CVE-2026-28388

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,304; of 17,803 indexed, latest versions
Container images: 2,567; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-28388 affecting package openssl for versions less than 3.3.5-5

Carried by container images the latest versions of 2,304 of 17,803 indexed charts deploy, on 2,567 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more	1.0.1f-1ubuntu2.27+esm13, 1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3+5 more	1,664
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	900
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm4	15
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3	3.3.5-5	3

OSV records: ALPINE-CVE-2026-28388 CGA-2c5c-rx22-cxxf CGA-92mm-ffw5-fq49 DEBIAN-CVE-2026-28388 UBUNTU-CVE-2026-28388 AZL-81953 ECHO-4471-00bd-faf3
Also known as: CGA-j9vv-xrrm-g5v2, CGA-xx8c-47rc-27jj, USN-8155-1, USN-8155-2

Charts affected

2,304 by stars

Chart

Latest

Affected images

Radar Score

chirpstackmosquitto-helm-chart

0.5.0

1 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.9.0	d056c89b7131	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

96,742

pulsarmosquitto-helm-chart

0.2.0

1 of 1 See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

15,924

tianjimsgbyte

0.1.17

1 of 2 See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
moonrailgun/tianji :1.11.2	b528c8f8fcc4	openssl@3.3.0-r2	3.3.7-r0

Open the chart page →

4,572

adguard-homemt190502

4.0.12

1 of 2 See more

adguard-home mt190502 4.0.12

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.73	7fbf01d73ecb	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,167

commafeedmt190502

8.2.0

1 of 3 See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
athou/commafeed :6.2.0-postgresql	5e388351df1a	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

3,796

copilot-apimt190502

2.3.0

1 of 1 See more

copilot-api mt190502 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/bouquet2/copilot-api-docker :v0.7.0	6b0507a20602	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

488

maddymt190502

4.1.2

1 of 1 See more

maddy mt190502 4.1.2

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
foxcpp/maddy :0.9.2	a4b839985b9b	openssl@3.3.6-r0	3.3.7-r0

Open the chart page →

1,044

memosmt190502

7.3.2

1 of 3 See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
neosmemo/memos :0.26.2	3eefcc231141	openssl@3.3.6-r0	3.3.7-r0

Open the chart page →

2,654

minifluxmt190502

1.1.6

1 of 3 See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.2.18	a3ca6bbc1f74	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

2,729

nightscoutmt190502

1.1.0

1 of 3 See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

6,664

paperless-ngxmt190502

7.6.14

1 of 4 See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	openssl@3.5.5-1~deb13u1	3.5.5-1~deb13u2

Open the chart page →

12,130

radicalemt190502

4.1.1

1 of 1 See more

radicale mt190502 4.1.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
tomsquest/docker-radicale :3.6.1.0	a594c624c5a6	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,542

umamimt190502

8.1.4

1 of 3 See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/umami-software/umami :3.0.3	28f263fe06f7	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

4,073

vaultwardenmt190502

7.3.4

1 of 3 See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.35.4	43498a94b22f	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

4,812

mongodbmulti-chart-app

0.1.0

1 of 1 See more

mongodb multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
library/mongo :7	b096b4cb9269	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

1,998

my-multi-chart-appmulti-chart-app

0.1.0

1 of 2 See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
library/mongo :7	b096b4cb9269	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

3,877

mum-discord-botmum-discord-bot

0.3.7

1 of 1 See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

13,796

devops-demomungari-development-charts

1.0.4

1 of 4 See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	openssl@1.1.1-1ubuntu2.1~18.04.20	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

9,019

pagesmuthu-pages

1.0.0

2 of 3 See more

pages muthu-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm3
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,261

ingress-nginxmxytest

4.15.1

1 of 2 See more

ingress-nginx mxytest 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,541

danboorumy0n

0.0.2

1 of 1 See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

97,407

danbooru-stackmy0n

0.0.3

1 of 4 See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

97,407

clickhousemya

0.2403.1

1 of 1 See more

clickhouse mya 0.2403.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.2	ed9640bfff07	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

3,611

cognativemya

0.2403.3

1 of 3 See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.2	ed9640bfff07	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,396

elasticsearch-chartmy-elasticsearch

0.1.0

1 of 2 See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
library/elasticsearch :7.17.3	5e6ac15bf6a5	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

9,358

my-helm-chartmy-helm-charts-2024

0.1.0

1 of 1 See more

my-helm-chart my-helm-charts-2024 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
shamimkuet/nginx :1.0.2	b82902a76a04	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,369

Practica_4_helmmy-heml-app

0.1.0

3 of 7 See more

Practica_4_helm my-heml-app 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	openssl@1.1.1-1ubuntu2.1~18.04.21	1.1.1-1ubuntu2.1~18.04.23+esm8
library/mongo :5.0.6-focal	8e70544b6c76	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm3
library/rabbitmq :3.9-management	8a279e9396a8	openssl@3.0.2-0ubuntu1.14	3.0.2-0ubuntu1.23

Open the chart page →

27,906

nginx-chartmy-nginx-chart

0.1.0

1 of 1 See more

nginx-chart my-nginx-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
amaraiheanacho/nginx-site :latest	5c86fccf5daa	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

988

mystoremystore-chart

0.1.0

2 of 3 See more

mystore mystore-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
hazegoodlife/haaze :veggiesite	50f02d2d5d4d	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
hazegoodlife/haaze :milksite	8d4c63169e14	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

9,506

myweatherhelmmyweather

1.3.11

4 of 7 See more

myweatherhelm myweather 1.3.11

4 of the 7 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
hecrom/myweatherangularclient :1.3.11	bb0372939c19	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
hecrom/myweatherprocessingreactclient :1.3.11	5454b54d5b28	openssl@3.3.1-r3	3.3.7-r0
library/rabbitmq :3-management	e582c0bc7766	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	openssl@1.1.1-1ubuntu2.1~18.04.23 openssl1.0@1.0.2n-1ubuntu5.13	1.1.1-1ubuntu2.1~18.04.23+esm8 1.0.2n-1ubuntu5.13+esm4

Open the chart page →

18,084

fargate-sidecar-injectormziyabo

0.1.5

1 of 1 See more

fargate-sidecar-injector mziyabo 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
mziyabo/fargate-eks-sidecar-injector :latest	3067dce17983	openssl@3.3.0-r2	3.3.7-r0

Open the chart page →

1,394

nacosnacos-yunye

1.0.3

1 of 1 See more

nacos nacos-yunye 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
nacos/nacos-server :v3.0.1	30a39cb0c54d	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,918

smallandnaj98

0.0.5

1 of 1 See more

smalland naj98 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/98jan/smalland-server/smalland-server :dev	eb7be822d5b2	openssl@1.1.1-1ubuntu2.1~18.04.23	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

3,036

pagesnarain

1.0.0

2 of 3 See more

pages narain 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm3
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,261

pagesnarasimha-pages

1.0.0

2 of 3 See more

pages narasimha-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm3
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,261

akauntingnas-helm-charts

1.0.3

1 of 2 See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
akaunting/akaunting :3.0.15	52811b36ec3a	openssl@3.0.9-1	3.0.19-1~deb12u2

Open the chart page →

12,930

proxy-pynas-helm-charts

1.0.0

1 of 1 See more

proxy-py nas-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
abhinavsingh/proxy.py :latest	51adc989fd03	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

737

pagesnavin-brixton

1.0.0

2 of 3 See more

pages navin-brixton 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm3
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,261

incorencsa

1.38.0

2 of 29 See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/postgresql :16.4.0	3ba6e6f11388	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

15,518

jupyterhub-metricsncsa

1.3.0

1 of 5 See more

jupyterhub-metrics ncsa 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/ncsa/jupyterhub-metrics/collector :1.3.0	dcb8c731bb1b	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

4,168

smilencsa

1.1.0

7 of 23 See more

smile ncsa 1.1.0

7 of the 23 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm3
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	openssl@1.1.1-1ubuntu2.1~18.04.22	1.1.1-1ubuntu2.1~18.04.23+esm8
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	openssl@3.0.9-1	3.0.19-1~deb12u2
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	openssl@1.1.1-1ubuntu2.1~18.04.22	1.1.1-1ubuntu2.1~18.04.23+esm8
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	openssl@3.0.9-1	3.0.19-1~deb12u2
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	openssl@3.0.9-1	3.0.19-1~deb12u2
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	openssl@3.0.9-1	3.0.19-1~deb12u2

Open the chart page →

265,360

neo4j-reverse-proxyneo4j-helm-charts

2026.8.1

1 of 1 See more

neo4j-reverse-proxy neo4j-helm-charts 2026.8.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
neo4j/helm-charts-reverse-proxy :2026.08.1	ea1b8444808d	openssl@3.3.6-r0	3.3.7-r0

Open the chart page →

465

redisneomanexlabs

1.1.0

1 of 1 See more

redis neomanexlabs 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine	02419de7eddf	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,433

ixyneoskop

2.1.1

1 of 1 See more

1,167

neosyncneosync

0.5.41

3 of 3 See more

neosync neosync 0.5.41

3 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
ghcr.io/nucleuscloud/neosync/app :0.5.41	ca31ec35b829	openssl@3.5.0-r0	3.5.6-r0
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

7,314

apineosync-api

0.5.41

1 of 1 See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

2,882

appneosync-app

0.5.41

1 of 1 See more

app neosync-app 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/app :0.5.41	ca31ec35b829	openssl@3.5.0-r0	3.5.6-r0

Open the chart page →

1,572

workerneosync-worker

0.5.41

1 of 1 See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

2,860

bluesky-pdsnerkho-helm-charts

0.4.2

1 of 1 See more

bluesky-pds nerkho-helm-charts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/bluesky-social/pds :0.4.204	cbc6e3ea157d	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

2,398

core-keeper-dedicatednerkho-helm-charts

0.1.1

1 of 1 See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
escaping/core-keeper-dedicated :latest	87fa79255962	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

3,946

Container images carrying it

2,567 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
stackstorm/st2rulesengine :3.8	259503496ff9	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2scheduler :3.8	b1de2055c362	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2stream :3.8	1c8904a3bf67	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2web :3.8	09989a26c8b7	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stain/jena-fuseki :latest	b1d0c96f19ad	openssl@3.3.1-r3	3.3.7-r0	1
stalwartlabs/stalwart :v0.15.5	dcf575db2d53	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2	1
stashapp/stash :latest	24dbd7607174	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm3	1
stashapp/stash :v0.31.1	df744af5a0c9	openssl@3.5.5-r0	3.5.6-r0	1
stashapp/stash-box :latest	a534c8afdf39	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
statcan/ckan :2.9	3921305425b8	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm3	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm3	1
streamnative/private-cloud-console :v2.3.27-all	91e54375e154	openssl@3.3.6-r0	3.3.7-r0	1
structurizr/onpremises :2025.11.09	4b5ffb5119c8	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
substratusai/verba :v0.4.0-baseURL2	61695be635eb	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
supabase/edge-runtime :v1.59.0	eff9c554d649	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
supabase/gotrue :v2.163.0	ba4ddc594b0b	openssl@3.3.2-r0	3.3.7-r0	1
supabase/postgres-meta :v0.84.2	d0a96973e9f1	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
supabase/realtime :v2.33.8	d207e6e23ad3	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
supabase/storage-api :v1.12.0	f983fb50bd95	openssl@3.3.2-r0	3.3.7-r0	1
supabase/studio :20241021-9f9b083	26d8070c55e9	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
svcosti/cidrapp :latest	8428d87bc5d0	openssl@3.3.3-r0	3.3.7-r0	1
svtechnmaa/svtech_debuger :v1.0.3	a934ffd63d25	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.23	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm3	1
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	openssl@3.0.2-0ubuntu1.13	3.0.2-0ubuntu1.23	1
svtechnmaa/svtech_nagvis :v1.2.1	18394b08e6c3	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm3	1
syepes/network_exporter :1.8.0	00af1691570e	openssl@3.5.1-r0	3.5.6-r0	1
sysnet4admin/colosseum-agg :log	bc25b152d88e	openssl@3.0.2-0ubuntu1.25	no fix listed	1
sysnet4admin/colosseum-cms :log	e74b43c7f492	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
sysnet4admin/colosseum-prm :log	5802bfcd7fed	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
sysnet4admin/colosseum-rwd :log	74ded2d92f07	openssl@3.5.1-1+deb13u1	3.5.5-1~deb13u2	1
tailscale/tailscale :v1.96.5	dbeff02d2337	openssl@3.5.5-r0	3.5.6-r0	1
teknas09/bird-pod :latest	12a1fa85c4aa	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
tektonops/ipup-dynu :latest	c2198746cf8f	openssl@3.3.1-r3	3.3.7-r0	1
temporalio/admin-tools :1.26.2	37e2e33dbd7b	openssl@3.3.2-r0	3.3.7-r0	1
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	openssl@3.5.0-r0	3.5.6-r0	1
temporalio/admin-tools :1.28	cfde8170c92f	openssl@3.5.5-r0	3.5.6-r0	1
temporalio/auto-setup :1.29.1	5b3502a3b685	openssl@3.5.0-r0	3.5.6-r0	1
temporalio/auto-setup :1.27.2	b44cbfeb43db	openssl@3.3.3-r0	3.3.7-r0	1
temporalio/server :1.26.2	1e2626efcbc1	openssl@3.3.2-r0	3.3.7-r0	1
temporalio/server :1.29.1	c1e3326b2ce1	openssl@3.5.0-r0	3.5.6-r0	1
temporalio/ui :2.44.0	0b36e00aad30	openssl@3.5.4-r0	3.5.6-r0	1
temporalio/ui :2.39.0	b768f87f18b5	openssl@3.3.3-r0	3.3.7-r0	1
tensorflow/serving :latest	8a208c232297	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.23	1
tensorflow/tensorflow :1.6.0-devel	1e3172090703	openssl@1.0.2g-1ubuntu4.10	1.0.2g-1ubuntu4.20+esm15	1
testinprod/op-erigon :latest	0a125bd77a2d	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
thecloudspark/app-result :1.0	9a5302cb8312	openssl@3.3.0-r2	3.3.7-r0	1