CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,510; of 17,790 indexed, latest versions
Container images: 2,889; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,510 of 17,790 indexed charts deploy, on 2,889 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,660
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	899
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5	330
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm4	15

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,510 by stars

Chart

Latest

Affected images

Radar Score

opentelemetry-demoopentelemetry-helm

0.41.2

4 See more

opentelemetry-demo opentelemetry-helm 0.41.2

4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/demo :3.0.0-frontend-proxy	1c53bfb59697	openssl@3.0.2-0ubuntu1.25	no fix listed
ghcr.io/open-telemetry/demo :3.0.0-image-provider	93e1585e97ac	openssl@3.5.4-r0	3.5.6-r0
ghcr.io/open-telemetry/demo :3.0.0-payment	d498c7434d22	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2
ghcr.io/open-telemetry/demo :3.0.0-ad	e6c593fe75eb	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

—

openvaultopenvault

0.8.1

2 of 2 See more

openvault openvault 0.8.1

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/wgbh-mla/ov-frontend :v1.1.0	bfc3118f6565	openssl@3.5.0-r0	3.5.6-r0
ghcr.io/wgbh-mla/ov-wag :v1.1.0	6df27f944fe8	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

6,899

opikopik

2.2.64

5 See more

opik opik 2.2.64

5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.0	862d86046bbc	openssl@3.5.5-r0	3.5.6-r0
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	openssl@3.3.6-r0	3.3.7-r0
curlimages/curl :8.12.1	94e9e444bcba	openssl@3.3.3-r0	3.3.7-r0
library/zookeeper :3.9.4	dfa9ba46d14b	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.23
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.23

Open the chart page →

—

opsops

1.2.0

2 of 2 See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
shaowenchen/ops-controller-manager :latest	26da43bb5b66	openssl@3.0.2-0ubuntu1.25	no fix listed
shaowenchen/ops-server :latest	315444f703f4	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23

Open the chart page →

9,049

orbitalregorbitalreg

0.3.0

1 of 4 See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
orbitalreg/orbitalreg-frontend :0.1.0	4fd449582a3c	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

2,279

palworldpalworld-server-chart

2.7.1

1 of 1 See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
thijsvanloef/palworld-server-docker :v2.7.1	401d3eb5c053	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

3,694

radarrpanzer1119

0.2.2

1 of 1 See more

radarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/radarr :6.0.4.10291-ls289	6c0948b42c14	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

950

sonarrpanzer1119

0.2.2

1 of 1 See more

sonarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/sonarr :4.0.16.2944-ls300	8b9f2138ec50	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

947

paperless-ngxpaperless

0.4.0

1 of 3 See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresqldigest-pinned	926356130b77	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

8,510

homerpascaliske

3.1.1

1 of 1 See more

homer pascaliske 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/bastienwirtz/homer :v25.11.1	5c3a0fb561e0	openssl@3.3.5-r0	3.3.7-r0

Open the chart page →

292

uptime-kumapascaliske

3.0.0

1 of 1 See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.0.2-slim-rootless	9865163f92c1	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

6,890

patch-operatorpatch-operator

0.1.11

2 of 2 See more

patch-operator patch-operator 0.1.11

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	openssl@1:1.1.1k-4.el8	1:1.1.1k-17.el8_6
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	openssl@1:3.0.7-27.el9	1:3.5.5-3.el9_8

Open the chart page →

7,833

patchworkpatchwork

0.8.6

1 of 2 See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/patchwork :main	c01e018bced4	openssl@3.5.0-r0	3.5.6-r0

Open the chart page →

2,084

pbuf-registrypbuf-registry

0.4.1

2 of 2 See more

pbuf-registry pbuf-registry 0.4.1

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/postgres :18.1-alpine3.21	44d837eb4c2e	openssl@3.3.5-r0	3.3.7-r0
ghcr.io/pbufio/registry :v0.4.1	77a36c035b4b	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,941

fahclientpcktdmp

2.6.0

1 of 2 See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
foldingathome/fah-gpu :latest	5ef7742d1eb4	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

4,732

phpipamphpipam-helm

1.0.12

2 of 3 See more

phpipam phpipam-helm 1.0.12

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
phpipam/phpipam-cron :v1.7.3	54468713454e	openssl@3.3.2-r1	3.3.7-r0
phpipam/phpipam-www :v1.7.3	ace0efd24830	openssl@3.3.2-r1	3.3.7-r0

Open the chart page →

3,778

spring-boot-api-apppiomin

0.3.11

1 of 1 See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

7,616

portraitportrait

0.2.13

2 of 8 See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/elasticsearch :7.17.0	332c6d416808	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm3
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

31,949

readarrpree-helm-charts

1.17.1

1 of 1 See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/readarr :0.4.18.2805	8f7551205fbd	openssl@3.5.0-r0	3.5.6-r0

Open the chart page →

1,099

privacyideaprivacyidea

1.0.6

2 of 2 See more

privacyidea privacyidea 1.0.6

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
gpappsoft/privacyidea-docker :3.12.2	af7841adad26	openssl@3.6.0-r4	3.6.2-r0
library/mariadb :11.7.2	fcc7fcd7114a	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

5,483

prometheus-sql-exporterprometheus-community

0.5.0

1 of 1 See more

prometheus-sql-exporter prometheus-community 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/justwatchcom/sql_exporter :v0.8	c4b1d3d0f052	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,199

prowlerprowler-app

0.0.9

1 of 5 See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/neo4j :2026.02.2	5ab4ab0358cf	openssl@3.5.5-1~deb13u1	3.5.5-1~deb13u2

Open the chart page →

8,203

psa-restricted-patcherpsa-restricted-patcher

0.10.1

1 of 1 See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/psa-restricted-patcher :main	a53ef16b024a	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

1,402

pzserverpzserver

0.1.17

1 of 2 See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
lis314/project-zomboid-docker :latest	aa2089c37920	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

3,022

minecraft-serverqumine

0.1.1500

1 of 1 See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
qumine/minecraft-server :v0.1.15	c0b650d51132	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23

Open the chart page →

6,835

rabbitmqrabbitmq-magefleet

1.2.0

1 of 1 See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.1.0-management	935b3f84c1e4	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

2,809

rclonerclone

2.2.0

1 of 1 See more

rclone rclone 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
rclone/rclone :1.68	74c51b8817e5	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

1,672

napcatredish101

0.1.3

1 of 1 See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
mlikiowa/napcat-docker :latest	1336a777f9a4	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23

Open the chart page →

7,466

redis-sentinel-gatewayredis-sentinel-gateway

1.0.2

1 of 1 See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
promzeus/redis-sentinel-gateway :v1	82f6d56e280b	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

2,665

kminionredpanda-data

0.15.2

1 of 1 See more

kminion redpanda-data 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
redpandadata/kminion :v2.3.0	c05fa976428e	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

923

reportportalreportportal-io

26.8.12

1 of 15 See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2025.7.23-debian-12-r0	8935e75fa5d1	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

11,943

reservation-appreservation-app

1.0.9

1 of 4 See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
zbalogh/reservation-angular-ui :1.0.9	5eb19e460b3c	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

6,640

resurfaceresurfaceio

3.9.0

1 of 3 See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
resurfaceio/resurface :3.7.84	d5cda2f64109	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23

Open the chart page →

7,487

atuinrm3l

0.11.0

2 of 3 See more

atuin rm3l 0.11.0

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.2.0-debian-12-r8	90fda44bfa42	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
ghcr.io/atuinsh/atuin :18.12.0	e953fa9e36ef	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

6,548

dev-feedrm3l

3.1.2

2 of 3 See more

dev-feed rm3l 3.1.2

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :11.4.3-debian-12-r0	8b3778160e34	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
rm3l/dev-feed-api :latest	9a7f732245a3	openssl@1:3.0.7-17.el9_2	1:3.5.5-3.el9_8

Open the chart page →

9,885

mac-ouirm3l

1.25.0

1 of 1 See more

mac-oui rm3l 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
rm3l/mac-oui :1.8.0	3a5e1f95c132	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-17.el8_6

Open the chart page →

1,975

service-names-port-numbersrm3l

0.26.1

1 of 1 See more

service-names-port-numbers rm3l 0.26.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
rm3l/service-names-port-numbers :0.12.1	62d1cc4223e5	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

10,159

elasticsearchromanow-helm-charts

1.7.1

1 of 2 See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/elasticsearch :7.17.8	fdc73b3249c1	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

6,085

fluent-bitromanow-helm-charts

1.7.3

1 of 1 See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
fluent/fluent-bit :4.0-debug	e76397ef3983	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

7,767

kibanaromanow-helm-charts

1.7.1

1 of 1 See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/kibana :7.17.8	c5781ba340ef	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

6,918

kube-state-metricsromanow-helm-charts

1.7.2

1 of 1 See more

kube-state-metrics romanow-helm-charts 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/kube-state-metrics :2	04a3044b384b	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

2,667

logstashromanow-helm-charts

1.5.0

1 of 1 See more

logstash romanow-helm-charts 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/logstash :7.17.8	17a4f64e9cf5	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,567

routehub-client-hubroutehub-helm

1.0.0

2 of 3 See more

routehub-client-hub routehub-helm 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
eqalpha/keydb :latest	6537505c4235	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
timescale/timescaledb-ha :pg16	d7db8f1085a3	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

13,028

jellyseerrrtomik-helm-charts

0.0.1

1 of 1 See more

jellyseerr rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/fallenbagel/jellyseerr :2.5.2	2a611369ad1d	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

2,823

mealiertomik-helm-charts

0.0.2

1 of 1 See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v3.2.1	322369a5b748	openssl@3.5.1-1	3.5.5-1~deb13u2

Open the chart page →

3,942

baikalrubxkube

1.3.1

1 of 1 See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ckulka/baikal :0.10.1-nginx	434bdd162247	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,321

delugerubxkube

1.2.1

1 of 1 See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
linuxserver/deluge :18.04.1	0ac871624394	openssl@1.1.1-1ubuntu2.1~18.04.14	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

13,562

kyoorubxkube

0.1.10

6 of 9 See more

kyoo rubxkube 0.1.10

6 of the 9 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
getmeili/meilisearch :v1.11.0	b9be3d2d4251	openssl@3.3.2-r0	3.3.7-r0
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
ghcr.io/zoriya/kyoo_back :4.7.1	416e980f76a6	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
ghcr.io/zoriya/kyoo_front :4.7.1	d7f76c9c65d9	openssl@3.3.2-r4	3.3.7-r0
ghcr.io/zoriya/kyoo_migrations :4.7.1	f7e607f24071	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

30,310

conference-appsalaboy

1.0.0

3 of 7 See more

conference-app salaboy 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinned	ce9ce8293e4e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinned	bb64bf14467d	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned	799c35f9f306	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23

Open the chart page →

11,022

devpisb-helm-charts

0.3.0

1 of 1 See more

devpi sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
jonasal/devpi-server :6.17.0-alpine	ec1eee99a18d	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

921

Container images carrying it

2,889 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/postgres :17.5	aadf2c0696f5	openssl@3.5.1-1	3.5.5-1~deb13u2	1
library/postgres :13.12	ced3ba927f4c	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
library/postgres :17.6-alpine	ef257d85f76e	openssl@3.5.4-r0	3.5.6-r0	1
library/postgres :17.5-bookworm	fbcea1bd13b6	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2	1
library/python :3.8-alpine	3d93b1f77efc	openssl@3.3.2-r0	3.3.7-r0	1
library/python :3.8	d41127070014	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
library/python :3.9	da5aee29682d	openssl@3.5.1-1+deb13u1	3.5.5-1~deb13u2	1
library/python :3.14.3-alpine3.23	faee120f7885	openssl@3.5.5-r0	3.5.6-r0	1
library/rabbitmq :3.12.10	0742852455ad	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23	1
library/rabbitmq :3.12-management-alpine	0b44fbcc3a4b	openssl@3.3.2-r0	3.3.7-r0	1
library/rabbitmq :3.11.5-management	1b0f675d2f24	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3	1
library/rabbitmq :3.12-alpine	97907aceae0a	openssl@3.3.2-r0	3.3.7-r0	1
library/rabbitmq :3.7-management	b6dd45cc35b3	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm8	1
library/redis :8.6.2	009cc37796fb	openssl@3.5.5-1~deb13u1	3.5.5-1~deb13u2	1
library/redis :8.4.0	3906b477e4b6	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
library/redis :8.2.2	4521b581dbdd	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
library/redis :8.2.1	5fa2edb1e408	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2	1
library/redis :7.2.5-alpine	6aaf3f5e6bc8	openssl@3.3.2-r0	3.3.7-r0	1
library/redis :6.2.20-alpine	77697a75da9f	openssl@3.3.5-r0	3.3.7-r0	1
library/redis	83edc2b8e9ff	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2	1
library/redis :8.0.2	b43d2dcbbdb1	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
library/redis :7.4.1	bb142a9c18ac	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
library/redis :8.0.3	be0a135f1955	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2	1
library/redis :7.4.1-alpine	c1e88455c852	openssl@3.3.2-r1	3.3.7-r0	1
library/redis :7.0-alpine	c9d92d840fd0	openssl@3.3.2-r0	3.3.7-r0	1
library/redis :8.2.3	d31852005202	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
library/sonarqube :10.7.0-community	0842dcd4c8f8	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23	1
library/sonarqube :10.0.0-community	ef9723cf4fe4	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	1
library/telegraf :1.27	507a3eecf809	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
library/traefik :3.3.5	104204dadedf	openssl@3.3.3-r0	3.3.7-r0	1
library/ubuntu :22.04	2edbbc5dc405	openssl@3.0.2-0ubuntu1.26	no fix listed	1
library/varnish :7.5.0	4d0bb287d87b	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
library/varnish :alpine	a84e1d4adb58	openssl@3.5.5-r0	3.5.6-r0	1
library/wordpress :6.4.3-apache	8ae66efb09a2	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
library/wordpress :php8.1-apache	f73396626d2f	openssl@3.5.4-1~deb13u1	3.5.5-1~deb13u2	1
library/zookeeper :3.8-temurin	55d1e5b2e601	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	1
library/zookeeper :3.9.5	cab8944a33a1	openssl@3.0.2-0ubuntu1.29	no fix listed	1
library/zookeeper :3.9.4	dfa9ba46d14b	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.23	1
libretranslate/libretranslate :v1.9.6	1de2d7056bb8	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2	1
lifailon/openrouter-bot :latest	ea37e4b6b952	openssl@3.5.1-r0	3.5.6-r0	1
lightbend/curl :7.47.0	b0c9894ac8dd	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm15	1
linkstackorg/linkstack :latest	1c8b05399ee4	openssl@3.5.5-r0	3.5.6-r0	1
linode/linode-blockstorage-csi-driver :v1.1.4	09f3282bf53d	openssl@3.5.5-r0	3.5.6-r0	1
linuxserver/calibre :version-v5.21.0	a847b5b2d860	nodejs@14.17.0-1nodesource1 openssl@1.1.1-1ubuntu2.1~18.04.9 openssl1.0@1.0.2n-1ubuntu5.6	no fix listed 1.1.1-1ubuntu2.1~18.04.23+esm8 1.0.2n-1ubuntu5.13+esm4	1
linuxserver/calibre-web :0.6.24	241009026e6f	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
linuxserver/calibre-web :version-0.6.12	938810eca3d3	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3	1
linuxserver/cloud9 :latest	45c5fe102ff3	openssl@1.1.1-1ubuntu2.1~18.04.19	1.1.1-1ubuntu2.1~18.04.23+esm8	1
linuxserver/code-server :4.10.1	a5e43a05ae79	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.23	1
linuxserver/codimd :latest	b801bbcf6386	nodejs@10.23.0-1nodesource1 openssl@1.1.1-1ubuntu2.1~18.04.7	no fix listed 1.1.1-1ubuntu2.1~18.04.23+esm8	1
linuxserver/deluge :libtorrentv1-2.2.0-ls40	052eac68ccc0	openssl@3.3.3-r0	3.3.7-r0	1