StackRadar

CVE-2026-27448

Medium

Advisory

Published 16 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
305
of 17,781 indexed, latest versions
Container images
186
deployed by those charts
Fix available
2 of 2
affected packages

pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

Carried by container images the latest versions of 305 of 17,781 indexed charts deploy, on 186 images.

Affected packageAffected versionsFixed inImages
pyopensslpypi16.2.0, 17.3.0, 17.5.0, 18.0.0+18 more26.0.0186
pyopenssldeb17.5.0-1ubuntu1, 23.2.0-117.5.0-1ubuntu1+esm1, 23.2.0-1ubuntu0.14
OSV records
GHSA-vp96-hxj8-p424UBUNTU-CVE-2026-27448
Also known as
PYSEC-2026-2268, USN-8115-1, USN-8335-1

Charts affected

305 by stars
ChartLatestAffected imagesRadar Score
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
pyopenssl@19.1.0
26.0.0

Open the chart page →

13,156
mysqlcomet-mysql-helmVerified publisher1.0.71 of 1See more

mysql comet-mysql-helm 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.4.2ac80b6e09e5b
pyopenssl@24.1.0
26.0.0

Open the chart page →

1,055
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
pyopenssl@19.0.0
26.0.0

Open the chart page →

3,871
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
pyopenssl@23.0.0
26.0.0

Open the chart page →

2,348
jupyterhubd4nVerified publisher3.3.72 of 7See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
pyopenssl@24.1.0
26.0.0
aristidetm/k8s-hub:3.3.7ccb516cb8474
pyopenssl@24.1.0
26.0.0

Open the chart page →

16,604
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
pyopenssl@23.2.0
26.0.0

Open the chart page →

6,179
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
pyopenssl@24.2.1
26.0.0

Open the chart page →

5,062
pagesdavid-pages1.0.01 of 3See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
pagesdebasish-pages1.0.01 of 3See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
pyopenssl@24.2.1
26.0.0

Open the chart page →

6,075
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
pyopenssl@19.1.0
26.0.0

Open the chart page →

4,422
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
pyopenssl@25.3.0
26.0.0

Open the chart page →

2,305
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
pyopenssl@23.2.0
26.0.0

Open the chart page →

14,856
mysqldev-krishan-dhaka-charts1.0.11 of 1See more

mysql dev-krishan-dhaka-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
pyopenssl@24.3.0
26.0.0

Open the chart page →

19,224
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
pyopenssl@24.1.0
26.0.0

Open the chart page →

14,627
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
pyopenssl@19.1.0
26.0.0

Open the chart page →

4,550
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
pyopenssl@21.0.0
26.0.0

Open the chart page →

1,990
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
pyopenssl@19.1.0
26.0.0

Open the chart page →

5,055
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
pyopenssl@22.1.0
26.0.0

Open the chart page →

25,122
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

27,537
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

27,537
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

27,537
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

4,678
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
pyopenssl@25.0.0
26.0.0

Open the chart page →

2,885
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
pyopenssl@25.1.0
26.0.0

Open the chart page →

2,785
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
pyopenssl@19.0.0
26.0.0

Open the chart page →

14,673
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

5,704
ishare-satellitefiware1.3.21 of 1See more

ishare-satellite fiware 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
pyopenssl@22.0.0
26.0.0

Open the chart page →

1,778
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
pyopenssl@25.0.0
pyopenssl@23.2.0-1
26.0.0
23.2.0-1ubuntu0.1

Open the chart page →

5,292
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

5,704
flask-appflask-mysqlVerified publisher1.0.11 of 2See more

flask-app flask-mysql 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

4,073
spectergaloymoney0.3.11 of 1See more

specter galoymoney 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,691
spectergaloymoney20.3.11 of 1See more

specter galoymoney2 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,691
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
pyopenssl@20.0.1
26.0.0

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
pyopenssl@17.5.0
pyopenssl@17.5.0-1ubuntu1
26.0.0
17.5.0-1ubuntu1+esm1

Open the chart page →

13,551
openemrgeek-cookbookVerified publisher5.2.01 of 1See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
openemr/openemr:6.1.089eaa6d9a4e3
pyopenssl@22.0.0
26.0.0

Open the chart page →

8,392
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
pyopenssl@19.1.0
26.0.0

Open the chart page →

2,643
pyloadgeek-cookbookVerified publisher6.4.21 of 1See more

pyload geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,236
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
pyopenssl@24.2.1
26.0.0

Open the chart page →

8,923
whooglegeek-cookbookVerified publisher3.4.21 of 1See more

whoogle geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
pyopenssl@19.1.0
26.0.0

Open the chart page →

2,061
mysqlgengxiankun-charts0.2.01 of 1See more

mysql gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
mysqlgroundhog2k3.1.41 of 1See more

mysql groundhog2k 3.1.4

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
tautullihalkeye1.1.41 of 2See more

tautulli halkeye 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
tautulli/tautulli:v2.7.7c4da15f058ea
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,473

Container images carrying it

186 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
errbotio/errbot:6.1.900ee4e0953ab
pyopenssl@21.0.0
26.0.0
1
evk02/mlflow:2.2.1ef6ff257ef35
pyopenssl@23.0.0
26.0.0
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
pyopenssl@22.0.0
26.0.0
1
flanksource/batch-runner:v1.0.44689687a7cf95
pyopenssl@25.0.0
pyopenssl@23.2.0-1
26.0.0
23.2.0-1ubuntu0.1
1
galaxy/cloudman-server:lateste5c265fe9fcd
pyopenssl@22.0.0
26.0.0
1
galaxy/galaxy-init:v18.010267bad550e6
pyopenssl@17.5.0
26.0.0
1
gethue/hue:4.11.011b649636e68
pyopenssl@22.0.0
26.0.0
1
gethue/hue:4.10.05702b2c37ff9
pyopenssl@20.0.1
26.0.0
1
gethue/hue:latest7d5c1b9f8a79
pyopenssl@25.1.0
26.0.0
1
goofball222/pritunl:1.30.3070.5943c0743701d4
pyopenssl@19.1.0
26.0.0
1
goofball222/pritunl:1.32.3602.807bf26032dfce
pyopenssl@22.1.0
26.0.0
1
gpappsoft/privacyidea-docker:3.12.2af7841adad26
pyopenssl@25.0.0
26.0.0
1
grafana/oncall:v1.16.5499851658393
pyopenssl@25.1.0
26.0.0
1
hayk96/alerta-web:9.0.486377705e9e3
pyopenssl@24.2.1
26.0.0
1
helga09/my_sql_shoes:v1.1.1a03657d97897
pyopenssl@22.0.0
26.0.0
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
pyopenssl@23.2.0
26.0.0
1
homeassistant/home-assistant:2023.12.48d000332b09b
pyopenssl@23.2.0
26.0.0
1
improwised/erpnext-worker:v13.4.197280b55cbd4
pyopenssl@20.0.1
26.0.0
1
jmferrer/azure-devops-agent:latest030f68ec6998
pyopenssl@19.0.0
26.0.0
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
pyopenssl@23.2.0
26.0.0
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
pyopenssl@20.0.0
26.0.0
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
pyopenssl@20.0.1
26.0.0
1
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
pyopenssl@23.2.0
26.0.0
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
pyopenssl@19.1.0
26.0.0
1
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
pyopenssl@19.1.0
26.0.0
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
pyopenssl@23.2.0
26.0.0
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
pyopenssl@22.0.0
26.0.0
1
langgenius/dify-api:1.0.0066035f93856
pyopenssl@24.3.0
26.0.0
1
lib42/deluge:20c4d1d326f95
pyopenssl@23.0.0
26.0.0
1
library/mysql:8.4.3106d5197fd8e
pyopenssl@24.2.1
26.0.0
1
library/mysql:8.4.113466ba4a4828
pyopenssl@25.3.0
26.0.0
1
library/mysql:8.0.303c1aab708f6e
pyopenssl@19.1.0
26.0.0
1
library/mysql:885b9bf2e29cf
pyopenssl@25.3.0
26.0.0
1
library/mysql:8.4.108dbcf531a03a
pyopenssl@25.3.0
26.0.0
1
library/mysql:9.0.192dc86967801
pyopenssl@24.1.0
26.0.0
1
library/mysql:8.0.41bf577825b52a
pyopenssl@24.2.1
26.0.0
1
library/mysql:8.0.39ccb8f749bb5e
pyopenssl@24.1.0
26.0.0
1
library/mysql:8.0.40d58ac93387f6
pyopenssl@24.2.1
26.0.0
1
linuxserver/calibre-web:0.6.24241009026e6f
pyopenssl@25.1.0
26.0.0
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
pyopenssl@20.0.1
26.0.0
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
pyopenssl@19.0.0
26.0.0
1
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
pyopenssl@19.1.0
26.0.0
1
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
pyopenssl@25.1.0
26.0.0
1
linuxserver/deluge:18.04.10ac871624394
pyopenssl@17.5.0
pyopenssl@17.5.0-1ubuntu1
26.0.0
17.5.0-1ubuntu1+esm1
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
pyopenssl@17.5.0
pyopenssl@17.5.0-1ubuntu1
26.0.0
17.5.0-1ubuntu1+esm1
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
pyopenssl@17.5.0
pyopenssl@17.5.0-1ubuntu1
26.0.0
17.5.0-1ubuntu1+esm1
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
pyopenssl@19.1.0
26.0.0
1
localstack/localstack:3.19d278167f2b7
pyopenssl@24.0.0
26.0.0
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
pyopenssl@22.0.0
26.0.0
1
lsstsqre/prepuller:latest19c2dfc4e4ff
pyopenssl@20.0.1
26.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.