CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,513; of 17,792 indexed, latest versions
Container images: 2,889; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,513 of 17,792 indexed charts deploy, on 2,889 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,658
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	902
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5	329
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm4	15

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,513 by stars

Chart

Latest

Affected images

Radar Score

passboltpassbolt

2.1.1

3 of 6 See more

passbolt passbolt 2.1.1

3 of the 6 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :12.0.2-debian-12-r0	888cdaae3cb9	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/redis-sentinel :8.2.1-debian-12-r0	0ca3ea1d2f82	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

13,588

py-kube-downscalerpy-kube-downscaler

0.3.12

1 of 1 See more

py-kube-downscaler py-kube-downscaler 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/caas-team/py-kube-downscaler :26.4.0	af05a098b0d2	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

732

redis-enterprise-operatorredis-enterprise-operator-official

8.0.18-11

1 of 1 See more

redis-enterprise-operator redis-enterprise-operator-official 8.0.18-11

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
redislabs/operator :8.0.18-11	9078e713bb6a	openssl@1:3.5.1-7.el9_7	1:3.5.5-3.el9_8

Open the chart page →

921

redisinsight-secureredisinsight-secure

1.0.2

1 of 1 See more

redisinsight-secure redisinsight-secure 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
redis/redisinsight :2.68	019fcf774631	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,723

rekorsigstore

1.8.6

2 of 9 See more

rekor sigstore 1.8.6

2 of the 9 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
curlimages/curldigest-pinned	935d9100e9ba	openssl@3.5.4-r0	3.5.6-r0
library/redisdigest-pinned	148bb5411c18	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

5,373

mssqlserver-2022simcube

1.2.3

1 of 1 See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2022-latest	ba4c8329f48f	openssl@3.0.2-0ubuntu1.25	no fix listed

Open the chart page →

2,970

thehivestrangebee-helm

1.0.7

4 of 7 See more

thehive strangebee-helm 1.0.7

4 of the 7 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/os-shell :12-debian-12-r51	77e65e9d633e	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
curlimages/curl :8.17.0	935d9100e9ba	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

16,242

uffizzi-controlleruffizzi-controller

2.4.6

1 of 11 See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

14,320

zigbee2mqttzigbee2mqtt

2.14.1

1 of 2 See more

zigbee2mqtt zigbee2mqtt 2.14.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
mikefarah/yq :4.45.1	2c100efaca06	openssl@3.3.2-r4	3.3.7-r0

Open the chart page →

1,032

cloudflaredartur9010

1.0.9

2 of 3 See more

cloudflared artur9010 1.0.9

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

3,008

baserowbaserow-chart

1.0.56

3 of 6 See more

baserow baserow-chart 1.0.56

3 of the 6 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/postgresql :16.4.0-debian-12-r14	94bc968141e7	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/redis :7.2.5-debian-12-r0	5261cae9e407	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

17,468

fadicetic

0.3.1

2 of 25 See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm3
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	openssl@1.1.1f-1ubuntu2	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

53,171

headwind-mdmchristianhuth

5.10.2

2 of 2 See more

headwind-mdm christianhuth 5.10.2

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
headwindmdm/hmdm :0.1.9	3550b4840840	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

5,956

routercosmo-router

0.18.0

1 of 1 See more

router cosmo-router 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/router :0.243.0	5afcab98d9d7	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

1,694

dolibarrcowboysysop

9.0.3

2 of 3 See more

dolibarr cowboysysop 9.0.3

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
wait4x/wait4x :3.3.1	4dcd86307de1	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

9,258

daskhubdask

2024.1.1

1 of 9 See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
pangeo/base-notebook :2024.01.15	5fbe688a4f80	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23

Open the chart page →

14,180

seafiledatamate

0.6.0

4 of 6 See more

seafile datamate 0.6.0

4 of the 6 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb-galera :11.4.3-debian-12-r0	cb8beb6dbb58	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/memcached :1.6.29-debian-12-r4	ff0e7239c17c	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2
datamate/seafile-professional :11.0.20	2dd66b722464	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23

Open the chart page →

27,465

dialdial

7.2.0

1 of 4 See more

dial dial 7.2.0

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
valkey/valkey :9.0.2	930b41430fb7	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

2,196

homerdjjudas21

8.2.4

1 of 1 See more

homer djjudas21 8.2.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
b4bz/homer :v24.12.1	4b44a4a9e329	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

399

plexgabe565

0.5.1

1 of 1 See more

plex gabe565 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/plex :version-1.41.4.9463-630c9f557	e6d2775e77ec	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

2,591

geonode-k8sgeonode-k8s

2.0.0

4 of 10 See more

geonode-k8s geonode-k8s 2.0.0

4 of the 10 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
geonode/geoserver :2.28.4-latest	81b1d431b7e9	openssl@3.0.2-0ubuntu1.23	no fix listed
geopython/pycsw :3.0.0-beta2	84662ea6b78b	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2
library/memcached :1.6.40	cc523a19da58	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2
library/redis :8.4.0	3906b477e4b6	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

14,147

glpiglpi-conteiner

0.1.0

1 of 3 See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
vdiogov/glpi-conteiner :latest	6945f84f0058	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

12,399

openctihelm-opencti

3.0.10

1 of 8 See more

opencti helm-opencti 3.0.10

1 of the 8 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/rabbitmq :4.1.2-debian-12-r1	fac502149c40	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

3,413

hertzbeathertzbeat

1.8.1

2 of 4 See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apache/hertzbeat :1.8.0	75d48a62748f	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9
apache/hertzbeat-collector :1.8.0	a2bab1be574c	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9

Open the chart page →

14,314

infrahubinfrahub

4.33.2

3 of 5 See more

infrahub infrahub 4.33.2

3 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/rabbitmq :4.1.3-debian-12-r1	9e635efba431	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

10,561

kamu-api-serverkamu

0.89.0

1 of 1 See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/kamu-data/kamu-api-server :0.89.0	4ed7a896dd2b	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

6,370

keycloak-operatorkeycloak-operator

0.0.4

1 of 1 See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-17.el8_6

Open the chart page →

4,663

percona-xtradb-clusterkfirfer

1.5.10

1 of 3 See more

percona-xtradb-cluster kfirfer 1.5.10

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
percona/percona-xtradb-cluster :8.0.32-24.2	1f978ab8912e	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6

Open the chart page →

4,957

kubeflowkubeflow

1.6.2

4 of 45 See more

kubeflow kubeflow 1.6.2

4 of the 45 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.9.6	87a9db561d2e	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm8
istio/proxyv2 :1.14.1	df69c1a7af7c	openssl@1.1.1f-1ubuntu2.13	1.1.1f-1ubuntu2.24+esm3
library/python :3.7	eedf63967cdb	openssl@3.0.9-1	3.0.19-1~deb12u2
gcr.io/ml-pipeline/metadata-envoy :2.0.0-alpha.5	e8bc6cf08613	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

97,283

kubernetes-loggingkubernetes-logging

4.8.0

1 of 6 See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin :8.9.0	43b0cdaf26ed	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

10,583

sbomscannerkubewarden

0.12.1

1 of 5 See more

sbomscanner kubewarden 0.12.1

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,012

venti-stackkuoss

0.5.0

2 of 9 See more

venti-stack kuoss 0.5.0

2 of the 9 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/kuoss/lethe :v0.3.3	ebdf55fd5705	openssl@3.5.4-r0	3.5.6-r0
ghcr.io/kuoss/venti :v0.3.3	8ee3e70d77f1	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

3,830

librechatlibrechat

1.8.10

1 of 3 See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/danny-avila/librechat :v0.7.7	8c68abbe1cff	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

2,657

librechatlibrechat-openshift

1.9.0

1 of 3 See more

librechat librechat-openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,875

radarrloeken-at-home

5.27.0-nightly

1 of 1 See more

radarr loeken-at-home 5.27.0-nightly

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
loeken/radarr :5.27.0-nightly	a24409d3846d	openssl@3.3.4-r0	3.3.7-r0

Open the chart page →

586

headplanenbcloud

0.1.2

3 of 4 See more

headplane nbcloud 0.1.2

3 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/kubectl :latest	cd354d5b2556	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
headscale/headscale :0.25.1	a7a8ae9616bb	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2
ghcr.io/tale/headplane :0.5.5	0dbc52cffc19	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

8,024

node-local-dnsnode-local-dns

2.4.0

1 of 1 See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	openssl@3.0.11-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

2,626

open5gsopen5gs

2.3.4

1 of 5 See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
gradiant/open5gs-dbctl :0.10.3	332031245fce	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

9,326

ubuntuopen-charts

1.2.1

1 of 1 See more

ubuntu open-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/ubuntu :22.04	2edbbc5dc405	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

1,585

mattermostphntom

3.24.0

1 of 2 See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
phntom/mattermost-team-edition :9.3.0	51cf9da4aa2e	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23

Open the chart page →

8,788

prometheus-smartctl-exporterprometheus-community

0.17.1

1 of 1 See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,065

unifi-controllerqonstrukt

2.6.1

1 of 1 See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
linuxserver/unifi-controller :8.0.24	0ae315a3a456	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

10,609

popeyeself-hosters-by-night

0.6.1

1 of 1 See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
derailed/popeye :v0.22.1	8e68e22c7663	openssl@3.3.2-r4	3.3.7-r0

Open the chart page →

1,197

fulciosigstore

2.11.1

1 of 6 See more

fulcio sigstore 2.11.1

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
curlimages/curl :8.17.0	935d9100e9ba	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

3,518

topolvmtopolvm

17.2.0

1 of 1 See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

2,393

uffizzi-appuffizzi-app

1.3.0

1 of 14 See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

19,431

unboundunbound-helmchart

0.2.2

1 of 1 See more

unbound unbound-helmchart 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/pixelfederation/unbound :1.24.2_0	fce820a03964	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,490

reposilitevolker-raschek

1.0.0

1 of 1 See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
dzikoysk/reposilite :3.5.26	4128c2d7a6ba	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

3,011

dexwiremind

2.15.7

1 of 2 See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	openssl@1.0.2g-1ubuntu4.8	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

13,587

grafana-pdf-exporterwiremind

2.1.1

1 of 1 See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

9,764

Container images carrying it

2,889 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/openfaasltd/sqs-connector :0.3.4	d44ed3b3128c	openssl@3.3.2-r4	3.3.7-r0	1
ghcr.io/openlit/openlit-operator :0.0.2	457bb5ada68b	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/openrelik/openrelik-ui :latest	7f91594d5eb3	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/open-telemetry/demo :1.12.0-productcatalogservice	008b9b662289	openssl@3.3.2-r0	3.3.7-r0	1
ghcr.io/open-telemetry/demo :3.0.0-frontend-proxy	1c53bfb59697	openssl@3.0.2-0ubuntu1.25	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-checkoutservice	380eccdc29e9	openssl@3.3.2-r0	3.3.7-r0	1
ghcr.io/open-telemetry/demo :1.12.0-imageprovider	4e322858fe56	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-accountingservice	6d051840bb29	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-quoteservice	87eb325d306f	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-cartservice	89730afa0b5d	openssl@3.3.2-r0	3.3.7-r0	1
ghcr.io/open-telemetry/demo :1.12.0-frontend	8b348f00ca4c	openssl@3.3.2-r0	3.3.7-r0	1
ghcr.io/open-telemetry/demo :3.0.0-image-provider	93e1585e97ac	openssl@3.5.4-r0	3.5.6-r0	1
ghcr.io/open-telemetry/demo :1.12.0-frontendproxy	9fdec1be03e4	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23	1
ghcr.io/open-telemetry/demo :1.12.0-emailservice	a1f5cebb5240	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-adservice	a59e5eead495	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9	1
ghcr.io/open-telemetry/demo :1.12.0-paymentservice	b0f13eef3abf	openssl@3.3.0-r2	3.3.7-r0	1
ghcr.io/open-telemetry/demo :1.12.0-recommendationservice	b294a4278407	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/open-telemetry/demo :3.0.0-payment	d498c7434d22	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/open-telemetry/demo :3.0.0-ad	e6c593fe75eb	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
ghcr.io/open-telemetry/demo :1.12.0-flagdui	f6bdafaa9075	openssl@3.3.2-r0	3.3.7-r0	1
ghcr.io/openunison/openunison-k8s-react :1.0.2	afb3e9282952	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3	1
ghcr.io/pabloromeo/clusterplex_orchestrator :1.4.16	0fe80de2d22c	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	openssl@3.5.5-1~deb13u1	3.5.5-1~deb13u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	openssl@3.5.4-1~deb13u1	3.5.5-1~deb13u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	openssl@3.5.4-1~deb13u1	3.5.5-1~deb13u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
ghcr.io/paradigmxyz/reth :v1.3.12	1e5290e8b743	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23	1
ghcr.io/parca-dev/parca :v0.24.2	3776500fde82	openssl@3.5.1-r0	3.5.6-r0	1
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	openssl@3.5.4-1~deb13u1	3.5.5-1~deb13u2	1
ghcr.io/parmincloud/haproxy-redis-sentinel :1.0.0	40a00a6456ae	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/pbufio/registry :v0.4.1	77a36c035b4b	openssl@3.5.4-r0	3.5.6-r0	1
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	openssl@1.1.1-1ubuntu2.1~18.04.20	1.1.1-1ubuntu2.1~18.04.23+esm8	1
ghcr.io/pixelfederation/unbound :1.24.2_0	fce820a03964	openssl@3.5.5-r0	3.5.6-r0	1
ghcr.io/plausible/community-edition :v3.0.1	14c1afde21d6	openssl@3.3.3-r0	3.3.7-r0	1
ghcr.io/plausible/community-edition :v2.1.5	1f9d3fb861e1	openssl@3.3.2-r1	3.3.7-r0	1
ghcr.io/plausible/community-edition :v2.1.4	4c2553516d09	openssl@3.3.2-r0	3.3.7-r0	1
ghcr.io/postgresml/pgcat :v1.2.0	627761f6dcbc	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23	1
ghcr.io/projectnessie/nessie :0.92.1	9efe3c74d55f	openssl@1:3.0.7-27.el9	1:3.5.5-3.el9_8	1
ghcr.io/pschichtel/keycloak-webhook-router :main	285e226fe7f6	openssl@3.3.2-r1	3.3.7-r0	1
ghcr.io/pyrra-dev/pyrra :v0.8.1	0e02ef538ef0	openssl@3.3.2-r0	3.3.7-r0	1
ghcr.io/qovery/iam-eks-user-mapper :main	c41e3efc6097	openssl@3.5.1-1+deb13u1	3.5.5-1~deb13u2	1
ghcr.io/radar-base/radar-app-config/radar-app-config :0.6.2	4431db7b486b	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9	1
ghcr.io/radar-base/radar-app-config/radar-app-config-frontend :0.6.2	c5f1e2ca5781	openssl@3.3.2-r1	3.3.7-r0	1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend :0.2.4	d1e55350923c	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9	1
ghcr.io/radar-base/radar-gateway/radar-gateway :0.9.4	219d894aa7a6	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9	1