StackRadar

CVE-2026-28388

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.009
57th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,308
of 17,792 indexed, latest versions
Container images
2,570
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-28388 affecting package openssl for versions less than 3.3.5-5

Carried by container images the latest versions of 2,308 of 17,792 indexed charts deploy, on 2,570 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more1.0.1f-1ubuntu2.27+esm13, 1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3+5 more1,665
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0902
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm415
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl33.3.5-53
OSV records
ALPINE-CVE-2026-28388CGA-2c5c-rx22-cxxfCGA-92mm-ffw5-fq49DEBIAN-CVE-2026-28388UBUNTU-CVE-2026-28388AZL-81953ECHO-4471-00bd-faf3
Also known as
CGA-j9vv-xrrm-g5v2, CGA-xx8c-47rc-27jj, USN-8155-1, USN-8155-2

Charts affected

2,308 by stars
ChartLatestAffected imagesRadar Score
dapr-agentsdapr-agents-devVerified publisher0.1.55 of 31See more

dapr-agents dapr-agents-dev 0.1.5

5 of the 31 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
openssl@3.5.5-r0
3.5.6-r0
kiwigrid/k8s-sidecar:1.30.98c06e1ba643a
openssl@3.5.1-r0
3.5.6-r0
library/memcached:1.6.39-alpinec8503d4491ed
openssl@3.5.4-r0
3.5.6-r0
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
openssl@3.6.0-r4
3.6.2-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

22,370
dns-mesh-controllerdashdns2.0.81 of 2See more

dns-mesh-controller dashdns 2.0.8

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
emirozbir/dashdns-admission-webhook:v2.0.56801ba2a3fc3
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

1,103
dasherdasher0.1.11 of 1See more

dasher dasher 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
ghcr.io/flohansen/dasher-server:latest7cde8c3fa2d1
openssl@3.3.1-r3
3.3.7-r0

Open the chart page →

1,096
dask-gatewaydask2026.3.01 of 2See more

dask-gateway dask 2026.3.0

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
library/traefik:3.3.5104204dadedf
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

2,002
mongodb-bi-connectordasmeta1.0.31 of 1See more

mongodb-bi-connector dasmeta 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
dasmeta/mongodb-bi-connector:1.0.3fa657960dfec
openssl@1.1.1-1ubuntu2.1~18.04.21
openssl1.0@1.0.2n-1ubuntu5.11
1.1.1-1ubuntu2.1~18.04.23+esm8
1.0.2n-1ubuntu5.13+esm4

Open the chart page →

5,849
pgcatdasmeta0.1.31 of 2See more

pgcat dasmeta 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

3,170
proxysqldasmeta1.2.31 of 1See more

proxysql dasmeta 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
proxysql/proxysql:2.7.3a4d6c35c2949
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

2,888
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
openssl@3.0.18-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

5,157
sentry-relaydasmeta0.1.21 of 1See more

sentry-relay dasmeta 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
getsentry/relay:24.10.0ba7bf9163219
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

3,598
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
grafana/fluent-plugin-loki:latest8a3882e8c28b
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

3,227
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
openssl@1.1.0g-2ubuntu4.3
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

27,826
datacube-datadatacube-charts0.2.61 of 1See more

datacube-data datacube-charts 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
openssl@1.1.1-1ubuntu2.1~18.04.6
openssl1.0@1.0.2n-1ubuntu5.3
1.1.1-1ubuntu2.1~18.04.23+esm8
1.0.2n-1ubuntu5.13+esm4

Open the chart page →

18,917
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.9

Open the chart page →

6,211
datacube-owsdatacube-charts0.20.11 of 1See more

datacube-ows datacube-charts 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.9

Open the chart page →

6,062
datacube-processingdatacube-charts0.1.11 of 2See more

datacube-processing datacube-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
opendatacube/pipelines:wofs-1.225d810e8504b8
openssl@1.1.0g-2ubuntu4.3
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

22,503
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23

Open the chart page →

6,257
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
openssl@1.1.0g-2ubuntu4.3
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

24,434
private-action-runnerdatadogVerified publisher1.28.11 of 1See more

private-action-runner datadog 1.28.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9

Open the chart page →

2,176
datagrokdatagrok1.0.31 of 7See more

datagrok datagrok 1.0.3

1 of the 7 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
datagrok/grok_connect:latestf5876d3aebb8
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

2,383
datagrok_grok_connectdatagrok1.0.01 of 1See more

datagrok_grok_connect datagrok 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
datagrok/grok_connect:latestf5876d3aebb8
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

1,675
eg-edge-stackdatawire0.0.11 of 7See more

eg-edge-stack datawire 0.0.1

1 of the 7 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

15,882
pagesdavid-pages1.0.02 of 3See more

pages david-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm3
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,262
giphy-appdavidy-helm-charts-repository0.1.21 of 1See more

giphy-app davidy-helm-charts-repository 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
davidy/giphy-app:1.0.2-arm41b2355cc23a
openssl@3.3.2-r1
3.3.7-r0

Open the chart page →

704
db-connection-testdb-connection-testVerified publisher0.1.01 of 1See more

db-connection-test db-connection-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
felipecs8/app-db-connection-test:v129e06c9c6385
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

10,166
myfirstchartdcn-helmchartrepo0.3.01 of 1See more

myfirstchart dcn-helmchartrepo 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
sinhasaurabh09/dcn-portal:v1.2c0d08847ddbb
openssl@3.3.2-r1
3.3.7-r0

Open the chart page →

382
pagesdebasish-pages1.0.02 of 3See more

pages debasish-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm3
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,262
intel-gpu-exporterdefault-ghVerified publisher0.1.01 of 1See more

intel-gpu-exporter default-gh 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
andrewgolikov55/intel-gpu-exporter:latestfcc001b61c0e
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23

Open the chart page →

4,868
isponsorblocktvdefault-ghVerified publisher1.0.51 of 1See more

isponsorblocktv default-gh 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
ghcr.io/dmunozv04/isponsorblocktv:v2.9.05b8cfa805cb6
openssl@3.3.5-r0
3.3.7-r0

Open the chart page →

547
linkdingdeimosfr-charts1.0.31 of 1See more

linkding deimosfr-charts 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.35.00c5dddf0b37c
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

6,098
dell-fan-controllerdell-fan-controllerVerified publisher1.0.71 of 1See more

dell-fan-controller dell-fan-controller 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.9

Open the chart page →

2,574
deploy-elibrarydeploy-elibrary-helm0.1.01 of 1See more

deploy-elibrary deploy-elibrary-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
psorab/elibrary:latest53b68896c4ce
openssl@1.1.1f-1ubuntu2.18
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,275
deploy-elibrarydeploy-elibrary-oo0.1.01 of 1See more

deploy-elibrary deploy-elibrary-oo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
jedi132000/nextapp:latestdc2a81e92f23
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

8,171
deployhubdeployhubVerified publisher10.0.4156 of 11See more

deployhub deployhub 10.0.415

6 of the 11 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
openssl@3.5.4-r0
3.5.6-r0
quay.io/deployhub/ms-ui:svccat-v11.0.815-g717581f5dedbc31e6f
openssl@3.5.4-r0
3.5.6-r0
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
openssl@3.6.0-r6
3.6.2-r0
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
openssl@3.6.0-r6
3.6.2-r0
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
openssl@3.6.0-r6
3.6.2-r0
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
openssl@3.6.0-r6
3.6.2-r0

Open the chart page →

11,197
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

14,927
desishowbiz-frontenddesishowbiz1.0.01 of 1See more

desishowbiz-frontend desishowbiz 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
rahulbhiwagade122/desishowbiz:latest08490b70998c
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

2,533
clamav-apidevhatVerified publisher1.0.11 of 1See more

clamav-api devhat 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
openssl@3.3.2-r4
3.3.7-r0

Open the chart page →

2,099
apachedevops0.1.02 of 4See more

apache devops 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.23
ghcr.io/codingducksrl/laravel:8.15be52524664c
nodejs@16.18.0-deb-1nodesource1
openssl@3.0.2-0ubuntu1.6
no fix listed
3.0.2-0ubuntu1.23

Open the chart page →

30,234
laraveldevops0.10.32 of 4See more

laravel devops 0.10.3

2 of the 4 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
library/mariadb:10.9.4fbb8456ebdb1
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23
ghcr.io/codingducksrl/laravel:8.15be52524664c
nodejs@16.18.0-deb-1nodesource1
openssl@3.0.2-0ubuntu1.6
no fix listed
3.0.2-0ubuntu1.23

Open the chart page →

29,235
wordpressdevops0.12.01 of 4See more

wordpress devops 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
library/mariadb:10.8.30abf60f81588
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.23

Open the chart page →

13,047
devops-diplomdevops-diplom-chartVerified publisher0.8.01 of 2See more

devops-diplom devops-diplom-chart 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
library/postgres:13-alpinefb9065b6e3e2
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

2,549
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

9,703
argocd-certificate-refreshdevtron0.10.81 of 1See more

argocd-certificate-refresh devtron 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23

Open the chart page →

13,033
calertdevtron0.0.11 of 1See more

calert devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

4,699
devtron-enterprisedevtron48.0.08 of 28See more

devtron-enterprise devtron 48.0.0

8 of the 28 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
quay.io/devtron/git-sensor:94237c18-950-3941803c7bf249aa1
openssl@3.3.2-r4
3.3.7-r0
quay.io/devtron/image-scanner:94237c18-109-3942098580969b333
openssl@3.3.2-r4
3.3.7-r0
quay.io/devtron/inception:7beef376-948-313784c3b91bebd3d
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm15
quay.io/devtron/kubewatch:09867a9c-419-39288d30a7c640c63
openssl@3.3.2-r4
3.3.7-r0
quay.io/devtron/lens:3b3d6d0e-333-39292e886b8d2b54b
openssl@3.3.2-r4
3.3.7-r0
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
quay.io/devtron/postgres:14.91b594392f7cb
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

68,765
devtron-logs-dumpdevtron0.1.01 of 1See more

devtron-logs-dump devtron 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23

Open the chart page →

4,979
dgraphdevtron0.0.201 of 1See more

dgraph devtron 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
dgraph/dgraph:v21.12.03b55ea83fffe
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

11,981
migration-incluster-cddevtron0.10.01 of 1See more

migration-incluster-cd devtron 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
library/postgres:122f2a8c2a7d10
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

3,927
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

9,703
argocd-certificate-refreshdevtron-labs0.10.81 of 1See more

argocd-certificate-refresh devtron-labs 0.10.8

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
quay.io/devtron/argocd-cert-refresh:v102b6db27eaf3d
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23

Open the chart page →

13,033
calertdevtron-labs0.0.11 of 1See more

calert devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container imageDigestPackageFixed in
quay.io/devtron/google-chat-alert-manager:v2.0.239f2c6e0af38
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

4,699

Container images carrying it

2,570 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
oada/sync-handler:4.0.0b7a2cfc137cf
openssl@3.5.1-r0
3.5.6-r0
1
oada/users:4.0.0b6c562fa5b1b
openssl@3.5.1-r0
3.5.6-r0
1
oada/webhooks:4.0.06590c60de347
openssl@3.5.1-r0
3.5.6-r0
1
oada/well-known:4.0.07943fde43b19
openssl@3.5.1-r0
3.5.6-r0
1
oada/write-handler:4.0.08464c7f48aae
openssl@3.5.1-r0
3.5.6-r0
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
openssl@3.5.5-r0
3.5.6-r0
1
obolnetwork/helios:e10e753cb7e97d39d46
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
octoboxio/octobox:latestd909041c46eb
openssl@3.5.4-r0
3.5.6-r0
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
openssl@3.3.2-r0
3.3.7-r0
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
oled01/automx2:2025.1.105d3e398e675
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
oled01/db-backup:0.1.06302fd2b5333
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23
1
oliver006/redis_exporter:v1.82.0-alpineda9e89ee4e75
openssl@3.5.5-r0
3.5.6-r0
1
olvid/bot-daemon:2.0.1e0e6b165d879
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9
1
omecproject/c3po-hss:master-latest638671ef4842
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm15
1
omecproject/c3po-hssdb:master-latest28a90cc26716
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm3
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
openssl@1.1.0g-2ubuntu4.3
1.1.1-1ubuntu2.1~18.04.23+esm8
1
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
openssl@1.1.1-1ubuntu2.1~18.04.6
openssl1.0@1.0.2n-1ubuntu5.4
1.1.1-1ubuntu2.1~18.04.23+esm8
1.0.2n-1ubuntu5.13+esm4
1
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
openssl@1.1.1-1ubuntu2.1~18.04.9
openssl1.0@1.0.2n-1ubuntu5.6
1.1.1-1ubuntu2.1~18.04.23+esm8
1.0.2n-1ubuntu5.13+esm4
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8
1
omecproject/onos-progran:1.0.05715e5648aa0
nodejs@8.9.4-1nodesource1
openssl@1.0.2g-1ubuntu4.10
no fix listed
1.0.2g-1ubuntu4.20+esm15
1
omecproject/openmme:master-latest64776cb9edb3
openssl@1.0.2g-1ubuntu4.17
1.0.2g-1ubuntu4.20+esm15
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm15
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
onosproject/onos:2.2.144914a8d4b3f
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8
1
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
openssl@1.0.2g-1ubuntu4.6
1.0.2g-1ubuntu4.20+esm15
1
opea/asr:1.025dd26d9cd09
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
opea/chatqna:1.038c51b791efa
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
opea/chatqna-conversation-ui:v0.9bdb9ec215872
openssl@3.3.1-r3
3.3.7-r0
1
opea/codegen:1.058f91683892d
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
opea/codegen-ui:1.02bee4eb66f3e
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
opea/codetrans:1.0e2436483b73d
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
opea/codetrans-ui:1.03ef121f34610
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
opea/docsum:1.03eaa91849512
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
opea/docsum-ui:1.07f854e9bffaf
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
opea/guardrails-tgi:1.0262c6048aab8
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
opea/guardrails-tgi:latestf68bec6a1271
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
opea/speecht5:1.0249afad3d268
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
opea/tts:1.0257ae94709e9
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
opea/web-retriever-chroma:1.0fe08165d7770
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
openbas/caldera-server:5.1.0a277796d9724
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
openbas/platform:2.0.5d986d80b0a75
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
1
opencsghq/csghub-server:v2.5.0-ee587046575c2c
openssl@3.0.18-1~deb12u1
3.0.19-1~deb12u2
1
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
openssl@3.0.18-1~deb12u1
3.0.19-1~deb12u2
1
opencsghq/csgship-portal:v1.2.1865814dc87a1
openssl@3.3.3-r0
3.3.7-r0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.