CVE-2026-22796

Medium

Advisory

Published 27 Jan 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,211; of 17,803 indexed, latest versions
Container images: 2,471; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-22796 affecting package openssl for versions less than 3.3.5-3

Carried by container images the latest versions of 2,211 of 17,803 indexed charts deploy, on 2,471 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+93 more	1.0.1f-1ubuntu2.27+esm12, 1.0.2g-1ubuntu4.20+esm14, 1.1.1-1ubuntu2.1~18.04.23+esm7, 1.1.1f-1ubuntu2.24+esm2+5 more	1,540
opensslapk	3.0.7-r0, 3.0.7-r2, 3.0.8-r0, 3.0.8-r1+34 more	3.0.19-r0, 3.3.6-r0, 3.5.5-r0, 3.6.1-r0	930
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm3	15
opensslrpm	3.3.5-1.azl3	3.3.5-3	1

OSV records: ALPINE-CVE-2026-22796 CGA-54qp-f6pv-w9rw DEBIAN-CVE-2026-22796 UBUNTU-CVE-2026-22796 AZL-75299
Also known as: CGA-rpw7-8rcj-25xj, USN-7980-1, USN-7980-2

Charts affected

2,211 by stars

Chart

Latest

Affected images

Radar Score

treexd

0.1.10

1 of 1 See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-22796.

Container image	Digest	Package	Fixed in
lishimeng/tree :v0.2.8	9b2f8be6c7d3	openssl@3.0.8-r0	3.0.19-r0

Open the chart page →

1,998

zooxd

0.4.0

1 of 1 See more

2,070

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-22796.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
hamzaarshad10/queryfrontend :1.1.5.14	cd359d9a78c3	openssl@3.3.2-r0	3.3.6-r0
hamzaarshad10/querypodpy :1.7	154f38e8668e	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2
murtazashah46/helmfile :latest	4d11726cf803	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2

Open the chart page →

13,875

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-22796.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.7

Open the chart page →

2,156

ygdrassil-monitoringygdrassil

0.4.0

1 of 10 See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-22796.

Container image	Digest	Package	Fixed in
grafana/grafana :11.5.1	5781759b3d27	openssl@3.3.2-r0	3.3.6-r0

Open the chart page →

9,426

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-22796.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	3.0.18-1~deb12u2

Open the chart page →

2,710

zahori-consulzahori

1.0.1

2 of 2 See more

zahori-consul zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-22796.

Container image	Digest	Package	Fixed in
hashicorp/consul :1.15.3	ddff34041c5c	openssl@3.0.9-r1	3.0.19-r0
hashicorp/consul-k8s-control-plane :1.1.2	62bed1bf8106	openssl@3.0.9-r1	3.0.19-r0

Open the chart page →

5,076

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-22796.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	openssl@1.1.1-1ubuntu2.1~18.04.23	1.1.1-1ubuntu2.1~18.04.23+esm7

Open the chart page →

2,477

zahori-serverzahori

1.0.1

2 of 2 See more

zahori-server zahori 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-22796.

Container image	Digest	Package	Fixed in
flyway/flyway :9.14.1-alpine	80f12c80502b	openssl@3.0.7-r2	3.0.19-r0
zahoriaut/zahori-server :0.1.17	b2de13916f3e	openssl@3.0.8-r3	3.0.19-r0

Open the chart page →

5,842

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-22796.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	openssl@1.1.1-1ubuntu2.1~18.04.14	1.1.1-1ubuntu2.1~18.04.23+esm7
yandex/clickhouse-server :21.3.20	4eccfffb01d7	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm2

Open the chart page →

9,280

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-22796.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,949

Container images carrying it

2,471 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/alekc/samba-docker :v1.1.0	cc9a028d9c43	openssl@3.5.4-r0	3.5.5-r0	1
ghcr.io/alexmorbo/dell_idrac_fan_controller :v0.1.6-1	d110504d551d	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.7	1
ghcr.io/almarklein/timetagger :v26.1.3-nonroot	18a81afcb249	openssl@3.0.18-1~deb12u1	3.0.18-1~deb12u2	1
ghcr.io/angelnu/pod-gateway :v1.13.0	a5b032e15f75	openssl@3.3.3-r0	3.3.6-r0	1
ghcr.io/angelscloud/prometheus-optimizer :latest	744bc929a579	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2	1
ghcr.io/antnsn/mal-sync :v1.0.5	2f06e72cef36	openssl@3.3.2-r0	3.3.6-r0	1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets :0.0.0-main	13e267ad7d94	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.7	1
ghcr.io/apache/flink-kubernetes-operator :c703255	e9c2ce635b89	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.21	1
ghcr.io/appscode/acerproxy :v0.2.0	21de3771fdd5	openssl@3.5.4-r0	3.5.5-r0	1
ghcr.io/appscode/capi-ops-manager :v0.0.5	7465f35b684c	openssl@3.3.2-r4	3.3.6-r0	1
ghcr.io/appscode/cert-manager-webhook-ace :v0.0.2	dc6b5fdcec06	openssl@3.5.4-r0	3.5.5-r0	1
ghcr.io/appscode/deploy-ui :0.3.6	f3e07eff3997	openssl@3.3.2-r1	3.3.6-r0	1
ghcr.io/appscode/docker-machine-operator :v0.0.4	81f6007abb4e	openssl@3.3.1-r1	3.3.6-r0	1
ghcr.io/appscode/falco-ui-server :v0.0.6	6ec488d89b56	openssl@3.5.4-r0	3.5.5-r0	1
ghcr.io/appscode/gh-ci-webhook :v0.0.20	36ce246d884e	openssl@3.3.3-r0	3.3.6-r0	1
ghcr.io/appscode/gotenberg :8.25	f9104080d9a7	openssl@3.5.4-1~deb13u1	3.5.4-1~deb13u2	1
ghcr.io/appscode/inbox-server :MailetGroup	4a2824296412	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.21	1
ghcr.io/appscode/inbox-ui :0.0.5	ae3b0e29daaa	openssl@3.3.3-r0	3.3.6-r0	1
ghcr.io/appscode/marketplace-ui :0.3.1	d52177072013	openssl@3.3.2-r1	3.3.6-r0	1
ghcr.io/appscode/offline-license-server :v0.0.76	e4b66308d8f6	openssl@3.5.4-r0	3.5.5-r0	1
ghcr.io/appscode/s3proxy :sha-a82ca68	20518335f9f9	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.21	1
ghcr.io/appscode/scanner :v0.0.21	16907aae5de1	openssl@3.5.4-r0	3.5.5-r0	1
ghcr.io/appscode/taskqueue :v0.0.3	6877c958a3c6	openssl@3.5.4-r0	3.5.5-r0	1
ghcr.io/appscode/trickster :v2.0.0	cdbbed831f28	openssl@3.5.4-r0	3.5.5-r0	1
ghcr.io/appscode/trivydb :0.0.3	67ffb0309acb	openssl@3.5.4-r0	3.5.5-r0	1
ghcr.io/argelbargel/vault-raft-snapshot-agent :v0.12.5	345174727a2b	openssl@3.3.3-r0	3.3.6-r0	1
ghcr.io/aserto-dev/topaz :0.32.59	4c708ecf7dc4	openssl@3.3.3-r0	3.3.6-r0	1
ghcr.io/astriaorg/account-monitor :latest	4c8b42890035	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2	1
ghcr.io/astriaorg/astrotrek :0.1.0	5889bea38e56	openssl@3.0.14-1~deb12u2	3.0.18-1~deb12u2	1
ghcr.io/astriaorg/auctioneer :pr-1839	1386b7b5e555	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2	1
ghcr.io/astriaorg/conductor :1.1.0	1f97d131b1d1	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2	1
ghcr.io/astriaorg/evm-bridge-withdrawer :1.0.2	9c88e1aff357	openssl@3.0.15-1~deb12u1	3.0.18-1~deb12u2	1
ghcr.io/astriaorg/flame :0.1.0	c8af1c5aae40	openssl@3.3.3-r0	3.3.6-r0	1
ghcr.io/astriaorg/hermes :0.5.0	4f33a0a9f75e	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.7	1
ghcr.io/astriaorg/seq-faucet :0.9.0	bf3cb9b505b6	openssl@3.3.2-r0	3.3.6-r0	1
ghcr.io/astriaorg/sequencer :latest	44f82ee0b24c	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2	1
ghcr.io/astriaorg/sequencer-relayer :latest	5f6c74993f08	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2	1
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	openssl@3.0.16-1~deb12u1	3.0.18-1~deb12u2	1
ghcr.io/bakito/sealed-secrets-web :v3.0.5	74aff24d4b97	openssl@3.0.7-r0	3.0.19-r0	1
ghcr.io/base-org/node :v0.11.1	1aba0ffe55ea	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.21	1
ghcr.io/bastienwirtz/homer :v25.11.1	5c3a0fb561e0	openssl@3.3.5-r0	3.3.6-r0	1
ghcr.io/bastienwirtz/homer :v25.02.1	cf4ae752adbb	openssl@3.3.2-r1	3.3.6-r0	1
ghcr.io/beluga-cloud/jellyfin/jellyfin :10.8.13	68f52b993a7f	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.21	1
ghcr.io/bensoer/external-secrets-reloader :v0.1.3	8e31b5a81853	openssl@3.5.4-r0	3.5.5-r0	1
ghcr.io/bensoer/sibyl :v0.2.0	6dca4455fde3	openssl@3.5.4-r0	3.5.5-r0	1
ghcr.io/berriai/litellm-database :litellm_stable_release_branch-v1.75.5-stable	ab63d26a8a2c	openssl@3.5.2-r0	3.6.1-r0	1
ghcr.io/beslovas/duckdb-ui :1.3.2	72f35584026d	openssl@3.0.17-1~deb12u2	3.0.18-1~deb12u2	1
ghcr.io/bitmagnet-io/bitmagnet :v0.10.0	cf2c16fac5b5	openssl@3.3.3-r0	3.3.6-r0	1
ghcr.io/b-it-projects-gmbh/nvme_exporter :latest	e70307b193c6	openssl@3.5.0-r0	3.5.5-r0	1
ghcr.io/bluesky-social/pds :0.4.204	cbc6e3ea157d	openssl@3.5.4-r0	3.5.5-r0	1