CVE-2026-28388

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.009; 58th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,304; of 17,803 indexed, latest versions
Container images: 2,567; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-28388 affecting package openssl for versions less than 3.3.5-5

Carried by container images the latest versions of 2,304 of 17,803 indexed charts deploy, on 2,567 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+98 more	1.0.1f-1ubuntu2.27+esm13, 1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3+5 more	1,664
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	900
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm4	15
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3	3.3.5-5	3

OSV records: ALPINE-CVE-2026-28388 CGA-2c5c-rx22-cxxf CGA-92mm-ffw5-fq49 DEBIAN-CVE-2026-28388 UBUNTU-CVE-2026-28388 AZL-81953 ECHO-4471-00bd-faf3
Also known as: CGA-j9vv-xrrm-g5v2, CGA-xx8c-47rc-27jj, USN-8155-1, USN-8155-2

Charts affected

2,304 by stars

Chart

Latest

Affected images

Radar Score

chirpstackmosquitto-helm-chart

0.5.0

1 of 8 See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.9.0	d056c89b7131	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

96,742

pulsarmosquitto-helm-chart

0.2.0

1 of 1 See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :2.10.0	3b262ab7a7d9	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

15,924

tianjimsgbyte

0.1.17

1 of 2 See more

tianji msgbyte 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
moonrailgun/tianji :1.11.2	b528c8f8fcc4	openssl@3.3.0-r2	3.3.7-r0

Open the chart page →

4,572

adguard-homemt190502

4.0.12

1 of 2 See more

adguard-home mt190502 4.0.12

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
adguard/adguardhome :v0.107.73	7fbf01d73ecb	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,167

commafeedmt190502

8.2.0

1 of 3 See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
athou/commafeed :6.2.0-postgresql	5e388351df1a	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

3,796

copilot-apimt190502

2.3.0

1 of 1 See more

copilot-api mt190502 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/bouquet2/copilot-api-docker :v0.7.0	6b0507a20602	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

488

maddymt190502

4.1.2

1 of 1 See more

maddy mt190502 4.1.2

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
foxcpp/maddy :0.9.2	a4b839985b9b	openssl@3.3.6-r0	3.3.7-r0

Open the chart page →

1,044

memosmt190502

7.3.2

1 of 3 See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
neosmemo/memos :0.26.2	3eefcc231141	openssl@3.3.6-r0	3.3.7-r0

Open the chart page →

2,654

minifluxmt190502

1.1.6

1 of 3 See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
miniflux/miniflux :2.2.18	a3ca6bbc1f74	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

2,729

nightscoutmt190502

1.1.0

1 of 3 See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

6,664

paperless-ngxmt190502

7.6.14

1 of 4 See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	openssl@3.5.5-1~deb13u1	3.5.5-1~deb13u2

Open the chart page →

12,130

radicalemt190502

4.1.1

1 of 1 See more

radicale mt190502 4.1.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
tomsquest/docker-radicale :3.6.1.0	a594c624c5a6	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,542

umamimt190502

8.1.4

1 of 3 See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/umami-software/umami :3.0.3	28f263fe06f7	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

4,073

vaultwardenmt190502

7.3.4

1 of 3 See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.35.4	43498a94b22f	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

4,812

mongodbmulti-chart-app

0.1.0

1 of 1 See more

mongodb multi-chart-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
library/mongo :7	b096b4cb9269	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

1,998

my-multi-chart-appmulti-chart-app

0.1.0

1 of 2 See more

my-multi-chart-app multi-chart-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
library/mongo :7	b096b4cb9269	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

3,877

mum-discord-botmum-discord-bot

0.3.7

1 of 1 See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

13,796

devops-demomungari-development-charts

1.0.4

1 of 4 See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	openssl@1.1.1-1ubuntu2.1~18.04.20	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

9,019

pagesmuthu-pages

1.0.0

2 of 3 See more

pages muthu-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm3
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,261

ingress-nginxmxytest

4.15.1

1 of 2 See more

ingress-nginx mxytest 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,541

danboorumy0n

0.0.2

1 of 1 See more

danbooru my0n 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

97,407

danbooru-stackmy0n

0.0.3

1 of 4 See more

danbooru-stack my0n 0.0.3

1 of the 4 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

97,407

clickhousemya

0.2403.1

1 of 1 See more

clickhouse mya 0.2403.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.2	ed9640bfff07	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

3,611

cognativemya

0.2403.3

1 of 3 See more

cognative mya 0.2403.3

1 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.2	ed9640bfff07	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,396

elasticsearch-chartmy-elasticsearch

0.1.0

1 of 2 See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
library/elasticsearch :7.17.3	5e6ac15bf6a5	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

9,358

my-helm-chartmy-helm-charts-2024

0.1.0

1 of 1 See more

my-helm-chart my-helm-charts-2024 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
shamimkuet/nginx :1.0.2	b82902a76a04	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,369

Practica_4_helmmy-heml-app

0.1.0

3 of 7 See more

Practica_4_helm my-heml-app 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.0	9fb4c11e6a49	openssl@1.1.1-1ubuntu2.1~18.04.21	1.1.1-1ubuntu2.1~18.04.23+esm8
library/mongo :5.0.6-focal	8e70544b6c76	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm3
library/rabbitmq :3.9-management	8a279e9396a8	openssl@3.0.2-0ubuntu1.14	3.0.2-0ubuntu1.23

Open the chart page →

27,906

nginx-chartmy-nginx-chart

0.1.0

1 of 1 See more

nginx-chart my-nginx-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
amaraiheanacho/nginx-site :latest	5c86fccf5daa	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

988

mystoremystore-chart

0.1.0

2 of 3 See more

mystore mystore-chart 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
hazegoodlife/haaze :veggiesite	50f02d2d5d4d	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
hazegoodlife/haaze :milksite	8d4c63169e14	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

9,506

myweatherhelmmyweather

1.3.11

4 of 7 See more

myweatherhelm myweather 1.3.11

4 of the 7 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
hecrom/myweatherangularclient :1.3.11	bb0372939c19	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
hecrom/myweatherprocessingreactclient :1.3.11	5454b54d5b28	openssl@3.3.1-r3	3.3.7-r0
library/rabbitmq :3-management	e582c0bc7766	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	openssl@1.1.1-1ubuntu2.1~18.04.23 openssl1.0@1.0.2n-1ubuntu5.13	1.1.1-1ubuntu2.1~18.04.23+esm8 1.0.2n-1ubuntu5.13+esm4

Open the chart page →

18,084

fargate-sidecar-injectormziyabo

0.1.5

1 of 1 See more

fargate-sidecar-injector mziyabo 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
mziyabo/fargate-eks-sidecar-injector :latest	3067dce17983	openssl@3.3.0-r2	3.3.7-r0

Open the chart page →

1,394

nacosnacos-yunye

1.0.3

1 of 1 See more

nacos nacos-yunye 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
nacos/nacos-server :v3.0.1	30a39cb0c54d	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,918

smallandnaj98

0.0.5

1 of 1 See more

smalland naj98 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/98jan/smalland-server/smalland-server :dev	eb7be822d5b2	openssl@1.1.1-1ubuntu2.1~18.04.23	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

3,036

pagesnarain

1.0.0

2 of 3 See more

pages narain 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm3
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,261

pagesnarasimha-pages

1.0.0

2 of 3 See more

pages narasimha-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm3
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,261

akauntingnas-helm-charts

1.0.3

1 of 2 See more

akaunting nas-helm-charts 1.0.3

1 of the 2 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
akaunting/akaunting :3.0.15	52811b36ec3a	openssl@3.0.9-1	3.0.19-1~deb12u2

Open the chart page →

12,930

proxy-pynas-helm-charts

1.0.0

1 of 1 See more

proxy-py nas-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
abhinavsingh/proxy.py :latest	51adc989fd03	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

737

pagesnavin-brixton

1.0.0

2 of 3 See more

pages navin-brixton 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm3
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,261

incorencsa

1.38.0

2 of 29 See more

incore ncsa 1.38.0

2 of the 29 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/postgresql :16.4.0	3ba6e6f11388	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

15,518

jupyterhub-metricsncsa

1.3.0

1 of 5 See more

jupyterhub-metrics ncsa 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/ncsa/jupyterhub-metrics/collector :1.3.0	dcb8c731bb1b	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

4,168

smilencsa

1.1.0

7 of 23 See more

smile ncsa 1.1.0

7 of the 23 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm3
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	openssl@1.1.1-1ubuntu2.1~18.04.22	1.1.1-1ubuntu2.1~18.04.23+esm8
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	openssl@3.0.9-1	3.0.19-1~deb12u2
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	openssl@1.1.1-1ubuntu2.1~18.04.22	1.1.1-1ubuntu2.1~18.04.23+esm8
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	openssl@3.0.9-1	3.0.19-1~deb12u2
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	openssl@3.0.9-1	3.0.19-1~deb12u2
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	openssl@3.0.9-1	3.0.19-1~deb12u2

Open the chart page →

265,360

neo4j-reverse-proxyneo4j-helm-charts

2026.8.1

1 of 1 See more

neo4j-reverse-proxy neo4j-helm-charts 2026.8.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
neo4j/helm-charts-reverse-proxy :2026.08.1	ea1b8444808d	openssl@3.3.6-r0	3.3.7-r0

Open the chart page →

465

redisneomanexlabs

1.1.0

1 of 1 See more

redis neomanexlabs 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
library/redis :7.4.2-alpine	02419de7eddf	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,433

ixyneoskop

2.1.1

1 of 1 See more

1,167

neosyncneosync

0.5.41

3 of 3 See more

neosync neosync 0.5.41

3 of the 3 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
ghcr.io/nucleuscloud/neosync/app :0.5.41	ca31ec35b829	openssl@3.5.0-r0	3.5.6-r0
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

7,314

apineosync-api

0.5.41

1 of 1 See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

2,882

appneosync-app

0.5.41

1 of 1 See more

app neosync-app 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/app :0.5.41	ca31ec35b829	openssl@3.5.0-r0	3.5.6-r0

Open the chart page →

1,572

workerneosync-worker

0.5.41

1 of 1 See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

2,860

bluesky-pdsnerkho-helm-charts

0.4.2

1 of 1 See more

bluesky-pds nerkho-helm-charts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
ghcr.io/bluesky-social/pds :0.4.204	cbc6e3ea157d	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

2,398

core-keeper-dedicatednerkho-helm-charts

0.1.1

1 of 1 See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-28388.

Container image	Digest	Package	Fixed in
escaping/core-keeper-dedicated :latest	87fa79255962	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

3,946

Container images carrying it

2,567 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/mailcow/prometheus-exporter :2.1.0	cb76395b84eb	openssl@3.3.5-r0	3.3.7-r0	1
ghcr.io/manyfold3d/manyfold :0.136.0	d14ca4d82475	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/manzil-infinity180/backend-dumpstore :226f28ca3efa6d3691044813cd09085e28d4a7b4	96c90cf82fdd	openssl@3.5.0-r0	3.5.6-r0	1
ghcr.io/manzil-infinity180/deploydefender :ea3ab0bb646cdbeddd1aca483ecf650f9ac0d084	7fbc6855c8b3	openssl@3.3.4-r0	3.3.7-r0	1
ghcr.io/manzil-infinity180/frontend-dumpstore :226f28ca3efa6d3691044813cd09085e28d4a7b4	4e6394b715d9	openssl@3.5.0-r0	3.5.6-r0	1
ghcr.io/marthydavid/kafka-keda-golang-consumer :0.0.4	e07644865dd1	openssl@3.3.2-r0	3.3.7-r0	1
ghcr.io/marthydavid/kafka-keda-golang-producer :0.0.4	54b242c7bf2b	openssl@3.3.2-r0	3.3.7-r0	1
ghcr.io/matanbaruch/cursor-admin-api-exporter :0.1.8	ba3a29fc479a	openssl@3.3.4-r0	3.3.7-r0	1
ghcr.io/mattn/picoclaw :latest	517556c8b144	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/maybe-finance/maybe :0.5.0	c6ab95ca9130	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/mcwarman/backstage-sample-app/app :main	fae3c1f04311	openssl@3.5.4-1~deb13u1	3.5.5-1~deb13u2	1
ghcr.io/mcwarman/backstage-sample-app/backend :main	07aba09a594f	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
ghcr.io/mealie-recipes/mealie :v3.24.0	0b08ac3a9f0a	openssl@3.5.5-1~deb13u1	3.5.5-1~deb13u2	1
ghcr.io/mealie-recipes/mealie :v3.2.1	322369a5b748	openssl@3.5.1-1	3.5.5-1~deb13u2	1
ghcr.io/mealie-recipes/mealie :v3.25.1	6066c29eca95	openssl@3.5.5-1~deb13u1	3.5.5-1~deb13u2	1
ghcr.io/mealie-recipes/mealie :v1.4.0	b56da41cf178	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/mealie-recipes/mealie :v3.7.0	bb2939094eed	openssl@3.5.1-1	3.5.5-1~deb13u2	1
ghcr.io/media-streaming-mesh/msm-admission-webhook :latest	3e811d67189c	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9	1
ghcr.io/media-streaming-mesh/msm-cni :latest	fe0b89b818a6	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9	1
ghcr.io/media-streaming-mesh/msm-cp :latest	8cb08fc7010b	openssl@3.0.13-0ubuntu3.2	3.0.13-0ubuntu3.9	1
ghcr.io/media-streaming-mesh/msm-dp :latest	7ffcb25b4cfc	openssl@3.0.13-0ubuntu3.2	3.0.13-0ubuntu3.9	1
ghcr.io/media-streaming-mesh/msm-nc :latest	296fe4970e38	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.9	1
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9	1
ghcr.io/middleware-labs/mw-lang-aggregator :0.1.0	ae6e13970ec2	openssl@3.5.1-r0	3.5.6-r0	1
ghcr.io/miniflux/miniflux :2.2.8	3a11ac10969e	openssl@3.3.3-r0	3.3.7-r0	1
ghcr.io/miniflux/miniflux :2.2.5	bacc9b78ec61	openssl@3.3.2-r4	3.3.7-r0	1
ghcr.io/mollyim/mollysocket :1.1.1	2a687393f8c8	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/mondu-ai/gar-credential-provider :latest	25090d37afa9	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/monicahq/monica-next :main	8be69156acbb	openssl@3.5.1-1	3.5.5-1~deb13u2	1
ghcr.io/mosn/htnn-controller :v0.3.1	c379e66246be	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.23	1
ghcr.io/mt190502/docker-anki-sync-server :25.09.2	824245fd5a57	openssl@3.3.2-r4	3.3.7-r0	1
ghcr.io/music-assistant/server :2.7.5	3522e8a7a8f0	openssl@3.0.18-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/music-assistant/server :2.8.7	eef3ee7810d0	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/ncsa/jupyterhub-metrics/collector :1.3.0	dcb8c731bb1b	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/nefelim4ag/k8s-ssh-bastion :0.5.0	4d337e14c80b	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.9	1
ghcr.io/nefelim4ag/pingdom-operator :0.0.15	f8c7afdcf439	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.61.2	f04925fe1fa6	openssl@3.3.1-r0	3.3.7-r0	1
ghcr.io/nicolargo/klances :0.1.3	74d6d33376eb	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2	1
ghcr.io/nnstd/glauth :2.5	2e6e09fa77dd	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/noahburrell0/sealed-secrets-ui :v0.1.4	7e7368fb472d	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.203	5bc5ca66d55a	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots :0.0.55	d7f93d2182fe	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/openappsec/openappsec-waf-webhook :1.1.34	5b979b962043	openssl@3.5.1-1+deb13u1	3.5.5-1~deb13u2	1
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/openconfig/gnmic :0.45.0	d422a9ebd4a2	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/opencost/opencost-ui :1.118.0	571f87e528ea	openssl@3.5.4-r0	3.5.6-r0	1
ghcr.io/openfaas/cron-connector :0.7.0	982498e8a41e	openssl@3.3.2-r4	3.3.7-r0	1
ghcr.io/openfaas/faas-netes :0.18.12	24431adc8e2d	openssl@3.3.2-r4	3.3.7-r0	1