StackRadar

CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,518
of 17,787 indexed, latest versions
Container images
2,896
deployed by those charts
Fix available
4 of 5
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,518 of 17,787 indexed charts deploy, on 2,896 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more1,662
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0904
opensslrpm1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5330
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm415
OSV records
ALPINE-CVE-2026-28390CGA-8g7f-wxpv-r4x7DEBIAN-CVE-2026-28390RHSA-2026:22312RHSA-2026:38503RLSA-2026:22312RLSA-2026:38503UBUNTU-CVE-2026-28390AZL-82070ECHO-9d88-691e-4e0f
Also known as
CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,518 by stars
ChartLatestAffected imagesRadar Score
helm-watchdog-pod-deletehelm-watchdog-pod-delete0.3.01 of 1See more

helm-watchdog-pod-delete helm-watchdog-pod-delete 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
alpine/kubectl:1.34.18413f8890d19
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

1,152
typesensehmphuVerified publisher0.1.61 of 1See more

typesense hmphu 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
typesense/typesense:0.23.03accb727cbe2
openssl@1.0.2g-1ubuntu4.19
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

3,874
hpe-cosi-driverhpe-storageVerified publisher2.0.01 of 2See more

hpe-cosi-driver hpe-storage 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/hpestorage/cosi-driver:v2.0.0a4d2667f2b6e
openssl@1:3.2.2-6.el9_5.1
1:3.5.5-3.el9_8

Open the chart page →

1,666
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.23 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

3 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
openssl@3.0.17-1~deb12u1
3.0.19-1~deb12u2
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

10,563
coreinstill-aiOfficialVerified publisher0.1.755 of 15See more

core instill-ai 0.1.75

5 of the 15 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
instill/console:0.68.54cd70e2df5c6
openssl@3.5.1-r0
3.5.6-r0
instill/mgmt-backend:d0933d4ebe12f77a3f9
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
instill/model-backend:611f0f2e980125e5ba5
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
temporalio/admin-tools:1.28cfde8170c92f
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

30,920
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.9

Open the chart page →

4,357
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

4,634
wireguardk8s-home-lab-repo1.6.01 of 1See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,375
kanister-operatorkanister0.118.01 of 1See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
openssl@1:3.5.1-7.el9_7
1:3.5.5-3.el9_8

Open the chart page →

1,163
klancesklances0.1.41 of 1See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2

Open the chart page →

1,705
kraken-cikraken-ciVerified publisher1.7.361 of 10See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6

Open the chart page →

7,285
radondb-mysqlkubesphere-testVerified publisher1.0.11 of 3See more

radondb-mysql kubesphere-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,381
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

11,630
bitwarden-crd-operatorlerentisVerified publisher0.18.01 of 1See more

bitwarden-crd-operator lerentis 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

2,004
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

15,345
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,940
lxcfs-on-kuberneteslxcfs-on-kubernetes0.2.72 of 2See more

lxcfs-on-kubernetes lxcfs-on-kubernetes 0.2.7

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
openssl@3.5.0-r0
3.5.6-r0
ghcr.io/cndoit18/lxcfs-manager:latest6bb61ded2625
openssl@3.5.0-r0
3.5.6-r0

Open the chart page →

2,087
mariadbmariadbVerified publisher0.4.01 of 1See more

mariadb mariadb 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

2,455
kubecostmesosphere-stable0.37.53 of 9See more

kubecost mesosphere-stable 0.37.5

3 of the 9 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
openssl@3.3.2-r0
3.3.7-r0
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.23

Open the chart page →

17,755
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.51 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
openssl@3.3.1-r3
3.3.7-r0

Open the chart page →

2,160
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6

Open the chart page →

3,794
openobservemshade-openobserve0.1.101 of 1See more

openobserve mshade-openobserve 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
public.ecr.aws/zinclabs/openobserve:v0.8.127f8de509169
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

1,306
nebraskanebraska3.0.02 of 2See more

nebraska nebraska 3.0.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
ghcr.io/flatcar/nebraska:4.0.05c9e99ff7167
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

4,066
keycloak-operatornewsaktuell0.1.71 of 1See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6

Open the chart page →

5,066
gateway-apinicklasfrahm-gateway-apiVerified publisher0.2.01 of 1See more

gateway-api nicklasfrahm-gateway-api 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
alpine/kubectl:1.33.32c59a3f0726c
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

1,257
observalobservalVerified publisher1.13.11 of 8See more

observal observal 1.13.1

1 of the 8 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.3810861a2e2d0
openssl@3.0.2-0ubuntu1.29
no fix listed

Open the chart page →

5,839
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

5,224
oesopsmxVerified publisher4.0.3210 of 25See more

oes opsmx 4.0.32

10 of the 25 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/opa:opa-sidecar-v1.03dcbf3caa454
openssl@3.5.4-r0
3.5.6-r0
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-17.el8_6
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6
quay.io/opsmxpublic/ubi8-oes-ui:isd-spin-2025.10.01-e6f6f01-2025121006405d934bb66884
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6

Open the chart page →

107,899
redispascaliskeVerified publisher2.1.01 of 1See more

redis pascaliske 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/redis:8.0.3be0a135f1955
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

1,858
platzioplatz-ioVerified publisher0.6.52 of 2See more

platzio platz-io 0.6.5

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
openssl@3.5.1-r0
3.5.6-r0
platzio/frontend:v0.6.073083749b46a
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

2,867
ipmi-exporterpnnl-miscscripts0.1.151 of 1See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_10

Open the chart page →

2,994
overseerrpree-helm-chartsVerified publisher1.2.01 of 1See more

overseerr pree-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.35.06197516c9d7b
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

2,703
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

5,079
repoflowrepoflow-helm-public0.9.13 of 8See more

repoflow repoflow-helm-public 0.9.1

3 of the 8 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.48.10f6c1c4b957d2
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23
library/elasticsearch:8.15.0310b9fc03b06
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24+esm3
library/postgres:16.24aea012537ed
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

13,615
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

8,760
rocketmq-clusterrocketmq12.6.02 of 2See more

rocketmq-cluster rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
openssl@1:3.2.2-6.el9_5.1
1:3.5.5-3.el9_8

Open the chart page →

6,385
rqliterqliteOfficialVerified publisher2.0.01 of 1See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
rqlite/rqlite:9.1.37b992a526eee
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

1,311
qbittorrent-vpnrtomik-helm-chartsVerified publisher0.0.21 of 2See more

qbittorrent-vpn rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
qmcgaw/gluetun:v3.40.02b42bfa04675
openssl@3.3.2-r1
3.3.7-r0

Open the chart page →

1,218
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

24,549
satisfactory-serversatisfactoryVerified publisher0.1.61 of 1See more

satisfactory-server satisfactory 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.10e103700ae6ae
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23

Open the chart page →

3,466
seldon-core-operatorseldon1.19.01 of 1See more

seldon-core-operator seldon 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
seldonio/seldon-core-operator:1.19.0544e3bf71bd1
openssl@1:3.5.1-5.el9_7
1:3.5.5-3.el9_8

Open the chart page →

860
lldapself-hosters-by-nightVerified publisher0.5.21 of 2See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2

Open the chart page →

3,412
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.6-r0

Open the chart page →

5,889
freeradiusstartechnicaVerified publisher1.2.01 of 1See more

freeradius startechnica 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.2.8af6fd34a5b78
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23

Open the chart page →

5,814
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

15,525
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

7,064
pocketbasetechwolf12Verified publisher0.29.31 of 1See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/techwolf12/pocketbase:0.29.3106099641679
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

1,447
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
openssl@3.5.1-1
3.5.5-1~deb13u2

Open the chart page →

3,816
feedbacksystemthm-mni-iiVerified publisher0.47.14 of 10See more

feedbacksystem thm-mni-ii 0.47.1

4 of the 10 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
thmmniii/fbs-collab:v1.27.15d389e3c5ce6
openssl@3.5.1-r0
3.5.6-r0
thmmniii/fbs-core:v1.27.15438517d9fc2
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.23
thmmniii/fbs-qcm-backend:v1.27.1afbe511e5c24
openssl@3.5.1-r0
3.5.6-r0
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

28,579
topaztopaz0.2.51 of 1See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

1,494

Container images carrying it

2,896 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
kafkakraft/kafkakraft:3.7.02e4b593b878b
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23
1
kaushaln1/helm_node_app:lateste9f2d5dfdba0
openssl@3.3.1-r3
3.3.7-r0
1
kayrosuno/kping:latestf3bd44b29b0d
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9
1
kenchrcum/grafana-dashboard-converter:0.3.105310497aea3f
openssl@3.5.5-r0
3.5.6-r0
1
kennethreitz/httpbin:latest599fe5e50731
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm8
1
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
openssl@3.3.2-r4
3.3.7-r0
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3
1
khaliq/drl-exporter:latestf63cf53166f8
openssl@3.3.1-r3
3.3.7-r0
1
khaliq/pingme:v0.2.749f96888d2ab
openssl@3.5.4-r0
3.5.6-r0
1
kinseii/wazuh-agent:4.14.17160eb143728
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
1
kiwigrid/k8s-sidecar:1.27.6db85bd553253
openssl@3.3.1-r3
3.3.7-r0
1
knspar/phronetis:0.1.4609499d2dc91a
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
knspar/phronetis-operator:0.1.60c4f0543ee58
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
koenkk/zigbee2mqtt:2.7.260a295b40f4e
openssl@3.5.4-r0
3.5.6-r0
1
komodorio/komoplane:0.2.19678d02c3f2e
openssl@3.5.5-r0
3.5.6-r0
1
kong/httpbin:latesta6ac46531193
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.23
1
kong/kong:3.9.16addf50e6bd8
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
kroniak/ssh-client:latest3aef87e1a00b
openssl@3.5.5-r0
3.5.6-r0
1
krontechnology/aapm-agent:1.8.41cc7d5be6529
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.23
1
krontechnology/aapm-agent:1.1.07feef7d2ab42
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm3
1
krontechnology/aapm-service:1.1.39dd602db8baa
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.23
1
krontechnology/aapm-sidecar-injector:1.2.18b42fad987b3
openssl@3.3.6-r0
3.3.7-r0
1
kserve/models-web-app:v0.13.073486345a602
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
kubeflow/model-registry:v0.2.95783f6db428f
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-17.el8_6
1
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
kubeflownotebookswg/kfam:v1.9.22060a2ede788
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
kubeflownotebookswg/notebook-controller:v1.9.20f14bd28fdd5
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
kubegems/redis:7.2.5-debian-12-r2870ee3a77add
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
kuberay/operator:v1.0.04e6ac8a3a2c4
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6
1
kubesec/kubesec:latest025a365d9f18
openssl@3.3.2-r0
3.3.7-r0
1
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
openssl@3.3.3-r0
3.3.7-r0
1
kubeshop/testkube-logs-server:latest094186b19698
openssl@3.3.3-r0
3.3.7-r0
1
kubeshop/tracetest:v1.7.173d7e3a2db43
openssl@3.3.2-r0
3.3.7-r0
1
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
openssl@3.5.5-r0
3.5.6-r0
1
kusionstack/ctrlmesh-manager:v0.2.065e3c32b64d7
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm3
1
kusionstack/kusion:v0.14.0126c8f0b0976
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.23
1
kuzwolka/aws9:main1ad759b961b1
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
kuzwolka/aws9:news3e8880fbbb96
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
kuzwolka/aws9:blog4a7707410bf1
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
kuzwolka/aws9:shop84a9d9766345
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
kvalitetsit/kitargus:2026-03-09-091234-10013c4c5cde2d9371c
openssl@3.5.5-r0
3.5.6-r0
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23
1
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
openssl@3.5.1-1
3.5.5-1~deb13u2
1
kyovint/kyoimgusers:1.0.080084149156e
openssl@3.5.1-1
3.5.5-1~deb13u2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.