StackRadar

CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,515
of 17,790 indexed, latest versions
Container images
2,895
deployed by those charts
Fix available
4 of 5
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,515 of 17,790 indexed charts deploy, on 2,895 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more1,663
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0902
opensslrpm1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5330
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm415
OSV records
ALPINE-CVE-2026-28390CGA-8g7f-wxpv-r4x7DEBIAN-CVE-2026-28390RHSA-2026:22312RHSA-2026:38503RLSA-2026:22312RLSA-2026:38503UBUNTU-CVE-2026-28390AZL-82070ECHO-9d88-691e-4e0f
Also known as
CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,515 by stars
ChartLatestAffected imagesRadar Score
helm-watchdog-pod-deletehelm-watchdog-pod-delete0.3.01 of 1See more

helm-watchdog-pod-delete helm-watchdog-pod-delete 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
alpine/kubectl:1.34.18413f8890d19
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

1,153
typesensehmphuVerified publisher0.1.61 of 1See more

typesense hmphu 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
typesense/typesense:0.23.03accb727cbe2
openssl@1.0.2g-1ubuntu4.19
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

3,876
hpe-cosi-driverhpe-storageVerified publisher2.0.01 of 2See more

hpe-cosi-driver hpe-storage 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/hpestorage/cosi-driver:v2.0.0a4d2667f2b6e
openssl@1:3.2.2-6.el9_5.1
1:3.5.5-3.el9_8

Open the chart page →

1,679
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.23 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

3 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
openssl@3.0.17-1~deb12u1
3.0.19-1~deb12u2
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

10,625
coreinstill-aiOfficialVerified publisher0.1.755 of 15See more

core instill-ai 0.1.75

5 of the 15 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
instill/console:0.68.54cd70e2df5c6
openssl@3.5.1-r0
3.5.6-r0
instill/mgmt-backend:d0933d4ebe12f77a3f9
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
instill/model-backend:611f0f2e980125e5ba5
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
temporalio/admin-tools:1.28cfde8170c92f
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

31,122
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.9

Open the chart page →

4,363
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

4,639
wireguardk8s-home-lab-repo1.6.01 of 1See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,378
kanister-operatorkanister0.118.01 of 1See more

kanister-operator kanister 0.118.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/kanisterio/controller:0.118.0d22616a5998b
openssl@1:3.5.1-7.el9_7
1:3.5.5-3.el9_8

Open the chart page →

1,170
klancesklances0.1.41 of 1See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2

Open the chart page →

1,715
kraken-cikraken-ciVerified publisher1.7.361 of 10See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6

Open the chart page →

7,303
radondb-mysqlkubesphere-testVerified publisher1.0.11 of 3See more

radondb-mysql kubesphere-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,384
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

11,675
bitwarden-crd-operatorlerentisVerified publisher0.18.01 of 1See more

bitwarden-crd-operator lerentis 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

2,004
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

15,340
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,944
lxcfs-on-kuberneteslxcfs-on-kubernetes0.2.72 of 2See more

lxcfs-on-kubernetes lxcfs-on-kubernetes 0.2.7

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
openssl@3.5.0-r0
3.5.6-r0
ghcr.io/cndoit18/lxcfs-manager:latest6bb61ded2625
openssl@3.5.0-r0
3.5.6-r0

Open the chart page →

2,095
mariadbmariadbVerified publisher0.4.01 of 1See more

mariadb mariadb 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

2,458
kubecostmesosphere-stable0.37.53 of 9See more

kubecost mesosphere-stable 0.37.5

3 of the 9 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
openssl@3.3.2-r0
3.3.7-r0
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.23

Open the chart page →

17,799
helm-ai-kernelmindburn-labsOfficialVerified publisher0.8.51 of 2See more

helm-ai-kernel mindburn-labs 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
alpine/helmdigest-pinned105741fa6621
openssl@3.3.1-r3
3.3.7-r0

Open the chart page →

2,175
move2kubemove2kube0.3.151 of 1See more

move2kube move2kube 0.3.15

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6

Open the chart page →

3,803
openobservemshade-openobserve0.1.101 of 1See more

openobserve mshade-openobserve 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
public.ecr.aws/zinclabs/openobserve:v0.8.127f8de509169
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

1,316
nebraskanebraska3.0.02 of 2See more

nebraska nebraska 3.0.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
ghcr.io/flatcar/nebraska:4.0.05c9e99ff7167
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

4,077
keycloak-operatornewsaktuell0.1.71 of 1See more

keycloak-operator newsaktuell 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6

Open the chart page →

5,066
gateway-apinicklasfrahm-gateway-apiVerified publisher0.2.01 of 1See more

gateway-api nicklasfrahm-gateway-api 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
alpine/kubectl:1.33.32c59a3f0726c
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

1,258
observalobservalVerified publisher1.13.11 of 8See more

observal observal 1.13.1

1 of the 8 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.3810861a2e2d0
openssl@3.0.2-0ubuntu1.29
no fix listed

Open the chart page →

5,916
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

5,244
oesopsmxVerified publisher4.0.3210 of 25See more

oes opsmx 4.0.32

10 of the 25 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/opa:opa-sidecar-v1.03dcbf3caa454
openssl@3.5.4-r0
3.5.6-r0
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-17.el8_6
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6
quay.io/opsmxpublic/ubi8-oes-ui:isd-spin-2025.10.01-e6f6f01-2025121006405d934bb66884
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6

Open the chart page →

108,315
redispascaliskeVerified publisher2.1.01 of 1See more

redis pascaliske 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/redis:8.0.3be0a135f1955
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

1,869
platzioplatz-ioVerified publisher0.6.52 of 2See more

platzio platz-io 0.6.5

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
openssl@3.5.1-r0
3.5.6-r0
platzio/frontend:v0.6.073083749b46a
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

2,877
ipmi-exporterpnnl-miscscripts0.1.151 of 1See more

ipmi-exporter pnnl-miscscripts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
pnnlmiscscripts/ipmi-exporter:1.2.0-181e18992d8e3
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_10

Open the chart page →

2,994
overseerrpree-helm-chartsVerified publisher1.2.01 of 1See more

overseerr pree-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/sct/overseerr:1.35.06197516c9d7b
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

2,703
qgis-serverqgis-serverVerified publisher0.1.101 of 3See more

qgis-server qgis-server 0.1.10

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/nginx:1.27.409369da6b103
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

5,465
repoflowrepoflow-helm-public0.9.13 of 8See more

repoflow repoflow-helm-public 0.9.1

3 of the 8 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.48.10f6c1c4b957d2
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23
library/elasticsearch:8.15.0310b9fc03b06
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24+esm3
library/postgres:16.24aea012537ed
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

13,647
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

8,783
rocketmq-clusterrocketmq12.6.02 of 2See more

rocketmq-cluster rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9
apacherocketmq/rocketmq-dashboard:2.1.0ce78506bd6fe
openssl@1:3.2.2-6.el9_5.1
1:3.5.5-3.el9_8

Open the chart page →

6,400
rqliterqliteOfficialVerified publisher2.0.01 of 1See more

rqlite rqlite 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
rqlite/rqlite:9.1.37b992a526eee
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

1,318
qbittorrent-vpnrtomik-helm-chartsVerified publisher0.0.21 of 2See more

qbittorrent-vpn rtomik-helm-charts 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
qmcgaw/gluetun:v3.40.02b42bfa04675
openssl@3.3.2-r1
3.3.7-r0

Open the chart page →

1,218
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

24,566
satisfactory-serversatisfactoryVerified publisher0.1.61 of 1See more

satisfactory-server satisfactory 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.10e103700ae6ae
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23

Open the chart page →

3,469
seldon-core-operatorseldon1.19.01 of 1See more

seldon-core-operator seldon 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
seldonio/seldon-core-operator:1.19.0544e3bf71bd1
openssl@1:3.5.1-5.el9_7
1:3.5.5-3.el9_8

Open the chart page →

860
lldapself-hosters-by-nightVerified publisher0.5.21 of 2See more

lldap self-hosters-by-night 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2

Open the chart page →

3,423
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.6-r0

Open the chart page →

5,926
freeradiusstartechnicaVerified publisher1.2.01 of 1See more

freeradius startechnica 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.2.8af6fd34a5b78
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23

Open the chart page →

5,810
sn-platformstreamnative1.11.441 of 9See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

15,564
repmanszpadel-chartsVerified publisher3.52.171 of 3See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/nginx:1.27.3fb197595ebe7
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

7,075
pocketbasetechwolf12Verified publisher0.29.31 of 1See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/techwolf12/pocketbase:0.29.3106099641679
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

1,448
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
openssl@3.5.1-1
3.5.5-1~deb13u2

Open the chart page →

3,827
feedbacksystemthm-mni-iiVerified publisher0.47.14 of 10See more

feedbacksystem thm-mni-ii 0.47.1

4 of the 10 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
thmmniii/fbs-collab:v1.27.15d389e3c5ce6
openssl@3.5.1-r0
3.5.6-r0
thmmniii/fbs-core:v1.27.15438517d9fc2
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.23
thmmniii/fbs-qcm-backend:v1.27.1afbe511e5c24
openssl@3.5.1-r0
3.5.6-r0
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
openssl@3.5.1-r0
3.5.6-r0

Open the chart page →

28,634
topaztopaz0.2.51 of 1See more

topaz topaz 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

1,503

Container images carrying it

2,895 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
streamnative/private-cloud-console:v2.3.27-all91e54375e154
openssl@3.3.6-r0
3.3.7-r0
1
structurizr/onpremises:2025.11.094b5ffb5119c8
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
substratusai/verba:v0.4.0-baseURL261695be635eb
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
supabase/edge-runtime:v1.59.0eff9c554d649
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
supabase/gotrue:v2.163.0ba4ddc594b0b
openssl@3.3.2-r0
3.3.7-r0
1
supabase/postgres-meta:v0.84.2d0a96973e9f1
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
supabase/realtime:v2.33.8d207e6e23ad3
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
supabase/storage-api:v1.12.0f983fb50bd95
openssl@3.3.2-r0
3.3.7-r0
1
supabase/studio:20241021-9f9b08326d8070c55e9
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
svcosti/cidrapp:latest8428d87bc5d0
openssl@3.3.3-r0
3.3.7-r0
1
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm3
1
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
openssl@3.0.2-0ubuntu1.13
3.0.2-0ubuntu1.23
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm3
1
syepes/network_exporter:1.8.000af1691570e
openssl@3.5.1-r0
3.5.6-r0
1
sysnet4admin/colosseum-agg:logbc25b152d88e
openssl@3.0.2-0ubuntu1.25
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
sysnet4admin/colosseum-rwd:log74ded2d92f07
openssl@3.5.1-1+deb13u1
3.5.5-1~deb13u2
1
tailscale/tailscale:v1.96.5dbeff02d2337
openssl@3.5.5-r0
3.5.6-r0
1
teknas09/bird-pod:latest12a1fa85c4aa
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
tektonops/ipup-dynu:latestc2198746cf8f
openssl@3.3.1-r3
3.3.7-r0
1
temporalio/admin-tools:1.26.237e2e33dbd7b
openssl@3.3.2-r0
3.3.7-r0
1
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.6-r0
1
temporalio/admin-tools:1.28cfde8170c92f
openssl@3.5.5-r0
3.5.6-r0
1
temporalio/auto-setup:1.29.15b3502a3b685
openssl@3.5.0-r0
3.5.6-r0
1
temporalio/auto-setup:1.27.2b44cbfeb43db
openssl@3.3.3-r0
3.3.7-r0
1
temporalio/server:1.26.21e2626efcbc1
openssl@3.3.2-r0
3.3.7-r0
1
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.6-r0
1
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.6-r0
1
temporalio/ui:2.39.0b768f87f18b5
openssl@3.3.3-r0
3.3.7-r0
1
tensorflow/serving:latest8a208c232297
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.23
1
tensorflow/tensorflow:1.6.0-devel1e3172090703
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.20+esm15
1
testinprod/op-erigon:latest0a125bd77a2d
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
1
thecloudspark/app-result:1.09a5302cb8312
openssl@3.3.0-r2
3.3.7-r0
1
thecloudspark/app-vote:1.0c7da7417a86a
openssl@3.3.0-r2
3.3.7-r0
1
thelande/kasa_exporter:v0.2.3a1fdb8baa152
openssl@3.3.0-r2
3.3.7-r0
1
thelande/openmeteo_exporter:v1.0.77e9072ace15f
openssl@3.5.1-r0
3.5.6-r0
1
theradius/loggia:0.463ba348546ec
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
thesisrobot/bitcoind:v23.016b368e4d52c
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.23
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
1
thingsboard/tb-postgres:latest2d17e4e36edc
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
1
thmmniii/fbs-collab:v1.27.15d389e3c5ce6
openssl@3.5.1-r0
3.5.6-r0
1
thmmniii/fbs-core:v1.27.15438517d9fc2
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.23
1
thmmniii/fbs-qcm-backend:v1.27.1afbe511e5c24
openssl@3.5.1-r0
3.5.6-r0
1
thmmniii/fbs-qcm-frontend:v1.27.1a347f7f4d144
openssl@3.5.1-r0
3.5.6-r0
1
thongngo3301/stakefish:latesta341af5976e3
openssl@3.0.9-1
3.0.19-1~deb12u2
1
tiago2/cap:2.159f5ae4e261e
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.