StackRadar

CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,518
of 17,787 indexed, latest versions
Container images
2,896
deployed by those charts
Fix available
4 of 5
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,518 of 17,787 indexed charts deploy, on 2,896 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more1,662
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0904
opensslrpm1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5330
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm415
OSV records
ALPINE-CVE-2026-28390CGA-8g7f-wxpv-r4x7DEBIAN-CVE-2026-28390RHSA-2026:22312RHSA-2026:38503RLSA-2026:22312RLSA-2026:38503UBUNTU-CVE-2026-28390AZL-82070ECHO-9d88-691e-4e0f
Also known as
CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,518 by stars
ChartLatestAffected imagesRadar Score
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

13,031
dnation-kubernetes-jsonnet-translatordnationcloud2.0.11 of 1See more

dnation-kubernetes-jsonnet-translator dnationcloud 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

3,626
dnation-kubernetes-monitoringdnationcloud3.0.21 of 1See more

dnation-kubernetes-monitoring dnationcloud 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

3,626
dnation-kubernetes-monitoring-stackdnationcloud4.0.26 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

6 of the 17 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
openssl@3.3.2-r0
3.3.7-r0
library/memcached:1.6.32-alpine0a27d9d5084f
openssl@3.3.2-r1
3.3.7-r0
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
openssl@3.3.3-r0
3.3.7-r0
quay.io/minio/mc:RELEASE.2022-10-20T23-26-33Z50ee58bc9770
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6
quay.io/minio/minio:RELEASE.2022-10-24T18-35-07Zd853057f2800
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6

Open the chart page →

21,455
api-postsdniel0.9.11 of 1See more

api-posts dniel 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
dniel/api-posts:master45a667852f2a
openssl@1.1.1-1ubuntu2.1~18.04.4
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

8,991
dnsmasq-k8sdnsmasq-k8s1.4.11 of 1See more

dnsmasq-k8s dnsmasq-k8s 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2

Open the chart page →

3,030
docker-authdocker-auth1.14.01 of 1See more

docker-auth docker-auth 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
cesanta/docker_auth:1.14.098e0307e0d2d
openssl@3.5.0-r0
3.5.6-r0

Open the chart page →

1,506
documensodocumensoVerified publisher0.0.61 of 2See more

documenso documenso 0.0.6

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
documenso/documenso:v1.8.17f16a9449f18
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

2,862
dominodomino-iisasVerified publisher0.3.13 of 3See more

domino domino-iisas 0.3.1

3 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
openssl@3.5.1-1+deb13u1
3.5.5-1~deb13u2
ghcr.io/iisas/domino-frontend:k8s8e53861be292
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
ghcr.io/iisas/domino-rest:latest3009350bfc11
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2

Open the chart page →

10,307
doris-foundationdbdorisVerified publisher25.8.01 of 4See more

doris-foundationdb doris 25.8.0

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
foundationdb/fdb-kubernetes-operator:v2.3.07d7b6985291e
openssl@1:3.2.2-6.el9_5
1:3.5.5-3.el9_8

Open the chart page →

3,166
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23

Open the chart page →

24,975
goinceptiondoubanVerified publisher0.3.11 of 2See more

goinception douban 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
hanchuanchuan/goinception:latestb3c0dd26fb50
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

1,201
kafka-uidoubanVerified publisher1.5.21 of 1See more

kafka-ui douban 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/kafbat/kafka-ui:v1.2.0185da4ad3e88
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

1,269
seleniumdoubanVerified publisher1.3.21 of 1See more

selenium douban 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

11,831
eoloplannerdreyg-jescribanob-chart-eoloplanner0.1.03 of 7See more

eoloplanner dreyg-jescribanob-chart-eoloplanner 0.1.0

3 of the 7 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/mongo:4.2.12-bionic628741415fc9
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm8
library/rabbitmq:3-managemente582c0bc7766
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
oscarsotosanchez/weatherservice:v1.0911ec961d10b
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

24,714
drogue-cloud-coredrogue-iotVerified publisher0.7.1120 of 22See more

drogue-cloud-core drogue-iot 0.7.11

20 of the 22 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/drogue-iot/authentication-service:0.11.0857b137fc7b3
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/coap-endpoint:0.11.044790b71aa22
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/command-endpoint:0.11.06dce3158b851
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/console-backend:0.11.025d229ae5bde
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/console-frontend:0.11.0558972f9374c
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/database-migration:0.11.057072c72a7cd
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/device-management-controller:0.11.0200aea1a2b42
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/device-management-service:0.11.0f4a5bfc06a74
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/device-state-service:0.11.0fbf0738cfc7e
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/http-endpoint:0.11.0b612c18479e0
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/knative-operator:0.11.0e2d927639f6e
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/mqtt-endpoint:0.11.032c6d2f5eab9
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/mqtt-integration:0.11.07ac2adb6ca49
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/outbox-controller:0.11.01a958edafdb1
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/test-cert-generator:0.11.06ba7e1608286
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6
ghcr.io/drogue-iot/topic-strimzi-operator:0.11.05253fbf8d04c
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/ttn-operator:0.11.07dd5ac80c8f1
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/user-auth-service:0.11.0adebc40ddf98
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
ghcr.io/drogue-iot/websocket-integration:0.11.0372dcd370945
openssl@1:3.0.1-43.el9_0
1:3.5.5-3.el9_8
quay.io/keycloak/keycloak:20.0054ef67eb7da
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6

Open the chart page →

55,988
drogue-cloud-examplesdrogue-iotVerified publisher0.7.114 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

4 of the 6 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
openssl@3.0.2-0ubuntu1.2
3.0.2-0ubuntu1.23
ghcr.io/ctron/kubectl:1.25e37d61b5277c
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-17.el8_6
ghcr.io/drogue-iot/drogue-event-source:0.2.1e2e812a4cf8e
openssl@1:1.1.1k-5.el8_5
1:1.1.1k-17.el8_6
ghcr.io/drogue-iot/postgresql-pusher:0.2.1c6bb121ced90
openssl@1:1.1.1k-5.el8_5
1:1.1.1k-17.el8_6

Open the chart page →

30,759
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6

Open the chart page →

6,914
duckdb-uiduckdb-ui0.5.21 of 1See more

duckdb-ui duckdb-ui 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

4,283
cloudflaredduck-helm1.1.31 of 1See more

cloudflared duck-helm 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2

Open the chart page →

1,442
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
openssl@3.5.1-1
3.5.5-1~deb13u2

Open the chart page →

3,426
dumpstoredumpstore0.1.12 of 2See more

dumpstore dumpstore 0.1.1

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/manzil-infinity180/backend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b496c90cf82fdd
openssl@3.5.0-r0
3.5.6-r0
ghcr.io/manzil-infinity180/frontend-dumpstore:226f28ca3efa6d3691044813cd09085e28d4a7b44e6394b715d9
openssl@3.5.0-r0
3.5.6-r0

Open the chart page →

4,253
duplicacyduplicacy0.1.22 of 2See more

duplicacy duplicacy 0.1.2

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
drumsergio/duplicacy-container:0.1.0dd3ee9703969
openssl@3.5.5-r0
3.5.6-r0
drumsergio/duplicacy-exporter:0.3.4ca3476077215
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

2,413
kubernetes-database-scalerdvdlevanonVerified publisher0.1.21 of 1See more

kubernetes-database-scaler dvdlevanon 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
dvdlevanon/kubernetes-database-scaler:v0.0.361e79c1643fe4
openssl@3.5.0-r0
3.5.6-r0

Open the chart page →

1,022
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
rundeck/rundeck:3.2.74d64fe56f767
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

19,820
dyff-frontenddyff-frontendVerified publisher0.20.11 of 1See more

dyff-frontend dyff-frontend 0.20.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-frontend:0.20.152549f52ae53
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

973
arbitrumdysnixVerified publisher0.1.11 of 1See more

arbitrum dysnix 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

9,251
bitcoinddysnixVerified publisher0.4.31 of 2See more

bitcoind dysnix 0.4.3

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9

Open the chart page →

1,970
entrypoint-balancereclipse-aeriosVerified publisher1.3.01 of 1See more

entrypoint-balancer eclipse-aerios 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

2,513
idmeclipse-aeriosVerified publisher2.0.01 of 2See more

idm eclipse-aerios 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/postgres:16.4e62fbf9d3e2b
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

4,593
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2

Open the chart page →

13,422
management-portaleclipse-aeriosVerified publisher1.1.01 of 2See more

management-portal eclipse-aerios 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

3,889
mintakaeclipse-aeriosVerified publisher1.0.01 of 2See more

mintaka eclipse-aerios 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
fiware/mintaka:0.7.092a3c5cf43c0
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-17.el8_6

Open the chart page →

11,482
openfaas2eclipse-aeriosVerified publisher12.0.52 of 6See more

openfaas2 eclipse-aerios 12.0.5

2 of the 6 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/openfaas/faas-netes:0.18.1224431adc8e2d
openssl@3.3.2-r4
3.3.7-r0
ghcr.io/openfaas/gateway:0.27.1382b15393116e
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

6,678
orion-ldeclipse-aeriosVerified publisher1.0.02 of 2See more

orion-ld eclipse-aerios 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
fiware/orion-ld:1.10.03c490a746f65
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6
library/mongo:7.0.12ae1cf99fa7bf
openssl@3.0.2-0ubuntu1.17
3.0.2-0ubuntu1.23

Open the chart page →

9,805
self-awarenesseclipse-aeriosVerified publisher1.4.41 of 2See more

self-awareness eclipse-aerios 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2

Open the chart page →

2,195
trustmanagereclipse-aeriosVerified publisher1.0.01 of 1See more

trustmanager eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
openssl@3.5.1-1+deb13u1
3.5.5-1~deb13u2

Open the chart page →

1,907
marblerunedgelesssysVerified publisher1.9.21 of 1See more

marblerun edgelesssys 1.9.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
openssl@3.0.2-0ubuntu1.29
no fix listed

Open the chart page →

1,850
marblerun-coordinatoredgelesssysVerified publisher0.5.01 of 1See more

marblerun-coordinator edgelesssys 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
openssl@1.1.1-1ubuntu2.1~18.04.13
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

10,995
pagesedgwarepages1.0.02 of 3See more

pages edgwarepages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm3
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,233
dashboardedu1.0.01 of 1See more

dashboard edu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
sysnet4admin/dashboard:bluec5bd3bb1b5a6
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

1,344
deploy-elibraryeducative-helm-bookapp0.5.01 of 1See more

deploy-elibrary educative-helm-bookapp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

5,150
cert-manager-cpanel-dns-webhookegebackVerified publisher1.0.61 of 1See more

cert-manager-cpanel-dns-webhook egeback 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
jamesorlakin/cert-manager-cpanel-dns-webhook:v0.3.03894dc11b236
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

1,284
heimdallegebackVerified publisher2.0.41 of 1See more

heimdall egeback 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
linuxserver/heimdall:2.6.371597f4461e4
openssl@3.3.4-r0
3.3.7-r0

Open the chart page →

1,663
unifiegebackVerified publisher2.1.61 of 1See more

unifi egeback 2.1.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,333
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6

Open the chart page →

4,033
eggybyte-chaineggybyte-hcr1.0.01 of 1See more

eggybyte-chain eggybyte-hcr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
curlimages/curl:8.15.04026b29997dc
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

806

Container images carrying it

2,896 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
dgraph/ratel:v25.0.34cae1ff95027
openssl@3.5.4-r0
3.5.6-r0
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3
1
directus/directus:11.1.0e3c8bb975350
openssl@3.3.1-r3
3.3.7-r0
1
diygod/rsshub:2025-11-097a6312cac0d5
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
1
djjudas21/alertify:0.1.0ba22be670c37
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
djjudas21/bearhugmugs:0.1.14fa898a52d97
openssl@3.3.2-r1
3.3.7-r0
1
djjudas21/ecowitt-exporter:2.2.073aab45ef10d
openssl@3.5.0-r0
3.5.6-r0
1
djjudas21/liturgical-colour-app:0.7.2954935971d42
openssl@3.5.1-r0
3.5.6-r0
1
djjudas21/nova-exporter:0.0.10e9094580885c
openssl@3.5.1-r0
3.5.6-r0
1
djjudas21/smtp-relay:0.11.0ffd8143952f6
openssl@3.5.4-r0
3.5.6-r0
1
dniel/api-posts:master45a667852f2a
openssl@1.1.1-1ubuntu2.1~18.04.4
1.1.1-1ubuntu2.1~18.04.23+esm8
1
dobtc/bitcoin:25.1a870f7cb1105
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
documenso/documenso:v1.8.17f16a9449f18
openssl@3.3.2-r0
3.3.7-r0
1
docuseal/docuseal:2.4.17493fd7f6728
openssl@3.5.5-r0
3.5.6-r0
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
openssl@3.5.1-1
3.5.5-1~deb13u2
1
domainmod/domainmod:4.23.04017bfe4c597
openssl@3.0.9-1
3.0.19-1~deb12u2
1
donetick/donetick:v0.1.60849a43d9e363
openssl@3.5.1-r0
3.5.6-r0
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3
1
dpage/pgadmin4:9.11.050700ac17936
openssl@3.5.4-r0
3.5.6-r0
1
dpage/pgadmin4:9.252cb72a9e3da
openssl@3.3.3-r0
3.3.7-r0
1
dpage/pgadmin4:8.13561c1f8f99f2
openssl@3.3.2-r0
3.3.7-r0
1
dragonflyoss/client:v0.1.82edf3e921f4e0
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
dremio/dremio-oss:24.1.080ed2e3b7c43
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23
1
drpcorg/dshackle:0.54.08858fae1859d
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23
1
drumsergio/duplicacy-container:0.1.0dd3ee9703969
openssl@3.5.5-r0
3.5.6-r0
1
drumsergio/duplicacy-exporter:0.3.4ca3476077215
openssl@3.5.5-r0
3.5.6-r0
1
drumsergio/genieacs:1.2.16.028244054e1bf
openssl@3.0.18-1~deb12u2
3.0.19-1~deb12u2
1
drumsergio/pumperly:1.4.885bbc3915e9e
openssl@3.5.5-r0
3.5.6-r0
1
dserio83/velero-api:0.3.16b3d9115fee2
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
dserio83/velero-watchdog:0.1.8d5deae589229
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
duck1123/cert-downloader:latest0e29f19fa67c
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23
1
duck1123/dinsro:latest9568c5961d5d
openssl@3.3.2-r4
3.3.7-r0
1
duck1123/lnd-fileserver:latest9d6fb247b714
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23
1
durellirsd/security-smells-api:v17398aca4fc2e
openssl@3.3.0-r2
3.3.7-r0
1
dvdlevanon/kubernetes-database-scaler:v0.0.361e79c1643fe4
openssl@3.5.0-r0
3.5.6-r0
1
dwdraju/alpine-curl-jq:latest83bd9be2b14b
openssl@3.3.1-r3
3.3.7-r0
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
openssl@3.5.5-r0
3.5.6-r0
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
1
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
openssl@3.5.5-r0
3.5.6-r0
1
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
1
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
openssl@3.5.1-1+deb13u1
3.5.5-1~deb13u2
1
eftechcombr/glpi:nginx-12.0.0-rc1372f0bd43e15
openssl@3.3.3-r0
3.3.7-r0
1
eftechcombr/glpi:php-fpm-12.0.0-rc1f3d0ed01709e
openssl@3.5.4-r0
3.5.6-r0
1
elastic/apm-server:7.17.6c7a1c63257d0
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3
1
elastictranscoder/media:627e21dc963ab3858c6b
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm8
1
elastictranscoder/media-storage:f6d861a026208b8c2359
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm8
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm8
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm8
1
elautoestopista/aeneabot:4.2.1125ba620d528
openssl@3.5.4-r0
3.5.6-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.