CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,499; of 17,805 indexed, latest versions
Container images: 2,866; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,499 of 17,805 indexed charts deploy, on 2,866 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,643
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	897
opensslrpm	1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2, 1:1.1.1c-21.el8_2+30 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5	326
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm4	15

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,499 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

2,866 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
sigp/lighthouse :v7.1.0	870934e38931	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23	1
sigp/lighthouse :v2.1.2	ad501f02cfef	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm3	1
sigp/siren :v3.0.4	2c219b04758e	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
sinhasaurabh09/dcn-portal :v1.2	c0d08847ddbb	openssl@3.3.2-r1	3.3.7-r0	1
sirrend/helmup-engine :0.1.13	699e79e3d4e2	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
sirrend/helmup-github-scraper :0.1.4	7ca688c7abf5	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
sirrend/helmup-notifications-service :0.1.3	997866417011	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
sismics/docs :v1.10	f4b0ef019cf1	openssl@1.1.0g-2ubuntu4.1	1.1.1-1ubuntu2.1~18.04.23+esm8	1
sissbruecker/linkding :1.35.0	0c5dddf0b37c	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
slagattollas/weatherservice-practica :latest	68e7f56393fc	openssl@1.1.1-1ubuntu2.1~18.04.8	1.1.1-1ubuntu2.1~18.04.23+esm8	1
snipe/snipe-it :v8.3.1	141ebf2386fe	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
snipe/snipe-it :v6.0.14	55fb7636a98c	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm3	1
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	openssl@1.1.1-1ubuntu2.1~18.04.22	1.1.1-1ubuntu2.1~18.04.23+esm8	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	openssl@3.0.9-1	3.0.19-1~deb12u2	1
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	openssl@1.1.1-1ubuntu2.1~18.04.22	1.1.1-1ubuntu2.1~18.04.23+esm8	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	openssl@3.0.9-1	3.0.19-1~deb12u2	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	openssl@3.0.9-1	3.0.19-1~deb12u2	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	openssl@3.0.9-1	3.0.19-1~deb12u2	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	openssl@1.1.1f-1ubuntu2.13	1.1.1f-1ubuntu2.24+esm3	1
somnathmore/custom-nginx :v2	bdfc06cad4ec	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
sonatype/nexus3 :3.53.0	4bd975493104	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	1
sonatype/nexus3 :3.58.1	586060431b64	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	1
sondresjo/bobby-api :latest	fe534731909a	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2	1
soulteary/cronicle :0.9.80	ac2512fa6e39	openssl@3.3.3-r0	3.3.7-r0	1
speckle/speckle-frontend-2 :2.20.2-branch.testing4.134160-9fad4b2	10ad4ade8bf2	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-frontend-2 :2.20.6-branch.testing1.154030-9b09114	32fc940d9b4c	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-frontend-2 :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4f9241665ae3	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-frontend-2 :2.21.3-branch.testing5.219631-2153bef	d4ca6ebf09b9	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-frontend-2 :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	fdc008effc7a	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.25.10-branch.testing6.645-b125c1e	2dbc553ed87c	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	2faf1508c1d3	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.20.2-branch.testing4.134160-9fad4b2	3c8fbe855665	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.20.6-branch.testing1.154030-9b09114	738c77eb6f97	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.18.12-branch.testing3.88744-f55b341	81335b40696a	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	b696ac5022ab	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.21.3-branch.testing5.219631-2153bef	cf72ad0f25fb	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.26.3	d51e1b0cf231	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.18.11-branch.testing2.88634-335d469	d6790a97ad47	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.17.14-branch.testing.72707.921a5f8	ff1641ac3f1b	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.26.3	092384dba45d	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.20.2-branch.testing4.134160-9fad4b2	1f897ca906ea	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.21.3-branch.testing5.219631-2153bef	52cad5e3293e	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.23.14-branch.testing6.334655-b4e04ee	6dee853ba74a	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.25.10-branch.testing6.645-b125c1e	787adcb20a3a	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.17.14-branch.testing.72707.921a5f8	84fc39bca0c8	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.20.6-branch.testing1.154030-9b09114	8f3c1ea153ba	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	c102b087481a	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1