CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,513; of 17,792 indexed, latest versions
Container images: 2,889; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,513 of 17,792 indexed charts deploy, on 2,889 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,658
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	902
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5	329
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm4	15

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,513 by stars

Chart

Latest

Affected images

Radar Score

vaultvault

1.22.0

1 of 4 See more

vault vault 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.5	d870622d0040	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

4,261

structurizrvirtualroot

0.5.0

1 of 1 See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
structurizr/onpremises :2025.11.09	4b5ffb5119c8	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

4,429

api-firewallwallarm

0.9.6

1 of 1 See more

api-firewall wallarm 0.9.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
wallarm/api-firewall :v0.9.6	4d45db0ff240	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,000

wallarm-ingresswallarm

5.3.10-1

1 of 2 See more

wallarm-ingress wallarm 5.3.10-1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
wallarm/ingress-controller :5.3.10.1	a1fecfdf987e	openssl@3.3.5-r0	3.3.7-r0

Open the chart page →

1,301

wallarm-sidecarwallarm

6.13.1

1 of 3 See more

wallarm-sidecar wallarm 6.13.1

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
wallarm/sidecar-controller :1.8.0	524f7e6e8c35	openssl@3.3.4-r0	3.3.7-r0

Open the chart page →

965

argo-cdwenerme

10.9.1

1 of 3 See more

argo-cd wenerme 10.9.1

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

2,996

minio-operatorwenerme

4.3.7

1 of 2 See more

minio-operator wenerme 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
minio/operator :v4.3.7	54393e03f3b2	openssl@1:1.1.1k-4.el8	1:1.1.1k-17.el8_6

Open the chart page →

6,086

keycloak-operatorwiremind

0.0.14

1 of 1 See more

keycloak-operator wiremind 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :18.0.0-legacy	36ce77526145	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-17.el8_6

Open the chart page →

4,714

yet-another-cloudwatch-exporteryet-another-cloudwatch-exporter

0.38.0

1 of 1 See more

yet-another-cloudwatch-exporter yet-another-cloudwatch-exporter 0.38.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/nerdswords/yet-another-cloudwatch-exporter :v0.61.2	f04925fe1fa6	openssl@3.3.1-r0	3.3.7-r0

Open the chart page →

923

nocodbzekker6

1.10.0

1 of 1 See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
nocodb/nocodb :0.301.5	d9516f0bf546	openssl@3.3.2-r4	3.3.7-r0

Open the chart page →

4,019

zeroclawzeroclaw

0.2.1

1 of 2 See more

zeroclaw zeroclaw 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/zeroclaw-labs/zeroclaw :v0.1.7	497893753e16	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

802

kubernetes-etcd-backupadfinis

1.6.2

1 of 1 See more

kubernetes-etcd-backup adfinis 1.6.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/adfinis/kubernetes-etcd-backup :v1.4.6	8ec6c4812a7e	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8

Open the chart page →

1,852

paperless-ngxadnoctem

0.4.2

1 of 5 See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apache/tika :2.9.0.0	92d055a84e9e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23

Open the chart page →

20,185

github-actions-runneradwerx

0.10.3

1 of 1 See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

13,644

agentareaagentarea

0.0.18

4 of 16 See more

agentarea agentarea 0.0.18

4 of the 16 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
oryd/kratos :v1.3.1	fe2428f103a6	openssl@3.3.2-r1	3.3.7-r0
temporalio/auto-setup :1.29.1	5b3502a3b685	openssl@3.5.0-r0	3.5.6-r0
temporalio/ui :2.39.0	b768f87f18b5	openssl@3.3.3-r0	3.3.7-r0
valkey/valkey :9.0.1	546304417fea	openssl@3.5.4-1~deb13u1	3.5.5-1~deb13u2

Open the chart page →

15,048

icat-k8salba-helm-charts

1.1.0

3 of 4 See more

icat-k8s alba-helm-charts 1.1.0

3 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
curlimages/curl :8.18.0	d94d07ba9e7d	openssl@3.5.4-r0	3.5.6-r0
payara/micro :7.2026.2-jdk25	fb44b8ce1cb2	openssl@3.3.6-r0	3.3.7-r0
payara/server-full :7.2026.2-jdk25	31f1253f0cf8	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.23

Open the chart page →

3,755

paperless-ngxalexmorbo-paperless-ngx

0.2.0

2 of 2 See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
valkey/valkey :9.0.2	930b41430fb7	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	openssl@3.5.4-1~deb13u1	3.5.5-1~deb13u2

Open the chart page →

12,119

clearml-agentallegroai

5.3.3

1 of 1 See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	openssl@1.1.1-1ubuntu2.1~18.04.19 openssl1.0@1.0.2n-1ubuntu5.10	1.1.1-1ubuntu2.1~18.04.23+esm8 1.0.2n-1ubuntu5.13+esm4

Open the chart page →

12,148

mariadbalphani-helm-charts

10.10.3

1 of 1 See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/mariadb :10.10.2	bfc25a68e113	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23

Open the chart page →

8,395

psonoankra-charts

1.2.0

1 of 2 See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
psono/psono-server :5.0.0	3b974b43ea03	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

2,387

upcloud-csiankra-charts

0.4.0

1 of 8 See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.13	7a319b15cfc9	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

14,973

alazanteon

0.12.0

1 of 1 See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ddosify/alaz :v0.12.0	ea602056d9ce	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

3,403

anteonanteon

2.6.4

2 of 13 See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ddosify/selfhosted_backend :3.2.9	3c11e3182652	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
ddosify/selfhosted_hammermanager :2.0.2	b796b8c73011	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

22,442

apache-rangerapache-ranger

0.1.0

1 of 2 See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apache/ranger :2.7.0	76c176e8a0e4	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23

Open the chart page →

7,815

scannerappscode

2026.1.15

2 of 3 See more

scanner appscode 2026.1.15

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/scanner :v0.0.21	16907aae5de1	openssl@3.5.4-r0	3.5.6-r0
ghcr.io/appscode/trivydb :0.0.3	67ffb0309acb	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

5,308

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

5,253

arvancloud-webhookarvancloud-webhook

1.0.0

1 of 1 See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	openssl@3.5.4-1~deb13u1	3.5.5-1~deb13u2

Open the chart page →

2,334

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

1 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

17,984

dltbrokerassist-iot-distributed-broker

0.2.0

3 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :latest	a70b6ba64a08	openssl@3.0.2-0ubuntu1.25	no fix listed
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm15
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

78,035

dltloggingassist-iot-logging-auditing

0.2.0

3 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :latest	a70b6ba64a08	openssl@3.0.2-0ubuntu1.25	no fix listed
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm15
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

78,016

astradnsastradns

0.2.9

1 of 2 See more

astradns astradns 0.2.9

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/astradns/astradns-agent :v0.2.9-unbound	6ba69487f1b0	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

2,658

cso-proxyav1o-charts

0.1.3

1 of 1 See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	openssl@1.1.1-1ubuntu2.1~18.04.14	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

4,315

kube-image-webhookav1o-charts

0.1.3

1 of 1 See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

3,738

open-elevationbeeinventor

0.1.0

1 of 2 See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
openelevation/open-elevation :latest	82fb21612e86	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

13,277

aramid-indexerbiatec-repo

3.9.0

1 of 5 See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

13,618

aramid-participationbiatec-repo

4.4.1

1 of 1 See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23

Open the chart page →

7,266

aramid-relaybiatec-repo

4.4.1

1 of 1 See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9

Open the chart page →

5,138

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23

Open the chart page →

7,266

buildkite-agent-metricsbuildkite-agent-metrics

0.1.0

1 of 1 See more

buildkite-agent-metrics buildkite-agent-metrics 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
public.ecr.aws/buildkite/agent-metrics :v5.11.0	16e7f5c7161e	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

1,541

static-httpserverbyjg

0.2.0

1 of 1 See more

static-httpserver byjg 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
byjg/static-httpserver :latest	562cc8b9c40b	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

677

argocd-source-trackercableship

0.0.9

1 of 1 See more

argocd-source-tracker cableship 0.0.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/cableship/argocd-source-tracker :0.0.6	ff7dd45aa774	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,490

chart-sentinelcableship

0.0.12

1 of 1 See more

chart-sentinel cableship 0.0.12

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/cableship/chart-sentinel :0.1.0	a037f1042b28	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,490

camel-dashboard-operatorcamel-dashboard

0.1.0

1 of 1 See more

camel-dashboard-operator camel-dashboard 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/camel-tooling/camel-dashboard-operator :latest	5e867d01846e	openssl@1:1.1.1k-15.el8_6	1:1.1.1k-17.el8_6

Open the chart page →

520

geoserver-cloudcamptocamp2

0.0.5

6 of 11 See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

84,772

geoserverCloudcamptocamp2

0.0.6

6 of 11 See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

84,772

cbioportalcbioportal

1.1.0

1 of 1 See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9

Open the chart page →

3,791

celestia-nodecelestia-node

0.1.7

1 of 1 See more

celestia-node celestia-node 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/celestiaorg/celestia-node :v0.16.0	41177982c584	openssl@3.3.1-r3	3.3.7-r0

Open the chart page →

1,810

finops-stackcert-manager

0.0.5

1 of 12 See more

finops-stack cert-manager 0.0.5

1 of the 12 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/kiwigrid/k8s-sidecar :1.27.4	f6ed71d0f9f1	openssl@3.3.0-r2	3.3.7-r0

Open the chart page →

12,611

cert-vaultcert-vault

2.12.0

5 of 7 See more

cert-vault cert-vault 2.12.0

5 of the 7 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgres-exporter :0.17.1-debian-12-r2	0cca9d93a617	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/postgresql :17.4.0-debian-12-r11	fb3806e823c2	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/redis :7.4.2-debian-12-r6	6a5b1d0b5942	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/redis-exporter :1.69.0-debian-12-r1	a006df1fd47e	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
ghcr.io/gregperlinli/certvault :2.12.0	a7d0cc9e260a	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9

Open the chart page →

16,124

maildevchristianhuth

1.6.0

1 of 1 See more

maildev christianhuth 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
maildev/maildev :2.2.1	180ef51f65ee	openssl@3.3.2-r4	3.3.7-r0

Open the chart page →

1,145

Container images carrying it

2,889 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/graphprotocol/availability-oracle :sha-28312fd	472a25038957	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/gregperlinli/certvault :2.12.0	a7d0cc9e260a	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9	1
ghcr.io/grycap/im :latest	06a16d4f279f	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
ghcr.io/gurucomputing/headscale-ui :2026.03.17	015f5ba04bcb	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/haveagitgat/tdarr :2.00.18.2	3fbe4c29d14c	openssl@1.1.1f-1ubuntu2.13	1.1.1f-1ubuntu2.24+esm3	1
ghcr.io/helm/chartmuseum :v0.16.3	c81f105c3682	openssl@3.3.3-r0	3.3.7-r0	1
ghcr.io/hemslo/chat-search :latest	39d48995a5bd	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/hiteshnayak305/cors-proxy :1.2.0	e6ff0a131556	openssl@3.5.1-r0	3.5.6-r0	1
ghcr.io/home-assistant/home-assistant :2025.3.0	26c51e44d932	openssl@3.3.3-r0	3.3.7-r0	1
ghcr.io/home-assistant/home-assistant :2025.12.5	9a5a3eb4a213	openssl@3.5.4-r0	3.5.6-r0	1
ghcr.io/home-operations/beets :2.3.1	cc4975f1a0be	openssl@3.5.0-r0	3.5.6-r0	1
ghcr.io/home-operations/home-assistant :2026.3.1	067e54e2e107	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/home-operations/lidarr :3.1.2	9df1e14c8e09	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/home-operations/lidarr :3.1.2.4902	dab0e07502a3	openssl@3.5.4-r0	3.5.6-r0	1
ghcr.io/home-operations/prowlarr :2.3.0	1a8a4b11972b	openssl@3.5.4-r0	3.5.6-r0	1
ghcr.io/home-operations/qbittorrent :5.1.4	bb82ad6668f8	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/htunn/ansible-inspec :0.2.12	cd25a5cc3f1b	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2	1
ghcr.io/huggingface/text-embeddings-inference :cpu-1.6	66db77d7856c	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/huggingface/text-embeddings-inference :cpu-1.9.3	ad950d30878e	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/huscker/townsquare-frontend :2.15.2	dc6384d10cc8	openssl@3.3.3-r0	3.3.7-r0	1
ghcr.io/huseyinbabal/kubetag :latest	e161eddc59a0	openssl@3.5.4-r0	3.5.6-r0	1
ghcr.io/hypolia/kanri :0.1.2-rc4	fa7d5cc7fb7d	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/iisas/domino-frontend :k8s	8e53861be292	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/iisas/domino-rest :latest	3009350bfc11	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2	1
ghcr.io/imcitius/checker-edge :1.1.11	74426c1fe00f	openssl@3.3.6-r0	3.3.7-r0	1
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
ghcr.io/immich-app/immich-machine-learning :v2.3.1	379e31b8c751	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/immich-app/immich-server :v2.3.1	f8d06a32b1b2	openssl@3.5.1-1+deb13u1	3.5.5-1~deb13u2	1
ghcr.io/imunhatep/kube-node-ready :0.5.0	7439f6f9f85c	openssl@3.3.6-r0	3.3.7-r0	1
ghcr.io/innago-property-management/innago-vault-k8s-role-operator :2.0.0	ed1c3fd04057	openssl@3.5.4-r0	3.5.6-r0	1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw :latest	0e05a7b49c33	openssl@3.0.2-0ubuntu1.26	no fix listed	1
ghcr.io/interplex-ai/interplex :v1.1.0	41b0dd0d55b2	openssl@3.5.0-r0	3.5.6-r0	1
ghcr.io/it-at-m/appswitcher-server :1.3.0	10006bc0f309	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23	1
ghcr.io/it-at-m/dave-document-storage/dave-document-storage :10.0.0	9c7fc07330c9	openssl@1:3.5.1-4.el9_7	1:3.5.5-3.el9_8	1
ghcr.io/it-at-m/kf-app-eai :1.0.6	5de339b3d537	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8	1
ghcr.io/it-at-m/wjh-rechner :1.0.0	bc70cdb5a01a	openssl@1:3.0.7-25.el9_3	1:3.5.5-3.el9_8	1
ghcr.io/jaydee94/kubeseal-webgui/api :4.5.3	3cceb9462ae1	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/jaydee94/kubeseal-webgui/ui :4.5.3	4447636e8102	openssl@3.3.3-r0	3.3.7-r0	1
ghcr.io/jeboehm/fetchmailmgr :0.3.21	26c4691b28a4	openssl@3.5.1-r0	3.5.6-r0	1
ghcr.io/jeffvli/feishin :1.11.0	1eed97d6272d	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/jenkins-x/nexus :0.1.37	8caf5289fe73	openssl@1:1.1.1c-15.el8	1:1.1.1k-17.el8_6	1
ghcr.io/jeremylong/open-vulnerability-data-mirror :v9.0.4	9a69aa14dc3e	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/jeremylvln/shulker-operator :0.13.0	27c55706c126	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/jespernohr/dayz-dedicated-server :0.1.1	ec01d3ac7887	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9	1
ghcr.io/jfwenisch/discord-experiencebot :latest	b52ff07f9f0c	openssl@1.1.1-1ubuntu2.1~18.04.23	1.1.1-1ubuntu2.1~18.04.23+esm8	1
ghcr.io/jfwenisch/steamcmd-manager :v0.4.5	dab685e668d9	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9	1
ghcr.io/jfwenisch/webtools :v0.1.4	4569cae83c70	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9	1
ghcr.io/jlclx/runtimeclass-controller :latest	b3a87f92a963	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/jmberesford/retrom-service :retrom-v0.7.14	4d763d58f11d	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/jossware/node-provider-labeler :v0.8.0	f80e85291439	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1