StackRadar

CVE-2026-27448

Medium

Advisory

Published 16 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
305
of 17,781 indexed, latest versions
Container images
186
deployed by those charts
Fix available
2 of 2
affected packages

pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

Carried by container images the latest versions of 305 of 17,781 indexed charts deploy, on 186 images.

Affected packageAffected versionsFixed inImages
pyopensslpypi16.2.0, 17.3.0, 17.5.0, 18.0.0+18 more26.0.0186
pyopenssldeb17.5.0-1ubuntu1, 23.2.0-117.5.0-1ubuntu1+esm1, 23.2.0-1ubuntu0.14
OSV records
GHSA-vp96-hxj8-p424UBUNTU-CVE-2026-27448
Also known as
PYSEC-2026-2268, USN-8115-1, USN-8335-1

Charts affected

305 by stars
ChartLatestAffected imagesRadar Score
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
pyopenssl@19.1.0
26.0.0

Open the chart page →

13,156
mysqlcomet-mysql-helmVerified publisher1.0.71 of 1See more

mysql comet-mysql-helm 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.4.2ac80b6e09e5b
pyopenssl@24.1.0
26.0.0

Open the chart page →

1,055
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
pyopenssl@19.0.0
26.0.0

Open the chart page →

3,871
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
pyopenssl@23.0.0
26.0.0

Open the chart page →

2,348
jupyterhubd4nVerified publisher3.3.72 of 7See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
pyopenssl@24.1.0
26.0.0
aristidetm/k8s-hub:3.3.7ccb516cb8474
pyopenssl@24.1.0
26.0.0

Open the chart page →

16,604
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
pyopenssl@23.2.0
26.0.0

Open the chart page →

6,179
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
pyopenssl@24.2.1
26.0.0

Open the chart page →

5,062
pagesdavid-pages1.0.01 of 3See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
pagesdebasish-pages1.0.01 of 3See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
pyopenssl@24.2.1
26.0.0

Open the chart page →

6,075
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
pyopenssl@19.1.0
26.0.0

Open the chart page →

4,422
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
pyopenssl@25.3.0
26.0.0

Open the chart page →

2,305
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
pyopenssl@23.2.0
26.0.0

Open the chart page →

14,856
mysqldev-krishan-dhaka-charts1.0.11 of 1See more

mysql dev-krishan-dhaka-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
pyopenssl@24.3.0
26.0.0

Open the chart page →

19,224
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
pyopenssl@24.1.0
26.0.0

Open the chart page →

14,627
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
pyopenssl@19.1.0
26.0.0

Open the chart page →

4,550
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
pyopenssl@21.0.0
26.0.0

Open the chart page →

1,990
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
pyopenssl@19.1.0
26.0.0

Open the chart page →

5,055
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
pyopenssl@22.1.0
26.0.0

Open the chart page →

25,122
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

27,537
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

27,537
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

27,537
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

4,678
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
pyopenssl@25.0.0
26.0.0

Open the chart page →

2,885
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
pyopenssl@25.1.0
26.0.0

Open the chart page →

2,785
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
pyopenssl@19.0.0
26.0.0

Open the chart page →

14,673
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

5,704
ishare-satellitefiware1.3.21 of 1See more

ishare-satellite fiware 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
pyopenssl@22.0.0
26.0.0

Open the chart page →

1,778
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
pyopenssl@25.0.0
pyopenssl@23.2.0-1
26.0.0
23.2.0-1ubuntu0.1

Open the chart page →

5,292
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

5,704
flask-appflask-mysqlVerified publisher1.0.11 of 2See more

flask-app flask-mysql 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

4,073
spectergaloymoney0.3.11 of 1See more

specter galoymoney 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,691
spectergaloymoney20.3.11 of 1See more

specter galoymoney2 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,691
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
pyopenssl@20.0.1
26.0.0

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
pyopenssl@17.5.0
pyopenssl@17.5.0-1ubuntu1
26.0.0
17.5.0-1ubuntu1+esm1

Open the chart page →

13,551
openemrgeek-cookbookVerified publisher5.2.01 of 1See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
openemr/openemr:6.1.089eaa6d9a4e3
pyopenssl@22.0.0
26.0.0

Open the chart page →

8,392
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
pyopenssl@19.1.0
26.0.0

Open the chart page →

2,643
pyloadgeek-cookbookVerified publisher6.4.21 of 1See more

pyload geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,236
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
pyopenssl@24.2.1
26.0.0

Open the chart page →

8,923
whooglegeek-cookbookVerified publisher3.4.21 of 1See more

whoogle geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
pyopenssl@19.1.0
26.0.0

Open the chart page →

2,061
mysqlgengxiankun-charts0.2.01 of 1See more

mysql gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
mysqlgroundhog2k3.1.41 of 1See more

mysql groundhog2k 3.1.4

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
tautullihalkeye1.1.41 of 2See more

tautulli halkeye 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
tautulli/tautulli:v2.7.7c4da15f058ea
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,473

Container images carrying it

186 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
voltha/voltha-ofagent:1.6.09ee8c1f4428c
pyopenssl@17.3.0
26.0.0
1
voltha/voltha-tester:1.7.0655c3048a602
pyopenssl@17.3.0
26.0.0
1
voltha/voltha-voltha:1.6.0ff596b62de59
pyopenssl@17.3.0
26.0.0
1
yetiplatform/yeti:2.9.09bcbe2650a14
pyopenssl@25.0.0
26.0.0
1
yetiplatform/yeti:latest9c3006cedcca
pyopenssl@25.0.0
26.0.0
1
ygqygq2/mysql-exec-sql:latest54f30def1558
pyopenssl@23.2.0
26.0.0
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
pyopenssl@24.1.0
26.0.0
1
ghcr.io/dask/dask:2024.1.0080150de7d86
pyopenssl@23.2.0
26.0.0
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
pyopenssl@19.0.0
26.0.0
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
pyopenssl@24.1.0
26.0.0
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
pyopenssl@25.0.0
26.0.0
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
pyopenssl@25.3.0
26.0.0
1
ghcr.io/grycap/im:latest06a16d4f279f
pyopenssl@25.3.0
26.0.0
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
pyopenssl@25.0.0
26.0.0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
pyopenssl@25.3.0
26.0.0
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
pyopenssl@22.0.0
26.0.0
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
pyopenssl@23.2.0
26.0.0
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
pyopenssl@25.3.0
26.0.0
1
ghcr.io/kokuwaio/gcloud-mysql:v3.2.1963098135c550
pyopenssl@24.1.0
26.0.0
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
pyopenssl@24.2.1
26.0.0
1
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
pyopenssl@20.0.1
26.0.0
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
pyopenssl@25.3.0
26.0.0
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
pyopenssl@22.0.0
26.0.0
1
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
pyopenssl@24.1.0
26.0.0
1
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
pyopenssl@24.1.0
26.0.0
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
pyopenssl@24.1.0
26.0.0
1
ghcr.io/wittdennis/calibre-web:1.1.1aa7d5d5dd6be
pyopenssl@24.2.1
26.0.0
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
pyopenssl@24.1.0
26.0.0
1
mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.76e43ba0bd009
pyopenssl@24.2.1
26.0.0
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
pyopenssl@25.1.0
26.0.0
1
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
pyopenssl@24.2.1
26.0.0
1
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
pyopenssl@25.0.0
26.0.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
pyopenssl@22.0.0
26.0.0
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
pyopenssl@22.0.0
26.0.0
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
pyopenssl@23.3.0
26.0.0
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
pyopenssl@22.0.0
26.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.