CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,574; of 17,821 indexed, latest versions
Container images: 2,947; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,574 of 17,821 indexed charts deploy, on 2,947 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,697
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	919
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8+32 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5	331
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 more	no fix listed	22
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	1.0.2n-1ubuntu5.13+esm4	21

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,574 by stars

Chart

Latest

Affected images

Radar Score

clowder2ncsa

1.9.7

6 of 12 See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
clowder/clowder2-backend :2.0.0-beta.4	11f3d844e4c0	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2
clowder/clowder2-frontend :2.0.0-beta.4	fe97882672ca	openssl@3.5.4-r0	3.5.6-r0
clowder/clowder2-heartbeat :2.0.0-beta.4	14155326c7b9	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2
clowder/clowder2-messages :2.0.0-beta.4	bf146f1ca24f	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

37,558

cloud9nicholaswilde

1.0.0

1 of 1 See more

cloud9 nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
linuxserver/cloud9 :version-1.29.2	45c5fe102ff3	openssl@1.1.1-1ubuntu2.1~18.04.19	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

11,745

papermergenicholaswilde

1.0.2

1 of 1 See more

papermerge nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/papermerge :version-v2.0.1	98ba2dd3f0bd	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

20,273

writefreelynicholaswilde

1.0.0

1 of 1 See more

writefreely nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/nicholaswilde/writefreely :version-0.13.1	c3c8481b7e56	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

8,107

node-provider-labelernode-provider-labeler

0.20.0

1 of 1 See more

node-provider-labeler node-provider-labeler 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/jossware/node-provider-labeler :v0.8.0	f80e85291439	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

1,122

helm-composenousefreak

0.1.3

1 of 2 See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/mariadb :10.8.2-focal	490f01279be1	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

13,651

octopuso7studios-octopus-helm-charts

1.2.3

4 of 5 See more

octopus o7studios-octopus-helm-charts 1.2.3

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/nats :2.11.9-alpine	777787bbb4c7	openssl@3.5.1-r0	3.5.6-r0
natsio/nats-box :0.18.0	abdc9f9f0120	openssl@3.5.0-r0	3.5.6-r0
natsio/nats-server-config-reloader :0.19.1	81edf32a3680	openssl@3.5.1-r0	3.5.6-r0
percona/percona-server-mongodb-operator :1.20.1	d09453ce7886	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8

Open the chart page →

6,142

oadaoada

5.0.6

10 of 11 See more

oada oada 5.0.6

10 of the 11 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
oada/auth :4.0.0	c0d077e79ef4	openssl@3.5.1-r0	3.5.6-r0
oada/http-handler :4.0.0	d87efe8ba4b0	openssl@3.5.1-r0	3.5.6-r0
oada/rev-graph-update :4.0.0	ebc8343f05ff	openssl@3.5.1-r0	3.5.6-r0
oada/shares :4.0.0	c6ffb4e8ed63	openssl@3.5.1-r0	3.5.6-r0
oada/startup :4.0.0	fc09495e2f3c	openssl@3.5.1-r0	3.5.6-r0
oada/sync-handler :4.0.0	b7a2cfc137cf	openssl@3.5.1-r0	3.5.6-r0
oada/users :4.0.0	b6c562fa5b1b	openssl@3.5.1-r0	3.5.6-r0
oada/webhooks :4.0.0	6590c60de347	openssl@3.5.1-r0	3.5.6-r0
oada/well-known :4.0.0	7943fde43b19	openssl@3.5.1-r0	3.5.6-r0
oada/write-handler :4.0.0	8464c7f48aae	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

13,380

dashdotoben01

1.5.0

1 of 1 See more

dashdot oben01 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
mauricenino/dashdot :5.9.2	236997816917	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,389

nginx-s3olopost

0.2.1

1 of 1 See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss	3db8145349a3	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

5,052

opencatalogiopencatalogi

1.0.6

2 of 8 See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	openssl@3.0.9-1	3.0.19-1~deb12u2
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

14,865

dhcp-serveropencord

1.0.2

1 of 1 See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
networkboot/dhcpd :latest	e99bbfbd6fb2	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

4,376

opencveopencve

1.2.0

1 of 3 See more

opencve opencve 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
cleveritcz/opencve :1.5.0	c75c1636e0b7	openssl@1:3.0.7-25.el9_3	1:3.5.5-3.el9_8

Open the chart page →

2,133

openrouter-botopenrouter-bot

0.2.0

1 of 1 See more

openrouter-bot openrouter-bot 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
lifailon/openrouter-bot :latest	ea37e4b6b952	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

1,061

librechatopenshift

1.9.0

1 of 3 See more

librechat openshift 1.9.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,824

opentelemetry-demoopentelemetry-helm

0.42.0

4 of 34 See more

opentelemetry-demo opentelemetry-helm 0.42.0

4 of the 34 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/open-telemetry/demo :3.1.0-payment	10d6bd20d8a0	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2
ghcr.io/open-telemetry/demo :3.1.0-image-provider	46d1a7e95109	openssl@3.5.4-r0	3.5.6-r0
ghcr.io/open-telemetry/demo :3.1.0-ad	dfd7a4697116	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9
ghcr.io/open-telemetry/demo :3.1.0-frontend-proxy	fd4da88bfeaa	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

20,109

openvaultopenvault

0.8.1

2 of 2 See more

openvault openvault 0.8.1

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/wgbh-mla/ov-frontend :v1.1.0	bfc3118f6565	openssl@3.5.0-r0	3.5.6-r0
ghcr.io/wgbh-mla/ov-wag :v1.1.0	6df27f944fe8	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

6,939

opikopik

2.2.71

5 of 13 See more

opik opik 2.2.71

5 of the 13 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.0	862d86046bbc	openssl@3.5.5-r0	3.5.6-r0
cloudpirates/image-minio :RELEASE.2025-10-15T17-29-55Z-hardened	8dc02a7e5093	openssl@3.3.6-r0	3.3.7-r0
curlimages/curl :8.12.1	94e9e444bcba	openssl@3.3.3-r0	3.3.7-r0
library/zookeeper :3.9.4	dfa9ba46d14b	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.23
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.23

Open the chart page →

14,914

opsops

1.2.0

2 of 2 See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
shaowenchen/ops-controller-manager :latest	35575d4f2bfe	openssl@3.0.2-0ubuntu1.29	no fix listed
shaowenchen/ops-server :latest	6bac5cebd125	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23

Open the chart page →

94,475

orbitalregorbitalreg

0.3.0

1 of 4 See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
orbitalreg/orbitalreg-frontend :0.1.0	4fd449582a3c	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

2,589

palworldpalworld-server-chart

2.7.1

1 of 1 See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
thijsvanloef/palworld-server-docker :v2.7.1	401d3eb5c053	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

3,702

radarrpanzer1119

0.2.2

1 of 1 See more

radarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/radarr :6.0.4.10291-ls289	6c0948b42c14	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

952

sonarrpanzer1119

0.2.2

1 of 1 See more

sonarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/sonarr :4.0.16.2944-ls300	8b9f2138ec50	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

949

paperless-ngxpaperless

0.4.0

1 of 3 See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresqldigest-pinned	926356130b77	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

8,593

homerpascaliske

3.1.1

1 of 1 See more

homer pascaliske 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/bastienwirtz/homer :v25.11.1	5c3a0fb561e0	openssl@3.3.5-r0	3.3.7-r0

Open the chart page →

438

uptime-kumapascaliske

3.0.0

1 of 1 See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.0.2-slim-rootless	9865163f92c1	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

6,904

patch-operatorpatch-operator

0.1.11

2 of 2 See more

patch-operator patch-operator 0.1.11

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/redhat-cop/kube-rbac-proxy :v0.11.0	c68135620167	openssl@1:1.1.1k-4.el8	1:1.1.1k-17.el8_6
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	openssl@1:3.0.7-27.el9	1:3.5.5-3.el9_8

Open the chart page →

7,861

patchworkpatchwork

0.8.6

1 of 2 See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/patchwork :main	c01e018bced4	openssl@3.5.0-r0	3.5.6-r0

Open the chart page →

2,090

pbuf-registrypbuf-registry

0.4.1

2 of 2 See more

pbuf-registry pbuf-registry 0.4.1

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/postgres :18.1-alpine3.21	44d837eb4c2e	openssl@3.3.5-r0	3.3.7-r0
ghcr.io/pbufio/registry :v0.4.1	77a36c035b4b	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

2,096

fahclientpcktdmp

2.6.0

1 of 2 See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
foldingathome/fah-gpu :latest	5ef7742d1eb4	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

4,606

phpipamphpipam-helm

1.0.12

2 of 3 See more

phpipam phpipam-helm 1.0.12

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
phpipam/phpipam-cron :v1.7.3	54468713454e	openssl@3.3.2-r1	3.3.7-r0
phpipam/phpipam-www :v1.7.3	ace0efd24830	openssl@3.3.2-r1	3.3.7-r0

Open the chart page →

3,781

spring-boot-api-apppiomin

0.3.11

1 of 1 See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

7,633

portraitportrait

0.2.13

2 of 8 See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/elasticsearch :7.17.0	332c6d416808	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm3
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

32,232

readarrpree-helm-charts

1.17.1

1 of 1 See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/readarr :0.4.18.2805	8f7551205fbd	openssl@3.5.0-r0	3.5.6-r0

Open the chart page →

1,101

privacyideaprivacyidea

1.0.6

2 of 2 See more

privacyidea privacyidea 1.0.6

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
gpappsoft/privacyidea-docker :3.12.2	af7841adad26	openssl@3.6.0-r4	3.6.2-r0
library/mariadb :11.7.2	fcc7fcd7114a	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

5,565

prometheus-sql-exporterprometheus-community

0.5.0

1 of 1 See more

prometheus-sql-exporter prometheus-community 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/justwatchcom/sql_exporter :v0.8	c4b1d3d0f052	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,353

prowlerprowler-app

0.0.9

1 of 5 See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/neo4j :2026.02.2	5ab4ab0358cf	openssl@3.5.5-1~deb13u1	3.5.5-1~deb13u2

Open the chart page →

8,340

psa-restricted-patcherpsa-restricted-patcher

0.10.1

1 of 1 See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/psa-restricted-patcher :main	a53ef16b024a	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

1,407

pzserverpzserver

0.1.17

1 of 2 See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
lis314/project-zomboid-docker :latest	aa2089c37920	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

3,274

minecraft-serverqumine

0.1.1500

1 of 1 See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
qumine/minecraft-server :v0.1.15	c0b650d51132	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23

Open the chart page →

6,930

rabbitmqrabbitmq-magefleet

1.2.0

1 of 1 See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/rabbitmq :4.1.0-management	935b3f84c1e4	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

2,855

rclonerclone

2.2.0

1 of 1 See more

rclone rclone 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
rclone/rclone :1.68	74c51b8817e5	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

1,680

redis-enterprise-operatorredis-enterprise-operator

7.13.4-12

1 of 1 See more

redis-enterprise-operator redis-enterprise-operator 7.13.4-12

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
redislabs/operator :7.4.2-2	ecb101af0506	openssl@1:3.0.7-25.el9_3	1:3.5.5-3.el9_8

Open the chart page →

2,637

napcatredish101

0.1.3

1 of 1 See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
mlikiowa/napcat-docker :latest	2cc70b45244a	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23

Open the chart page →

67,944

redis-sentinel-gatewayredis-sentinel-gateway

1.0.2

1 of 1 See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
promzeus/redis-sentinel-gateway :v1	82f6d56e280b	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

2,629

kminionredpanda-data

0.15.2

1 of 1 See more

kminion redpanda-data 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
redpandadata/kminion :v2.3.0	c05fa976428e	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

924

reportportalreportportal-io

26.8.12

1 of 15 See more

reportportal reportportal-io 26.8.12

1 of the 15 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2025.7.23-debian-12-r0	8935e75fa5d1	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

12,077

reservation-appreservation-app

1.0.9

1 of 4 See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
zbalogh/reservation-angular-ui :1.0.9	5eb19e460b3c	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

6,650

resurfaceresurfaceio

3.9.0

1 of 3 See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
resurfaceio/resurface :3.7.84	d5cda2f64109	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23

Open the chart page →

7,249

atuinrm3l

0.11.0

2 of 3 See more

atuin rm3l 0.11.0

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.2.0-debian-12-r8	90fda44bfa42	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
ghcr.io/atuinsh/atuin :18.12.0	e953fa9e36ef	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

6,477

Container images carrying it

2,947 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/ortelius/ms-compitem-crud :main-v10.0.1566-gf3f815	97b7f49eec76	openssl@3.6.0-r6	3.6.2-r0	1
quay.io/ortelius/ms-dep-pkg-r :main-v10.0.1705-g21b3dc	8a4150e94a45	openssl@3.6.0-r6	3.6.2-r0	1
quay.io/ortelius/ms-textfile-crud :main-v10.0.1635-g5076aa	f5c4c8adfc82	openssl@3.6.0-r6	3.6.2-r0	1
quay.io/ortelius/ms-validate-user :main-v10.0.1694-g98ed94	b5054bd4e97a	openssl@3.6.0-r6	3.6.2-r0	1
quay.io/projectquay/clair :4.9.0	23329c3368e4	openssl@1:1.1.1k-14.el8_6	1:1.1.1k-17.el8_6	1
quay.io/projectquay/clair :4.7.2	8d38ffa8fad7	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	1
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	openssl@3.3.3-r0	3.3.7-r0	1
quay.io/reactiveops/rbac-manager :v1.9.5	87e3f461446f	openssl@3.5.4-r0	3.5.6-r0	1
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	openssl@1:3.0.7-27.el9	1:3.5.5-3.el9_8	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	openssl@1:3.0.7-17.el9_2	1:3.5.5-3.el9_8	1
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-17.el8_6	1
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	openssl@1:3.0.7-27.el9	1:3.5.5-3.el9_8	1
quay.io/reiml/smtp-gotify :latest	80ffa9d2044a	openssl@3.3.6-r0	3.3.7-r0	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	openssl@1:1.1.1k-4.el8	1:1.1.1k-17.el8_6	1
quay.io/seamware/consent-facade :0.0.14	be844c750c7e	openssl@1:1.1.1k-14.el8_6	1:1.1.1k-17.el8_6	1
quay.io/shivering-isles/dovecot :2.3.21	4599ada9aa06	openssl@3.3.1-r3	3.3.7-r0	1
quay.io/sshaaf/keycloak-mcp-server :0.4.0	b7e9cba72f8a	openssl@1:3.2.2-6.el9_5	1:3.5.5-3.el9_8	1
quay.io/strimzi/operator :0.45.1	58c727cd2e68	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8	1
quay.io/strimzi/operator :0.32.0	c5e0e5dca750	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-17.el8_6	1
quay.io/strimzi/operator :0.36.1	e9e03b31007c	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	1
quay.io/underndog/samba :1.2.0-not-recycle	cca801de9fa5	openssl@3.3.3-r0	3.3.7-r0	1
quay.io/wi_stefan/dss-validation-service :0.0.1	8e928db29ee1	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	1
quay.io/wraft/wraft-frontend :latest	f1bbbd5e9bb9	openssl@3.5.1-r0	3.5.6-r0	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	openssl@3.0.9-1	3.0.19-1~deb12u2	1
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.1~18.04.23+esm8	1
registry.gitlab.com/dyff/dyff-frontend :0.20.2	481be0beaafe	openssl@3.3.3-r0	3.3.7-r0	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	openssl@3.5.5-1~deb13u1	3.5.5-1~deb13u2	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-17.el8_6	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq :3.12.14	5a9334f371f3	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	openssl@1:1.1.1k-5.el8_5	1:1.1.1k-17.el8_6	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	openssl@1.1.1f-1ubuntu2.2	1.1.1f-1ubuntu2.24+esm3	1
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-17.el8_6	1
registry.gitlab.com/shortlink-org/shortlink/bff :latest	f2194e526915	openssl@3.5.5-r0	3.5.6-r0	1
registry.gitlab.com/shortlink-org/shortlink/link :latest	86d87291ffd4	openssl@3.5.5-r0	3.5.6-r0	1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller :2.1.2	301847adfe16	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8	1
registry.gitlab.com/xrow-public/helm-iframely/iframely :2.3.5	fcf07d5ff7e2	openssl@1:3.5.1-7.el9_7	1:3.5.5-3.el9_8	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	openssl@3.0.11-1~deb12u1	3.0.19-1~deb12u2	1
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	openssl@3.5.1-1	3.5.5-1~deb13u2	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	openssl@3.0.11-1~deb12u1	3.0.19-1~deb12u2	1
registry.k8s.io/ingress-nginx/controller :v1.13.2	1f7eaeb01933	openssl@3.5.2-r0	3.5.6-r0	1
registry.k8s.io/ingress-nginx/controller :v1.13.1	37e489b22ac7	openssl@3.5.1-r0	3.5.6-r0	1
registry.k8s.io/ingress-nginx/controller :v1.11.3	d56f135b6462	openssl@3.3.2-r0	3.3.7-r0	1
registry.k8s.io/ingress-nginx/controller :v1.12.0	e6b8de175acd	openssl@3.3.2-r4	3.3.7-r0	1
registry.k8s.io/provider-os/manila-csi-plugin :v1.36.0	190976e2e2fe	openssl@3.5.4-r0	3.5.6-r0	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1