CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,515; of 17,790 indexed, latest versions
Container images: 2,895; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,515 of 17,790 indexed charts deploy, on 2,895 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,663
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	902
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5	330
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm4	15

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,515 by stars

Chart

Latest

Affected images

Radar Score

passboltpassbolt

2.1.1

3 of 6 See more

passbolt passbolt 2.1.1

3 of the 6 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/redis-sentinel :8.2.1-debian-12-r0	0ca3ea1d2f82	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

13,523

py-kube-downscalerpy-kube-downscaler

0.3.12

1 of 1 See more

py-kube-downscaler py-kube-downscaler 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/caas-team/py-kube-downscaler :26.4.0	af05a098b0d2	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

732

redis-enterprise-operatorredis-enterprise-operator-official

8.0.18-11

1 of 1 See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
redislabs/operator :8.0.18-11	9078e713bb6a	openssl@1:3.5.1-7.el9_7	1:3.5.5-3.el9_8

Open the chart page →

921

redisinsight-secureredisinsight-secure

1.0.2

1 of 1 See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
redis/redisinsight :2.68	019fcf774631	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,721

rekorsigstore

1.8.6

2 of 9 See more

rekor sigstore 1.8.6

2 of the 9 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
curlimages/curldigest-pinned	935d9100e9ba	openssl@3.5.4-r0	3.5.6-r0
library/redisdigest-pinned	148bb5411c18	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

5,373

mssqlserver-2022simcube

1.2.3

1 of 1 See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2022-latest	ba4c8329f48f	openssl@3.0.2-0ubuntu1.25	no fix listed

Open the chart page →

2,955

thehivestrangebee-helm

1.0.7

4 of 7 See more

thehive strangebee-helm 1.0.7

4 of the 7 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/os-shell :12-debian-12-r51	77e65e9d633e	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
curlimages/curl :8.17.0	935d9100e9ba	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

16,220

uffizzi-controlleruffizzi-controller

2.4.6

1 of 11 See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

14,327

zigbee2mqttzigbee2mqtt

2.14.1

1 of 2 See more

zigbee2mqtt zigbee2mqtt 2.14.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
mikefarah/yq :4.45.1	2c100efaca06	openssl@3.3.2-r4	3.3.7-r0

Open the chart page →

1,032

cloudflaredartur9010

1.0.9

2 of 3 See more

cloudflared artur9010 1.0.9

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

3,008

baserowbaserow-chart

1.0.56

3 of 6 See more

baserow baserow-chart 1.0.56

3 of the 6 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/redis :7.2.5-debian-12-r0	5261cae9e407	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

17,413

fadicetic

0.3.1

2 of 25 See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm3
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

53,052

headwind-mdmchristianhuth

5.10.2

2 of 2 See more

headwind-mdm christianhuth 5.10.2

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
headwindmdm/hmdm :0.1.9	3550b4840840	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

5,929

routercosmo-router

0.18.0

1 of 1 See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/router :0.243.0	5afcab98d9d7	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

1,686

dolibarrcowboysysop

9.0.3

2 of 3 See more

dolibarr cowboysysop 9.0.3

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
wait4x/wait4x :3.3.1	4dcd86307de1	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

9,208

daskhubdask

2024.1.1

1 of 9 See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
pangeo/base-notebook :2024.01.15	5fbe688a4f80	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23

Open the chart page →

14,151

seafiledatamate

0.6.0

4 of 6 See more

seafile datamate 0.6.0

4 of the 6 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb-galera :11.4.3-debian-12-r0	cb8beb6dbb58	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/memcached :1.6.29-debian-12-r4	ff0e7239c17c	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
datamate/seafile-professional :11.0.20	2dd66b722464	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23

Open the chart page →

27,426

dialdial

7.2.0

1 of 4 See more

dial dial 7.2.0

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
valkey/valkey :9.0.2	930b41430fb7	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

2,186

homerdjjudas21

8.2.4

1 of 1 See more

homer djjudas21 8.2.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
b4bz/homer :v24.12.1	4b44a4a9e329	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

399

plexgabe565

0.5.1

1 of 1 See more

plex gabe565 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/plex :version-1.41.4.9463-630c9f557	e6d2775e77ec	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

2,583

geonode-k8sgeonode-k8s

2.0.0

4 of 10 See more

geonode-k8s geonode-k8s 2.0.0

4 of the 10 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
geonode/geoserver :2.28.4-latest	81b1d431b7e9	openssl@3.0.2-0ubuntu1.23	no fix listed
geopython/pycsw :3.0.0-beta2	84662ea6b78b	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2
library/memcached :1.6.40	cc523a19da58	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2
library/redis :8.4.0	3906b477e4b6	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

14,112

glpiglpi-conteiner

0.1.0

1 of 3 See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
vdiogov/glpi-conteiner :latest	6945f84f0058	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

12,359

openctihelm-opencti

3.0.9

1 of 8 See more

opencti helm-opencti 3.0.9

1 of the 8 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq :4.1.2-debian-12-r1	fac502149c40	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

3,407

hertzbeathertzbeat

1.8.1

2 of 4 See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apache/hertzbeat :1.8.0	75d48a62748f	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9
apache/hertzbeat-collector :1.8.0	a2bab1be574c	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9

Open the chart page →

14,181

infrahubinfrahub

4.33.2

3 of 5 See more

infrahub infrahub 4.33.2

3 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

10,522

kamu-api-serverkamu

0.89.0

1 of 1 See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/kamu-data/kamu-api-server :0.89.0	4ed7a896dd2b	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

6,350

keycloak-operatorkeycloak-operator

0.0.4

1 of 1 See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-17.el8_6

Open the chart page →

4,663

percona-xtradb-clusterkfirfer

1.5.10

1 of 3 See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
percona/percona-xtradb-cluster :8.0.32-24.2	1f978ab8912e	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6

Open the chart page →

4,956

kubeflowkubeflow

1.6.2

4 of 45 See more

kubeflow kubeflow 1.6.2

4 of the 45 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.9.6	87a9db561d2e	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm8
istio/proxyv2 :1.14.1	df69c1a7af7c	openssl@1.1.1f-1ubuntu2.13	1.1.1f-1ubuntu2.24+esm3
library/python :3.7	eedf63967cdb	openssl@3.0.9-1	3.0.19-1~deb12u2
gcr.io/ml-pipeline/metadata-envoy :2.0.0-alpha.5	e8bc6cf08613	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

97,217

kubernetes-loggingkubernetes-logging

4.8.0

1 of 6 See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

10,573

sbomscannerkubewarden

0.12.1

1 of 5 See more

sbomscanner kubewarden 0.12.1

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,012

venti-stackkuoss

0.5.0

2 of 9 See more

venti-stack kuoss 0.5.0

2 of the 9 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/lethe :v0.3.3	ebdf55fd5705	openssl@3.5.4-r0	3.5.6-r0
ghcr.io/kuoss/venti :v0.3.3	8ee3e70d77f1	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

3,830

librechatlibrechat

1.8.10

1 of 3 See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/danny-avila/librechat :v0.7.7	8c68abbe1cff	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

2,654

librechatlibrechat-openshift

1.9.0

1 of 3 See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,849

radarrloeken-at-home

5.27.0-nightly

1 of 1 See more

radarr loeken-at-home 5.27.0-nightly

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
loeken/radarr :5.27.0-nightly	a24409d3846d	openssl@3.3.4-r0	3.3.7-r0

Open the chart page →

586

headplanenbcloud

0.1.2

3 of 4 See more

headplane nbcloud 0.1.2

3 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :latest	cd354d5b2556	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
headscale/headscale :0.25.1	a7a8ae9616bb	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
ghcr.io/tale/headplane :0.5.5	0dbc52cffc19	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

7,997

node-local-dnsnode-local-dns

2.4.0

1 of 1 See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	openssl@3.0.11-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

2,619

open5gsopen5gs

2.3.4

1 of 5 See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
gradiant/open5gs-dbctl :0.10.3	332031245fce	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

9,305

ubuntuopen-charts

1.2.1

1 of 1 See more

ubuntu open-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/ubuntu :22.04	2edbbc5dc405	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

1,579

mattermostphntom

3.24.0

1 of 2 See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23

Open the chart page →

8,777

prometheus-smartctl-exporterprometheus-community

0.17.1

1 of 1 See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,064

unifi-controllerqonstrukt

2.6.1

1 of 1 See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
linuxserver/unifi-controller :8.0.24	0ae315a3a456	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

10,563

popeyeself-hosters-by-night

0.6.1

1 of 1 See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	openssl@3.3.2-r4	3.3.7-r0

Open the chart page →

1,196

fulciosigstore

2.11.1

1 of 6 See more

fulcio sigstore 2.11.1

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
curlimages/curl :8.17.0	935d9100e9ba	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

3,516

topolvmtopolvm

17.2.0

1 of 1 See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

2,374

uffizzi-appuffizzi-app

1.3.0

1 of 14 See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

19,434

unboundunbound-helmchart

0.2.2

1 of 1 See more

unbound unbound-helmchart 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/pixelfederation/unbound :1.24.2_0	fce820a03964	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,495

reposilitevolker-raschek

1.0.0

1 of 1 See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
dzikoysk/reposilite :3.5.26	4128c2d7a6ba	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

3,002

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	openssl@1.0.2g-1ubuntu4.8	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

13,578

grafana-pdf-exporterwiremind

2.1.1

1 of 1 See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

9,775

Container images carrying it

2,895 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
gcr.io/datadoghq/private-action-runner :v1.21.0	5f5918f843a4	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9	1
gcr.io/flink-operator/deployer :webhook-cert	809338a69bd5	openssl@1.1.1-1ubuntu2.1~18.04.5 openssl1.0@1.0.2n-1ubuntu5.3	1.1.1-1ubuntu2.1~18.04.23+esm8 1.0.2n-1ubuntu5.13+esm4	1
gcr.io/google-containers/echoserver :1.9	10f4dbc8eeeb	openssl@1.0.2g-1ubuntu4.8	1.0.2g-1ubuntu4.20+esm15	1
gcr.io/google_containers/echoserver :1.10	cb5c1bddd1b5	openssl@1.0.2g-1ubuntu4.8	1.0.2g-1ubuntu4.20+esm15	1
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15	1
gcr.io/istio-release/pilot :1.11.1	c552478f8f11	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm3	1
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15	1
gcr.io/istio-release/proxyv2 :1.11.1	9538fabe49fd	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm3	1
gcr.io/istio-testing/operator :latest	8d4576f7b98f	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.9	1
gcr.io/kasten-images/restorectl :8.0.14	5a0884f9a90c	openssl@1:3.5.1-4.el9_7	1:3.5.5-3.el9_8	1
gcr.io/kubecost1/cost-model :prod-2.5.5	02b90651367f	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8	1
gcr.io/kubecost1/cost-model :prod-1.108.1	852f7923fad3	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23	1
gcr.io/kubecost1/cost-model :prod-2.6.3	9e507ac0aebb	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8	1
gcr.io/kubecost1/frontend :prod-2.5.5	991c1465c658	openssl@3.4.1-r2	3.6.2-r0	1
gcr.io/kubecost1/frontend :prod-2.6.3	a535f7de024b	openssl@3.4.1-r0	3.6.2-r0	1
gcr.io/kubecost1/kubecost-modeling :v0.1.24	a2259b098b13	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8	1
gcr.io/kubecost1/kubecost-modeling :v0.1.22	a461dc5cb96a	openssl@1:3.2.2-6.el9_5	1:3.5.5-3.el9_8	1
gcr.io/kubecost1/kubecost-network-costs :v0.17.6	ab6a54c53fd8	openssl@3.3.2-r0	3.6.2-r0	1
gcr.io/ml-pipeline/api-server :2.3.0	39661bd823e8	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
gcr.io/ml-pipeline/metadata-envoy :2.0.0-alpha.5	e8bc6cf08613	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm15	1
gcr.io/ml-pipeline/metadata-envoy :2.3.0	e8e263a919ff	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.24+esm3	1
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
gcr.io/ml-pipeline/viewer-crd-controller :2.3.0	8cf8213d69e4	openssl@3.3.1-r3	3.3.7-r0	1
gcr.io/press-labs-public/dashboard :1.8.19	b88f88070fb0	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
gcr.io/rotationalio-habanero/imgtag :89ec287	a534a3170d03	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
gcr.io/spotinst-artifacts/spot-ocean-metric-exporter :1.0.5	ae57b62291aa	openssl@3.5.1-r0	3.5.6-r0	1
ghcr.io/98jan/smalland-server/smalland-server :dev	eb7be822d5b2	openssl@1.1.1-1ubuntu2.1~18.04.23	1.1.1-1ubuntu2.1~18.04.23+esm8	1
ghcr.io/absmach/magistrala/ui-smq :latest	ea7e7f0e293e	openssl@3.3.3-r0	3.3.7-r0	1
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8	1
ghcr.io/advplyr/audiobookshelf :2.32.1	a52dc5db694a	openssl@3.5.4-r0	3.5.6-r0	1
ghcr.io/aetrius/msockperf-client/msockperf-client :main	820af919c5e2	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.9	1
ghcr.io/aetrius/msockperf-server/msockperf-server :main	46ae4ea003e0	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.9	1
ghcr.io/aklivity/zilla :2.4.2	89c4a2e74863	openssl@3.0.2-0ubuntu1.25	no fix listed	1
ghcr.io/akpw/mktxp :1.2.17	bd6f22f7db0a	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/alekc/samba-docker :v1.1.0	cc9a028d9c43	openssl@3.5.4-r0	3.5.6-r0	1
ghcr.io/alexmorbo/dell_idrac_fan_controller :v0.1.6-1	d110504d551d	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9	1
ghcr.io/almarklein/timetagger :v26.1.3-nonroot	18a81afcb249	openssl@3.0.18-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/analogj/scrutiny :master-omnibus	18689773150d	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/angelnu/pod-gateway :v1.13.0	a5b032e15f75	openssl@3.3.3-r0	3.3.7-r0	1
ghcr.io/angelscloud/prometheus-optimizer :latest	744bc929a579	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/antnsn/mal-sync :v1.0.5	2f06e72cef36	openssl@3.3.2-r0	3.3.7-r0	1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets :0.0.0-main	13e267ad7d94	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9	1
ghcr.io/apache/flink-kubernetes-operator :c703255	e9c2ce635b89	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23	1
ghcr.io/appscode/acerproxy :v0.2.0	21de3771fdd5	openssl@3.5.4-r0	3.5.6-r0	1
ghcr.io/appscode/aceshifter :v0.0.3	e5f5c254a55a	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/appscode/capi-ops-manager :v0.0.5	7465f35b684c	openssl@3.3.2-r4	3.3.7-r0	1
ghcr.io/appscode/cert-manager-webhook-ace :v0.0.2	dc6b5fdcec06	openssl@3.5.4-r0	3.5.6-r0	1
ghcr.io/appscode/csi-driver-cacerts :v0.5.0	b6bf1888f9d5	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
ghcr.io/appscode/deploy-ui :0.3.6	f3e07eff3997	openssl@3.3.2-r1	3.3.7-r0	1
ghcr.io/appscode/docker-machine-operator :v0.0.4	81f6007abb4e	openssl@3.3.1-r1	3.3.7-r0	1