StackRadar

CVE-2026-22795

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,149
of 17,803 indexed, latest versions
Container images
2,405
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-22795 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 2,149 of 17,803 indexed charts deploy, on 2,405 images.

Affected packageAffected versionsFixed inImages
openssldeb1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more1,469
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0930
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
opensslrpm3.3.5-1.azl33.3.5-31
OSV records
ALPINE-CVE-2026-22795CGA-67w2-pcw9-33w2DEBIAN-CVE-2026-22795UBUNTU-CVE-2026-22795AZL-75275
Also known as
CGA-j87x-qhgx-7pf8, USN-7980-1, USN-7980-2

Charts affected

2,149 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,405 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:1.115.1ed16e560c40e
openssl@3.5.2-r0
3.5.5-r0
1
nacos/nacos-server:v3.0.20e951a1d07bb
openssl@3.5.0-r0
3.5.5-r0
1
nacos/nacos-server:v3.0.130a39cb0c54d
openssl@3.3.3-r0
3.3.6-r0
1
nataliagranato/redis:v1.0.052bd9b79a8f2
openssl@3.3.1-r4
3.6.1-r0
1
natsio/nats-box:0.13.559cf2e949181
openssl@3.0.7-r2
3.0.19-r0
1
natsio/nats-box:0.18.0abdc9f9f0120
openssl@3.5.0-r0
3.5.5-r0
1
natsio/nats-box:0.13.3c507bd7e3831
openssl@3.0.7-r0
3.0.19-r0
1
natsio/nats-server-config-reloader:0.20.147094fcae2f4
openssl@3.5.4-r0
3.5.5-r0
1
natsio/nats-server-config-reloader:0.15.05b21830a9e9d
openssl@3.3.0-r2
3.3.6-r0
1
natsio/nats-server-config-reloader:0.19.181edf32a3680
openssl@3.5.1-r0
3.5.5-r0
1
natsio/prometheus-nats-exporter:0.18.002469dc907bc
openssl@3.5.4-r0
3.5.5-r0
1
ncsa/checks:main0b738bbc8d70
openssl@3.5.1-1
3.5.4-1~deb13u2
1
nelssec/qualys-agent-bootstrapper:v2.1.05e471f0cdeaa
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.21
1
neosmemo/memos:0.24c6defc2dfb98
openssl@3.5.0-r0
3.5.5-r0
1
netapp/trident-protect-utils:v1.0.058b9fac358bd
openssl@3.5.1-r0
3.5.5-r0
1
netbirdio/management:0.45.10c9994b393ea
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1
netbirdio/management:0.60.252682e5f48f9
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.7
1
netbirdio/management:0.46.0b0adc4ad4ec6
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1
netbirdio/relay:0.45.1872e3add0e1e
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2
1
netbirdio/relay:0.60.2a10762533793
openssl@3.0.17-1~deb12u3
3.0.18-1~deb12u2
1
netbirdio/relay:0.46.0d32f82514a24
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2
1
netbirdio/signal:0.45.146ce5a45538f
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2
1
netbirdio/signal:0.60.267176bcbf6ab
openssl@3.0.17-1~deb12u3
3.0.18-1~deb12u2
1
netbirdio/signal:0.46.0e8f392611152
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2
1
netboxcommunity/netbox:v3.2.83d652dca5351
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.21
1
nethermind/nethermind:1.14.615517708c3b6
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.21
1
nethermind/nethermind:1.31.893e57917371a
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1
nethermind/nethermind:1.31.9aeca3b55bda5
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
openssl@3.0.2-0ubuntu1.26
no fix listed
1
networkboot/dhcpd:lateste99bbfbd6fb2
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.21
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
openssl@3.5.1-1
3.5.4-1~deb13u2
1
nginxdemos/hello:plain-text751bf8933179
openssl@3.5.1-r0
3.5.5-r0
1
nginxdemos/hello:0.4b28d1e16c676
openssl@3.5.1-r0
3.5.5-r0
1
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
openssl@3.3.3-r0
3.3.6-r0
1
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
openssl@3.5.1-r0
3.5.5-r0
1
nirmalnaveen/supermario:latest8541a39162f3
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2
1
nocodb/nocodb:0.301.5d9516f0bf546
openssl@3.3.2-r4
3.3.6-r0
1
nodered/node-red:4.1.2216e7403aab9
openssl@3.5.4-r0
3.5.5-r0
1
nottiey/mynodejswebapp:latest9c35a24c9eb3
openssl@3.0.10-r0
3.0.19-r0
1
oada/auth:4.0.0c0d077e79ef4
openssl@3.5.1-r0
3.5.5-r0
1
oada/http-handler:4.0.0d87efe8ba4b0
openssl@3.5.1-r0
3.5.5-r0
1
oada/rev-graph-update:4.0.0ebc8343f05ff
openssl@3.5.1-r0
3.5.5-r0
1
oada/shares:4.0.0c6ffb4e8ed63
openssl@3.5.1-r0
3.5.5-r0
1
oada/startup:4.0.0fc09495e2f3c
openssl@3.5.1-r0
3.5.5-r0
1
oada/sync-handler:4.0.0b7a2cfc137cf
openssl@3.5.1-r0
3.5.5-r0
1
oada/users:4.0.0b6c562fa5b1b
openssl@3.5.1-r0
3.5.5-r0
1
oada/webhooks:4.0.06590c60de347
openssl@3.5.1-r0
3.5.5-r0
1
oada/well-known:4.0.07943fde43b19
openssl@3.5.1-r0
3.5.5-r0
1
oada/write-handler:4.0.08464c7f48aae
openssl@3.5.1-r0
3.5.5-r0
1
obolnetwork/helios:e10e753cb7e97d39d46
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.