StackRadar

CVE-2026-2673

High

Advisory

Published 13 Mar 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.004
37th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
550
of 17,787 indexed, latest versions
Container images
557
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 550 of 17,787 indexed charts deploy, on 557 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+9 more3.5.6-r0, 3.6.1-r3428
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.3-1ubuntu2, 3.5.4-1~deb13u1+2 more3.5.3-1ubuntu3.3, 3.5.5-1~deb13u2124
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
OSV records
CGA-67j4-8hm8-w6grALPINE-CVE-2026-2673DEBIAN-CVE-2026-2673UBUNTU-CVE-2026-2673
Also known as
CGA-cjvr-gj7w-mw5f, CGA-g6w5-5h7c-xmc7, CGA-jrm8-5h8q-3f9c, CGA-pr4f-6gqh-h4cw, CGA-r4h6-4294-rmgg, USN-8155-1

Charts affected

550 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

557 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
litlyx/litlyx-dashboard:lateste64ff2d52385
openssl@3.5.4-r0
3.5.6-r0
1
litlyx/litlyx-producer:latest10407f36613f
openssl@3.5.4-r0
3.5.6-r0
1
livekit/livekit-server:v1.9.03602a85840d5
openssl@3.5.0-r0
3.5.6-r0
1
lmacka/snappass:2.1.293f5c048b7d4
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
1
marcoimme/oidcmock:latestb6035c0721a8
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
1
mawad98/backstage-pyactions:demo99422c56a274
openssl@3.5.5-1~deb13u1
3.5.5-1~deb13u2
1
megaease/easegress:latestfad1c7452958
openssl@3.5.5-r0
3.5.6-r0
1
miniflux/miniflux:2.2.18a3ca6bbc1f74
openssl@3.5.5-r0
3.5.6-r0
1
moreillon/group-manager-front:latest5f0a38498271
openssl@3.5.5-1~deb13u1
3.5.5-1~deb13u2
1
mrasif/mrasif.in:v4.6.0375a1ed8fdc0
openssl@3.5.4-r0
3.5.6-r0
1
n8nio/n8n:1.115.1ed16e560c40e
openssl@3.5.2-r0
3.5.6-r0
1
nacos/nacos-server:v3.0.20e951a1d07bb
openssl@3.5.0-r0
3.5.6-r0
1
nataliagranato/redis:v1.0.052bd9b79a8f2
openssl@3.3.1-r4
3.6.1-r3
1
natsio/nats-box:0.18.0abdc9f9f0120
openssl@3.5.0-r0
3.5.6-r0
1
natsio/nats-server-config-reloader:0.20.147094fcae2f4
openssl@3.5.4-r0
3.5.6-r0
1
natsio/nats-server-config-reloader:0.19.181edf32a3680
openssl@3.5.1-r0
3.5.6-r0
1
natsio/nats-surveyor:0.9.9104a3e938b23
openssl@3.5.5-r0
3.5.6-r0
1
natsio/prometheus-nats-exporter:0.18.002469dc907bc
openssl@3.5.4-r0
3.5.6-r0
1
ncsa/checks:main0b738bbc8d70
openssl@3.5.1-1
3.5.5-1~deb13u2
1
neoskop/ixy:2.1.125152b474f54
openssl@3.5.5-r0
3.5.6-r0
1
neosmemo/memos:0.24c6defc2dfb98
openssl@3.5.0-r0
3.5.6-r0
1
netapp/trident-protect-utils:v1.0.058b9fac358bd
openssl@3.5.1-r0
3.5.6-r0
1
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
openssl@3.5.5-r0
3.5.6-r0
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
openssl@3.5.1-1
3.5.5-1~deb13u2
1
nginxdemos/hello:plain-text751bf8933179
openssl@3.5.1-r0
3.5.6-r0
1
nginxdemos/hello:0.4b28d1e16c676
openssl@3.5.1-r0
3.5.6-r0
1
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
openssl@3.5.1-r0
3.5.6-r0
1
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
openssl@3.5.5-r0
3.5.6-r0
1
nodered/node-red:4.1.2216e7403aab9
openssl@3.5.4-r0
3.5.6-r0
1
noooste/garage-ui:v0.12.10b68a9237da6
openssl@3.5.5-r0
3.5.6-r0
1
oada/auth:4.0.0c0d077e79ef4
openssl@3.5.1-r0
3.5.6-r0
1
oada/http-handler:4.0.0d87efe8ba4b0
openssl@3.5.1-r0
3.5.6-r0
1
oada/rev-graph-update:4.0.0ebc8343f05ff
openssl@3.5.1-r0
3.5.6-r0
1
oada/shares:4.0.0c6ffb4e8ed63
openssl@3.5.1-r0
3.5.6-r0
1
oada/startup:4.0.0fc09495e2f3c
openssl@3.5.1-r0
3.5.6-r0
1
oada/sync-handler:4.0.0b7a2cfc137cf
openssl@3.5.1-r0
3.5.6-r0
1
oada/users:4.0.0b6c562fa5b1b
openssl@3.5.1-r0
3.5.6-r0
1
oada/webhooks:4.0.06590c60de347
openssl@3.5.1-r0
3.5.6-r0
1
oada/well-known:4.0.07943fde43b19
openssl@3.5.1-r0
3.5.6-r0
1
oada/write-handler:4.0.08464c7f48aae
openssl@3.5.1-r0
3.5.6-r0
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
openssl@3.5.5-r0
3.5.6-r0
1
octoboxio/octobox:latestd909041c46eb
openssl@3.5.4-r0
3.5.6-r0
1
oliver006/redis_exporter:v1.82.0-alpineda9e89ee4e75
openssl@3.5.5-r0
3.5.6-r0
1
openebs/lvm-driver:1.10.141f73aba7f31
openssl@3.5.1-r0
3.5.6-r0
1
openmined/syft-backend:0.9.5b72f74a68b32
openssl@3.4.1-r0
3.6.1-r3
1
openmined/syft-frontend:0.9.5d11524a3854a
openssl@3.4.1-r0
3.6.1-r3
1
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.6-r0
1
owncloud/ocis:8.0.1b38fd8fdd58f
openssl@3.5.5-r0
3.5.6-r0
1
photoprism/photoprism:251130db16ee6b1ba3
openssl@3.5.3-1ubuntu2
3.5.3-1ubuntu3.3
1
phpdockerio/readability-js-server:1.8.0ea8354b42600
openssl@3.5.4-r0
3.5.6-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.