CVE-2026-28389

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,303; of 17,790 indexed, latest versions
Container images: 2,568; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-28389 affecting package openssl for versions less than 3.3.5-5

Carried by container images the latest versions of 2,303 of 17,790 indexed charts deploy, on 2,568 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,663
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	902
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm4	15
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3	3.3.5-5	3

OSV records: ALPINE-CVE-2026-28389 CGA-2r23-9xvx-4prr CGA-c3mq-2w7x-m4x8 DEBIAN-CVE-2026-28389 UBUNTU-CVE-2026-28389 AZL-82067 ECHO-ba3d-b3f7-03e8
Also known as: CGA-p78p-49m2-xjvw, CGA-rff8-35jv-r39r, USN-8155-1, USN-8155-2

Charts affected

2,303 by stars

Chart

Latest

Affected images

Radar Score

comac-platformopencord

0.0.17

1 of 11 See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

26,246

freeradiusopencord

1.0.4

1 of 1 See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

15,718

mcord-cdn-remoteopencord

0.1.6

2 of 2 See more

mcord-cdn-remote opencord 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm15
woojoong/wowza :latest	ec230db19652	openssl@1.1.0g-2ubuntu4.1	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

42,655

mcord-cdn-remote-freeopencord

0.1.3

1 of 1 See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

29,156

mcord-control-planeopencord

0.2.2

2 of 5 See more

mcord-control-plane opencord 0.2.2

2 of the 5 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ngick8stesting/c3po-mme :mwca-mme-debug	8dd6dea45be4	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm15
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	openssl@1.1.0g-2ubuntu4.1	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

15,666

oaisimopencord

0.1.7

2 of 3 See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	openssl@1.1.1-1ubuntu2.1~18.04.6 openssl1.0@1.0.2n-1ubuntu5.4	1.1.1-1ubuntu2.1~18.04.23+esm8 1.0.2n-1ubuntu5.13+esm4
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	openssl@1.1.1-1ubuntu2.1~18.04.9 openssl1.0@1.0.2n-1ubuntu5.6	1.1.1-1ubuntu2.1~18.04.23+esm8 1.0.2n-1ubuntu5.13+esm4

Open the chart page →

14,556

omec-control-planeopencord

0.1.31

4 of 8 See more

omec-control-plane opencord 0.1.31

4 of the 8 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
omecproject/c3po-hss :master-latest	638671ef4842	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm15
omecproject/c3po-hssdb :master-latest	28a90cc26716	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm3
omecproject/mme-exporter :paging-latest	bcc5f19fd676	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8
omecproject/openmme :master-latest	64776cb9edb3	openssl@1.0.2g-1ubuntu4.17	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

40,825

onosopencord

3.0.2

1 of 1 See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
onosproject/onos :2.2.1	44914a8d4b3f	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

12,942

onos-progranopencord

1.2.7

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	nodejs@8.9.4-1nodesource1 openssl@1.0.2g-1ubuntu4.10	no fix listed 1.0.2g-1ubuntu4.20+esm15

Open the chart page →

38,902

ponsimv2opencord

1.2.3

1 of 2 See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
voltha/voltha-tester :1.7.0	655c3048a602	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

12,626

sebaopencord

1.0.0

5 of 17 See more

seba opencord 1.0.0

5 of the 17 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
tpdock/freeradius :2.2.9	3da600c95a49	openssl@1.0.2g-1ubuntu4.9	1.0.2g-1ubuntu4.20+esm15
voltha/voltha-cli :1.6.0	c4e41e92f046	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm15
voltha/voltha-netconf :1.6.0	37f80524c207	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm15
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm15
voltha/voltha-voltha :1.6.0	ff596b62de59	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

93,946

voltha-infraopencord

2.14.0

2 of 10 See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8
voltha/voltha-onos :5.1.8	e038acb950d3	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

41,101

opencost-parquet-exporteropencost

0.3.1

1 of 1 See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

11,051

opencost-lensopencost-lens

1.0.0

1 of 2 See more

opencost-lens opencost-lens 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost-ui :1.118.0	571f87e528ea	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,110

everest-db-namespaceopeneverest

1.16.2

1 of 1 See more

everest-db-namespace openeverest 1.16.2

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
percona/everest-helmtools :0.0.1	904458d04a18	openssl@3.3.4-r0	3.3.7-r0

Open the chart page →

769

cron-connectoropenfaas

0.6.16

1 of 1 See more

cron-connector openfaas 0.6.16

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/cron-connector :0.7.0	982498e8a41e	openssl@3.3.2-r4	3.3.7-r0

Open the chart page →

741

gcp-pubsub-connectoropenfaas

0.0.1

1 of 1 See more

gcp-pubsub-connector openfaas 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/gcp-pubsub-connector :0.0.1	8df071f5b719	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

1,162

kafka-connectoropenfaas

0.7.15

1 of 1 See more

kafka-connector openfaas 0.7.15

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/kafka-connector :0.7.16	0e58eac0e2f7	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,164

postgres-connectoropenfaas

0.1.2

1 of 1 See more

postgres-connector openfaas 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/postgres-connector :0.2.3	379e583a0a75	openssl@3.3.2-r4	3.3.7-r0

Open the chart page →

1,071

pro-builderopenfaas

0.6.13

1 of 2 See more

pro-builder openfaas 0.6.13

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/pro-builder :0.6.0	6c17297f9098	openssl@3.5.0-r0	3.5.6-r0

Open the chart page →

2,745

rabbitmq-connectoropenfaas

0.0.4

1 of 1 See more

rabbitmq-connector openfaas 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/rabbitmq-connector :0.1.2	349f7dca95ec	openssl@3.3.2-r4	3.3.7-r0

Open the chart page →

777

sqs-connectoropenfaas

0.2.7

1 of 1 See more

sqs-connector openfaas 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/sqs-connector :0.3.4	d44ed3b3128c	openssl@3.3.2-r4	3.3.7-r0

Open the chart page →

767

kruise-gameopenkruise

1.1.0

1 of 1 See more

kruise-game openkruise 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
openkruise/kruise-game-manager :v1.1.0	d3c6d69d2c39	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

918

dokuopenlit

0.1.4

1 of 3 See more

doku openlit 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :latest	fa394da808cc	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

1,737

openlitopenlit

1.24.0

1 of 3 See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.4.1	2e6587b81a26	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

5,068

openlit-operatoropenlit

0.2.2

1 of 1 See more

openlit-operator openlit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/openlit/openlit-operator :0.0.2	457bb5ada68b	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

858

openobserveopenobserve

0.92.2

1 of 6 See more

openobserve openobserve 0.92.2

1 of the 6 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

3,166

openpanelopenpanel

0.9.0

2 of 6 See more

openpanel openpanel 0.9.0

2 of the 6 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :25.10.2.65	e019438e1e05	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.23
library/redis :7.2.5-alpine	6aaf3f5e6bc8	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

3,465

fineractopenshift

0.1.1

1 of 4 See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
apache/fineract :1.12.1	a83cf1980609	openssl@3.3.4-r0	3.3.7-r0

Open the chart page →

7,866

mattermost-team-editionopenshift

6.6.83

1 of 4 See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

4,113

voyager-gatewayopenshift

2026.1.15

1 of 2 See more

voyager-gateway openshift 2026.1.15

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.1.0	13fd0cccafe8	openssl@3.0.18-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

2,645

open-vpnopenvpn

0.0.1

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

15,602

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	nodejs@8.10.0~dfsg-2ubuntu0.4 openssl@1.1.1-1ubuntu2.1~18.04.6 openssl1.0@1.0.2n-1ubuntu5.4	no fix listed 1.1.1-1ubuntu2.1~18.04.23+esm8 1.0.2n-1ubuntu5.13+esm4

Open the chart page →

36,252

operatonoperaton

1.0.5

1 of 1 See more

operaton operaton 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
operaton/operaton :1.0.0-beta-4	b35867ffe4d8	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

2,005

kubernetes-syncopslevel

0.8.0

1 of 1 See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

1,739

opslevelopslevel

2025.1.22

1 of 10 See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	openssl@3.3.2-r2	3.6.2-r0

Open the chart page →

5,658

hiveopstty

0.1.9

2 of 4 See more

hive opstty 0.1.9

2 of the 4 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
alpine/curl :8.12.0	8943e8c7e8e4	openssl@3.3.2-r4	3.3.7-r0
bitnamilegacy/postgresql :16	233f361c5819	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

4,550

example-idpory

0.64.0

1 of 1 See more

example-idp ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
oryd/hydra-login-consent-node :v26.2.0	6465e95993b5	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

838

grrosdfir-infrastructure

1.0.3

2 of 5 See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.23
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

11,021

osdfir-infrastructureosdfir-infrastructure

2.15.0

10 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

10 of the 40 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
bitnamilegacy/git :latest	4b08d0c5af8d	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
chromadb/chroma :1.5.7	fc8dc8e11fb2	openssl@3.5.5-1~deb13u1	3.5.5-1~deb13u2
library/mariadb :11.3.2	e101f9db3191	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.23
library/postgres :17.5-alpine	6567bca8d7bc	openssl@3.5.1-r0	3.5.6-r0
library/postgres :17.2-alpine	7e5df973a748	openssl@3.3.2-r4	3.3.7-r0
library/redis :7.4.2-alpine	02419de7eddf	openssl@3.3.3-r0	3.3.7-r0
yetiplatform/bloomcheck :dev	85683ddfccbb	openssl@3.3.3-r0	3.3.7-r0
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2
ghcr.io/openrelik/openrelik-ui :latest	7f91594d5eb3	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

72,547

vmot-container-kit

0.0.3

1 of 7 See more

vm ot-container-kit 0.0.3

1 of the 7 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
quay.io/kiwigrid/k8s-sidecar :1.27.4	f6ed71d0f9f1	openssl@3.3.0-r2	3.3.7-r0

Open the chart page →

5,418

outscale-s3-exploreroutscale-s3-explorer

0.1.4

1 of 1 See more

outscale-s3-explorer outscale-s3-explorer 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/solucteam/outscale-s3-explorer :v1.0.0	9665c3e71889	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,812

automatap2p-avs

0.1.0

1 of 2 See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.23

Open the chart page →

3,670

avap2p-avs

0.1.0

1 of 1 See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

3,327

k3p2p-avs

0.1.5

1 of 2 See more

k3 p2p-avs 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.23

Open the chart page →

2,342

mishtip2p-avs

0.1.0

1 of 2 See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.23

Open the chart page →

4,041

radiusp2p-avs

0.1.0

1 of 1 See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
theradius/loggia :0.4	63ba348546ec	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

12,440

ungatep2p-avs

0.1.0

3 of 3 See more

ungate p2p-avs 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.23

Open the chart page →

27,597

p4p4

0.1.0

4 of 7 See more

p4 p4 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	openssl@1.1.1-1ubuntu2.1~18.04.21	1.1.1-1ubuntu2.1~18.04.23+esm8
library/mongo :5.0-focal	5e15a3f014ed	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm3
library/rabbitmq :3.11-management	c3f70098e01d	openssl@3.0.2-0ubuntu1.14	3.0.2-0ubuntu1.23
mastercloudapps/planner :v1.23	40a950b311b2	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.23

Open the chart page →

27,702

myappp4-helm

0.1.0

1 of 6 See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-28389.

Container image	Digest	Package	Fixed in
library/mongo :4.2.3	58b25d51baa1	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

19,728

Container images carrying it

2,568 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
apecloud/gemini-scheduler :0.1.1	5832d1a9097a	openssl@3.3.1-r3	3.3.7-r0	1
appwrite/appwrite :1.9.0	1aaa70127114	openssl@3.5.5-r0	3.5.6-r0	1
appwrite/console :7.5.7	aaa11ceab999	openssl@3.3.3-r0	3.3.7-r0	1
aquasec/kube-bench :v0.15.0	7a8fa32dce21	openssl@3.5.5-r0	3.5.6-r0	1
aquasec/tracee :0.24.1	cfbbfee972e6	openssl@3.3.5-r0	3.3.7-r0	1
aquasec/trivy :0.69.3	bcc376de8d77	openssl@3.5.5-r0	3.5.6-r0	1
arilot/docker-bitcoind :0.17.1	27a4f7e0f9f1	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm15	1
aristidetm/basic-notebook :3.6.5	469dbc951224	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
arthurjguerra18/revwallet :v0.7.12	f540af20b307	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
artifacthub/db-migrator :v1.19.0	2a746b289fcd	openssl@3.3.1-r0	3.3.7-r0	1
artifacthub/hub :v1.19.0	111918d8c399	openssl@3.3.1-r0	3.3.7-r0	1
artifacthub/scanner :v1.19.0	323d026e78c3	openssl@3.3.1-r0	3.3.7-r0	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
arunvelsriram/utils :latest	655ad18fd8d6	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
assistiot/fl_orchestrator :dbmongo4-latest	d157fbe150e3	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3	1
assistiot/identity-manager_db :latest	0d3e6d35f168	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
assistiot/location_processing :latest	e9bae124095f	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23	1
assistiot/open_api_backend :1.1.2	30812ba93555	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23	1
assistiot/sdn_controller :2.4.0	ea254b6d8a31	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	openssl@3.0.9-1	3.0.19-1~deb12u2	1
assistiot/video_augmentation :runner-cpu-latest	e5ae539ce2cb	openssl@1.1.1f-1ubuntu2.17	1.1.1f-1ubuntu2.24+esm3	1
athou/commafeed :6.2.0-postgresql	5e388351df1a	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23	1
atlassian/jira-software :8.14.0	37bc46cbec1a	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.23	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
automatischio/automatisch :0.15.0	3bace7a12d5f	openssl@3.3.3-r0	3.3.7-r0	1
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
avinash263/pyredis263 :latest	aa2b8727f1a6	openssl@3.0.9-1	3.0.19-1~deb12u2	1
avzini/web-app :latest	f40b30210ed0	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
awesometechnologies/synapse-admin :0.11.4	a1c1f4662875	openssl@3.5.5-r0	3.5.6-r0	1
b3log/siyuan :v3.1.25	95c0d129bc19	openssl@3.3.3-r0	3.3.7-r0	1
b4bz/homer :v24.12.1	4b44a4a9e329	openssl@3.3.2-r0	3.3.7-r0	1
b4bz/homer :v25.02.2	c367265313f9	openssl@3.3.3-r0	3.3.7-r0	1
baserow/backend :1.31.1	e0b3c8130b91	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
baserow/baserow :1.30.1	df0c42eb67e8	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm3	1
beanbag/reviewboard :latest	6b840f546e1c	openssl@3.0.2-0ubuntu1.29	no fix listed	1
behnambm/docker-sample :v1	bd3ad88afff9	openssl@3.3.1-r0	3.3.7-r0	1
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	openssl@3.5.1-1	3.5.5-1~deb13u2	1
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
beyzkaya/blog-frontend :v1.0.0	bf412d75c510	openssl@3.5.0-r0	3.5.6-r0	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3	1
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
bitnamilegacy/clickhouse :24.12.3-debian-12-r1	3cf6544f6c6c	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
bitnamilegacy/clickhouse :24.12.4	c7e70bf1d3fb	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
bitnamilegacy/clickhouse :24.6.2-debian-12-r3	dcc172c6c55f	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2	1