StackRadar

CVE-2026-27448

Medium

Advisory

Published 16 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
305
of 17,781 indexed, latest versions
Container images
186
deployed by those charts
Fix available
2 of 2
affected packages

pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

Carried by container images the latest versions of 305 of 17,781 indexed charts deploy, on 186 images.

Affected packageAffected versionsFixed inImages
pyopensslpypi16.2.0, 17.3.0, 17.5.0, 18.0.0+18 more26.0.0186
pyopenssldeb17.5.0-1ubuntu1, 23.2.0-117.5.0-1ubuntu1+esm1, 23.2.0-1ubuntu0.14
OSV records
GHSA-vp96-hxj8-p424UBUNTU-CVE-2026-27448
Also known as
PYSEC-2026-2268, USN-8115-1, USN-8335-1

Charts affected

305 by stars
ChartLatestAffected imagesRadar Score
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
pyopenssl@25.0.0
26.0.0

Open the chart page →

4,647
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
pyopenssl@19.1.0
26.0.0

Open the chart page →

4,422
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
pyopenssl@25.3.0
26.0.0

Open the chart page →

2,305
dbapphelmcourseVerified publisher0.3.31 of 2See more

dbapp helmcourse 0.3.3

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

3,971
mysqlhelmcourseVerified publisher0.2.41 of 1See more

mysql helmcourse 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,518
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
dannielkil/book-db:latest433290c5c1db
pyopenssl@24.1.0
26.0.0

Open the chart page →

9,122
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
pyopenssl@25.3.0
26.0.0

Open the chart page →

29,817
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:9.7.2b2cf29815e62
pyopenssl@25.3.0
26.0.0

Open the chart page →

3,802
ghosthelmforgeVerified publisher1.2.61 of 3See more

ghost helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.4.113466ba4a4828
pyopenssl@25.3.0
26.0.0

Open the chart page →

2,463
mysqlhelmforgeVerified publisher2.0.31 of 1See more

mysql helmforge 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
pyopenssl@25.3.0
26.0.0

Open the chart page →

5,714
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.0.41bf577825b52a
pyopenssl@24.2.1
26.0.0

Open the chart page →

5,959
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
pyopenssl@20.0.1
26.0.0

Open the chart page →

37,671
plausible-analyticsimioVerified publisher0.4.21 of 5See more

plausible-analytics imio 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
pyopenssl@24.1.0
26.0.0

Open the chart page →

10,418
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
pyopenssl@20.0.1
26.0.0

Open the chart page →

6,501
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
pyopenssl@19.0.0
26.0.0

Open the chart page →

3,314
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
pyopenssl@19.1.0
26.0.0

Open the chart page →

9,854
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
pyopenssl@25.3.0
26.0.0

Open the chart page →

4,568
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
pyopenssl@22.0.0
26.0.0

Open the chart page →

16,417
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
pyopenssl@23.2.0
26.0.0

Open the chart page →

6,447
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
pyopenssl@23.2.0
26.0.0

Open the chart page →

3,507
kimai-helmchartkimai2tet0.1.01 of 2See more

kimai-helmchart kimai2tet 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,518
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
pyopenssl@23.2.0
26.0.0
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
pyopenssl@23.2.0
26.0.0

Open the chart page →

7,356
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

2,756
gitlabkubesphereVerified publisher4.2.31 of 17See more

gitlab kubesphere 4.2.3

1 of the 17 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
pyopenssl@19.1.0
26.0.0

Open the chart page →

38,133
deepflowkubesphere-stable6.2.6061 of 8See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
deepflowce/mysql:8.0.313d7ae561cf60
pyopenssl@19.1.0
26.0.0

Open the chart page →

18,316
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

8,698
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

6,824
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
delugelib42Verified publisher1.3.01 of 1See more

deluge lib42 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
lib42/deluge:20c4d1d326f95
pyopenssl@23.0.0
26.0.0

Open the chart page →

898
librenmslibrenms10.1.11 of 5See more

librenms librenms 10.1.1

1 of the 5 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
pyopenssl@25.3.0
26.0.0

Open the chart page →

3,126
delugelinkding0.2.31 of 1See more

deluge linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
pyopenssl@25.1.0
26.0.0

Open the chart page →

1,433
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
pyopenssl@24.2.1
26.0.0

Open the chart page →

37,942
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

8,938
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
pyopenssl@20.0.1
26.0.0
lsstsqre/sciplat-hub:latest5e0ade6bed1c
pyopenssl@20.0.1
26.0.0
lsstsqre/wfdispatcher:lateste9feb99f524d
pyopenssl@20.0.1
26.0.0

Open the chart page →

5,786
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
pyopenssl@22.0.0
26.0.0

Open the chart page →

17,779
demoshopmakaira2.4.01 of 4See more

demoshop makaira 2.4.0

1 of the 4 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

4,401
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

3,706
pritunlmglants0.1.01 of 1See more

pritunl mglants 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
goofball222/pritunl:1.30.3070.5943c0743701d4
pyopenssl@19.1.0
26.0.0

Open the chart page →

1,902
errbotmidokura-communityVerified publisher0.0.51 of 1See more

errbot midokura-community 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
errbotio/errbot:6.1.900ee4e0953ab
pyopenssl@21.0.0
26.0.0

Open the chart page →

2,233
saltmidokura-communityVerified publisher0.0.31 of 1See more

salt midokura-community 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
saltstack/salt:3006.3e9c7906b7a5c
pyopenssl@23.2.0
26.0.0

Open the chart page →

895
pritunl-vpnmoinologics0.0.11 of 1See more

pritunl-vpn moinologics 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
goofball222/pritunl:1.32.3602.807bf26032dfce
pyopenssl@22.1.0
26.0.0

Open the chart page →

2,470
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

4,960
pagesmuthu-pages1.0.01 of 3See more

pages muthu-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
phonebook-chartmy-phonebook-chart0.1.01 of 3See more

phonebook-chart my-phonebook-chart 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

3,034
mychartmysqlweb0.1.01 of 1See more

mychart mysqlweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
pyopenssl@23.3.0
26.0.0

Open the chart page →

1,156

Container images carrying it

186 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
errbotio/errbot:6.1.900ee4e0953ab
pyopenssl@21.0.0
26.0.0
1
evk02/mlflow:2.2.1ef6ff257ef35
pyopenssl@23.0.0
26.0.0
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
pyopenssl@22.0.0
26.0.0
1
flanksource/batch-runner:v1.0.44689687a7cf95
pyopenssl@25.0.0
pyopenssl@23.2.0-1
26.0.0
23.2.0-1ubuntu0.1
1
galaxy/cloudman-server:lateste5c265fe9fcd
pyopenssl@22.0.0
26.0.0
1
galaxy/galaxy-init:v18.010267bad550e6
pyopenssl@17.5.0
26.0.0
1
gethue/hue:4.11.011b649636e68
pyopenssl@22.0.0
26.0.0
1
gethue/hue:4.10.05702b2c37ff9
pyopenssl@20.0.1
26.0.0
1
gethue/hue:latest7d5c1b9f8a79
pyopenssl@25.1.0
26.0.0
1
goofball222/pritunl:1.30.3070.5943c0743701d4
pyopenssl@19.1.0
26.0.0
1
goofball222/pritunl:1.32.3602.807bf26032dfce
pyopenssl@22.1.0
26.0.0
1
gpappsoft/privacyidea-docker:3.12.2af7841adad26
pyopenssl@25.0.0
26.0.0
1
grafana/oncall:v1.16.5499851658393
pyopenssl@25.1.0
26.0.0
1
hayk96/alerta-web:9.0.486377705e9e3
pyopenssl@24.2.1
26.0.0
1
helga09/my_sql_shoes:v1.1.1a03657d97897
pyopenssl@22.0.0
26.0.0
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
pyopenssl@23.2.0
26.0.0
1
homeassistant/home-assistant:2023.12.48d000332b09b
pyopenssl@23.2.0
26.0.0
1
improwised/erpnext-worker:v13.4.197280b55cbd4
pyopenssl@20.0.1
26.0.0
1
jmferrer/azure-devops-agent:latest030f68ec6998
pyopenssl@19.0.0
26.0.0
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
pyopenssl@23.2.0
26.0.0
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
pyopenssl@20.0.0
26.0.0
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
pyopenssl@20.0.1
26.0.0
1
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
pyopenssl@23.2.0
26.0.0
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
pyopenssl@19.1.0
26.0.0
1
keitaro/ckan-datapusher:0.0.175bf1a45f45c1
pyopenssl@19.1.0
26.0.0
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
pyopenssl@23.2.0
26.0.0
1
kobotoolbox/kpi:2.022.24dbcacc01bccd4
pyopenssl@22.0.0
26.0.0
1
langgenius/dify-api:1.0.0066035f93856
pyopenssl@24.3.0
26.0.0
1
lib42/deluge:20c4d1d326f95
pyopenssl@23.0.0
26.0.0
1
library/mysql:8.4.3106d5197fd8e
pyopenssl@24.2.1
26.0.0
1
library/mysql:8.4.113466ba4a4828
pyopenssl@25.3.0
26.0.0
1
library/mysql:8.0.303c1aab708f6e
pyopenssl@19.1.0
26.0.0
1
library/mysql:885b9bf2e29cf
pyopenssl@25.3.0
26.0.0
1
library/mysql:8.4.108dbcf531a03a
pyopenssl@25.3.0
26.0.0
1
library/mysql:9.0.192dc86967801
pyopenssl@24.1.0
26.0.0
1
library/mysql:8.0.41bf577825b52a
pyopenssl@24.2.1
26.0.0
1
library/mysql:8.0.39ccb8f749bb5e
pyopenssl@24.1.0
26.0.0
1
library/mysql:8.0.40d58ac93387f6
pyopenssl@24.2.1
26.0.0
1
linuxserver/calibre-web:0.6.24241009026e6f
pyopenssl@25.1.0
26.0.0
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
pyopenssl@20.0.1
26.0.0
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
pyopenssl@19.0.0
26.0.0
1
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
pyopenssl@19.1.0
26.0.0
1
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
pyopenssl@25.1.0
26.0.0
1
linuxserver/deluge:18.04.10ac871624394
pyopenssl@17.5.0
pyopenssl@17.5.0-1ubuntu1
26.0.0
17.5.0-1ubuntu1+esm1
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
pyopenssl@17.5.0
pyopenssl@17.5.0-1ubuntu1
26.0.0
17.5.0-1ubuntu1+esm1
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
pyopenssl@17.5.0
pyopenssl@17.5.0-1ubuntu1
26.0.0
17.5.0-1ubuntu1+esm1
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
pyopenssl@19.1.0
26.0.0
1
localstack/localstack:3.19d278167f2b7
pyopenssl@24.0.0
26.0.0
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
pyopenssl@22.0.0
26.0.0
1
lsstsqre/prepuller:latest19c2dfc4e4ff
pyopenssl@20.0.1
26.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.