StackRadar

CVE-2026-2673

High

Advisory

Published 13 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
549
of 17,787 indexed, latest versions
Container images
556
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 549 of 17,787 indexed charts deploy, on 556 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+9 more3.5.6-r0, 3.6.1-r3427
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.3-1ubuntu2, 3.5.4-1~deb13u1+2 more3.5.3-1ubuntu3.3, 3.5.5-1~deb13u2124
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
OSV records
CGA-67j4-8hm8-w6grALPINE-CVE-2026-2673DEBIAN-CVE-2026-2673UBUNTU-CVE-2026-2673
Also known as
CGA-cjvr-gj7w-mw5f, CGA-g6w5-5h7c-xmc7, CGA-jrm8-5h8q-3f9c, CGA-pr4f-6gqh-h4cw, CGA-r4h6-4294-rmgg, USN-8155-1

Charts affected

549 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

556 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
jellyfin/jellyfin:10.11.717285f9cce63
openssl@3.5.5-1~deb13u1
3.5.5-1~deb13u2
1
jellyfin/jellyfin:10.11.6333b64771663
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
1
jkroepke/github_exporter:1.8.03d850992786d
openssl@3.5.4-r0
3.5.6-r0
1
jonasal/devpi-server:6.17.0-alpineec1eee99a18d
openssl@3.5.4-r0
3.5.6-r0
1
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
no fix listed
1
joxit/docker-registry-ui:2.6.0bb5956a6b378
openssl@3.5.4-r0
3.5.6-r0
1
kenchrcum/grafana-dashboard-converter:0.3.105310497aea3f
openssl@3.5.5-r0
3.5.6-r0
1
khaliq/pingme:v0.2.749f96888d2ab
openssl@3.5.4-r0
3.5.6-r0
1
koenkk/zigbee2mqtt:2.7.260a295b40f4e
openssl@3.5.4-r0
3.5.6-r0
1
komodorio/komoplane:0.2.19678d02c3f2e
openssl@3.5.5-r0
3.5.6-r0
1
kroniak/ssh-client:latest3aef87e1a00b
openssl@3.5.5-r0
3.5.6-r0
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
openssl@3.5.5-r0
3.5.6-r0
1
kvalitetsit/kitargus:2026-03-09-091234-10013c4c5cde2d9371c
openssl@3.5.5-r0
3.5.6-r0
1
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
openssl@3.5.1-1
3.5.5-1~deb13u2
1
kyovint/kyoimgusers:1.0.080084149156e
openssl@3.5.1-1
3.5.5-1~deb13u2
1
langgenius/dify-web:1.16.187dd47e4e28f
openssl@3.5.5-r0
3.5.6-r0
1
library/alpine:3.23.325109184c71b
openssl@3.5.5-r0
3.5.6-r0
1
library/docker:28.5.2-dind2a232a42256f
openssl@3.5.4-r0
3.5.6-r0
1
library/ghost:6.22.0-alpine3.23ac533a6988ee
openssl@3.5.5-r0
3.5.6-r0
1
library/memcached:1.6.39-alpine3.227b45203a99eb
openssl@3.5.4-r0
3.5.6-r0
1
library/memcached:1.6.409ae868852d0b
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
1
library/memcached:1.6.40cc523a19da58
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
1
library/memcached:1.6.38-alpinee93269864a7d
openssl@3.5.1-r0
3.5.6-r0
1
library/nats:2.12.2-alpine2d5fce3229ae
openssl@3.5.4-r0
3.5.6-r0
1
library/nats:2.11.9-alpine777787bbb4c7
openssl@3.5.1-r0
3.5.6-r0
1
library/nats:2.12.3-alpine88fe8e0e09d6
openssl@3.5.4-r0
3.5.6-r0
1
library/neo4j:2026.02.25ab4ab0358cf
openssl@3.5.5-1~deb13u1
3.5.5-1~deb13u2
1
library/nextcloud:31.0.10-apacheb7faa1653c39
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
1
library/nginx:1.28-alpinea8b39bd9cf0f
openssl@3.5.5-r0
3.5.6-r0
1
library/nginx:1.29.3-alpineb3c656d55d7a
openssl@3.5.4-r0
3.5.6-r0
1
library/php:8.5.2-fpm-alpine3.22a2482c398d60
openssl@3.5.5-r0
3.5.6-r0
1
library/postgres:18.0073e7c8b84e2
openssl@3.5.1-1
3.5.5-1~deb13u2
1
library/postgres:16.11468e1f126ca5
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
1
library/postgres:17.5-alpine6567bca8d7bc
openssl@3.5.1-r0
3.5.6-r0
1
library/postgres:18.369e8582b781c
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
1
library/postgres:18.3a9abf4275f9e
openssl@3.5.5-1~deb13u1
3.5.5-1~deb13u2
1
library/postgres:17.5aadf2c0696f5
openssl@3.5.1-1
3.5.5-1~deb13u2
1
library/postgres:17.6-alpineef257d85f76e
openssl@3.5.4-r0
3.5.6-r0
1
library/python:3.9da5aee29682d
openssl@3.5.1-1+deb13u1
3.5.5-1~deb13u2
1
library/python:3.14.3-alpine3.23faee120f7885
openssl@3.5.5-r0
3.5.6-r0
1
library/redis:8.6.2009cc37796fb
openssl@3.5.5-1~deb13u1
3.5.5-1~deb13u2
1
library/varnish:alpinea84e1d4adb58
openssl@3.5.5-r0
3.5.6-r0
1
library/wordpress:php8.1-apachef73396626d2f
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
1
lifailon/openrouter-bot:latestea37e4b6b952
openssl@3.5.1-r0
3.5.6-r0
1
linkstackorg/linkstack:latest1c8b05399ee4
openssl@3.5.5-r0
3.5.6-r0
1
linode/linode-blockstorage-csi-driver:v1.1.409f3282bf53d
openssl@3.5.5-r0
3.5.6-r0
1
linuxserver/overseerr:1.35.06108ed066d4a
openssl@3.5.5-r0
3.5.6-r0
1
lissy93/networking-toolbox:latest700862839553
openssl@3.5.5-r0
3.5.6-r0
1
listmonk/listmonk:v6.0.0bf3903d54a46
openssl@3.5.4-r0
3.5.6-r0
1
litlyx/litlyx-consumer:latest02225e77d316
openssl@3.5.4-r0
3.5.6-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.