StackRadar

CVE-2026-27448

Medium

Advisory

Published 16 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
305
of 17,781 indexed, latest versions
Container images
186
deployed by those charts
Fix available
2 of 2
affected packages

pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

Carried by container images the latest versions of 305 of 17,781 indexed charts deploy, on 186 images.

Affected packageAffected versionsFixed inImages
pyopensslpypi16.2.0, 17.3.0, 17.5.0, 18.0.0+18 more26.0.0186
pyopenssldeb17.5.0-1ubuntu1, 23.2.0-117.5.0-1ubuntu1+esm1, 23.2.0-1ubuntu0.14
OSV records
GHSA-vp96-hxj8-p424UBUNTU-CVE-2026-27448
Also known as
PYSEC-2026-2268, USN-8115-1, USN-8335-1

Charts affected

305 by stars
ChartLatestAffected imagesRadar Score
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
pyopenssl@19.1.0
26.0.0

Open the chart page →

13,156
mysqlcomet-mysql-helmVerified publisher1.0.71 of 1See more

mysql comet-mysql-helm 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.4.2ac80b6e09e5b
pyopenssl@24.1.0
26.0.0

Open the chart page →

1,055
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
pyopenssl@19.0.0
26.0.0

Open the chart page →

3,871
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
pyopenssl@23.0.0
26.0.0

Open the chart page →

2,348
jupyterhubd4nVerified publisher3.3.72 of 7See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
pyopenssl@24.1.0
26.0.0
aristidetm/k8s-hub:3.3.7ccb516cb8474
pyopenssl@24.1.0
26.0.0

Open the chart page →

16,604
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
pyopenssl@23.2.0
26.0.0

Open the chart page →

6,179
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
pyopenssl@24.2.1
26.0.0

Open the chart page →

5,062
pagesdavid-pages1.0.01 of 3See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
pagesdebasish-pages1.0.01 of 3See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
pyopenssl@24.2.1
26.0.0

Open the chart page →

6,075
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
pyopenssl@19.1.0
26.0.0

Open the chart page →

4,422
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
pyopenssl@25.3.0
26.0.0

Open the chart page →

2,305
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
pyopenssl@23.2.0
26.0.0

Open the chart page →

14,856
mysqldev-krishan-dhaka-charts1.0.11 of 1See more

mysql dev-krishan-dhaka-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
pyopenssl@24.3.0
26.0.0

Open the chart page →

19,224
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
pyopenssl@24.1.0
26.0.0

Open the chart page →

14,627
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
pyopenssl@19.1.0
26.0.0

Open the chart page →

4,550
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
pyopenssl@21.0.0
26.0.0

Open the chart page →

1,990
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
pyopenssl@19.1.0
26.0.0

Open the chart page →

5,055
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
pyopenssl@22.1.0
26.0.0

Open the chart page →

25,122
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

27,537
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

27,537
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

27,537
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

4,678
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
pyopenssl@25.0.0
26.0.0

Open the chart page →

2,885
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
pyopenssl@25.1.0
26.0.0

Open the chart page →

2,785
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
pyopenssl@19.0.0
26.0.0

Open the chart page →

14,673
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

5,704
ishare-satellitefiware1.3.21 of 1See more

ishare-satellite fiware 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
pyopenssl@22.0.0
26.0.0

Open the chart page →

1,778
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
pyopenssl@25.0.0
pyopenssl@23.2.0-1
26.0.0
23.2.0-1ubuntu0.1

Open the chart page →

5,292
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

5,704
flask-appflask-mysqlVerified publisher1.0.11 of 2See more

flask-app flask-mysql 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

4,073
spectergaloymoney0.3.11 of 1See more

specter galoymoney 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,691
spectergaloymoney20.3.11 of 1See more

specter galoymoney2 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,691
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
pyopenssl@20.0.1
26.0.0

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
pyopenssl@17.5.0
pyopenssl@17.5.0-1ubuntu1
26.0.0
17.5.0-1ubuntu1+esm1

Open the chart page →

13,551
openemrgeek-cookbookVerified publisher5.2.01 of 1See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
openemr/openemr:6.1.089eaa6d9a4e3
pyopenssl@22.0.0
26.0.0

Open the chart page →

8,392
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
pyopenssl@19.1.0
26.0.0

Open the chart page →

2,643
pyloadgeek-cookbookVerified publisher6.4.21 of 1See more

pyload geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,236
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
pyopenssl@24.2.1
26.0.0

Open the chart page →

8,923
whooglegeek-cookbookVerified publisher3.4.21 of 1See more

whoogle geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
pyopenssl@19.1.0
26.0.0

Open the chart page →

2,061
mysqlgengxiankun-charts0.2.01 of 1See more

mysql gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
mysqlgroundhog2k3.1.41 of 1See more

mysql groundhog2k 3.1.4

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
tautullihalkeye1.1.41 of 2See more

tautulli halkeye 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
tautulli/tautulli:v2.7.7c4da15f058ea
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,473

Container images carrying it

186 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
lsstsqre/sciplat-hub:latest5e0ade6bed1c
pyopenssl@20.0.1
26.0.0
1
lsstsqre/wfdispatcher:lateste9feb99f524d
pyopenssl@20.0.1
26.0.0
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
pyopenssl@24.3.0
26.0.0
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
pyopenssl@22.0.0
26.0.0
1
matrixdotorg/synapse:v1.78.0def97fd537d8
pyopenssl@23.0.0
26.0.0
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
pyopenssl@19.1.0
26.0.0
1
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
pyopenssl@18.0.0
26.0.0
1
netbirdio/dashboard:v2.90.101b59e1c905c9
pyopenssl@20.0.1
26.0.0
1
netbirdio/dashboard:v2.90.2332cc31f5f35
pyopenssl@20.0.1
26.0.0
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
pyopenssl@19.1.0
26.0.0
1
nlmacamp/check_mk:latest5dbb8589f824
pyopenssl@16.2.0
26.0.0
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
pyopenssl@17.5.0
26.0.0
1
openemr/openemr:6.1.089eaa6d9a4e3
pyopenssl@22.0.0
26.0.0
1
openspeedtest/latest:v2.0.0d4d62f4b7d85
pyopenssl@22.1.0
26.0.0
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
pyopenssl@20.0.1
26.0.0
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
pyopenssl@20.0.1
26.0.0
1
openzaak/open-notificaties:1.3.02e65313b9b10
pyopenssl@20.0.1
26.0.0
1
openzaak/open-zaak:1.6.02ca2ea6e0ae9
pyopenssl@21.0.0
26.0.0
1
pangeo/base-notebook:2024.01.155fbe688a4f80
pyopenssl@23.2.0
26.0.0
1
psono/psono-server:5.0.03b974b43ea03
pyopenssl@24.2.1
26.0.0
1
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
pyopenssl@23.3.0
26.0.0
1
redash/redash:25.8.000d813437db5
pyopenssl@24.2.1
26.0.0
1
redash/redash:10.0.0.b503639392753c0376
pyopenssl@19.0.0
26.0.0
1
redash/redash:26.3.0c5c9148f5c38
pyopenssl@24.2.1
26.0.0
1
rook/ceph:v1.20.72f970c425617
pyopenssl@21.0.0
26.0.0
1
rook/ceph:v1.19.2944a1dd70496
pyopenssl@21.0.0
26.0.0
1
saidsef/scapy-containerised:v2025.02f17f7c435891
pyopenssl@25.0.0
26.0.0
1
saltstack/salt:3006.3e9c7906b7a5c
pyopenssl@23.2.0
26.0.0
1
seafileltd/seafile-mc:9.0.106693911bcc40
pyopenssl@22.1.0
26.0.0
1
seafileltd/seafile-mc:10.0.170628f29c663
pyopenssl@23.2.0
26.0.0
1
seafileltd/seafile-mc:9.0.97ac833196f60
pyopenssl@22.0.0
26.0.0
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
pyopenssl@24.2.1
26.0.0
1
sissbruecker/linkding:1.35.00c5dddf0b37c
pyopenssl@24.2.1
26.0.0
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
pyopenssl@24.2.1
26.0.0
1
softonic/gar-exporter:0.2.1a64d6c0e0ae5
pyopenssl@19.1.0
26.0.0
1
stackstorm/st2actionrunner:3.888235ba70cad
pyopenssl@23.1.0
26.0.0
1
stackstorm/st2api:3.86f56d239d280
pyopenssl@23.1.0
26.0.0
1
stackstorm/st2auth:3.833ecfda16608
pyopenssl@23.1.0
26.0.0
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
pyopenssl@23.1.0
26.0.0
1
stackstorm/st2notifier:3.8f190a6212195
pyopenssl@23.1.0
26.0.0
1
stackstorm/st2rulesengine:3.8259503496ff9
pyopenssl@23.1.0
26.0.0
1
stackstorm/st2scheduler:3.8b1de2055c362
pyopenssl@23.1.0
26.0.0
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
pyopenssl@23.1.0
26.0.0
1
stackstorm/st2stream:3.81c8904a3bf67
pyopenssl@23.1.0
26.0.0
1
stackstorm/st2timersengine:3.81bf35bfaf00c
pyopenssl@23.1.0
26.0.0
1
stackstorm/st2workflowengine:3.819fdfffdbba8
pyopenssl@23.1.0
26.0.0
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
pyopenssl@21.0.0
26.0.0
1
tautulli/tautulli:v2.7.7c4da15f058ea
pyopenssl@20.0.1
26.0.0
1
voltha/voltha-cli:1.6.0c4e41e92f046
pyopenssl@17.3.0
26.0.0
1
voltha/voltha-netconf:1.6.037f80524c207
pyopenssl@17.3.0
26.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.