CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,510; of 17,790 indexed, latest versions
Container images: 2,889; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,510 of 17,790 indexed charts deploy, on 2,889 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,660
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	899
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5	330
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm4	15

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,510 by stars

Chart

Latest

Affected images

Radar Score

pyroscopegrafana

2.3.1

1 of 3 See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.12.2	f94b1c82957a	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9

Open the chart page →

3,196

plantumlstevehipwell

3.49.0

1 of 1 See more

plantuml stevehipwell 3.49.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
plantuml/plantuml-server :jetty-v1.2026.8	5f6f99ec2fc1	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9

Open the chart page →

1,914

unleashunleash

5.6.8

1 of 2 See more

unleash unleash 5.6.8

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
unleashorg/unleash-server :7.5.0	9adb37e399ba	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

2,059

hydraory

0.64.0

1 of 2 See more

1,156

istiocloudposse

1.1.0

2 of 8 See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

23,992

headscalegabe565

0.16.0

1 of 2 See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

1,985

oncallgrafana

1.16.5

1 of 12 See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
grafana/oncall :v1.16.5	499851658393	openssl@3.3.4-r0	3.3.7-r0

Open the chart page →

16,251

openbaoopenbao

0.29.4

1 of 2 See more

openbao openbao 0.29.4

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hashicorp/vault-k8s :1.7.2	ae3d307658b7	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,509

openprojectopenproject-helm-charts

13.11.0

2 of 5 See more

openproject openproject-helm-charts 13.11.0

2 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/memcached :1.6.24-debian-12-r0	1d80b6a96f00	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
openproject/hocuspocus :release-338001b2	88dc1359dfb5	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

19,998

kratosory

0.64.0

1 of 1 See more

kratos ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
oryd/kratos :v26.2.0	2a13bb8d362c	openssl@3.3.6-r0	3.3.7-r0

Open the chart page →

866

wazuhwazuh-helm-morgoved

2.0.7

1 of 5 See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
kinseii/wazuh-agent :4.14.1	7160eb143728	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

11,402

zabbixcetic

3.1.3

4 of 5 See more

zabbix cetic 3.1.3

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

33,907

kube-downscalerdeliveryhero

0.7.6

1 of 1 See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	openssl@3.0.9-1	3.0.19-1~deb12u2

Open the chart page →

3,700

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

6,550

stacks-blockchain-apihirosystems

6.5.1

1 of 5 See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hirosystems/stacks-blockchain-api :8.13.2	9c98b23c1515	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

8,387

imgproxyimgproxy

1.1.0

1 of 1 See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

2,360

cloudflaredkubitodev

1.7.9

1 of 1 See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

1,442

redashredash

4.2.0

1 of 3 See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
redash/redash :25.8.0	00d813437db5	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

6,012

pypiservercommunity-charts

0.1.9

1 of 1 See more

pypiserver community-charts 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
pypiserver/pypiserver :v2.4.1	e935e19433ef	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

583

daskdask

2024.1.1

2 of 2 See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask :2024.1.0	080150de7d86	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23

Open the chart page →

12,830

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

3,031

netbirdjaconi

0.15.1

3 of 4 See more

netbird jaconi 0.15.1

3 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
netbirdio/management :0.45.1	0c9994b393ea	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9
netbirdio/relay :0.45.1	872e3add0e1e	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
netbirdio/signal :0.45.1	46ce5a45538f	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

8,473

litellm-helmlitellm

1.101.0

1 of 2 See more

litellm-helm litellm 1.101.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.2.0-debian-12-r6	ea55532b6f75	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

4,574

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	openssl@3.3.3-r0	3.3.7-r0
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

5,278

prometheus-cloudwatch-exporterprometheus-community

0.28.2

1 of 1 See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
prom/cloudwatch-exporter :v0.16.0	71c2e988af06	openssl@3.0.13-0ubuntu3.2	3.0.13-0ubuntu3.9

Open the chart page →

3,422

openvpn-asstenic

0.1.9

1 of 1 See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

15,607

jellyfinutkuozdemir

2.0.0

1 of 1 See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
linuxserver/jellyfin :10.7.7	2427dde159a2	openssl@1.1.1f-1ubuntu2.13	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,917

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,023

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-17.el8_6

Open the chart page →

6,853

falcosidekickfalcosecurity

0.14.0

1 of 1 See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
falcosecurity/falcosidekick :2.32.0	1976da721518	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

1,634

glasskube-operatorglasskube

0.12.2

3 of 3 See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23
quay.io/minio/mc :RELEASE.2023-09-29T16-41-22Z	a784ce6e3b1b	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6

Open the chart page →

11,971

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,364

plane-cemakeplane

1.8.1

3 of 11 See more

plane-ce makeplane 1.8.1

3 of the 11 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	openssl@3.3.1-r3	3.3.7-r0
library/rabbitmq :3.13.6-management-alpine	611107e29cce	openssl@3.3.1-r3	3.3.7-r0
valkey/valkey :7.2.11-alpine	10328d00120d	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

4,854

milvusmilvus-helm

5.0.28

2 of 4 See more

milvus milvus-helm 5.0.28

2 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :3.0.7	9c9947de139d	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23
milvusdb/etcd :3.5.25-r1	fededb2f2d63	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.23

Open the chart page →

10,764

prefect-serverprefect

2026.9.14141910

1 of 2 See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,448

rocketmqrocketmq

12.6.0

2 of 2 See more

rocketmq rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apache/rocketmq :5.4.0	319cd8a81ed1	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9
apacherocketmq/rocketmq-dashboard :2.1.0	ce78506bd6fe	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8

Open the chart page →

6,385

snipeitt3n

3.4.1

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

18,570

apicurio-registryapicurio-registry-helm

3.8.0

1 of 2 See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/apicurio/apicurio-registry-mem :2.5.8.Final	3b036692d546	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6

Open the chart page →

6,675

zookeepercloudpirates-zookeeper

0.13.11

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.13.11

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.5	cab8944a33a1	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

2,963

codefreshcodefresh-onprem

2.12.14

4 See more

codefresh codefresh-onprem 2.12.14

4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/rabbitmq :4.1.3	9e635efba431	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

—

contourcontour

0.8.0

1 of 2 See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
envoyproxy/envoy :v1.38.4	447f857a0146	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

1,521

stackstorm-hastackstorm

1.1.0

12 of 17 See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
stackstorm/st2actionrunner :3.8	88235ba70cad	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2api :3.8	6f56d239d280	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2auth :3.8	33ecfda16608	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2notifier :3.8	f190a6212195	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2rulesengine :3.8	259503496ff9	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2scheduler :3.8	b1de2055c362	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2sensorcontainer :3.8	b1a338f64773	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2stream :3.8	1c8904a3bf67	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2timersengine :3.8	1bf35bfaf00c	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2web :3.8	09989a26c8b7	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2workflowengine :3.8	19fdfffdbba8	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

96,984

supabasetokens-studio

1.0.0

9 of 14 See more

supabase tokens-studio 1.0.0

9 of the 14 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9
library/kong :3.8.0	712e407b20ea	openssl@3.0.2-0ubuntu1.26	no fix listed
supabase/edge-runtime :v1.59.0	eff9c554d649	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/gotrue :v2.163.0	ba4ddc594b0b	openssl@3.3.2-r0	3.3.7-r0
supabase/postgres-meta :v0.84.2	d0a96973e9f1	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/realtime :v2.33.8	d207e6e23ad3	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/storage-api :v1.12.0	f983fb50bd95	openssl@3.3.2-r0	3.3.7-r0
supabase/studio :20241021-9f9b083	26d8070c55e9	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
timberio/vector :0.42.0-alpine	913878963fde	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

23,263

renterdartur9010

1.4.4

1 of 2 See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

8,530

budibasebudibase

0.0.0-master

1 of 7 See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
budibase/database :2.1.0	d90f656261c9	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

10,810

krokicowboysysop

6.1.0

4 of 5 See more

kroki cowboysysop 6.1.0

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
yuzutech/kroki-bpmn :0.29.1	444805c4b917	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-diagramsnet :0.29.1	b810edbf9c62	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-excalidraw :0.29.1	57917319ea70	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-mermaid :0.29.1	963b4acfde6e	openssl@3.3.5-r0	3.3.7-r0

Open the chart page →

6,743

csi-secrets-store-provider-azurecsi-secrets-store-provider-azure

1.8.2

1 of 5 See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.15.0	59b9d0348428	openssl@3.3.5-3.azl3	3.3.5-5

Open the chart page →

2,235

excalidrawexcalidraw

0.18.0

1 of 1 See more

excalidraw excalidraw 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
pmoscode/excalidraw :v0.18.0	8ee61554699c	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,110

bitcoindfold

0.3.2

1 of 2 See more

bitcoind fold 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
thesisrobot/bitcoind :v23.0	16b368e4d52c	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

3,493

homergabe565

0.13.0

1 of 1 See more

homer gabe565 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/bastienwirtz/homer :v25.02.1	cf4ae752adbb	openssl@3.3.2-r1	3.3.7-r0

Open the chart page →

382

Container images carrying it

2,889 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
speckle/speckle-monitor-deployment :2.18.11-branch.testing2.88634-335d469	d6790a97ad47	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-monitor-deployment :2.17.14-branch.testing.72707.921a5f8	ff1641ac3f1b	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.26.3	092384dba45d	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.20.2-branch.testing4.134160-9fad4b2	1f897ca906ea	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.21.3-branch.testing5.219631-2153bef	52cad5e3293e	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.23.14-branch.testing6.334655-b4e04ee	6dee853ba74a	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.25.10-branch.testing6.645-b125c1e	787adcb20a3a	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.17.14-branch.testing.72707.921a5f8	84fc39bca0c8	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.20.6-branch.testing1.154030-9b09114	8f3c1ea153ba	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	c102b087481a	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-preview-service :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	d3da0a84de98	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
speckle/speckle-server :2.25.10-branch.testing6.645-b125c1e	75cdf256067b	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
speckle/speckle-server :2.26.3	79f14a2bf931	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
speckle/speckle-server :2.21.3-branch.testing5.219631-2153bef	8fd157733393	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-webhook-service :2.21.3-branch.testing5.219631-2153bef	06ecc7a66a40	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-webhook-service :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	107c63336ab5	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-webhook-service :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4828aee2277c	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-webhook-service :2.20.2-branch.testing4.134160-9fad4b2	70f5167d1d4d	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-webhook-service :2.18.12-branch.testing3.88744-f55b341	771f872cfa63	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-webhook-service :2.18.11-branch.testing2.88634-335d469	902b98ad5327	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-webhook-service :2.17.14-branch.testing.72707.921a5f8	99913052b72e	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-webhook-service :2.26.3	c58eb372c488	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
speckle/speckle-webhook-service :2.20.6-branch.testing1.154030-9b09114	cf1d99bad89a	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
speckle/speckle-webhook-service :2.25.10-branch.testing6.645-b125c1e	dd9db6cbe9bb	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
splunk/splunk-operator :2.0.0	c4e0d3146226	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-17.el8_6	1
spy86/rabbitmq-stomp :latest	ea649101b9fb	openssl@1.1.1f-1ubuntu2.17	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2actionrunner :3.8	88235ba70cad	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2api :3.8	6f56d239d280	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2auth :3.8	33ecfda16608	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2notifier :3.8	f190a6212195	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2rulesengine :3.8	259503496ff9	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2scheduler :3.8	b1de2055c362	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2stream :3.8	1c8904a3bf67	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2web :3.8	09989a26c8b7	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3	1
stain/jena-fuseki :latest	b1d0c96f19ad	openssl@3.3.1-r3	3.3.7-r0	1
stakater/workshop-operator :v0.0.38	97bf456cc97c	openssl@1:1.1.1k-5.el8_5	1:1.1.1k-17.el8_6	1
stalwartlabs/stalwart :v0.15.5	dcf575db2d53	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2	1
stashapp/stash :latest	24dbd7607174	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm3	1
stashapp/stash :v0.31.1	df744af5a0c9	openssl@3.5.5-r0	3.5.6-r0	1
stashapp/stash-box :latest	a534c8afdf39	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
statcan/ckan :2.9	3921305425b8	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm3	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm3	1
streamnative/private-cloud-console :v2.3.27-all	91e54375e154	openssl@3.3.6-r0	3.3.7-r0	1
structurizr/onpremises :2025.11.09	4b5ffb5119c8	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
substratusai/verba :v0.4.0-baseURL2	61695be635eb	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
supabase/edge-runtime :v1.59.0	eff9c554d649	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1