StackRadar

CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,518
of 17,787 indexed, latest versions
Container images
2,896
deployed by those charts
Fix available
4 of 5
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,518 of 17,787 indexed charts deploy, on 2,896 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more1,662
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0904
opensslrpm1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5330
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm415
OSV records
ALPINE-CVE-2026-28390CGA-8g7f-wxpv-r4x7DEBIAN-CVE-2026-28390RHSA-2026:22312RHSA-2026:38503RLSA-2026:22312RLSA-2026:38503UBUNTU-CVE-2026-28390AZL-82070ECHO-9d88-691e-4e0f
Also known as
CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,518 by stars
ChartLatestAffected imagesRadar Score
librechatopenshift1.9.01 of 3See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

5,833
opentelemetry-demoopentelemetry-helmVerified publisher0.41.14 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

4 of the 34 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
openssl@3.0.2-0ubuntu1.25
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
openssl@3.5.4-r0
3.5.6-r0
ghcr.io/open-telemetry/demo:3.0.0-paymentd498c7434d22
openssl@3.0.18-1~deb12u2
3.0.19-1~deb12u2
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9

Open the chart page →

22,678
openvaultopenvaultVerified publisher0.8.12 of 2See more

openvault openvault 0.8.1

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
openssl@3.5.0-r0
3.5.6-r0
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

6,899
opikopikOfficialVerified publisher2.2.615 of 13See more

opik opik 2.2.61

5 of the 13 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.0862d86046bbc
openssl@3.5.5-r0
3.5.6-r0
cloudpirates/image-minio:RELEASE.2025-10-15T17-29-55Z-hardened8dc02a7e5093
openssl@3.3.6-r0
3.3.7-r0
curlimages/curl:8.12.194e9e444bcba
openssl@3.3.3-r0
3.3.7-r0
library/zookeeper:3.9.4dfa9ba46d14b
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.23
redis/redis-stack-server:7.2.0-v10e44b2b49d059
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23

Open the chart page →

14,422
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
openssl@3.0.2-0ubuntu1.25
no fix listed
shaowenchen/ops-server:latest315444f703f4
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23

Open the chart page →

9,049
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

2,279
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2

Open the chart page →

3,694
radarrpanzer1119Verified publisher0.2.21 of 1See more

radarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/radarr:6.0.4.10291-ls2896c0948b42c14
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

950
sonarrpanzer1119Verified publisher0.2.21 of 1See more

sonarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

947
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/postgresqldigest-pinned926356130b77
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

8,510
homerpascaliskeVerified publisher3.1.11 of 1See more

homer pascaliske 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/bastienwirtz/homer:v25.11.15c3a0fb561e0
openssl@3.3.5-r0
3.3.7-r0

Open the chart page →

292
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2

Open the chart page →

6,890
patch-operatorpatch-operator0.1.112 of 2See more

patch-operator patch-operator 0.1.11

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/redhat-cop/kube-rbac-proxy:v0.11.0c68135620167
openssl@1:1.1.1k-4.el8
1:1.1.1k-17.el8_6
quay.io/redhat-cop/patch-operator:v0.1.11030ade9b9428
openssl@1:3.0.7-27.el9
1:3.5.5-3.el9_8

Open the chart page →

7,833
patchworkpatchworkVerified publisher0.8.61 of 2See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/patchwork:mainc01e018bced4
openssl@3.5.0-r0
3.5.6-r0

Open the chart page →

2,084
pbuf-registrypbuf-registry0.4.12 of 2See more

pbuf-registry pbuf-registry 0.4.1

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/postgres:18.1-alpine3.2144d837eb4c2e
openssl@3.3.5-r0
3.3.7-r0
ghcr.io/pbufio/registry:v0.4.177a36c035b4b
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

1,941
fahclientpcktdmp2.6.01 of 2See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
foldingathome/fah-gpu:latest5ef7742d1eb4
openssl@1.1.1-1ubuntu2.1~18.04.13
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

4,732
phpipamphpipam-helmVerified publisher1.0.122 of 3See more

phpipam phpipam-helm 1.0.12

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
phpipam/phpipam-cron:v1.7.354468713454e
openssl@3.3.2-r1
3.3.7-r0
phpipam/phpipam-www:v1.7.3ace0efd24830
openssl@3.3.2-r1
3.3.7-r0

Open the chart page →

3,778
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.23

Open the chart page →

7,616
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

31,949
readarrpree-helm-chartsVerified publisher1.17.11 of 1See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.18.28058f7551205fbd
openssl@3.5.0-r0
3.5.6-r0

Open the chart page →

1,099
privacyideaprivacyidea1.0.62 of 2See more

privacyidea privacyidea 1.0.6

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
gpappsoft/privacyidea-docker:3.12.2af7841adad26
openssl@3.6.0-r4
3.6.2-r0
library/mariadb:11.7.2fcc7fcd7114a
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9

Open the chart page →

5,483
prometheus-sql-exporterprometheus-communityVerified publisher0.5.01 of 1See more

prometheus-sql-exporter prometheus-community 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/justwatchcom/sql_exporter:v0.8c4b1d3d0f052
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

1,199
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/neo4j:2026.02.25ab4ab0358cf
openssl@3.5.5-1~deb13u1
3.5.5-1~deb13u2

Open the chart page →

8,203
psa-restricted-patcherpsa-restricted-patcherVerified publisher0.10.11 of 1See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

1,402
pzserverpzserver0.1.171 of 2See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
lis314/project-zomboid-docker:latestaa2089c37920
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

3,022
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23

Open the chart page →

6,835
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9

Open the chart page →

2,809
rclonercloneVerified publisher2.2.01 of 1See more

rclone rclone 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

1,672
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.23

Open the chart page →

7,466
redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher1.0.21 of 1See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
promzeus/redis-sentinel-gateway:v182f6d56e280b
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

2,665
kminionredpanda-dataOfficialVerified publisher0.15.21 of 1See more

kminion redpanda-data 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
redpandadata/kminion:v2.3.0c05fa976428e
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

923
reportportalreportportal-ioOfficialVerified publisher26.8.121 of 15See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

11,943
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

6,640
resurfaceresurfaceioVerified publisher3.9.01 of 3See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
resurfaceio/resurface:3.7.84d5cda2f64109
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23

Open the chart page →

7,487
atuinrm3lVerified publisher0.11.02 of 3See more

atuin rm3l 0.11.0

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
ghcr.io/atuinsh/atuin:18.12.0e953fa9e36ef
openssl@3.0.18-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

6,548
dev-feedrm3lVerified publisher3.1.22 of 3See more

dev-feed rm3l 3.1.2

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
rm3l/dev-feed-api:latest9a7f732245a3
openssl@1:3.0.7-17.el9_2
1:3.5.5-3.el9_8

Open the chart page →

9,885
mac-ouirm3lVerified publisher1.25.01 of 1See more

mac-oui rm3l 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
rm3l/mac-oui:1.8.03a5e1f95c132
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-17.el8_6

Open the chart page →

1,975
service-names-port-numbersrm3lVerified publisher0.26.11 of 1See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
rm3l/service-names-port-numbers:0.12.162d1cc4223e5
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

10,159
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

6,085
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2

Open the chart page →

7,767
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

6,918
kube-state-metricsromanow-helm-chartsVerified publisher1.7.21 of 1See more

kube-state-metrics romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/kube-state-metrics:204a3044b384b
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

2,667
logstashromanow-helm-chartsVerified publisher1.5.01 of 1See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/logstash:7.17.817a4f64e9cf5
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,567
routehub-client-hubroutehub-helm1.0.02 of 3See more

routehub-client-hub routehub-helm 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
eqalpha/keydb:latest6537505c4235
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm3
timescale/timescaledb-ha:pg16d7db8f1085a3
openssl@3.0.2-0ubuntu1.29
no fix listed

Open the chart page →

13,028
jellyseerrrtomik-helm-chartsVerified publisher0.0.11 of 1See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

2,823
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
openssl@3.5.1-1
3.5.5-1~deb13u2

Open the chart page →

3,942
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

5,321
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

13,562
kyoorubxkubeVerified publisher0.1.106 of 9See more

kyoo rubxkube 0.1.10

6 of the 9 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
getmeili/meilisearch:v1.11.0b9be3d2d4251
openssl@3.3.2-r0
3.3.7-r0
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
ghcr.io/zoriya/kyoo_front:4.7.1d7f76c9c65d9
openssl@3.3.2-r4
3.3.7-r0
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

30,310
conference-appsalaboy1.0.03 of 7See more

conference-app salaboy 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinnedce9ce8293e4e
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinnedbb64bf14467d
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned799c35f9f306
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23

Open the chart page →

11,022

Container images carrying it

2,896 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-17.el8_6
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6
1
appwrite/appwrite:1.9.01aaa70127114
openssl@3.5.5-r0
3.5.6-r0
1
appwrite/console:8.7.383dcdc8492ac6
openssl@3.5.5-r0
3.5.6-r0
1
appwrite/console:7.5.7aaa11ceab999
openssl@3.3.3-r0
3.3.7-r0
1
aquasec/kube-bench:v0.15.07a8fa32dce21
openssl@3.5.5-r0
3.5.6-r0
1
aquasec/tracee:0.24.1cfbbfee972e6
openssl@3.3.5-r0
3.3.7-r0
1
aquasec/trivy:0.69.3bcc376de8d77
openssl@3.5.5-r0
3.5.6-r0
1
arilot/docker-bitcoind:0.17.127a4f7e0f9f1
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm15
1
aristidetm/basic-notebook:3.6.5469dbc951224
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
artifacthub/db-migrator:v1.19.02a746b289fcd
openssl@3.3.1-r0
3.3.7-r0
1
artifacthub/hub:v1.19.0111918d8c399
openssl@3.3.1-r0
3.3.7-r0
1
artifacthub/scanner:v1.19.0323d026e78c3
openssl@3.3.1-r0
3.3.7-r0
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
arunvelsriram/utils:latest655ad18fd8d6
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm3
1
assistiot/fl_orchestrator:dbmongo4-latestd157fbe150e3
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3
1
assistiot/identity-manager_db:latest0d3e6d35f168
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
assistiot/identity-manager_kc:latest0df4b4fa899a
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6
1
assistiot/location_processing:lateste9bae124095f
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23
1
assistiot/open_api_backend:1.1.230812ba93555
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.23
1
assistiot/sdn_controller:2.4.0ea254b6d8a31
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
openssl@3.0.9-1
3.0.19-1~deb12u2
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm3
1
athou/commafeed:6.2.0-postgresql5e388351df1a
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
1
atlassian/confluence-server:7.10.03b9222ab32ef
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23
1
atlassian/jira-software:8.14.037bc46cbec1a
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23
1
atlassian/jira-software:9.7.264a75aa4ec4e
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
automatischio/automatisch:0.15.03bace7a12d5f
openssl@3.3.3-r0
3.3.7-r0
1
avaprotocol/ap-avs:1.2.0c430ea5c37d6
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
avinash263/pyredis263:latestaa2b8727f1a6
openssl@3.0.9-1
3.0.19-1~deb12u2
1
avzini/web-app:latestf40b30210ed0
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
openssl@3.5.5-r0
3.5.6-r0
1
b3log/siyuan:v3.1.2595c0d129bc19
openssl@3.3.3-r0
3.3.7-r0
1
b4bz/homer:v24.12.14b44a4a9e329
openssl@3.3.2-r0
3.3.7-r0
1
b4bz/homer:v25.02.2c367265313f9
openssl@3.3.3-r0
3.3.7-r0
1
baserow/backend:1.31.1e0b3c8130b91
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
baserow/baserow:1.30.1df0c42eb67e8
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
1
beanbag/reviewboard:latest6b840f546e1c
openssl@3.0.2-0ubuntu1.29
no fix listed
1
behnambm/docker-sample:v1bd3ad88afff9
openssl@3.3.1-r0
3.3.7-r0
1
beopenit/door-helm:v3.0.1b4d9f9bee224
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
openssl@3.5.1-1
3.5.5-1~deb13u2
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
beyzkaya/blog-frontend:v1.0.0bf412d75c510
openssl@3.5.0-r0
3.5.6-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.