StackRadar

CVE-2026-28389

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,303
of 17,790 indexed, latest versions
Container images
2,568
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-28389 affecting package openssl for versions less than 3.3.5-5

Carried by container images the latest versions of 2,303 of 17,790 indexed charts deploy, on 2,568 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more1,663
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0902
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm415
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl33.3.5-53
OSV records
ALPINE-CVE-2026-28389CGA-2r23-9xvx-4prrCGA-c3mq-2w7x-m4x8DEBIAN-CVE-2026-28389UBUNTU-CVE-2026-28389AZL-82067ECHO-ba3d-b3f7-03e8
Also known as
CGA-p78p-49m2-xjvw, CGA-rff8-35jv-r39r, USN-8155-1, USN-8155-2

Charts affected

2,303 by stars
ChartLatestAffected imagesRadar Score
nginx-php-fpmkokuwa0.1.42 of 2See more

nginx-php-fpm kokuwa 0.1.4

2 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/php:8.5.2-fpm-alpine3.22a2482c398d60
openssl@3.5.5-r0
3.5.6-r0
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

1,840
difykubeblocksVerified publisher0.5.12 of 5See more

dify kubeblocks 0.5.1

2 of the 5 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
langgenius/dify-sandbox:0.2.009b7e8705673
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

20,461
kubebrowsekubebrowse1.7.02 of 5See more

kubebrowse kubebrowse 1.7.0

2 of the 5 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
openssl@3.3.3-r0
3.3.7-r0
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

4,165
kubegems-installerkubegemsOfficial1.24.101 of 1See more

kubegems-installer kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

3,390
kubegems-localkubegemsOfficial1.24.101 of 2See more

kubegems-local kubegems 1.24.10

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

6,099
kube-ingress-dash-chartkube-ingress-dashVerified publisher0.3.11 of 1See more

kube-ingress-dash-chart kube-ingress-dash 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/wasilak/kube-ingress-dash:0.3.1ff55992f905c
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

1,506
pgbouncerkubernetes-helm-chart-pgbouncer1.0.151 of 1See more

pgbouncer kubernetes-helm-chart-pgbouncer 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
cradlepoint/pgbouncer:1.0.18f5720b0cd03
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

5,812
feishinkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

feishin kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/jeffvli/feishin:1.11.01eed97d6272d
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

487
owncloudkubernetes-homelab-helm-chartsVerified publisher0.1.02 of 3See more

owncloud kubernetes-homelab-helm-charts 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
openssl@3.0.2-0ubuntu1.26
no fix listed
owncloud/server:10.16.274c53d341076
openssl@3.0.2-0ubuntu1.23
no fix listed

Open the chart page →

9,983
tailscalekubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

tailscale kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
tailscale/tailscale:v1.96.5dbeff02d2337
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

1,038
kubeseal-webguikubeseal-webgui6.0.42 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

2 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
ghcr.io/jaydee94/kubeseal-webgui/ui:4.5.34447636e8102
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

4,112
kubeseckubesecVerified publisher1.1.01 of 1See more

kubesec kubesec 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
kubesec/kubesec:latest025a365d9f18
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

1,076
mesherykubesphere-stable0.5.01 of 13See more

meshery kubesphere-stable 0.5.0

1 of the 13 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
layer5/meshery:stable-latest78a8be21bef3
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

24,785
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,753
kubeservice-custom-limitrangekubservice-chartsVerified publisher1.3.01 of 5See more

kubeservice-custom-limitrange kubservice-charts 1.3.0

1 of the 5 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/kubeservice-stack/customlimitrange-manager:v1.3.0d3ed97d142d4
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

5,965
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

2,679
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

12,473
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm3
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm3
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm3
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm3
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

114,050
file-mirrorkyokugirl0.1.31 of 3See more

file-mirror kyokugirl 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
instrumentisto/rsync-ssh:alpine6cbad37c2fbd
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

961
chibisafel4gVerified publisher0.1.12 of 3See more

chibisafe l4g 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
chibisafe/chibisafe:latest836467a50792
openssl@3.5.0-r0
3.5.6-r0
chibisafe/chibisafe-server:latest3da4fcbc1a18
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

5,669
lagoon-remotelagoon-chartsVerified publisher0.106.01 of 1See more

lagoon-remote lagoon-charts 0.106.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
uselagoon/docker-host:v3.6.12c89ed939b8b
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

2,122
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
openssl@3.0.18-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

4,031
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

35,092
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
openssl@3.5.2-r0
3.6.2-r0

Open the chart page →

4,435
litlyxlitlyx0.2.04 of 5See more

litlyx litlyx 0.2.0

4 of the 5 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
litlyx/litlyx-consumer:latest02225e77d316
openssl@3.5.4-r0
3.5.6-r0
litlyx/litlyx-dashboard:lateste64ff2d52385
openssl@3.5.4-r0
3.5.6-r0
litlyx/litlyx-producer:latest10407f36613f
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

7,923
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.14ccf9c2b5e3f2
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

6,769
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
openssl@3.0.18-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

7,252
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

2,774
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
lumenvox/cloud-assure-identity:2.0.0147854a3c916
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
lumenvox/cloud-audit:2.0.079428add7f38
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
lumenvox/cloud-binary-storage:2.0.053decadc102d
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
lumenvox/cloud-deployment:2.0.0ea8110886d38
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
lumenvox/cloud-management-api:2.0.0b9a23345eabd
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
lumenvox/cloud-voice-verifier:2.0.014170ad34903
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

71,268
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

5,752
magentomagento3.2.32 of 12See more

magento magento 3.2.3

2 of the 12 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm3
library/rabbitmq:4.1.0-management935b3f84c1e4
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9

Open the chart page →

13,643
plane-enterprisemakeplaneOfficialVerified publisher3.7.23 of 13See more

plane-enterprise makeplane 3.7.2

3 of the 13 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine468d34fefd63
openssl@3.3.1-r3
3.3.7-r0
library/rabbitmq:3.13.6-management-alpine611107e29cce
openssl@3.3.1-r3
3.3.7-r0
valkey/valkey:7.2.11-alpine10328d00120d
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

4,973
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

3,017
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

19,195
mcpmcp-chartsVerified publisher0.0.232 of 7See more

mcp mcp-charts 0.0.23

2 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2

Open the chart page →

7,025
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.9

Open the chart page →

4,197
mimir-syncmimir-sync3.1.01 of 1See more

mimir-sync mimir-sync 3.1.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/antnsn/mal-sync:v1.0.52f06e72cef36
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

1,300
miniapiminiapi1.3.21 of 1See more

miniapi miniapi 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
udhos/miniapi:1.3.28a7042db82ce
openssl@3.3.2-r1
3.3.7-r0

Open the chart page →

854
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
openssl@3.5.3-1ubuntu2
3.5.3-1ubuntu3.3

Open the chart page →

11,109
model-manager-loadermodel-manager-loader1.27.01 of 1See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
openssl@3.5.1-1
3.5.5-1~deb13u2

Open the chart page →

2,710
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

13,812
anki-servermt1905022.2.01 of 1See more

anki-server mt190502 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/mt190502/docker-anki-sync-server:25.09.2824245fd5a57
openssl@3.3.2-r4
3.3.7-r0

Open the chart page →

382
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.23

Open the chart page →

3,732
surveyornatsVerified publisher0.20.91 of 1See more

surveyor nats 0.20.9

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
natsio/nats-surveyor:0.9.9104a3e938b23
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

909
clowder2ncsaVerified publisher1.9.76 of 12See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
clowder/clowder2-frontend:2.0.0-beta.4fe97882672ca
openssl@3.5.4-r0
3.5.6-r0
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2

Open the chart page →

37,504
node-provider-labelernode-provider-labelerVerified publisher0.20.01 of 1See more

node-provider-labeler node-provider-labeler 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/jossware/node-provider-labeler:v0.8.0f80e85291439
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

1,105
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

14,363
octopuso7studios-octopus-helm-chartsOfficialVerified publisher1.2.33 of 5See more

octopus o7studios-octopus-helm-charts 1.2.3

3 of the 5 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/nats:2.11.9-alpine777787bbb4c7
openssl@3.5.1-r0
3.5.6-r0
natsio/nats-box:0.18.0abdc9f9f0120
openssl@3.5.0-r0
3.5.6-r0
natsio/nats-server-config-reloader:0.19.181edf32a3680
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

6,120
oadaoadaVerified publisher5.0.510 of 11See more

oada oada 5.0.5

10 of the 11 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
oada/auth:4.0.0c0d077e79ef4
openssl@3.5.1-r0
3.5.6-r0
oada/http-handler:4.0.0d87efe8ba4b0
openssl@3.5.1-r0
3.5.6-r0
oada/rev-graph-update:4.0.0ebc8343f05ff
openssl@3.5.1-r0
3.5.6-r0
oada/shares:4.0.0c6ffb4e8ed63
openssl@3.5.1-r0
3.5.6-r0
oada/startup:4.0.0fc09495e2f3c
openssl@3.5.1-r0
3.5.6-r0
oada/sync-handler:4.0.0b7a2cfc137cf
openssl@3.5.1-r0
3.5.6-r0
oada/users:4.0.0b6c562fa5b1b
openssl@3.5.1-r0
3.5.6-r0
oada/webhooks:4.0.06590c60de347
openssl@3.5.1-r0
3.5.6-r0
oada/well-known:4.0.07943fde43b19
openssl@3.5.1-r0
3.5.6-r0
oada/write-handler:4.0.08464c7f48aae
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

13,329
dashdotoben01Verified publisher1.5.01 of 1See more

dashdot oben01 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
mauricenino/dashdot:5.9.2236997816917
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

1,237

Container images carrying it

2,568 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
sashafefler/spacecapybara_app:latestf96d7804c0ca
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
schemahero/schemahero-manager:0.22.11609e1a05cd3
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.23
1
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.23
1
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.23
1
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
1
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
1
scrapinghub/splash:3.4.1a5f89bc84606
openssl@1.1.1-1ubuntu2.1~18.04.5
openssl1.0@1.0.2n-1ubuntu5.3
1.1.1-1ubuntu2.1~18.04.23+esm8
1.0.2n-1ubuntu5.13+esm4
1
scsibug/nostr-rs-relay:0.9.003f54bfbffff
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
seafileltd/seafile-mc:9.0.106693911bcc40
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm3
1
seafileltd/seafile-mc:10.0.170628f29c663
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm3
1
seafileltd/seafile-mc:9.0.97ac833196f60
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm3
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
openssl@3.0.2-0ubuntu1.17
3.0.2-0ubuntu1.23
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm3
1
seldonio/locust-core:0.81d0da98a2d76
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15
1
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
1
seyiogunniran/my-nginx:1.03a0ed39e5830
openssl@3.5.1-r0
3.5.6-r0
1
shamimkuet/nginx:1.0.2b82902a76a04
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
shaowenchen/ops-controller-manager:latest26da43bb5b66
openssl@3.0.2-0ubuntu1.25
no fix listed
1
shaowenchen/ops-server:latest315444f703f4
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23
1
sharanalwar/redchef-backend:latest8d3cab80df49
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
sharanalwar/redchef-frontend:latest5e82950b16b7
openssl@3.3.3-r0
3.3.7-r0
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm8
1
shyamkrishna21/cloudvault:latestaf2785f5bb71
openssl@3.5.5-r0
3.5.6-r0
1
shyamkrishna21/shopsync:latest3998b83def53
openssl@3.3.3-r0
3.3.7-r0
1
signoz/signoz:v0.141.1c10fa03e103c
openssl@3.3.2-r0
3.3.7-r0
1
sigp/lighthouse:v7.0.12cae720e9a35
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23
1
sigp/lighthouse:v7.1.0870934e38931
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23
1
sigp/lighthouse:v2.1.2ad501f02cfef
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
1
sigp/siren:v3.0.42c219b04758e
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
sinhasaurabh09/dcn-portal:v1.2c0d08847ddbb
openssl@3.3.2-r1
3.3.7-r0
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
sirrend/helmup-notifications-service:0.1.3997866417011
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
sismics/docs:v1.10f4b0ef019cf1
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm8
1
sissbruecker/linkding:1.35.00c5dddf0b37c
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
slagattollas/weatherservice-practica:latest68e7f56393fc
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm8
1
snipe/snipe-it:v8.3.1141ebf2386fe
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
snipe/snipe-it:v6.0.1455fb7636a98c
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm3
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
openssl@1.1.1-1ubuntu2.1~18.04.22
1.1.1-1ubuntu2.1~18.04.23+esm8
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
openssl@3.0.9-1
3.0.19-1~deb12u2
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
openssl@1.1.1-1ubuntu2.1~18.04.22
1.1.1-1ubuntu2.1~18.04.23+esm8
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
openssl@3.0.9-1
3.0.19-1~deb12u2
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
openssl@3.0.9-1
3.0.19-1~deb12u2
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
openssl@3.0.9-1
3.0.19-1~deb12u2
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24+esm3
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.