CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,510; of 17,790 indexed, latest versions
Container images: 2,889; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,510 of 17,790 indexed charts deploy, on 2,889 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,660
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	899
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5	330
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm4	15

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,510 by stars

Chart

Latest

Affected images

Radar Score

pyroscopegrafana

2.3.1

1 of 3 See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.12.2	f94b1c82957a	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9

Open the chart page →

3,196

plantumlstevehipwell

3.49.0

1 of 1 See more

plantuml stevehipwell 3.49.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
plantuml/plantuml-server :jetty-v1.2026.8	5f6f99ec2fc1	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9

Open the chart page →

1,914

unleashunleash

5.6.8

1 of 2 See more

unleash unleash 5.6.8

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
unleashorg/unleash-server :7.5.0	9adb37e399ba	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

2,059

hydraory

0.64.0

1 of 2 See more

1,156

istiocloudposse

1.1.0

2 of 8 See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

23,992

headscalegabe565

0.16.0

1 of 2 See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

1,985

oncallgrafana

1.16.5

1 of 12 See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
grafana/oncall :v1.16.5	499851658393	openssl@3.3.4-r0	3.3.7-r0

Open the chart page →

16,251

openbaoopenbao

0.29.4

1 of 2 See more

openbao openbao 0.29.4

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hashicorp/vault-k8s :1.7.2	ae3d307658b7	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,509

openprojectopenproject-helm-charts

13.11.0

2 of 5 See more

openproject openproject-helm-charts 13.11.0

2 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/memcached :1.6.24-debian-12-r0	1d80b6a96f00	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
openproject/hocuspocus :release-338001b2	88dc1359dfb5	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

19,998

kratosory

0.64.0

1 of 1 See more

kratos ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
oryd/kratos :v26.2.0	2a13bb8d362c	openssl@3.3.6-r0	3.3.7-r0

Open the chart page →

866

wazuhwazuh-helm-morgoved

2.0.7

1 of 5 See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
kinseii/wazuh-agent :4.14.1	7160eb143728	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

11,402

zabbixcetic

3.1.3

4 of 5 See more

zabbix cetic 3.1.3

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

33,907

kube-downscalerdeliveryhero

0.7.6

1 of 1 See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	openssl@3.0.9-1	3.0.19-1~deb12u2

Open the chart page →

3,700

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

6,550

stacks-blockchain-apihirosystems

6.5.1

1 of 5 See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hirosystems/stacks-blockchain-api :8.13.2	9c98b23c1515	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

8,387

imgproxyimgproxy

1.1.0

1 of 1 See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

2,360

cloudflaredkubitodev

1.7.9

1 of 1 See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

1,442

redashredash

4.2.0

1 of 3 See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
redash/redash :25.8.0	00d813437db5	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

6,012

pypiservercommunity-charts

0.1.9

1 of 1 See more

pypiserver community-charts 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
pypiserver/pypiserver :v2.4.1	e935e19433ef	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

583

daskdask

2024.1.1

2 of 2 See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask :2024.1.0	080150de7d86	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23

Open the chart page →

12,830

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

3,031

netbirdjaconi

0.15.1

3 of 4 See more

netbird jaconi 0.15.1

3 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
netbirdio/management :0.45.1	0c9994b393ea	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9
netbirdio/relay :0.45.1	872e3add0e1e	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
netbirdio/signal :0.45.1	46ce5a45538f	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

8,473

litellm-helmlitellm

1.101.0

1 of 2 See more

litellm-helm litellm 1.101.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.2.0-debian-12-r6	ea55532b6f75	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

4,574

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	openssl@3.3.3-r0	3.3.7-r0
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

5,278

prometheus-cloudwatch-exporterprometheus-community

0.28.2

1 of 1 See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
prom/cloudwatch-exporter :v0.16.0	71c2e988af06	openssl@3.0.13-0ubuntu3.2	3.0.13-0ubuntu3.9

Open the chart page →

3,422

openvpn-asstenic

0.1.9

1 of 1 See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

15,607

jellyfinutkuozdemir

2.0.0

1 of 1 See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
linuxserver/jellyfin :10.7.7	2427dde159a2	openssl@1.1.1f-1ubuntu2.13	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,917

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,023

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-17.el8_6

Open the chart page →

6,853

falcosidekickfalcosecurity

0.14.0

1 of 1 See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
falcosecurity/falcosidekick :2.32.0	1976da721518	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

1,634

glasskube-operatorglasskube

0.12.2

3 of 3 See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23
quay.io/minio/mc :RELEASE.2023-09-29T16-41-22Z	a784ce6e3b1b	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6

Open the chart page →

11,971

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,364

plane-cemakeplane

1.8.1

3 of 11 See more

plane-ce makeplane 1.8.1

3 of the 11 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	openssl@3.3.1-r3	3.3.7-r0
library/rabbitmq :3.13.6-management-alpine	611107e29cce	openssl@3.3.1-r3	3.3.7-r0
valkey/valkey :7.2.11-alpine	10328d00120d	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

4,854

milvusmilvus-helm

5.0.28

2 of 4 See more

milvus milvus-helm 5.0.28

2 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :3.0.7	9c9947de139d	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23
milvusdb/etcd :3.5.25-r1	fededb2f2d63	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.23

Open the chart page →

10,764

prefect-serverprefect

2026.9.14141910

1 of 2 See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,448

rocketmqrocketmq

12.6.0

2 of 2 See more

rocketmq rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apache/rocketmq :5.4.0	319cd8a81ed1	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9
apacherocketmq/rocketmq-dashboard :2.1.0	ce78506bd6fe	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8

Open the chart page →

6,385

snipeitt3n

3.4.1

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

18,570

apicurio-registryapicurio-registry-helm

3.8.0

1 of 2 See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/apicurio/apicurio-registry-mem :2.5.8.Final	3b036692d546	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6

Open the chart page →

6,675

zookeepercloudpirates-zookeeper

0.13.11

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.5	cab8944a33a1	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

2,963

codefreshcodefresh-onprem

2.12.14

4 See more

codefresh codefresh-onprem 2.12.14

4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/rabbitmq :4.1.3	9e635efba431	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

—

contourcontour

0.8.0

1 of 2 See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
envoyproxy/envoy :v1.38.4	447f857a0146	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

1,521

stackstorm-hastackstorm

1.1.0

12 of 17 See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
stackstorm/st2actionrunner :3.8	88235ba70cad	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2api :3.8	6f56d239d280	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2auth :3.8	33ecfda16608	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2notifier :3.8	f190a6212195	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2rulesengine :3.8	259503496ff9	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2scheduler :3.8	b1de2055c362	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2sensorcontainer :3.8	b1a338f64773	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2stream :3.8	1c8904a3bf67	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2timersengine :3.8	1bf35bfaf00c	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2web :3.8	09989a26c8b7	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2workflowengine :3.8	19fdfffdbba8	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

96,984

supabasetokens-studio

1.0.0

9 of 14 See more

supabase tokens-studio 1.0.0

9 of the 14 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9
library/kong :3.8.0	712e407b20ea	openssl@3.0.2-0ubuntu1.26	no fix listed
supabase/edge-runtime :v1.59.0	eff9c554d649	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/gotrue :v2.163.0	ba4ddc594b0b	openssl@3.3.2-r0	3.3.7-r0
supabase/postgres-meta :v0.84.2	d0a96973e9f1	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/realtime :v2.33.8	d207e6e23ad3	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/storage-api :v1.12.0	f983fb50bd95	openssl@3.3.2-r0	3.3.7-r0
supabase/studio :20241021-9f9b083	26d8070c55e9	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
timberio/vector :0.42.0-alpine	913878963fde	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

23,263

renterdartur9010

1.4.4

1 of 2 See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

8,530

budibasebudibase

0.0.0-master

1 of 7 See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
budibase/database :2.1.0	d90f656261c9	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

10,810

krokicowboysysop

6.1.0

4 of 5 See more

kroki cowboysysop 6.1.0

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
yuzutech/kroki-bpmn :0.29.1	444805c4b917	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-diagramsnet :0.29.1	b810edbf9c62	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-excalidraw :0.29.1	57917319ea70	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-mermaid :0.29.1	963b4acfde6e	openssl@3.3.5-r0	3.3.7-r0

Open the chart page →

6,743

csi-secrets-store-provider-azurecsi-secrets-store-provider-azure

1.8.2

1 of 5 See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.15.0	59b9d0348428	openssl@3.3.5-3.azl3	3.3.5-5

Open the chart page →

2,235

excalidrawexcalidraw

0.18.0

1 of 1 See more

excalidraw excalidraw 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
pmoscode/excalidraw :v0.18.0	8ee61554699c	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,110

bitcoindfold

0.3.2

1 of 2 See more

bitcoind fold 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
thesisrobot/bitcoind :v23.0	16b368e4d52c	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

3,493

homergabe565

0.13.0

1 of 1 See more

homer gabe565 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/bastienwirtz/homer :v25.02.1	cf4ae752adbb	openssl@3.3.2-r1	3.3.7-r0

Open the chart page →

382

Container images carrying it

2,889 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
shaowenchen/ops-controller-manager :latest	26da43bb5b66	openssl@3.0.2-0ubuntu1.25	no fix listed	1
shaowenchen/ops-server :latest	315444f703f4	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23	1
sharanalwar/redchef-backend :latest	8d3cab80df49	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
sharanalwar/redchef-frontend :latest	5e82950b16b7	openssl@3.3.3-r0	3.3.7-r0	1
shenxn/protonmail-bridge :1.8.7-1	acf31af7c111	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm8	1
shyamkrishna21/cloudvault :latest	af2785f5bb71	openssl@3.5.5-r0	3.5.6-r0	1
shyamkrishna21/shopsync :latest	3998b83def53	openssl@3.3.3-r0	3.3.7-r0	1
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-17.el8_6	1
signoz/signoz :v0.141.1	c10fa03e103c	openssl@3.3.2-r0	3.3.7-r0	1
sigp/lighthouse :v7.0.1	2cae720e9a35	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23	1
sigp/lighthouse :v7.1.0	870934e38931	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23	1
sigp/lighthouse :v2.1.2	ad501f02cfef	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm3	1
sigp/siren :v3.0.4	2c219b04758e	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
sinhasaurabh09/dcn-portal :v1.2	c0d08847ddbb	openssl@3.3.2-r1	3.3.7-r0	1
sirrend/helmup-engine :0.1.13	699e79e3d4e2	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
sirrend/helmup-github-scraper :0.1.4	7ca688c7abf5	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
sirrend/helmup-notifications-service :0.1.3	997866417011	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
sismics/docs :v1.10	f4b0ef019cf1	openssl@1.1.0g-2ubuntu4.1	1.1.1-1ubuntu2.1~18.04.23+esm8	1
sissbruecker/linkding :1.35.0	0c5dddf0b37c	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
slagattollas/weatherservice-practica :latest	68e7f56393fc	openssl@1.1.1-1ubuntu2.1~18.04.8	1.1.1-1ubuntu2.1~18.04.23+esm8	1
snipe/snipe-it :v8.3.1	141ebf2386fe	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
snipe/snipe-it :v6.0.14	55fb7636a98c	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm3	1
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	openssl@1.1.1-1ubuntu2.1~18.04.22	1.1.1-1ubuntu2.1~18.04.23+esm8	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	openssl@3.0.9-1	3.0.19-1~deb12u2	1
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	openssl@1.1.1-1ubuntu2.1~18.04.22	1.1.1-1ubuntu2.1~18.04.23+esm8	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	openssl@3.0.9-1	3.0.19-1~deb12u2	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	openssl@3.0.9-1	3.0.19-1~deb12u2	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	openssl@3.0.9-1	3.0.19-1~deb12u2	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	openssl@1.1.1f-1ubuntu2.13	1.1.1f-1ubuntu2.24+esm3	1
somnathmore/custom-nginx :v2	bdfc06cad4ec	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
sonatype/nexus3 :3.53.0	4bd975493104	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	1
sonatype/nexus3 :3.58.1	586060431b64	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	1
sondresjo/bobby-api :latest	fe534731909a	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2	1
soulteary/cronicle :0.9.80	ac2512fa6e39	openssl@3.3.3-r0	3.3.7-r0	1
speckle/speckle-frontend-2 :2.20.2-branch.testing4.134160-9fad4b2	10ad4ade8bf2	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-frontend-2 :2.20.6-branch.testing1.154030-9b09114	32fc940d9b4c	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-frontend-2 :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4f9241665ae3	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-frontend-2 :2.21.3-branch.testing5.219631-2153bef	d4ca6ebf09b9	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-frontend-2 :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	fdc008effc7a	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.25.10-branch.testing6.645-b125c1e	2dbc553ed87c	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	2faf1508c1d3	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.20.2-branch.testing4.134160-9fad4b2	3c8fbe855665	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.20.6-branch.testing1.154030-9b09114	738c77eb6f97	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.18.12-branch.testing3.88744-f55b341	81335b40696a	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	b696ac5022ab	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.21.3-branch.testing5.219631-2153bef	cf72ad0f25fb	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.26.3	d51e1b0cf231	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1