StackRadar

CVE-2026-28389

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,298
of 17,787 indexed, latest versions
Container images
2,560
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-28389 affecting package openssl for versions less than 3.3.5-5

Carried by container images the latest versions of 2,298 of 17,787 indexed charts deploy, on 2,560 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more1,658
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0899
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm415
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl33.3.5-53
OSV records
ALPINE-CVE-2026-28389CGA-2r23-9xvx-4prrCGA-c3mq-2w7x-m4x8DEBIAN-CVE-2026-28389UBUNTU-CVE-2026-28389AZL-82067ECHO-ba3d-b3f7-03e8
Also known as
CGA-p78p-49m2-xjvw, CGA-rff8-35jv-r39r, USN-8155-1, USN-8155-2

Charts affected

2,298 by stars
ChartLatestAffected imagesRadar Score
gitea-jenkinsclusterfactory0.1.12 of 5See more

gitea-jenkins clusterfactory 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
jenkins/jenkins:2.541.3-jdk21c4098086090c
openssl@3.5.5-1~deb13u1
3.5.5-1~deb13u2
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

5,238
clusternet-controller-managerclusternet1.0.01 of 1See more

clusternet-controller-manager clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
openssl@3.3.2-r4
3.3.7-r0

Open the chart page →

1,394
clusterplexclusterplexVerified publisher1.1.101 of 3See more

clusterplex clusterplex 1.1.10

1 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2

Open the chart page →

3,868
storage-local-pathcnapVerified publisher1.0.11 of 1See more

storage-local-path cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.3534ff0847cc47
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

752
castlemockcnieg2.0.11 of 1See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
castlemock/castlemock:latestb7f3f1527ba9
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9

Open the chart page →

4,578
door-agentcnoVerified publisher3.0.153 of 15See more

door-agent cno 3.0.15

3 of the 15 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31.02bf7f042e396
openssl@3.0.2-0ubuntu1.16
3.0.2-0ubuntu1.23
library/docker:27-cli851f91d24121
openssl@3.3.3-r0
3.3.7-r0
library/docker:27-dindaa3df78ecf32
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

19,338
ms-basecodedesignplus-chartsVerified publisher0.0.321 of 1See more

ms-base codedesignplus-charts 0.0.32

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
nginxdemos/hello:0.4b28d1e16c676
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

1,291
codehubcodehubVerified publisher6.2.183 of 5See more

codehub codehub 6.2.18

3 of the 5 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
bitnamilegacy/postgresql:latest42a8200d3597
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

13,220
web3-prometheus-exportercoinpri-helm-chartsVerified publisher0.1.31 of 1See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

3,378
loki-stackcommon-chartsVerified publisher1.0.32 of 12See more

loki-stack common-charts 1.0.3

2 of the 12 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/memcached:1.6.39-alpinec8503d4491ed
openssl@3.5.4-r0
3.5.6-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

5,329
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,963
conversor-temperaturaconversor-temperaturaVerified publisher0.1.01 of 1See more

conversor-temperatura conversor-temperatura 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
felipecs8/conversor-temperatura:v1f945423be36d
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

1,527
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.11 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

1 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/rabbitmq:3.11.5-management1b0f675d2f24
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

10,091
coordimap-agentcoordimap-agentVerified publisher0.4.31 of 1See more

coordimap-agent coordimap-agent 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
coordimap/coordimap-agent:latest7748fd0fae9f
openssl@3.3.6-r0
3.3.7-r0

Open the chart page →

618
cors-proxycors-proxyVerified publisher1.2.01 of 1See more

cors-proxy cors-proxy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

1,598
cortezacorteza1.1.02See more

corteza corteza 1.1.0

2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
openssl@3.0.17-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

—
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

4,644
cosanetcosanet1.0.01 of 1See more

cosanet cosanet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
openssl@3.5.1-1
3.5.5-1~deb13u2

Open the chart page →

2,190
bitcoincosmicrocks2.0.32 of 2See more

bitcoin cosmicrocks 2.0.3

2 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/knots:29.2.knots20251010d7db5cd4079b
openssl@3.3.5-r0
3.3.7-r0
ghcr.io/esomore/bitcoin-prometheus-exporter:masterded173632986
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

928
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9

Open the chart page →

2,944
ociscosmicrocks0.7.01 of 2See more

ocis cosmicrocks 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
owncloud/ocis:7.1.388e7c854517d
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

1,925
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

14,559
mariadbcowboysysopVerified publisher20.4.21 of 1See more

mariadb cowboysysop 20.4.2

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

3,009
mongodbcowboysysopVerified publisher15.1.51 of 1See more

mongodb cowboysysop 15.1.5

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

6,161
postgresqlcowboysysopVerified publisher15.5.71 of 1See more

postgresql cowboysysop 15.5.7

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

4,770
qdrantcowboysysopVerified publisher3.0.01 of 1See more

qdrant cowboysysop 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.4.166ee661d5241
openssl@3.0.9-1
3.0.19-1~deb12u2

Open the chart page →

3,026
rediscowboysysopVerified publisher21.2.61 of 1See more

redis cowboysysop 21.2.6

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.0.2-debian-12-r4cdc2efa9c306
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

2,621
logstream-mastercriblio2.9.91 of 1See more

logstream-master criblio 2.9.9

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
cribl/cribl:3.0.2762747cb6796
openssl@1.1.1-1ubuntu2.1~18.04.9
openssl1.0@1.0.2n-1ubuntu5.6
1.1.1-1ubuntu2.1~18.04.23+esm8
1.0.2n-1ubuntu5.13+esm4

Open the chart page →

9,287
piwigocronce0.0.61 of 1See more

piwigo cronce 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
mathieuruellan/piwigo:latest04572c8a1b04
openssl@3.3.2-r1
3.3.7-r0

Open the chart page →

1,084
iam-zencryptexlabsVerified publisher0.12.231 of 4See more

iam-zen cryptexlabs 0.12.23

1 of the 4 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

3,860
pagescrypticcode-helmchart1.0.02 of 3See more

pages crypticcode-helmchart 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm3
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,190
csghubcsghubVerified publisher2.4.39 of 34See more

csghub csghub 2.4.3

9 of the 34 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
openssl@3.3.3-r0
3.3.7-r0
library/memcached:1.6.38-alpinee93269864a7d
openssl@3.5.1-r0
3.5.6-r0
opencsghq/agenticflow:ee-v0.6-52f03fead54db
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
opencsghq/csghub-server:v2.4.0-ee302c9d45d8a8
openssl@3.0.18-1~deb12u1
3.0.19-1~deb12u2
opencsghq/csghub-xnet:v2.4.0-ee04121fd19ef9
openssl@3.0.18-1~deb12u1
3.0.19-1~deb12u2
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
opencsghq/gitlab-shell:v17.5.0f6d7e7d6be5d
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
opencsghq/kubectl:latestb6d87e1048c2
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
opencsghq/psql:latest57def8e77d0f
openssl@3.3.2-r4
3.3.7-r0

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.62 of 10See more

csgship csghub 0.4.6

2 of the 10 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
opencsghq/csgship-portal:v1.2.1865814dc87a1
openssl@3.3.3-r0
3.3.7-r0
opencsghq/psql:latest57def8e77d0f
openssl@3.3.2-r4
3.3.7-r0

Open the chart page →

11,335
dataflowcsghubVerified publisher2.5.01 of 7See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
opencsghq/psql:latest57def8e77d0f
openssl@3.3.2-r4
3.3.7-r0

Open the chart page →

6,632
rtcsic-charts0.1.11 of 5See more

rt csic-charts 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
firefart/requesttracker:5.0.40d6249906d8c
openssl@3.0.11-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

15,380
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

13,852
cspconsolecspconsole1.3.111 of 5See more

cspconsole cspconsole 1.3.11

1 of the 5 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/nginx:1.28-alpinea8b39bd9cf0f
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

12,274
cursor-admin-api-exportercursor-admin-api-exporterVerified publisher0.1.91 of 1See more

cursor-admin-api-exporter cursor-admin-api-exporter 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/matanbaruch/cursor-admin-api-exporter:0.1.8ba3a29fc479a
openssl@3.3.4-r0
3.3.7-r0

Open the chart page →

669
cypikcypik-app0.1.01 of 2See more

cypik cypik-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

7,503
irods-csi-drivercyverse0.12.01 of 4See more

irods-csi-driver cyverse 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
cyverse/irods-csi-driver:v0.12.0aa69d105b292
openssl@3.0.2-0ubuntu1.29
no fix listed

Open the chart page →

5,218
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

16,604
nifi-registryd4nVerified publisher1.0.01 of 2See more

nifi-registry d4n 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23

Open the chart page →

5,398
daejeon_2-3daejeon2-30.1.01 of 2See more

daejeon_2-3 daejeon2-3 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
clsen2024/daejeon_2-3:latest1156cd87c8fb
openssl@3.3.1-r3
3.3.7-r0

Open the chart page →

1,141
dakeradakera-helmVerified publisher0.11.1071 of 3See more

dakera dakera-helm 0.11.107

1 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/dakera-ai/dakera-dashboard:0.3.292e059589f7f7
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

3,937
pagesdalston-pages1.0.02 of 3See more

pages dalston-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm3
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,190
pagesdaman-dell-kuber1.0.02 of 3See more

pages daman-dell-kuber 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm3
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,190
dapr-agentsdapr-agents-devVerified publisher0.1.55 of 31See more

dapr-agents dapr-agents-dev 0.1.5

5 of the 31 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
openssl@3.5.5-r0
3.5.6-r0
kiwigrid/k8s-sidecar:1.30.98c06e1ba643a
openssl@3.5.1-r0
3.5.6-r0
library/memcached:1.6.39-alpinec8503d4491ed
openssl@3.5.4-r0
3.5.6-r0
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
openssl@3.6.0-r4
3.6.2-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

22,193
dns-mesh-controllerdashdns2.0.81 of 2See more

dns-mesh-controller dashdns 2.0.8

1 of the 2 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
emirozbir/dashdns-admission-webhook:v2.0.56801ba2a3fc3
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

1,095
dasherdasher0.1.11 of 1See more

dasher dasher 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-28389.

Container imageDigestPackageFixed in
ghcr.io/flohansen/dasher-server:latest7cde8c3fa2d1
openssl@3.3.1-r3
3.3.7-r0

Open the chart page →

1,089

Container images carrying it

2,560 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm3
79
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8
79
codeurjc/toposervice:v1.0:v1.239fb4c11e6a49
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm8
13
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.6-r0
13
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
11
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15
11
library/mongo:5.0.6-focal8e70544b6c76
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm3
10
library/rabbitmq:3.9-management8a279e9396a8
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.23
10
library/rabbitmq:3.13-management:3-managemente582c0bc7766
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
8
library/kong:3.6a42d2b4503e7
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23
7
bitnamilegacy/postgresql:17.5.0:latest42a8200d3597
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
6
bitnamilegacy/rabbitmq:4.1.3:4.1.3-debian-12-r19e635efba431
openssl@3.0.17-1~deb12u1
3.0.19-1~deb12u2
6
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
6
curlimages/curl:8.17.0935d9100e9ba
openssl@3.5.4-r0
3.5.6-r0
6
library/mariadb:10:10.11ce66c7be32a0
openssl@3.0.2-0ubuntu1.26
no fix listed
6
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.20+esm15
6
pnnlmiscscripts/anaconda9:1714885940.021839-nginx-1cfbc9b70cbf8
openssl@3.3.2-r1
3.3.7-r0
6
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
6
quay.io/devtron/postgres:14.91b594392f7cb
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
6
alpine/kubectl:1.34.18413f8890d19
openssl@3.5.4-r0
3.5.6-r0
5
bitnamilegacy/kubectl:1.29.2c74b703deed2
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
5
keelhq/keel:latest73714afb4443
openssl@3.3.2-r0
3.3.7-r0
5
library/memcached:1.6.39-alpinec8503d4491ed
openssl@3.5.4-r0
3.5.6-r0
5
library/mongo:4.44be76f674fc4
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3
5
library/postgres:122f2a8c2a7d10
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
5
library/redis:7.4.2-alpine:7.4.2-alpine3.2102419de7eddf
openssl@3.3.3-r0
3.3.7-r0
5
solsson/kafka:latest41e5d8f6f290
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3
5
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
openssl@3.5.5-r0
3.5.6-r0
5
artifacthub/postgres:latest4fd34fa635cc
openssl@3.5.1-1
3.5.5-1~deb13u2
4
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
4
bitnamilegacy/mysql:9.4.0-debian-12-r1ec13e229247a
openssl@3.0.17-1~deb12u1
3.0.19-1~deb12u2
4
bitnamilegacy/postgresql:16233f361c5819
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
4
bitnamilegacy/postgresql:17.6.0-debian-12-r0de520acd66fc
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
4
bitnamilegacy/rabbitmq:4.1.2:4.1.2-debian-12-r1fac502149c40
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
4
cloudflare/cloudflared:2026.3.06b599ca3e974
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
4
hyperledger/fabric-ca:latesta70b6ba64a08
openssl@3.0.2-0ubuntu1.25
no fix listed
4
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.20+esm15
4
hyperledger/fabric-couchdb:0.4.15f6c724592abf
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15
4
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.23
4
library/mongo:5.0-focal5e15a3f014ed
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3
4
library/mongo:4.2.12-bionic628741415fc9
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm8
4
library/mongo:4.4.66efa05203990
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm8
4
library/nginx:1.27.1287ff321f9e3
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
4
library/postgres:134689940c6838
openssl@3.5.1-1+deb13u1
3.5.5-1~deb13u2
4
library/rabbitmq:3.13-management-alpine:3-management-alpine606d8c0d6b3c
openssl@3.5.4-r0
3.5.6-r0
4
library/rabbitmq:3.11-managementc3f70098e01d
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.23
4
mastercloudapps/planner:v1.2340a950b311b2
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.23
4
natsio/nats-server-config-reloader:0.23.064cb6c858e79
openssl@3.5.5-r0
3.5.6-r0
4
opea/llm-tgi:1.00c25aab3f106
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
4
openquantumsafe/openssl3:latest543fb00ce31d
openssl@3.3.2-r4
3.3.7-r0
4

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.