CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,518; of 17,787 indexed, latest versions
Container images: 2,896; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,518 of 17,787 indexed charts deploy, on 2,896 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,662
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	904
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5	330
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm4	15

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,518 by stars

Chart

Latest

Affected images

Radar Score

pyroscopegrafana

2.3.1

1 of 3 See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.12.2	f94b1c82957a	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9

Open the chart page →

3,196

plantumlstevehipwell

3.49.0

1 of 1 See more

plantuml stevehipwell 3.49.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
plantuml/plantuml-server :jetty-v1.2026.8	5f6f99ec2fc1	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9

Open the chart page →

1,914

unleashunleash

5.6.8

1 of 2 See more

unleash unleash 5.6.8

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
unleashorg/unleash-server :7.5.0	9adb37e399ba	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

2,059

hydraory

0.64.0

1 of 2 See more

1,156

istiocloudposse

1.1.0

2 of 8 See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

23,992

headscalegabe565

0.16.0

1 of 2 See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

1,985

oncallgrafana

1.16.5

1 of 12 See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
grafana/oncall :v1.16.5	499851658393	openssl@3.3.4-r0	3.3.7-r0

Open the chart page →

16,251

openbaoopenbao

0.29.4

1 of 2 See more

openbao openbao 0.29.4

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hashicorp/vault-k8s :1.7.2	ae3d307658b7	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,509

openprojectopenproject-helm-charts

13.11.0

2 of 5 See more

openproject openproject-helm-charts 13.11.0

2 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/memcached :1.6.24-debian-12-r0	1d80b6a96f00	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
openproject/hocuspocus :release-338001b2	88dc1359dfb5	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

19,998

kratosory

0.64.0

1 of 1 See more

kratos ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
oryd/kratos :v26.2.0	2a13bb8d362c	openssl@3.3.6-r0	3.3.7-r0

Open the chart page →

866

wazuhwazuh-helm-morgoved

2.0.7

1 of 5 See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
kinseii/wazuh-agent :4.14.1	7160eb143728	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

11,402

zabbixcetic

3.1.3

4 of 5 See more

zabbix cetic 3.1.3

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

33,907

kube-downscalerdeliveryhero

0.7.6

1 of 1 See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	openssl@3.0.9-1	3.0.19-1~deb12u2

Open the chart page →

3,700

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

6,550

stacks-blockchain-apihirosystems

6.5.1

1 of 5 See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hirosystems/stacks-blockchain-api :8.13.2	9c98b23c1515	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

8,387

imgproxyimgproxy

1.1.0

1 of 1 See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

2,360

cloudflaredkubitodev

1.7.9

1 of 1 See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

1,442

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	openssl@3.3.3-r0	3.3.7-r0
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

5,278

redashredash

4.2.0

1 of 3 See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
redash/redash :25.8.0	00d813437db5	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

6,012

pypiservercommunity-charts

0.1.9

1 of 1 See more

pypiserver community-charts 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
pypiserver/pypiserver :v2.4.1	e935e19433ef	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

583

daskdask

2024.1.1

2 of 2 See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask :2024.1.0	080150de7d86	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23

Open the chart page →

12,830

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

3,031

netbirdjaconi

0.15.1

3 of 4 See more

netbird jaconi 0.15.1

3 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
netbirdio/management :0.45.1	0c9994b393ea	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9
netbirdio/relay :0.45.1	872e3add0e1e	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
netbirdio/signal :0.45.1	46ce5a45538f	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

8,473

litellm-helmlitellm

1.101.0

1 of 2 See more

litellm-helm litellm 1.101.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.2.0-debian-12-r6	ea55532b6f75	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

4,574

oneuptimeoneuptime

13.0.4

1 of 7 See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :26.7	01b81d1432c4	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

10,896

prometheus-cloudwatch-exporterprometheus-community

0.28.2

1 of 1 See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
prom/cloudwatch-exporter :v0.16.0	71c2e988af06	openssl@3.0.13-0ubuntu3.2	3.0.13-0ubuntu3.9

Open the chart page →

3,422

openvpn-asstenic

0.1.9

1 of 1 See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

15,607

jellyfinutkuozdemir

2.0.0

1 of 1 See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
linuxserver/jellyfin :10.7.7	2427dde159a2	openssl@1.1.1f-1ubuntu2.13	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,917

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,023

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-17.el8_6

Open the chart page →

6,853

falcosidekickfalcosecurity

0.14.0

1 of 1 See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
falcosecurity/falcosidekick :2.32.0	1976da721518	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

1,634

glasskube-operatorglasskube

0.12.2

3 of 3 See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23
quay.io/minio/mc :RELEASE.2023-09-29T16-41-22Z	a784ce6e3b1b	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6

Open the chart page →

11,971

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,364

plane-cemakeplane

1.8.1

3 of 11 See more

plane-ce makeplane 1.8.1

3 of the 11 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	openssl@3.3.1-r3	3.3.7-r0
library/rabbitmq :3.13.6-management-alpine	611107e29cce	openssl@3.3.1-r3	3.3.7-r0
valkey/valkey :7.2.11-alpine	10328d00120d	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

4,854

milvusmilvus-helm

5.0.28

2 of 4 See more

milvus milvus-helm 5.0.28

2 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :3.0.7	9c9947de139d	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23
milvusdb/etcd :3.5.25-r1	fededb2f2d63	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.23

Open the chart page →

10,764

prefect-serverprefect

2026.9.14141910

1 of 2 See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,448

rocketmqrocketmq

12.6.0

2 of 2 See more

rocketmq rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apache/rocketmq :5.4.0	319cd8a81ed1	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9
apacherocketmq/rocketmq-dashboard :2.1.0	ce78506bd6fe	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8

Open the chart page →

6,385

snipeitt3n

3.4.1

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

18,570

apicurio-registryapicurio-registry-helm

3.8.0

1 of 2 See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/apicurio/apicurio-registry-mem :2.5.8.Final	3b036692d546	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6

Open the chart page →

6,675

zookeepercloudpirates-zookeeper

0.13.11

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.5	cab8944a33a1	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

2,963

codefreshcodefresh-onprem

2.12.13

4 of 42 See more

codefresh codefresh-onprem 2.12.13

4 of the 42 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/rabbitmq :4.1.3	9e635efba431	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

14,615

contourcontour

0.8.0

1 of 2 See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
envoyproxy/envoy :v1.38.4	447f857a0146	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

1,521

stackstorm-hastackstorm

1.1.0

12 of 17 See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
stackstorm/st2actionrunner :3.8	88235ba70cad	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2api :3.8	6f56d239d280	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2auth :3.8	33ecfda16608	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2notifier :3.8	f190a6212195	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2rulesengine :3.8	259503496ff9	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2scheduler :3.8	b1de2055c362	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2sensorcontainer :3.8	b1a338f64773	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2stream :3.8	1c8904a3bf67	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2timersengine :3.8	1bf35bfaf00c	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2web :3.8	09989a26c8b7	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2workflowengine :3.8	19fdfffdbba8	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

96,984

supabasetokens-studio

1.0.0

9 of 14 See more

supabase tokens-studio 1.0.0

9 of the 14 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9
library/kong :3.8.0	712e407b20ea	openssl@3.0.2-0ubuntu1.26	no fix listed
supabase/edge-runtime :v1.59.0	eff9c554d649	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/gotrue :v2.163.0	ba4ddc594b0b	openssl@3.3.2-r0	3.3.7-r0
supabase/postgres-meta :v0.84.2	d0a96973e9f1	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/realtime :v2.33.8	d207e6e23ad3	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/storage-api :v1.12.0	f983fb50bd95	openssl@3.3.2-r0	3.3.7-r0
supabase/studio :20241021-9f9b083	26d8070c55e9	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
timberio/vector :0.42.0-alpine	913878963fde	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

23,263

renterdartur9010

1.4.4

1 of 2 See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

8,530

budibasebudibase

0.0.0-master

1 of 7 See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
budibase/database :2.1.0	d90f656261c9	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

10,810

krokicowboysysop

6.1.0

4 of 5 See more

kroki cowboysysop 6.1.0

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
yuzutech/kroki-bpmn :0.29.1	444805c4b917	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-diagramsnet :0.29.1	b810edbf9c62	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-excalidraw :0.29.1	57917319ea70	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-mermaid :0.29.1	963b4acfde6e	openssl@3.3.5-r0	3.3.7-r0

Open the chart page →

6,743

csi-secrets-store-provider-azurecsi-secrets-store-provider-azure

1.8.2

1 of 5 See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.15.0	59b9d0348428	openssl@3.3.5-3.azl3	3.3.5-5

Open the chart page →

2,235

excalidrawexcalidraw

0.18.0

1 of 1 See more

excalidraw excalidraw 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
pmoscode/excalidraw :v0.18.0	8ee61554699c	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,110

bitcoindfold

0.3.2

1 of 2 See more

bitcoind fold 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
thesisrobot/bitcoind :v23.0	16b368e4d52c	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

3,493

Container images carrying it

2,896 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
rm3l/mac-oui :1.8.0	3a5e1f95c132	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-17.el8_6	1
rm3l/service-names-port-numbers :0.12.1	62d1cc4223e5	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3	1
rnwood/smtp4dev :3.6.1	912304153668	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
robotshop/rs-mongodb :latest	119b545823cd	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3	1
robustadev/kubewatch :v2.9.0	0457a51e36e8	openssl@3.3.2-r0	3.6.2-r0	1
rocketchat/freeswitch :stable	cfba5c20a5cc	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	openssl@3.3.3-r0	3.3.7-r0	1
rommapp/romm :5.2.0	3512f2ca4557	openssl@3.5.5-r0	3.5.6-r0	1
rommapp/romm :4.4.1	b909e95d1aab	openssl@3.5.4-r0	3.5.6-r0	1
rosette/root-rli :7.23.21.c82.0	a4467d3bb211	openssl@1:1.1.1k-16.el8_6	1:1.1.1k-17.el8_6	1
rotationalio/geoping :1.3.0	34bcb6fc3cb7	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2	1
rotationalio/honu :0.5.0	69fd30c2e31c	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2	1
rotationalio/linode-acme-webhook :1.0.0	cc7bb030a20f	openssl@3.5.4-r0	3.5.6-r0	1
rotationalio/rotational-api :1.3.0	f1a2d05d8fff	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2	1
rotationalio/vanity :1.2.0	d77350f69b45	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2	1
rqlite/rqlite :9.1.3	7b992a526eee	openssl@3.5.4-r0	3.5.6-r0	1
rraahul/test :latest	bfe2c1183bc0	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	1
rrobetti/ojp :0.1.0-beta	1141bd88232b	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9	1
rtuszik/photon-docker :2.4.0	21549c60f9e6	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9	1
rundeck/rundeck :3.2.7	4d64fe56f767	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15	1
rundeck/rundeck :3.0.16	b13e8059ad72	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm15	1
rustfs/rustfs :1.0.0-alpha.73	8e467b32af3f	openssl@3.5.4-r0	3.5.6-r0	1
ryshe/terraria :latest	b1c89f7f359a	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2	1
ryuunosukeds3/nadeko-bot-docker :latest	c0398f13e8a9	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23	1
safeglobal/safe-client-gateway-nest :v1.51.0	12ccfd93fcaf	openssl@3.3.1-r0	3.3.7-r0	1
saidsef/scapy-containerised :v2025.02	f17f7c435891	openssl@3.3.3-r0	3.3.7-r0	1
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3	ce9ce8293e4e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	1
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9	bb64bf14467d	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	1
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525	799c35f9f306	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	1
santisbon/evwatcher :latest	c4e994ca4540	openssl@3.0.9-1	3.0.19-1~deb12u2	1
santisbon/evworker :latest	e807283f8d69	openssl@3.0.9-1	3.0.19-1~deb12u2	1
santisbon/speedtest :latest	8ee3a1697227	openssl@3.0.9-1	3.0.19-1~deb12u2	1
sarwansharma/minio :v3	59d1da9385d1	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-17.el8_6	1
sashafefler/spacecapybara_app :latest	f96d7804c0ca	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
sbs20/scanservjs :release-v3.0.3	dad1fd6e9a98	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
schemahero/schemahero-manager :0.22.1	1609e1a05cd3	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23	1
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23	1
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23	1
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9	1
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9	1
scrapinghub/splash :3.4.1	a5f89bc84606	openssl@1.1.1-1ubuntu2.1~18.04.5 openssl1.0@1.0.2n-1ubuntu5.3	1.1.1-1ubuntu2.1~18.04.23+esm8 1.0.2n-1ubuntu5.13+esm4	1
scsibug/nostr-rs-relay :0.9.0	03f54bfbffff	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm3	1
seafileltd/seafile-mc :10.0.1	70628f29c663	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm3	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm3	1
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	openssl@3.0.2-0ubuntu1.17	3.0.2-0ubuntu1.23	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm3	1
seldonio/locust-core :0.8	1d0da98a2d76	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15	1