CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,518; of 17,787 indexed, latest versions
Container images: 2,896; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,518 of 17,787 indexed charts deploy, on 2,896 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,662
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	904
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5	330
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm4	15

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,518 by stars

Chart

Latest

Affected images

Radar Score

pyroscopegrafana

2.3.1

1 of 3 See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.12.2	f94b1c82957a	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9

Open the chart page →

3,196

plantumlstevehipwell

3.49.0

1 of 1 See more

plantuml stevehipwell 3.49.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
plantuml/plantuml-server :jetty-v1.2026.8	5f6f99ec2fc1	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9

Open the chart page →

1,914

unleashunleash

5.6.8

1 of 2 See more

unleash unleash 5.6.8

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
unleashorg/unleash-server :7.5.0	9adb37e399ba	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

2,059

hydraory

0.64.0

1 of 2 See more

1,156

istiocloudposse

1.1.0

2 of 8 See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

23,992

headscalegabe565

0.16.0

1 of 2 See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

1,985

oncallgrafana

1.16.5

1 of 12 See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
grafana/oncall :v1.16.5	499851658393	openssl@3.3.4-r0	3.3.7-r0

Open the chart page →

16,251

openbaoopenbao

0.29.4

1 of 2 See more

openbao openbao 0.29.4

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hashicorp/vault-k8s :1.7.2	ae3d307658b7	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,509

openprojectopenproject-helm-charts

13.11.0

2 of 5 See more

openproject openproject-helm-charts 13.11.0

2 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/memcached :1.6.24-debian-12-r0	1d80b6a96f00	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
openproject/hocuspocus :release-338001b2	88dc1359dfb5	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

19,998

kratosory

0.64.0

1 of 1 See more

kratos ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
oryd/kratos :v26.2.0	2a13bb8d362c	openssl@3.3.6-r0	3.3.7-r0

Open the chart page →

866

wazuhwazuh-helm-morgoved

2.0.7

1 of 5 See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
kinseii/wazuh-agent :4.14.1	7160eb143728	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

11,402

zabbixcetic

3.1.3

4 of 5 See more

zabbix cetic 3.1.3

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

33,907

kube-downscalerdeliveryhero

0.7.6

1 of 1 See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	openssl@3.0.9-1	3.0.19-1~deb12u2

Open the chart page →

3,700

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

6,550

stacks-blockchain-apihirosystems

6.5.1

1 of 5 See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hirosystems/stacks-blockchain-api :8.13.2	9c98b23c1515	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

8,387

imgproxyimgproxy

1.1.0

1 of 1 See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

2,360

cloudflaredkubitodev

1.7.9

1 of 1 See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

1,442

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	openssl@3.3.3-r0	3.3.7-r0
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

5,278

redashredash

4.2.0

1 of 3 See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
redash/redash :25.8.0	00d813437db5	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

6,012

pypiservercommunity-charts

0.1.9

1 of 1 See more

pypiserver community-charts 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
pypiserver/pypiserver :v2.4.1	e935e19433ef	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

583

daskdask

2024.1.1

2 of 2 See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask :2024.1.0	080150de7d86	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23

Open the chart page →

12,830

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

3,031

netbirdjaconi

0.15.1

3 of 4 See more

netbird jaconi 0.15.1

3 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
netbirdio/management :0.45.1	0c9994b393ea	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9
netbirdio/relay :0.45.1	872e3add0e1e	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
netbirdio/signal :0.45.1	46ce5a45538f	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

8,473

litellm-helmlitellm

1.101.0

1 of 2 See more

litellm-helm litellm 1.101.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.2.0-debian-12-r6	ea55532b6f75	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

4,574

oneuptimeoneuptime

13.0.4

1 of 7 See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :26.7	01b81d1432c4	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

10,896

prometheus-cloudwatch-exporterprometheus-community

0.28.2

1 of 1 See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
prom/cloudwatch-exporter :v0.16.0	71c2e988af06	openssl@3.0.13-0ubuntu3.2	3.0.13-0ubuntu3.9

Open the chart page →

3,422

openvpn-asstenic

0.1.9

1 of 1 See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

15,607

jellyfinutkuozdemir

2.0.0

1 of 1 See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
linuxserver/jellyfin :10.7.7	2427dde159a2	openssl@1.1.1f-1ubuntu2.13	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,917

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,023

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-17.el8_6

Open the chart page →

6,853

falcosidekickfalcosecurity

0.14.0

1 of 1 See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
falcosecurity/falcosidekick :2.32.0	1976da721518	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

1,634

glasskube-operatorglasskube

0.12.2

3 of 3 See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23
quay.io/minio/mc :RELEASE.2023-09-29T16-41-22Z	a784ce6e3b1b	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6

Open the chart page →

11,971

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,364

plane-cemakeplane

1.8.1

3 of 11 See more

plane-ce makeplane 1.8.1

3 of the 11 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	openssl@3.3.1-r3	3.3.7-r0
library/rabbitmq :3.13.6-management-alpine	611107e29cce	openssl@3.3.1-r3	3.3.7-r0
valkey/valkey :7.2.11-alpine	10328d00120d	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

4,854

milvusmilvus-helm

5.0.28

2 of 4 See more

milvus milvus-helm 5.0.28

2 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :3.0.7	9c9947de139d	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23
milvusdb/etcd :3.5.25-r1	fededb2f2d63	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.23

Open the chart page →

10,764

prefect-serverprefect

2026.9.14141910

1 of 2 See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,448

rocketmqrocketmq

12.6.0

2 of 2 See more

rocketmq rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apache/rocketmq :5.4.0	319cd8a81ed1	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9
apacherocketmq/rocketmq-dashboard :2.1.0	ce78506bd6fe	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8

Open the chart page →

6,385

snipeitt3n

3.4.1

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

18,570

apicurio-registryapicurio-registry-helm

3.8.0

1 of 2 See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/apicurio/apicurio-registry-mem :2.5.8.Final	3b036692d546	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6

Open the chart page →

6,675

zookeepercloudpirates-zookeeper

0.13.11

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.5	cab8944a33a1	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

2,963

codefreshcodefresh-onprem

2.12.13

4 of 42 See more

codefresh codefresh-onprem 2.12.13

4 of the 42 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/rabbitmq :4.1.3	9e635efba431	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

14,615

contourcontour

0.8.0

1 of 2 See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
envoyproxy/envoy :v1.38.4	447f857a0146	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

1,521

stackstorm-hastackstorm

1.1.0

12 of 17 See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
stackstorm/st2actionrunner :3.8	88235ba70cad	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2api :3.8	6f56d239d280	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2auth :3.8	33ecfda16608	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2notifier :3.8	f190a6212195	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2rulesengine :3.8	259503496ff9	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2scheduler :3.8	b1de2055c362	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2sensorcontainer :3.8	b1a338f64773	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2stream :3.8	1c8904a3bf67	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2timersengine :3.8	1bf35bfaf00c	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2web :3.8	09989a26c8b7	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2workflowengine :3.8	19fdfffdbba8	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

96,984

supabasetokens-studio

1.0.0

9 of 14 See more

supabase tokens-studio 1.0.0

9 of the 14 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9
library/kong :3.8.0	712e407b20ea	openssl@3.0.2-0ubuntu1.26	no fix listed
supabase/edge-runtime :v1.59.0	eff9c554d649	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/gotrue :v2.163.0	ba4ddc594b0b	openssl@3.3.2-r0	3.3.7-r0
supabase/postgres-meta :v0.84.2	d0a96973e9f1	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/realtime :v2.33.8	d207e6e23ad3	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/storage-api :v1.12.0	f983fb50bd95	openssl@3.3.2-r0	3.3.7-r0
supabase/studio :20241021-9f9b083	26d8070c55e9	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
timberio/vector :0.42.0-alpine	913878963fde	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

23,263

renterdartur9010

1.4.4

1 of 2 See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

8,530

budibasebudibase

0.0.0-master

1 of 7 See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
budibase/database :2.1.0	d90f656261c9	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

10,810

krokicowboysysop

6.1.0

4 of 5 See more

kroki cowboysysop 6.1.0

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
yuzutech/kroki-bpmn :0.29.1	444805c4b917	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-diagramsnet :0.29.1	b810edbf9c62	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-excalidraw :0.29.1	57917319ea70	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-mermaid :0.29.1	963b4acfde6e	openssl@3.3.5-r0	3.3.7-r0

Open the chart page →

6,743

csi-secrets-store-provider-azurecsi-secrets-store-provider-azure

1.8.2

1 of 5 See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.15.0	59b9d0348428	openssl@3.3.5-3.azl3	3.3.5-5

Open the chart page →

2,235

excalidrawexcalidraw

0.18.0

1 of 1 See more

excalidraw excalidraw 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
pmoscode/excalidraw :v0.18.0	8ee61554699c	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,110

bitcoindfold

0.3.2

1 of 2 See more

bitcoind fold 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
thesisrobot/bitcoind :v23.0	16b368e4d52c	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

3,493

Container images carrying it

2,896 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
lumenvox/cloud-transaction :2.0.0	8b74f9d3ba09	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm3	1
lumenvox/cloud-voice-verifier :2.0.0	14170ad34903	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm3	1
maildev/maildev :2.2.1	180ef51f65ee	openssl@3.3.2-r4	3.3.7-r0	1
makemake1337/blutgang :latest	8a55174fc830	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
makersquad/harp-proxy :0.8.1	a40dd258c527	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
maksymhencha/educative-helm-bookapp :0.0.2	7f096a681192	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm3	1
maptiler/server :4.8.0	7e206140057b	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm3	1
marcoimme/oidcmock :latest	b6035c0721a8	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2	1
margays/eir :v1.7.2	2883fdd06fd7	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
mariadb/maxscale :23.02.2	56c5e0908148	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_10	1
martinhelmich/typo3 :12.4	c83a4f3fd7ae	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2	1
mathieuruellan/piwigo :latest	04572c8a1b04	openssl@3.3.2-r1	3.3.7-r0	1
mathnao/certs :2.1.3	b900e6b64684	openssl@3.3.4-r0	3.3.7-r0	1
matrixdotorg/synapse :v1.127.1	c3c4a9de2a0b	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
matterlabs/external-node :9734bf2-1787057993929	5dadc06bdf3b	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
matterlabs/external-node :v24.0.0	6cbfea4c694a	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
mauricenino/dashdot :5.9.2	236997816917	openssl@3.3.3-r0	3.3.7-r0	1
mavrick1/kubestellar-b :latest	45ca0429a1d4	openssl@3.3.3-r0	3.3.7-r0	1
mavrick1/kubestellar-f :latest	56bd8eaa53a4	openssl@3.3.3-r0	3.3.7-r0	1
mawad98/backstage-pyactions :demo	99422c56a274	openssl@3.5.5-1~deb13u1	3.5.5-1~deb13u2	1
mbround18/valheim :3.1.0	70bd4da591cd	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23	1
mccutchen/go-httpbin :v2.15.0	24528cf5229d	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
mcronce/oci-registry :v0.4.5	09519cd7bd2f	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
mediagis/nominatim :3.7	c15e941485ef	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3	1
mediagis/nominatim :4.2	d0eae7b51374	openssl@3.0.2-0ubuntu1.14	3.0.2-0ubuntu1.23	1
megaease/easegress :latest	fad1c7452958	openssl@3.5.5-r0	3.5.6-r0	1
merlos/zookeeper :3.9.3	a38fc7e09ed7	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
metabase/metabase :v0.53.4.1	7807bc5cad17	openssl@3.3.3-r0	3.3.7-r0	1
middlewareeng/middleware :0.3.1	747d880812f1	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
mikefarah/yq :4.45.1	2c100efaca06	openssl@3.3.2-r4	3.3.7-r0	1
milvusdb/etcd :3.5.25-r1	fededb2f2d63	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.23	1
milvusdb/milvus :v2.2.13	a3a55e1c1497	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3	1
miniflux/miniflux :2.2.18	a3ca6bbc1f74	openssl@3.5.5-r0	3.5.6-r0	1
minio/kes :v0.22.2	55f3aef5803e	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-17.el8_6	1
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	openssl@1:1.1.1g-12.el8_3	1:1.1.1k-17.el8_6	1
minio/mc :RELEASE.2022-05-09T04-08-26Z	4b415310d8d0	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-17.el8_6	1
minio/mc :RELEASE.2023-02-28T00-12-59Z	c631532a394e	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-17.el8_6	1
minio/minio :RELEASE.2022-01-04T07-41-07Z	1484c87239ea	openssl@1:1.1.1k-5.el8_5	1:1.1.1k-17.el8_6	1
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-17.el8_6	1
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-17.el8_6	1
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-17.el8_6	1
minio/operator :v5.0.9	170b154d2c61	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	1
minio/operator :v4.1.0	2adc5be088f5	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-17.el8_6	1
mintproject/graphql-engine :305c0dbeba1878eafe348f21fc300fbfc017d9dc	83aade2c1855	openssl@1.1.1f-1ubuntu2.13	1.1.1f-1ubuntu2.24+esm3	1
mintproject/model-catalog-fastapi :7dd88dc5bf1fe6a6d4703ea0a077afee45cb2561	02260d20a21f	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
miqm/session-scaler :0.1.0	c5c211717d9b	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
mlikiowa/napcat-docker :latest	1336a777f9a4	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23	1
moonrailgun/tianji :1.11.2	b528c8f8fcc4	openssl@3.3.0-r2	3.3.7-r0	1
moreillon/api-proxy :latest	d7d4a5463525	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
moreillon/camera-viewer :latest	e418cc694bd5	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1