StackRadar

CVE-2026-27448

Medium

Advisory

Published 16 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
305
of 17,781 indexed, latest versions
Container images
186
deployed by those charts
Fix available
2 of 2
affected packages

pyOpenSSL allows TLS connection bypass via unhandled callback exception in set_tlsext_servername_callback

Carried by container images the latest versions of 305 of 17,781 indexed charts deploy, on 186 images.

Affected packageAffected versionsFixed inImages
pyopensslpypi16.2.0, 17.3.0, 17.5.0, 18.0.0+18 more26.0.0186
pyopenssldeb17.5.0-1ubuntu1, 23.2.0-117.5.0-1ubuntu1+esm1, 23.2.0-1ubuntu0.14
OSV records
GHSA-vp96-hxj8-p424UBUNTU-CVE-2026-27448
Also known as
PYSEC-2026-2268, USN-8115-1, USN-8335-1

Charts affected

305 by stars
ChartLatestAffected imagesRadar Score
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
pyopenssl@19.1.0
26.0.0

Open the chart page →

13,156
mysqlcomet-mysql-helmVerified publisher1.0.71 of 1See more

mysql comet-mysql-helm 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.4.2ac80b6e09e5b
pyopenssl@24.1.0
26.0.0

Open the chart page →

1,055
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
pyopenssl@19.0.0
26.0.0

Open the chart page →

3,871
pagescrypticcode-helmchart1.0.01 of 3See more

pages crypticcode-helmchart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
pyopenssl@23.0.0
26.0.0

Open the chart page →

2,348
jupyterhubd4nVerified publisher3.3.72 of 7See more

jupyterhub d4n 3.3.7

2 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
pyopenssl@24.1.0
26.0.0
aristidetm/k8s-hub:3.3.7ccb516cb8474
pyopenssl@24.1.0
26.0.0

Open the chart page →

16,604
pagesdalston-pages1.0.01 of 3See more

pages dalston-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.01 of 3See more

pages daman-dell-kuber 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
pyopenssl@23.2.0
26.0.0

Open the chart page →

6,179
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
pyopenssl@24.2.1
26.0.0

Open the chart page →

5,062
pagesdavid-pages1.0.01 of 3See more

pages david-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
pagesdebasish-pages1.0.01 of 3See more

pages debasish-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
pyopenssl@24.2.1
26.0.0

Open the chart page →

6,075
mlflowdeliveryheroVerified publisher1.0.101 of 1See more

mlflow deliveryhero 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
pyopenssl@19.1.0
26.0.0

Open the chart page →

4,422
supersetdeliveryheroVerified publisher1.1.31 of 1See more

superset deliveryhero 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
pyopenssl@25.3.0
26.0.0

Open the chart page →

2,305
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
pyopenssl@23.2.0
26.0.0

Open the chart page →

14,856
mysqldev-krishan-dhaka-charts1.0.11 of 1See more

mysql dev-krishan-dhaka-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
pyopenssl@24.3.0
26.0.0

Open the chart page →

19,224
pagesdipak1.0.01 of 3See more

pages dipak 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
pyopenssl@24.1.0
26.0.0

Open the chart page →

14,627
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
pyopenssl@19.1.0
26.0.0

Open the chart page →

4,550
rook-cephdtrdnk-helm-chartsVerified publisher0.0.11 of 2See more

rook-ceph dtrdnk-helm-charts 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
rook/ceph:v1.19.2944a1dd70496
pyopenssl@21.0.0
26.0.0

Open the chart page →

1,990
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
pyopenssl@19.1.0
26.0.0

Open the chart page →

5,055
pagesedgwarepages1.0.01 of 3See more

pages edgwarepages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
pyopenssl@22.1.0
26.0.0

Open the chart page →

25,122
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

27,537
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

27,537
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
pyopenssl@25.3.0
26.0.0

Open the chart page →

27,537
escvmschedulerescvmscheduler1.0.71 of 3See more

escvmscheduler escvmscheduler 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

4,678
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
pyopenssl@25.0.0
26.0.0

Open the chart page →

2,885
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
pyopenssl@25.1.0
26.0.0

Open the chart page →

2,785
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
pyopenssl@19.0.0
26.0.0

Open the chart page →

14,673
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

5,704
ishare-satellitefiware1.3.21 of 1See more

ishare-satellite fiware 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
pyopenssl@22.0.0
26.0.0

Open the chart page →

1,778
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
pyopenssl@25.0.0
pyopenssl@23.2.0-1
26.0.0
23.2.0-1ubuntu0.1

Open the chart page →

5,292
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

5,704
flask-appflask-mysqlVerified publisher1.0.11 of 2See more

flask-app flask-mysql 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0

Open the chart page →

4,073
spectergaloymoney0.3.11 of 1See more

specter galoymoney 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,691
spectergaloymoney20.3.11 of 1See more

specter galoymoney2 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,691
pagesgary-pages1.0.01 of 3See more

pages gary-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

20,190
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
pyopenssl@20.0.1
26.0.0

Open the chart page →

16,123
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
pyopenssl@17.5.0
pyopenssl@17.5.0-1ubuntu1
26.0.0
17.5.0-1ubuntu1+esm1

Open the chart page →

13,551
openemrgeek-cookbookVerified publisher5.2.01 of 1See more

openemr geek-cookbook 5.2.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
openemr/openemr:6.1.089eaa6d9a4e3
pyopenssl@22.0.0
26.0.0

Open the chart page →

8,392
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
pyopenssl@19.1.0
26.0.0

Open the chart page →

2,643
pyloadgeek-cookbookVerified publisher6.4.21 of 1See more

pyload geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,236
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
pyopenssl@24.2.1
26.0.0

Open the chart page →

8,923
whooglegeek-cookbookVerified publisher3.4.21 of 1See more

whoogle geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
pyopenssl@19.1.0
26.0.0

Open the chart page →

2,061
mysqlgengxiankun-charts0.2.01 of 1See more

mysql gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
mysqlgroundhog2k3.1.41 of 1See more

mysql groundhog2k 3.1.4

1 of the 1 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
pyopenssl@25.3.0
26.0.0

Open the chart page →

463
tautullihalkeye1.1.41 of 2See more

tautulli halkeye 1.1.4

1 of the 2 container images this version deploys carry CVE-2026-27448.

Container imageDigestPackageFixed in
tautulli/tautulli:v2.7.7c4da15f058ea
pyopenssl@20.0.1
26.0.0

Open the chart page →

1,473

Container images carrying it

186 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/mysql:8.07dcddc01f13b
pyopenssl@25.3.0
26.0.0
89
library/mysql:5.74bc6bc963e6d
pyopenssl@20.0.1
26.0.0
22
library/mysql:8:8.4:8.4.11b3b90af2a655
pyopenssl@25.3.0
26.0.0
16
library/mysql:9.7.2257388edf9c8
pyopenssl@25.3.0
26.0.0
6
apache/superset:6.1.0:latest16b50bbef664
pyopenssl@25.3.0
26.0.0
3
mysql/mysql-server:latestd6c8301b7834
pyopenssl@22.0.0
26.0.0
3
amancevice/superset:0.35.212a0a9e66550
pyopenssl@19.1.0
26.0.0
2
cs3org/wopiserver:v9.4.202a9e78757b4
pyopenssl@23.0.0
26.0.0
2
larribas/mlflow:1.9.105ccb0b46bfb
pyopenssl@19.1.0
26.0.0
2
library/mysql:8.2.0212fe73edca5
pyopenssl@23.2.0
26.0.0
2
library/mysql:8.4.2ac80b6e09e5b
pyopenssl@24.1.0
26.0.0
2
library/mysql:9.7.2b2cf29815e62
pyopenssl@25.3.0
26.0.0
2
lncm/specter-desktop:v1.10.536eaa06f99f4
pyopenssl@20.0.1
26.0.0
2
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
pyopenssl@19.1.0
26.0.0
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
pyopenssl@17.5.0
26.0.0
2
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
pyopenssl@25.0.0
26.0.0
2
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
pyopenssl@21.0.0
26.0.0
2
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
pyopenssl@19.0.0
26.0.0
2
alerta/alerta-web:8.5.04786b9eaa606
pyopenssl@21.0.0
26.0.0
1
amd64/mysql:5.7e20a653e0f51
pyopenssl@20.0.1
26.0.0
1
anchore/anchore-engine:v0.10.0bde9eedf639d
pyopenssl@20.0.1
26.0.0
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
pyopenssl@19.1.0
26.0.0
1
apache/airflow:2.8.4-python3.964e58748b6b9
pyopenssl@24.1.0
26.0.0
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
pyopenssl@24.2.1
26.0.0
1
apache/airflow:2.8.1e5560ad0b86e
pyopenssl@23.3.0
26.0.0
1
appwrite/appwrite:1.9.01aaa70127114
pyopenssl@25.3.0
26.0.0
1
aristidetm/basic-notebook:3.6.5469dbc951224
pyopenssl@24.1.0
26.0.0
1
aristidetm/k8s-hub:3.3.7ccb516cb8474
pyopenssl@24.1.0
26.0.0
1
assistiot/authorization_db:latestc3adbab6a3e7
pyopenssl@23.2.0
26.0.0
1
baserow/backend:1.31.1e0b3c8130b91
pyopenssl@24.1.0
26.0.0
1
baserow/baserow:1.30.1df0c42eb67e8
pyopenssl@24.1.0
26.0.0
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
pyopenssl@19.1.0
26.0.0
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
pyopenssl@24.2.1
26.0.0
1
bnjbvr/kresus:0.22.137e216b182c8
pyopenssl@24.3.0
26.0.0
1
cloudve/ttyd:latestd79c1c5881c0
pyopenssl@19.1.0
26.0.0
1
copyparty/ac:1.19.200a0a8605062c
pyopenssl@25.0.0
26.0.0
1
dannielkil/book-db:latest433290c5c1db
pyopenssl@24.1.0
26.0.0
1
daskdev/dask:1.1.04ecd7bc35500
pyopenssl@18.0.0
26.0.0
1
daskdev/dask-notebook:1.1.0052630f5ca04
pyopenssl@18.0.0
26.0.0
1
datamate/seafile-professional:11.0.202dd66b722464
pyopenssl@25.1.0
26.0.0
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
pyopenssl@24.1.0
26.0.0
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
pyopenssl@24.1.0
26.0.0
1
ddosify/selfhosted_backend:3.2.93c11e3182652
pyopenssl@24.1.0
26.0.0
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
pyopenssl@24.1.0
26.0.0
1
deconzcommunity/deconz:2.12.066541bbb78952
pyopenssl@19.0.0
26.0.0
1
deepflowce/mysql:8.0.313d7ae561cf60
pyopenssl@19.1.0
26.0.0
1
devopstales/kubedash:3.1.08bb837da5aec
pyopenssl@25.0.0
26.0.0
1
devopstales/trivy-operator:2.575136aa7a26e
pyopenssl@23.0.0
26.0.0
1
douz/helpdesk:latest4384103d0219
pyopenssl@19.1.0
26.0.0
1
dysnix/pritunl:v1.29-r819951e3e7a32
pyopenssl@19.1.0
26.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.