CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,601; of 17,832 indexed, latest versions
Container images: 2,970; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,601 of 17,832 indexed charts deploy, on 2,970 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,710
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	927
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8+33 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 1:3.5.5-3.el10_2+1 more	333
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 more	no fix listed	22
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	1.0.2n-1ubuntu5.13+esm4	20

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:22314 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,601 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

8,128

Container images carrying it

2,970 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
velero/velero :v1.18.2	37396519f399	openssl@3.0.2-0ubuntu1.25	no fix listed	3
xenondb/percona :5.7.33	0e26872a2b67	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm3	3
ghcr.io/akash-network/provider :0.6.8	8c780ae8d1bb	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9	3
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	3
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	openssl@3.0.9-1	3.0.19-1~deb12u2	3
ghcr.io/huggingface/text-embeddings-inference :cpu-1.5	0502794a4d86	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	3
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	openssl@3.3.3-r0	3.3.7-r0	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23	3
quay.io/devtron/calico-networking :node-v3.19.1	bc4aa22272ef	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-17.el8_6	3
quay.io/devtron/clair :4.3.6	75fb847ac045	openssl@1:1.1.1k-5.el8_5	1:1.1.1k-17.el8_6	3
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	openssl@3.3.2-r4	3.3.7-r0	3
quay.io/devtron/google-chat-alert-manager :v2.0.2	39f2c6e0af38	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm3	3
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	openssl@3.3.2-r4	3.3.7-r0	3
quay.io/devtron/inception :7beef376-948-31378	4c3b91bebd3d	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm15	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	3
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	openssl@3.3.2-r4	3.3.7-r0	3
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	openssl@3.3.2-r4	3.3.7-r0	3
quay.io/devtron/notifier :9804331c-372-39294	709c7da19c5a	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	3
quay.io/jupyterhub/configurable-http-proxy :5.2.0	522738d5285e	openssl@3.5.5-r0	3.5.6-r0	3
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	openssl@1:1.1.1k-9.el8_6	1:1.1.1k-17.el8_6	3
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	openssl@1:1.1.1k-4.el8	1:1.1.1k-17.el8_6	3
alazidis/kube-netlag :1.1.0	0e8c84152201	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9	2
alpine/curl :8.7.1	f0c1b7ca12f6	openssl@3.3.1-r0	3.3.7-r0	2
alpine/k8s :1.32.12	048f8d9c8cc7	openssl@3.5.5-r0	3.5.6-r0	2
alpine/kubectl :1.35.2	ec8f734b0a10	openssl@3.5.5-r0	3.5.6-r0	2
amaraiheanacho/nginx-site :latest	5c86fccf5daa	openssl@3.3.3-r0	3.3.7-r0	2
apache/fineract :1.12.1	a83cf1980609	openssl@3.3.4-r0	3.3.7-r0	2
apache/nifi-registry :1.26.0	7cdfd8deec92	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.23	2
apache/rocketmq :5.4.0	319cd8a81ed1	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9	2
apacherocketmq/rocketmq-dashboard :2.1.0	ce78506bd6fe	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8	2
apache/tika :2.9.0.0	92d055a84e9e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.9	2
apecloud/apecloud-mcp :0.1.0	94041b080510	openssl@3.5.0-r0	3.5.6-r0	2
aquasec/kube-bench :v0.8.0	ea3e33bc3c4e	openssl@3.3.1-r1	3.3.7-r0	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2	2
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	2
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	2
bitnamilegacy/redis :latest	5927ff3702df	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	2
cfssl/cfssl :latest :v1.6.5	c9018c2ddf0b	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	2
clamav/clamav :1.4.3_base	629a3050df6a	openssl@3.5.5-r0	3.5.6-r0	2
clickhouse/clickhouse-server :25.7-alpine	258d43821508	openssl@3.5.4-r0	3.5.6-r0	2
clickhouse/clickhouse-server :24.2	ed9640bfff07	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm3	2
confluentinc/cp-kafka :6.2.11-1-ubi8	ac776fad95a5	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	2
confluentinc/cp-zookeeper :latest	7610a50b13e7	openssl@1:1.1.1k-14.el8_6	1:1.1.1k-17.el8_6	2
confluentinc/cp-zookeeper :6.2.11-1-ubi8	cae577096489	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	2
csiplugin/csi-neonsan :v1.2.2	1fa83d45417f	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm15	2
curlimages/curl :8.15.0	4026b29997dc	openssl@3.5.1-r0	3.5.6-r0	2
datagrok/grok_connect :latest	f5876d3aebb8	openssl@3.0.2-0ubuntu1.26	no fix listed	2
dbeaver/cloudbeaver :21.3.0	0c0985098263	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3	2