StackRadar

CVE-2026-22795

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,200
of 17,813 indexed, latest versions
Container images
2,458
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-22795 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 2,200 of 17,813 indexed charts deploy, on 2,458 images.

Affected packageAffected versionsFixed inImages
openssldeb1.1.0g-2ubuntu4.1, 1.1.0g-2ubuntu4.3, 1.1.1-1ubuntu2.1~18.04.4, 1.1.1-1ubuntu2.1~18.04.5+76 more1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2, 3.0.2-0ubuntu1.21, 3.0.13-0ubuntu3.7+3 more1,504
opensslapk3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0948
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
opensslrpm3.3.5-1.azl33.3.5-31
OSV records
ALPINE-CVE-2026-22795CGA-67w2-pcw9-33w2DEBIAN-CVE-2026-22795UBUNTU-CVE-2026-22795AZL-75275
Also known as
CGA-j87x-qhgx-7pf8, USN-7980-1, USN-7980-2

Charts affected

2,200 by stars
ChartLatestAffected imagesRadar Score
vaultwardensb-helm-charts0.4.01 of 1See more

vaultwarden sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
vaultwarden/server:1.34.384fd8a47f58d
openssl@3.0.16-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

3,372
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2

Open the chart page →

13,781
ed-deploymentscaleway-charts0.1.01 of 1See more

ed-deployment scaleway-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
nginxdemos/hello:plain-text751bf8933179
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

1,297
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

2,967
crproxyschichtelVerified publisher0.1.41 of 1See more

crproxy schichtel 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
ghcr.io/daocloud/crproxy/crproxy:v0.8.0ee1eb3c9c9a1
openssl@3.3.1-r0
3.3.6-r0

Open the chart page →

1,379
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
openssl@3.5.1-1
3.5.4-1~deb13u2

Open the chart page →

3,021
gickupschichtelVerified publisher0.0.41 of 1See more

gickup schichtel 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
buddyspencer/gickup:0.10.386b656f19b0c1
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

1,548
keycloak-webhook-routerschichtelVerified publisher0.1.01 of 1See more

keycloak-webhook-router schichtel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/keycloak-webhook-router:main285e226fe7f6
openssl@3.3.2-r1
3.3.6-r0

Open the chart page →

705
mindustryschichtelVerified publisher0.1.11 of 1See more

mindustry schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
pschichtel/mindustry-server:v145.1b543e9c2d371
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.21

Open the chart page →

3,290
nvme-exporterschichtelVerified publisher0.1.61 of 1See more

nvme-exporter schichtel 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
openssl@3.5.0-r0
3.5.5-r0

Open the chart page →

1,073
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.7

Open the chart page →

2,908
satisfactoryschichtelVerified publisher0.3.31 of 1See more

satisfactory schichtel 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.9464d11e36e10
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.21

Open the chart page →

3,588
elasticsearch-curatorschmitzis3.2.41 of 1See more

elasticsearch-curator schmitzis 3.2.4

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
untergeek/curator:8.0.4de5197f06c3c
openssl@3.0.8-r4
3.0.19-r0

Open the chart page →

755
outlineschmitzis0.0.81 of 4See more

outline schmitzis 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
outlinewiki/outline:0.69.1d060dcd8f9aa
openssl@3.0.8-r3
3.0.19-r0

Open the chart page →

4,459
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7

Open the chart page →

62,871
vikunjaschmitzis1.0.01 of 3See more

vikunja schmitzis 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
typesense/typesense:0.25.1035ccfbc3fd8
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.21

Open the chart page →

4,133
semaphoreschoenwald0.1.31 of 1See more

semaphore schoenwald 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
0hlov3/semaphore:v1.0.050f874ec096b
openssl@3.0.8-r0
3.0.19-r0

Open the chart page →

1,799
hetzner-ddnsschoolguys-helmcharts0.1.21 of 1See more

hetzner-ddns schoolguys-helmcharts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
filiparag/hetzner_ddns:1.0.15a9cbae7997c
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

846
restic-serverschoolguys-helmcharts0.3.11 of 1See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
restic/rest-server:0.14.0d2aff06f47eb
openssl@3.5.0-r0
3.5.5-r0

Open the chart page →

2,262
satisfactory-serverschoolguys-helmcharts0.1.81 of 1See more

satisfactory-server schoolguys-helmcharts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
ghcr.io/wolveix/satisfactory-server:v1.9.10e0f2f8c97598
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.21

Open the chart page →

3,490
unboundschoolguys-helmcharts0.1.11 of 1See more

unbound schoolguys-helmcharts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
mvance/unbound:1.20.04bf67b567f39
openssl@3.0.11-1~deb12u2
3.0.18-1~deb12u2

Open the chart page →

3,163
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

4,755
smartsuggestsearchhub0.1.01 of 1See more

smartsuggest searchhub 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
commerceexperts/searchhub-smartsuggest-service:1.3.0341eebe7239b
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

1,236
secret-managersecret-managerVerified publisher1.0.03 of 4See more

secret-manager secret-manager 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
leonardomulticloud/svc-vault:v1.0.0e4acd2fbb7b1
openssl@3.0.15-r0
3.0.19-r0
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
openssl@3.3.2-r1
3.3.6-r0
leonardomulticloud/webhook:v1.0.0d119918900e8
openssl@3.0.15-r0
3.0.19-r0

Open the chart page →

5,509
secretssecrets-proxy1.0.61 of 1See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
udhos/secrets:1.0.6daa2b4eaac09
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

1,150
security-smellssecurity-smells0.1.01 of 1See more

security-smells security-smells 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
durellirsd/security-smells-api:v17398aca4fc2e
openssl@3.3.0-r2
3.3.6-r0

Open the chart page →

1,425
seed-audio-ai-pwa-toolkitseed-audio-ai-pwa-helm-chartsVerified publisher0.1.01 of 1See more

seed-audio-ai-pwa-toolkit seed-audio-ai-pwa-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
library/nginx:1.27-alpine65645c7bb6a0
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

990
pagessekharpkube1.0.02 of 3See more

pages sekharpkube 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm2
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm7

Open the chart page →

20,285
sentry-dbsentry0.9.41 of 10See more

sentry-db sentry 0.9.4

1 of the 10 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.16d210dc69321e
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm7

Open the chart page →

10,996
cortezasergiotocaliniVerified publisher1.0.11 of 1See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.60bcdcbcd3c63
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.21

Open the chart page →

3,355
guacamolesergiotocaliniVerified publisher1.0.01 of 2See more

guacamole sergiotocalini 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
guacamole/guacamole:1.5.50f62f6d17ab3
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.21

Open the chart page →

5,532
serviceexampleserviceexample0.1.01 of 5See more

serviceexample serviceexample 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
natsio/nats-box:0.13.559cf2e949181
openssl@3.0.7-r2
3.0.19-r0

Open the chart page →

5,451
service-exampleservice-example-10.1.02 of 7See more

service-example service-example-1 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
library/nats:2.9.11-alpineccbe811b8575
openssl@3.0.7-r2
3.0.19-r0
natsio/nats-box:0.13.3c507bd7e3831
openssl@3.0.7-r0
3.0.19-r0

Open the chart page →

9,147
service-exampleservice-example-jt0.1.15 of 9See more

service-example service-example-jt 0.1.1

5 of the 9 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
openssl@3.0.17-1~deb12u3
3.0.18-1~deb12u2
library/nats:2.12.2-alpine2d5fce3229ae
openssl@3.5.4-r0
3.5.5-r0
natsio/nats-box:0.19.28031d190c7ee
openssl@3.5.4-r0
3.5.5-r0
natsio/nats-server-config-reloader:0.20.147094fcae2f4
openssl@3.5.4-r0
3.5.5-r0
natsio/prometheus-nats-exporter:0.17.326c826662ac8
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

7,598
return-nginx-chartseture0.1.01 of 1See more

return-nginx-chart seture 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
seyiogunniran/my-nginx:1.03a0ed39e5830
openssl@3.5.1-r0
3.5.5-r0

Open the chart page →

1,297
ccx-monitoringseveralnines0.6.213 of 7See more

ccx-monitoring severalnines 0.6.21

3 of the 7 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
openssl@3.5.4-r0
3.5.5-r0
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
openssl@3.5.0-r0
3.5.5-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

7,746
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

3,113
shopsyncshopsyncVerified publisher1.0.01 of 1See more

shopsync shopsync 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
shyamkrishna21/shopsync:latest3998b83def53
openssl@3.3.3-r0
3.3.6-r0

Open the chart page →

1,238
shopwareshopware-storeVerified publisher2.1.21 of 5See more

shopware shopware-store 2.1.2

1 of the 5 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.0-alpha.738e467b32af3f
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

4,140
pagesshrutiujlan-pages1.0.02 of 3See more

pages shrutiujlan-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm2
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm7

Open the chart page →

20,285
shulker-operatorshulker-operator0.13.01 of 1See more

shulker-operator shulker-operator 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
ghcr.io/jeremylvln/shulker-operator:0.13.027c55706c126
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2

Open the chart page →

912
sibylsibyl0.2.01 of 1See more

sibyl sibyl 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

1,023
moksi-gitops0.16.41 of 2See more

mok si-gitops 0.16.4

1 of the 2 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
quay.io/shivering-isles/dovecot:2.3.214599ada9aa06
openssl@3.3.1-r3
3.3.6-r0

Open the chart page →

664
ctlogsigstoreVerified publisher0.2.681 of 4See more

ctlog sigstore 0.2.68

1 of the 4 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
curlimages/curl:8.17.0935d9100e9ba
openssl@3.5.4-r0
3.5.5-r0

Open the chart page →

2,752
simple-elasticsearch-cleanersimple-elasticsearch-cleanerVerified publisher1.1.11 of 1See more

simple-elasticsearch-cleaner simple-elasticsearch-cleaner 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
abdullahkhawer/simple-elasticsearch-cleaner:2.1.028a6c3f7e0a9
openssl@3.3.2-r4
3.3.6-r0

Open the chart page →

789
simple-node-expresssimple-node-express1.0.01 of 1See more

simple-node-express simple-node-express 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
devravinder/node-express-app:1.0.05325a96967b5
openssl@3.3.2-r4
3.3.6-r0

Open the chart page →

901
clickhouse-keepersinextraVerified publisher0.7.21 of 1See more

clickhouse-keeper sinextra 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.12.6a65ca89ddbe8
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.21

Open the chart page →

2,243
mongosqldsinextraVerified publisher0.3.71 of 1See more

mongosqld sinextra 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosqld:2.14.230b826375ed42
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.21

Open the chart page →

2,622
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.7

Open the chart page →

2,883
tabixsinextraVerified publisher0.2.21 of 1See more

tabix sinextra 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-22795.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/tabix:22.05.17a6e3e996a4ae
openssl@3.5.0-r0
3.5.5-r0

Open the chart page →

1,251

Container images carrying it

2,458 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.6.415be4666c530
openssl@3.0.8-r0
3.0.19-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
openssl@3.5.2-r0
3.5.5-r0
1
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
openssl@3.5.1-r0
3.5.5-r0
1
registry.k8s.io/ingress-nginx/controller:v1.7.07612338342a1
openssl@3.0.8-r1
3.0.19-r0
1
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
openssl@3.3.2-r0
3.3.6-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.6-r0
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
openssl@3.5.4-r0
3.5.5-r0
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
openssl@3.0.15-1~deb12u1
3.0.18-1~deb12u2
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.