StackRadar

CVE-2026-28389

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,296
of 17,792 indexed, latest versions
Container images
2,550
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-28389 affecting package openssl for versions less than 3.3.5-5

Carried by container images the latest versions of 2,296 of 17,792 indexed charts deploy, on 2,550 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more1,650
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0897
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm415
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl33.3.5-53
OSV records
ALPINE-CVE-2026-28389CGA-2r23-9xvx-4prrCGA-c3mq-2w7x-m4x8DEBIAN-CVE-2026-28389UBUNTU-CVE-2026-28389AZL-82067ECHO-ba3d-b3f7-03e8
Also known as
CGA-p78p-49m2-xjvw, CGA-rff8-35jv-r39r, USN-8155-1, USN-8155-2

Charts affected

2,296 by stars
ChartLatestAffected imagesRadar Score
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

5,153
cert-manager-cpanel-dns-webhookegebackVerified publisher1.0.61 of 1See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

1,291
heimdallegebackVerified publisher2.0.41 of 1See more

heimdall egeback 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.6.371597f4461e4
openssl@3.3.4-r0
3.3.7-r0

Open the chart page →

1,663
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,360
eggybyte-chaineggybyte-hcr1.0.01 of 1See more

eggybyte-chain eggybyte-hcr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
curlimages/curl:8.15.04026b29997dc
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

806
egressgatewayegressgateway0.6.92 of 2See more

egressgateway egressgateway 0.6.9

2 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/egressgateway-agent:v0.6.9a8ec2f74c9d0
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
ghcr.io/spidernet-io/egressgateway-controller:v0.6.99deda7b68c34
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9

Open the chart page →

3,956
mongodb-charteks-3-tier-app-chart0.1.01 of 1See more

mongodb-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

8,049
seafileeleksbai0.1.12 of 3See more

seafile eleksbai 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mariadb:10.692e50059ea0a
openssl@3.0.2-0ubuntu1.26
no fix listed
seafileltd/seafile-mc:9.0.106693911bcc40
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

25,263
elk-stackelk-stack-test1.0.21 of 9See more

elk-stack elk-stack-test 1.0.2

1 of the 9 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/node:18-alpine8d6421d663b4
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

2,968
redisemberstackVerified publisher1.0.211 of 1See more

redis emberstack 1.0.21

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/redis:8.0.2b43d2dcbbdb1
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

1,989
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

10,610
kube-ecp-stackemqx-operator2.5.15 of 16See more

kube-ecp-stack emqx-operator 2.5.1

5 of the 16 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
datalayers/datalayers:v2.2.1017b292079239
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.23
emqx/ecp-emqx-agent-downloader:2.5.1a8431baa7950
openssl@3.3.2-r0
3.3.7-r0
emqx/ecp-ui:2.5.1e33e9816f147
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
emqxecp/otelcol:2.5.04c31d9bec846
openssl@3.3.2-r0
3.3.7-r0
library/telegraf:1.27507a3eecf809
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

23,813
enclaveenclave0.1.11 of 1See more

enclave enclave 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
enclavenetworks/enclave:latest0a99759300d1
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

2,743
kube-packetloss-exporterenixVerified publisher0.2.11 of 2See more

kube-packetloss-exporter enix 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.3164614ef8290f
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

6,165
monitoring-proxyenixVerified publisher0.3.01 of 2See more

monitoring-proxy enix 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/haproxy:2.9.6fc5748ff7c72
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

3,963
network-exporterenixVerified publisher0.3.01 of 1See more

network-exporter enix 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
syepes/network_exporter:1.8.000af1691570e
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

1,372
topomatikenixVerified publisher1.3.11 of 1See more

topomatik enix 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
openssl@3.0.2-0ubuntu1.23
no fix listed

Open the chart page →

2,154
mariadbeoc-chartsVerified publisher0.3.141 of 1See more

mariadb eoc-charts 0.3.14

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mariadb:10.6.15e22328f4d714
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

5,153
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2

Open the chart page →

7,301
eolicplantseolicplantsVerified publisher0.1.03 of 7See more

eolicplants eolicplants 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm8
library/rabbitmq:3-managemente582c0bc7766
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
oscarsotosanchez/weatherservice:v1.0911ec961d10b
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

27,361
eoloPlanteolo-plannerVerified publisher0.1.04 of 7See more

eoloPlant eolo-planner 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm8
library/mongo:5.0-focal5e15a3f014ed
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3
library/rabbitmq:3.11-managementc3f70098e01d
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.23
mastercloudapps/planner:v1.2340a950b311b2
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.23

Open the chart page →

27,702
eoloplannereoloplannerVerified publisher0.1.04 of 7See more

eoloplanner eoloplanner 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.23
codeurjc/toposervice:v1.09fb4c11e6a49
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm8
library/mongo:5.0.6-focal8e70544b6c76
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm3
library/rabbitmq:3.9-management8a279e9396a8
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.23

Open the chart page →

32,372
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.04 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm8
library/mongo:5.0-focal5e15a3f014ed
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3
library/rabbitmq:3.11-managementc3f70098e01d
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.23
mastercloudapps/planner:v1.2340a950b311b2
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.23

Open the chart page →

27,702
eoloplanner-mcaeoloplanner-mcaVerified publisher0.1.03 of 7See more

eoloplanner-mca eoloplanner-mca 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm8
library/rabbitmq:3-managemente582c0bc7766
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
oscarsotosanchez/weatherservice:v1.0911ec961d10b
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

27,327
eoloplannereoloplanner-molynx-gat0.1.03 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm8
library/mongo:4.4.66efa05203990
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm8
library/rabbitmq:3.9-management8a279e9396a8
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.23

Open the chart page →

28,549
eolo-plannereolo-planner-repo0.1.03 of 7See more

eolo-planner eolo-planner-repo 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm8
library/mongo:5.0.6-focal8e70544b6c76
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm3
library/rabbitmq:3.9-management8a279e9396a8
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.23

Open the chart page →

27,197
eoloplanteoloplant1.0.04 of 7See more

eoloplant eoloplant 1.0.0

4 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.239fb4c11e6a49
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm8
library/mongo:5.0-focal5e15a3f014ed
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3
library/rabbitmq:3.11-managementc3f70098e01d
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.23
mastercloudapps/planner:v1.2340a950b311b2
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.23

Open the chart page →

27,702
eoloplantseoloplants-urjcVerified publisher0.1.03 of 7See more

eoloplants eoloplants-urjc 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
codeurjc/toposervice:v1.09fb4c11e6a49
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm8
library/mongo:5.0.6-focal8e70544b6c76
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm3
library/rabbitmq:3.9-management8a279e9396a8
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.23

Open the chart page →

27,822
servereoloserverVerified publisher0.1.04 of 7See more

server eoloserver 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
codeurjc/planner:v1.0800cf520c245
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.23
codeurjc/toposervice:v1.09fb4c11e6a49
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm8
library/mongo:5.0.6-focal8e70544b6c76
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm3
library/rabbitmq:3.9-management8a279e9396a8
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.23

Open the chart page →

32,372
flywayeosc-lot-1Verified publisher0.7.02 of 3See more

flyway eosc-lot-1 0.7.0

2 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
alpine/git:v2.49.1c0280cf95723
openssl@3.5.4-r0
3.5.6-r0
flyway/flyway:9.1545b5d7cdc75a
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

9,402
mariadbeosc-lot-1Verified publisher0.2.01 of 2See more

mariadb eosc-lot-1 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

2,458
mariadb-backupeosc-lot-1Verified publisher0.5.01 of 2See more

mariadb-backup eosc-lot-1 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

2,458
mariadb-run-scripteosc-lot-1Verified publisher0.3.01 of 1See more

mariadb-run-script eosc-lot-1 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

2,458
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

5,352
postgresql-backupeosc-lot-1Verified publisher0.4.21 of 2See more

postgresql-backup eosc-lot-1 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/postgres:15.7-alpine3.20468d34fefd63
openssl@3.3.1-r3
3.3.7-r0

Open the chart page →

1,467
rabbitmqeosc-lot-1Verified publisher0.3.01 of 2See more

rabbitmq eosc-lot-1 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-managemente582c0bc7766
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9

Open the chart page →

2,511
rediseosc-lot-1Verified publisher0.2.01 of 1See more

redis eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
redis/redis-stack-server:6.2.6-v251a58f32d412
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

3,103
rommernail-romm1.0.11 of 1See more

romm ernail-romm 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
rommapp/romm:4.4.1b909e95d1aab
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

2,897
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/mariadb:12.2.2b1cb255a9939
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9

Open the chart page →

6,566
benchmarkoor-apiethereum-helm-chartsVerified publisher0.1.01 of 1See more

benchmarkoor-api ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
openssl@3.3.6-r0
3.3.7-r0

Open the chart page →

899
benchmarkoor-uiethereum-helm-chartsVerified publisher0.1.01 of 1See more

benchmarkoor-ui ethereum-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/benchmarkoor-ui:latestd090bb2060d9
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

1,339
blutgangethereum-helm-chartsVerified publisher0.0.121 of 1See more

blutgang ethereum-helm-charts 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
makemake1337/blutgang:latest8a55174fc830
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

2,535
chaos-meshethereum-helm-chartsVerified publisher0.0.33 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

3 of the 4 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
openssl@3.3.4-r0
3.3.7-r0

Open the chart page →

12,202
eth-faucetethereum-helm-chartsVerified publisher0.1.11 of 1See more

eth-faucet ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
chainflag/eth-faucet:latestac642796bcb6
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

1,996
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

4,479
rpc-proxyethereum-helm-chartsVerified publisher0.1.21 of 1See more

rpc-proxy ethereum-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/gochain/rpc-proxy/rpc-proxy:latestca01f5ab95f7
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

1,472
splitoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

splitoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ethpandaops/splitoor:latest989da6bea4bd
openssl@3.0.18-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

1,246
xatu-cbt-apiethereum-helm-chartsVerified publisher0.0.131 of 1See more

xatu-cbt-api ethereum-helm-charts 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ethpandaops/xatu-cbt-api:latestf7dec2e07091
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

1,224
xatu-sentry-logsethereum-helm-chartsVerified publisher0.0.21 of 1See more

xatu-sentry-logs ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ethpandaops/xatu:sentry-logs-latest6ce31bb0eafd
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

905
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

3,483

Container images carrying it

2,550 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
scsibug/nostr-rs-relay:0.9.003f54bfbffff
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
seafileltd/seafile-mc:9.0.106693911bcc40
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm3
1
seafileltd/seafile-mc:10.0.170628f29c663
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm3
1
seafileltd/seafile-mc:9.0.97ac833196f60
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm3
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
openssl@3.0.2-0ubuntu1.17
3.0.2-0ubuntu1.23
1
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm3
1
seldonio/locust-core:0.81d0da98a2d76
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15
1
sepehrmdn/mirasys-assignment:1.0.12567228e33c8
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
1
seyiogunniran/my-nginx:1.03a0ed39e5830
openssl@3.5.1-r0
3.5.6-r0
1
shamimkuet/nginx:1.0.2b82902a76a04
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
shaowenchen/ops-controller-manager:latest26da43bb5b66
openssl@3.0.2-0ubuntu1.25
no fix listed
1
shaowenchen/ops-server:latest315444f703f4
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23
1
sharanalwar/redchef-backend:latest8d3cab80df49
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
sharanalwar/redchef-frontend:latest5e82950b16b7
openssl@3.3.3-r0
3.3.7-r0
1
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm8
1
shyamkrishna21/cloudvault:latestaf2785f5bb71
openssl@3.5.5-r0
3.5.6-r0
1
shyamkrishna21/shopsync:latest3998b83def53
openssl@3.3.3-r0
3.3.7-r0
1
sigp/lighthouse:v7.0.12cae720e9a35
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23
1
sigp/lighthouse:v7.1.0870934e38931
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23
1
sigp/lighthouse:v2.1.2ad501f02cfef
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
1
sigp/siren:v3.0.42c219b04758e
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
sinhasaurabh09/dcn-portal:v1.2c0d08847ddbb
openssl@3.3.2-r1
3.3.7-r0
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
sirrend/helmup-notifications-service:0.1.3997866417011
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
sismics/docs:v1.10f4b0ef019cf1
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm8
1
sissbruecker/linkding:1.35.00c5dddf0b37c
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
slagattollas/weatherservice-practica:latest68e7f56393fc
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm8
1
snipe/snipe-it:v8.3.1141ebf2386fe
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
snipe/snipe-it:v6.0.1455fb7636a98c
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm3
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
openssl@1.1.1-1ubuntu2.1~18.04.22
1.1.1-1ubuntu2.1~18.04.23+esm8
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
openssl@3.0.9-1
3.0.19-1~deb12u2
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
openssl@1.1.1-1ubuntu2.1~18.04.22
1.1.1-1ubuntu2.1~18.04.23+esm8
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
openssl@3.0.9-1
3.0.19-1~deb12u2
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
openssl@3.0.9-1
3.0.19-1~deb12u2
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
openssl@3.0.9-1
3.0.19-1~deb12u2
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24+esm3
1
somnathmore/custom-nginx:v2bdfc06cad4ec
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
sondresjo/bobby-api:latestfe534731909a
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
1
soulteary/cronicle:0.9.80ac2512fa6e39
openssl@3.3.3-r0
3.3.7-r0
1
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.