941485ef
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm2
1
mediagis/nominatim:4.2d0eae7b51374
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.21
1
merlos/zookeeper:3.9.3a38fc7e09ed7
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
metabase/metabase:v0.53.4.17807bc5cad17
openssl@3.3.3-r0
3.3.6-r0
1
metabase/metabase:v0.46.09ebdc664a6b2
openssl@3.0.8-r1
3.0.19-r0
1
middlewareeng/middleware:0.3.1747d880812f1
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2
1
mikefarah/yq:4.45.12c100efaca06
openssl@3.3.2-r4
3.3.6-r0
1
milvusdb/etcd:3.5.25-r1fededb2f2d63
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.21
1
milvusdb/milvus:v2.2.13a3a55e1c1497
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm2
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24+esm2
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1
miqm/session-scaler:0.1.0c5c211717d9b
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
mlikiowa/napcat-docker:latest1336a777f9a4
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.21
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
openssl@3.3.0-r2
3.3.6-r0
1
moreillon/api-proxy:latestd7d4a5463525
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2
1
moreillon/camera-viewer:lateste418cc694bd5
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2
1
moreillon/food-manager:lateste8fd856e593d
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2
1
moreillon/user-manager-front:v5.1.06597e6b98d21
openssl@3.0.13-1~deb12u1
3.0.18-1~deb12u2
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
mpopoola1/nodejsapp:latest061fc532de7d
openssl@3.0.12-r1
3.0.19-r0
1
mrasif/mrasif.in:v4.6.0375a1ed8fdc0
openssl@3.5.4-r0
3.5.5-r0
1
mshanley80/httpbin2022:latest5b189a70c0fb
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm2
1
muhammedgamal/fp23:latest74b4cd69b6fa
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
muluder/prograncontrollermcord:0.1.843b597a93da7
nodejs@8.9.4-1nodesource1
no fix listed
1
muonsoft/openapi-mock:latestc9afe1295484
openssl@3.0.8-r0
3.0.19-r0
1
murtazashah46/helmfile:latest4d11726cf803
openssl@3.0.14-1~deb12u2
3.0.18-1~deb12u2
1
mvance/unbound:1.20.04bf67b567f39
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
mvance/unbound:1.22.076906da36d18
openssl@3.0.14-1~deb12u2
3.0.18-1~deb12u2
1
mvisonneau/tailscale:v1.68.1fc45ad8abf10
openssl@3.3.1-r0
3.3.6-r0
1
mziyabo/fargate-eks-sidecar-injector:latest3067dce17983
openssl@3.3.0-r2
3.3.6-r0
1
n8nio/n8n:1.86.08b39ed5a2de9
openssl@3.3.3-r0
3.3.6-r0
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.