StackRadar

CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,513
of 17,792 indexed, latest versions
Container images
2,889
deployed by those charts
Fix available
4 of 5
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,513 of 17,792 indexed charts deploy, on 2,889 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more1,658
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0902
opensslrpm1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5329
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm415
OSV records
ALPINE-CVE-2026-28390CGA-8g7f-wxpv-r4x7DEBIAN-CVE-2026-28390RHSA-2026:22312RHSA-2026:38503RLSA-2026:22312RLSA-2026:38503UBUNTU-CVE-2026-28390AZL-82070ECHO-9d88-691e-4e0f
Also known as
CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,513 by stars
ChartLatestAffected imagesRadar Score
dmaap-listenersmo-helm-chart6.0.01 of 3See more

dmaap-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

25,874
elasticsearchsmo-helm-chart6.0.01 of 5See more

elasticsearch smo-helm-chart 6.0.0

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

24,881
logsmo-helm-chart6.0.01 of 6See more

log smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

29,328
mariadb-initsmo-helm-chart6.0.01 of 2See more

mariadb-init smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

24,881
msbsmo-helm-chart6.0.01 of 6See more

msb smo-helm-chart 6.0.0

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

27,583
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
openssl@1.0.2g-1ubuntu4.6
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

9,455
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

27,583
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

29,328
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
openssl@1.0.2g-1ubuntu4.10
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

27,583
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

25,874
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

25,874
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

25,874
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

24,881
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

24,881
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15

Open the chart page →

25,874
smtp-gotifysmtp-gotifyVerified publisher0.1.41 of 1See more

smtp-gotify smtp-gotify 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/reiml/smtp-gotify:latest80ffa9d2044a
openssl@3.3.6-r0
3.3.7-r0

Open the chart page →

562
avalanchesnowplow-devopsVerified publisher0.12.11 of 6See more

avalanche snowplow-devops 0.12.1

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

1,330
snspingsnsping1.2.91 of 1See more

snsping snsping 1.2.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
udhos/snsping:1.2.96ae70677b6a3
openssl@3.3.2-r1
3.3.7-r0

Open the chart page →

1,333
cost-analyzersoftonic2.5.55 of 6See more

cost-analyzer softonic 2.5.5

5 of the 6 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
grafana/grafana:11.5.28b37a2f028f1
openssl@3.3.2-r1
3.3.7-r0
gcr.io/kubecost1/cost-model:prod-2.5.502b90651367f
openssl@1:3.2.2-6.el9_5.1
1:3.5.5-3.el9_8
gcr.io/kubecost1/frontend:prod-2.5.5991c1465c658
openssl@3.4.1-r2
3.6.2-r0
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
openssl@1:3.2.2-6.el9_5.1
1:3.5.5-3.el9_8
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
openssl@3.3.2-r4
3.3.7-r0

Open the chart page →

7,962
ingress-nginxsoftonic4.15.11 of 2See more

ingress-nginx softonic 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

1,541
kube-prometheus-stacksoftonic81.5.12 of 6See more

kube-prometheus-stack softonic 81.5.1

2 of the 6 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
openssl@3.5.4-r0
3.5.6-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

4,988
rclonesoftonic2.1.01 of 1See more

rclone softonic 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
rclone/rclone:1.6874c51b8817e5
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

1,680
atlassian-confluencesomeblackmagic3.4.11 of 1See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
atlassian/confluence-server:7.10.03b9222ab32ef
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23

Open the chart page →

13,678
atlassian-jirasomeblackmagic3.3.21 of 1See more

atlassian-jira someblackmagic 3.3.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
atlassian/jira-software:8.14.037bc46cbec1a
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23

Open the chart page →

13,150
testing-multitoolsomeblackmagic0.1.21 of 1See more

testing-multitool someblackmagic 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

30,778
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

11,974
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.9

Open the chart page →

3,292
strimzi-user-operatorspartan0.4.01 of 1See more

strimzi-user-operator spartan 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.45.158c727cd2e68
openssl@1:3.2.2-6.el9_5.1
1:3.5.5-3.el9_8

Open the chart page →

1,862
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

5,987
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e14 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-webhook-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e14828aee2277c
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

16,487
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb4 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
speckle/speckle-webhook-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb107c63336ab5
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

16,519
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f83 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

3 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-webhook-service:2.17.14-branch.testing.72707.921a5f899913052b72e
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

14,767
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091144 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

16,519
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4693 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

3 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-webhook-service:2.18.11-branch.testing2.88634-335d469902b98ad5327
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

14,309
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3413 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

3 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-webhook-service:2.18.12-branch.testing3.88744-f55b341771f872cfa63
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

14,309
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b24 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
speckle/speckle-webhook-service:2.20.2-branch.testing4.134160-9fad4b270f5167d1d4d
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

16,138
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef5 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

5 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-webhook-service:2.21.3-branch.testing5.219631-2153bef06ecc7a66a40
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

15,749
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e4 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

4 of the 4 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

11,214
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9

Open the chart page →

2,271
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

6,966
envoy-proxysqream-chartsVerified publisher0.6.01 of 2See more

envoy-proxy sqream-charts 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.1e596fda6a0ce
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23

Open the chart page →

2,319
flowssqream-chartsVerified publisher0.6.21 of 3See more

flows sqream-charts 0.6.2

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
alpine/curl:8.7.1f0c1b7ca12f6
openssl@3.3.1-r0
3.3.7-r0

Open the chart page →

655
umbrellasqream-chartsVerified publisher0.1.811 of 18See more

umbrella sqream-charts 0.1.81

1 of the 18 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
alpine/curl:8.7.1f0c1b7ca12f6
openssl@3.3.1-r0
3.3.7-r0

Open the chart page →

655
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2

Open the chart page →

2,510
pagessrinipages1.0.02 of 3See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm3
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

20,262
servicexssl-hep1.8.51 of 16See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ncsa/checks:main0b738bbc8d70
openssl@3.5.1-1
3.5.5-1~deb13u2

Open the chart page →

68,323
allurestakaterVerified publisher1.0.11 of 1See more

allure stakater 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/eformat/jenkins-agent-graalvm:latesta3b9a07648b6
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-17.el8_6

Open the chart page →

28,515
nordmart-reviewstakaterVerified publisher0.0.61 of 3See more

nordmart-review stakater 0.0.6

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-17.el8_6

Open the chart page →

11,571
nordmart-review-instancestakaterVerified publisher1.0.01 of 3See more

nordmart-review-instance stakater 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
stakater/stakater-nordmart-review:1.0.35954d2be66e95
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-17.el8_6

Open the chart page →

11,571
workshop-operatorstakaterVerified publisher0.0.381 of 2See more

workshop-operator stakater 0.0.38

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
stakater/workshop-operator:v0.0.3897bf456cc97c
openssl@1:1.1.1k-5.el8_5
1:1.1.1k-17.el8_6

Open the chart page →

6,678

Container images carrying it

2,889 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm3
2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm3
2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm3
2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm3
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
openssl@3.0.9-1
3.0.19-1~deb12u2
2
gradiant/ueransim:3.2.6015b30d5fa0f
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.23
2
grafana/alloy:v1.8.17790f6f7fbd8
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
2
grafana/alloy:v1.12.2f94b1c82957a
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
2
grafana/grafana:12.3.12175aaa91c96
openssl@3.5.4-r0
3.5.6-r0
2
grafana/grafana:12.3.39e1e77ade304
openssl@3.5.5-r0
3.5.6-r0
2
grafana/grafana:11.4.0d8ea37798ccc
openssl@3.3.2-r0
3.3.7-r0
2
grafana/grafana:12.4.1e932bd6ed0e0
openssl@3.5.5-r0
3.5.6-r0
2
grafana/tempo:2.5.0f0200a9bff6d
openssl@3.3.0-r2
3.3.7-r0
2
hanchuanchuan/goinception:latestb3c0dd26fb50
openssl@3.3.2-r0
3.3.7-r0
2
hazelcast/hazelcast:5.5.05dd5d31c7a06
openssl@3.3.1-r3
3.3.7-r0
2
helmforge/kubectl:1.35.3c3f97e954c47
openssl@3.5.5-r0
3.5.6-r0
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
openssl@3.0.9-1
3.0.19-1~deb12u2
2
hookiesolutions/webhookie:latest0629694246ba
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm3
2
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3
2
ilum/marquez:0.54.06e1d709d41f8
openssl@3.0.18-1~deb12u2
3.0.19-1~deb12u2
2
ilum/ui:6.7.3998937726679
openssl@3.5.5-r0
3.5.6-r0
2
interlayhq/interbtc:latesta66d0e35e70f
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3
2
interlayhq/interbtc-clients:vault-masterc3e311de67da
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm3
2
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15
2
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm15
2
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15
2
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm15
2
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm15
2
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm15
2
istio/kubectl:1.5.10dbb7726d1bf0
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm8
2
istio/proxyv2:1.18.0757d28c24100
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23
2
istio/proxyv2:1.10.3a78b7a165744
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm8
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
openssl@3.5.5-1~deb13u1
3.5.5-1~deb13u2
2
jlesage/jdownloader-2:v26.03.13d6cb102bd9b
openssl@3.3.6-r0
3.3.7-r0
2
kiwigrid/k8s-sidecar:1.30.98c06e1ba643a
openssl@3.5.1-r0
3.5.6-r0
2
kurento/kurento-media-server:latest03c0d34d0828
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
2
langgenius/dify-sandbox:0.2.009b7e8705673
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
2
library/cassandra:3.11.65aa8400b4b3b
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm8
2
library/cassandra:4.1.37cbcec0086ac
openssl@3.0.2-0ubuntu1.13
3.0.2-0ubuntu1.23
2
library/elasticsearch:7.17.35e6ac15bf6a5
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm3
2
library/elasticsearch:8.19.1289729a95066a
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9
2
library/mariadb:10.8.30abf60f81588
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.23
2
library/mariadb:10.10334b315c10e5
openssl@3.0.2-0ubuntu1.13
3.0.2-0ubuntu1.23
2
library/mariadb:12.0.2:12.0-noble607835cd628b
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
2
library/mariadb:10.692e50059ea0a
openssl@3.0.2-0ubuntu1.26
no fix listed
2
library/mariadb:11.3.2e101f9db3191
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23
2
library/mongo:5.041108d183e97
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3
2
library/mongo:4.2.358b25d51baa1
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm8
2
library/mongo:7b096b4cb9269
openssl@3.0.2-0ubuntu1.29
no fix listed
2

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.