CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,574; of 17,821 indexed, latest versions
Container images: 2,947; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,574 of 17,821 indexed charts deploy, on 2,947 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,697
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	919
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8+32 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5	331
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 more	no fix listed	22
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	1.0.2n-1ubuntu5.13+esm4	21

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,574 by stars

Chart

Latest

Affected images

Radar Score

difydify-helm

0.38.0

1 of 11 See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
langgenius/dify-web :1.16.1	87dd47e4e28f	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

63,843

eclipse-cheeclipse-che

7.122.0

1 of 1 See more

eclipse-che eclipse-che 7.122.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/eclipse/che-operator :7.122.0	d752a1c2a7b7	openssl@1:1.1.1k-14.el8_6	1:1.1.1k-17.el8_6

Open the chart page →

932

pyroscopegrafana

2.3.1

1 of 3 See more

pyroscope grafana 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.12.2	f94b1c82957a	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.9

Open the chart page →

3,275

plantumlstevehipwell

3.49.0

1 of 1 See more

plantuml stevehipwell 3.49.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
plantuml/plantuml-server :jetty-v1.2026.8	5f6f99ec2fc1	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9

Open the chart page →

1,990

unleashunleash

5.6.8

1 of 2 See more

unleash unleash 5.6.8

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
unleashorg/unleash-server :7.5.0	9adb37e399ba	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,752

hydraory

0.64.0

1 of 2 See more

1,318

istiocloudposse

1.1.0

2 of 8 See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
gcr.io/istio-release/pilot :release-1.0-latest-daily	5ea7b7f3632a	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15
gcr.io/istio-release/proxyv2 :release-1.0-latest-daily	8f9ff98fdbef	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm15

Open the chart page →

137,814

headscalegabe565

0.16.0

1 of 2 See more

headscale gabe565 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/juanfont/headscale :v0.25.0	97febecbe6cb	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

1,789

oncallgrafana

1.16.5

1 of 12 See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
grafana/oncall :v1.16.5	499851658393	openssl@3.3.4-r0	3.3.7-r0

Open the chart page →

16,471

openbaoopenbao

0.29.5

1 of 2 See more

openbao openbao 0.29.5

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hashicorp/vault-k8s :1.7.2	ae3d307658b7	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

1,521

openprojectopenproject-helm-charts

13.12.0

2 of 5 See more

openproject openproject-helm-charts 13.12.0

2 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/memcached :1.6.24-debian-12-r0	1d80b6a96f00	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
openproject/hocuspocus :release-338001b2	88dc1359dfb5	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

20,022

kratosory

0.64.0

1 of 1 See more

kratos ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
oryd/kratos :v26.2.0	2a13bb8d362c	openssl@3.3.6-r0	3.3.7-r0

Open the chart page →

883

wazuhwazuh-helm-morgoved

2.0.7

1 of 5 See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
kinseii/wazuh-agent :4.14.1	7160eb143728	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

11,521

zabbixcetic

3.1.3

4 of 5 See more

zabbix cetic 3.1.3

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
zabbix/zabbix-agent2 :ubuntu-6.0.8	e5b594057c9c	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-server-pgsql :ubuntu-6.0.8	d59ffa07f615	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-web-nginx-pgsql :ubuntu-6.0.8	99e9a090b516	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23
zabbix/zabbix-web-service :ubuntu-6.0.8	ee4baa872280	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23

Open the chart page →

33,698

kube-downscalerdeliveryhero

0.7.6

1 of 1 See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	openssl@3.0.9-1	3.0.19-1~deb12u2

Open the chart page →

4,360

synapsehalkeye

0.40.0

1 of 2 See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/synapse :v1.111.0	22ae556e0de4	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

6,551

stacks-blockchain-apihirosystems

6.5.1

1 of 5 See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
hirosystems/stacks-blockchain-api :8.13.2	9c98b23c1515	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2

Open the chart page →

7,732

imgproxyimgproxy

1.1.0

1 of 1 See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/imgproxy/imgproxy :v3.30.0	74c1bee92e04	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

2,407

cloudflaredkubitodev

1.7.9

1 of 1 See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
cloudflare/cloudflared :2026.3.0	6b599ca3e974	openssl@3.5.4-1~deb13u2	3.5.5-1~deb13u2

Open the chart page →

1,399

redashredash

4.2.0

1 of 3 See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
redash/redash :25.8.0	00d813437db5	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

6,091

pypiservercommunity-charts

0.1.9

1 of 1 See more

pypiserver community-charts 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
pypiserver/pypiserver :v2.4.1	e935e19433ef	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

585

daskdask

2024.1.1

2 of 2 See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask :2024.1.0	080150de7d86	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
ghcr.io/dask/dask-notebook :2024.1.0	f53bde3acd4f	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23

Open the chart page →

12,948

dgraphdgraph

24.1.4

1 of 1 See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
dgraph/dgraph :v24.1.4	b57fa31f9b7f	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

3,065

netbirdjaconi

0.15.1

3 of 4 See more

netbird jaconi 0.15.1

3 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
netbirdio/management :0.45.1	0c9994b393ea	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9
netbirdio/relay :0.45.1	872e3add0e1e	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2
netbirdio/signal :0.45.1	46ce5a45538f	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

7,984

litellm-helmlitellm

1.102.0

1 of 2 See more

litellm-helm litellm 1.102.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16.2.0-debian-12-r6	ea55532b6f75	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

5,106

argocdnicklasfrahm-argocd

0.3.0

2 of 2 See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	openssl@3.3.3-r0	3.3.7-r0
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9

Open the chart page →

5,495

oneuptimeoneuptime

13.0.8

1 of 7 See more

oneuptime oneuptime 13.0.8

1 of the 7 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :26.7	4f94badaca11	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

11,222

prometheus-cloudwatch-exporterprometheus-community

0.28.2

1 of 1 See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
prom/cloudwatch-exporter :v0.16.0	71c2e988af06	openssl@3.0.13-0ubuntu3.2	3.0.13-0ubuntu3.9

Open the chart page →

3,453

openvpn-asstenic

0.1.9

1 of 1 See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

81,519

jellyfinutkuozdemir

2.0.0

1 of 1 See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
linuxserver/jellyfin :10.7.7	2427dde159a2	openssl@1.1.1f-1ubuntu2.13	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,943

amd-gpuamd-gpu-helm

0.22.0

1 of 1 See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
rocm/k8s-device-plugin :1.31.0.9	26212c665aab	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,178

scribebackube-helm-charts

0.2.0

1 of 2 See more

scribe backube-helm-charts 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/backube/scribe :0.2.0	cdefc81c6b2e	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-17.el8_6

Open the chart page →

6,859

falcosidekickfalcosecurity

0.14.0

1 of 1 See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
falcosecurity/falcosidekick :2.32.0	1976da721518	openssl@3.5.1-r0	3.5.6-r0

Open the chart page →

1,775

glasskube-operatorglasskube

0.12.2

3 of 3 See more

glasskube-operator glasskube 0.12.2

3 of the 3 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
glasskube/operator :0.12.2	be5133100d63	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23
quay.io/minio/mc :RELEASE.2023-09-29T16-41-22Z	a784ce6e3b1b	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6

Open the chart page →

12,208

outlinekubitodev

1.2.2

1 of 4 See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
outlinewiki/outline :0.82.0	494dfb9249a6	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,348

plane-cemakeplane

1.8.1

3 of 11 See more

plane-ce makeplane 1.8.1

3 of the 11 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/postgres :15.7-alpine	468d34fefd63	openssl@3.3.1-r3	3.3.7-r0
library/rabbitmq :3.13.6-management-alpine	611107e29cce	openssl@3.3.1-r3	3.3.7-r0
valkey/valkey :7.2.11-alpine	10328d00120d	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

5,004

milvusmilvus-helm

5.0.28

2 of 4 See more

milvus milvus-helm 5.0.28

2 of the 4 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apachepulsar/pulsar :3.0.7	9c9947de139d	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23
milvusdb/etcd :3.5.25-r1	fededb2f2d63	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.23

Open the chart page →

11,177

prefect-serverprefect

2026.9.14141910

1 of 2 See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :14.13.0	df6ec02e2b9a	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

5,545

rocketmqrocketmq

12.6.0

2 of 2 See more

rocketmq rocketmq 12.6.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
apache/rocketmq :5.4.0	319cd8a81ed1	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9
apacherocketmq/rocketmq-dashboard :2.1.0	ce78506bd6fe	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8

Open the chart page →

6,435

snipeitt3n

3.4.1

1 of 2 See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
snipe/snipe-it :v6.0.14	55fb7636a98c	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

87,176

apicurio-registryapicurio-registry-helm

3.8.0

1 of 2 See more

apicurio-registry apicurio-registry-helm 3.8.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
quay.io/apicurio/apicurio-registry-mem :2.5.8.Final	3b036692d546	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6

Open the chart page →

6,684

zookeepercloudpirates-zookeeper

0.15.0

1 of 1 See more

zookeeper cloudpirates-zookeeper 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
library/zookeeper :3.9.5	7d0f24ebb67b	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

2,990

codefreshcodefresh-onprem

2.12.15

4 of 42 See more

codefresh codefresh-onprem 2.12.15

4 of the 42 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/rabbitmq :4.1.3	9e635efba431	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

15,493

contourcontour

0.8.0

1 of 2 See more

contour contour 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
envoyproxy/envoy :v1.38.4	447f857a0146	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

1,544

stackstorm-hastackstorm

1.1.0

12 of 17 See more

stackstorm-ha stackstorm 1.1.0

12 of the 17 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
stackstorm/st2actionrunner :3.8	88235ba70cad	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2api :3.8	6f56d239d280	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2auth :3.8	33ecfda16608	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2notifier :3.8	f190a6212195	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2rulesengine :3.8	259503496ff9	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2scheduler :3.8	b1de2055c362	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2sensorcontainer :3.8	b1a338f64773	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2stream :3.8	1c8904a3bf67	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2timersengine :3.8	1bf35bfaf00c	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2web :3.8	09989a26c8b7	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3
stackstorm/st2workflowengine :3.8	19fdfffdbba8	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm3

Open the chart page →

740,653

supabasetokens-studio

1.0.0

9 of 14 See more

supabase tokens-studio 1.0.0

9 of the 14 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
darthsim/imgproxy :v3.26	476cb08c816a	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9
library/kong :3.8.0	fd78090e9e77	openssl@3.0.2-0ubuntu1.29	no fix listed
supabase/edge-runtime :v1.59.0	eff9c554d649	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/gotrue :v2.163.0	ba4ddc594b0b	openssl@3.3.2-r0	3.3.7-r0
supabase/postgres-meta :v0.84.2	d0a96973e9f1	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/realtime :v2.33.8	d207e6e23ad3	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
supabase/storage-api :v1.12.0	f983fb50bd95	openssl@3.3.2-r0	3.3.7-r0
supabase/studio :20241021-9f9b083	26d8070c55e9	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
timberio/vector :0.42.0-alpine	913878963fde	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

22,872

renterdartur9010

1.4.4

1 of 2 See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

8,473

budibasebudibase

0.0.0-master

1 of 7 See more

budibase budibase 0.0.0-master

1 of the 7 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
budibase/database :2.1.0	d90f656261c9	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

9,471

krokicowboysysop

6.1.0

4 of 5 See more

kroki cowboysysop 6.1.0

4 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
yuzutech/kroki-bpmn :0.29.1	444805c4b917	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-diagramsnet :0.29.1	b810edbf9c62	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-excalidraw :0.29.1	57917319ea70	openssl@3.3.5-r0	3.3.7-r0
yuzutech/kroki-mermaid :0.29.1	963b4acfde6e	openssl@3.3.5-r0	3.3.7-r0

Open the chart page →

7,371

csi-secrets-store-provider-azurecsi-secrets-store-provider-azure

1.8.2

1 of 5 See more

csi-secrets-store-provider-azure csi-secrets-store-provider-azure 1.8.2

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.15.0	59b9d0348428	openssl@3.3.5-3.azl3	3.3.5-5

Open the chart page →

2,232

Container images carrying it

2,947 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/ortelius/ms-compitem-crud :main-v10.0.1566-gf3f815	97b7f49eec76	openssl@3.6.0-r6	3.6.2-r0	1
quay.io/ortelius/ms-dep-pkg-r :main-v10.0.1705-g21b3dc	8a4150e94a45	openssl@3.6.0-r6	3.6.2-r0	1
quay.io/ortelius/ms-textfile-crud :main-v10.0.1635-g5076aa	f5c4c8adfc82	openssl@3.6.0-r6	3.6.2-r0	1
quay.io/ortelius/ms-validate-user :main-v10.0.1694-g98ed94	b5054bd4e97a	openssl@3.6.0-r6	3.6.2-r0	1
quay.io/projectquay/clair :4.9.0	23329c3368e4	openssl@1:1.1.1k-14.el8_6	1:1.1.1k-17.el8_6	1
quay.io/projectquay/clair :4.7.2	8d38ffa8fad7	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	1
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	openssl@3.3.3-r0	3.3.7-r0	1
quay.io/reactiveops/rbac-manager :v1.9.5	87e3f461446f	openssl@3.5.4-r0	3.5.6-r0	1
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	openssl@1:3.0.7-27.el9	1:3.5.5-3.el9_8	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	openssl@1:3.0.7-17.el9_2	1:3.5.5-3.el9_8	1
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	openssl@1:1.1.1k-12.el8_9	1:1.1.1k-17.el8_6	1
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	openssl@1:3.0.7-27.el9	1:3.5.5-3.el9_8	1
quay.io/reiml/smtp-gotify :latest	80ffa9d2044a	openssl@3.3.6-r0	3.3.7-r0	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	openssl@1:1.1.1k-4.el8	1:1.1.1k-17.el8_6	1
quay.io/seamware/consent-facade :0.0.14	be844c750c7e	openssl@1:1.1.1k-14.el8_6	1:1.1.1k-17.el8_6	1
quay.io/shivering-isles/dovecot :2.3.21	4599ada9aa06	openssl@3.3.1-r3	3.3.7-r0	1
quay.io/sshaaf/keycloak-mcp-server :0.4.0	b7e9cba72f8a	openssl@1:3.2.2-6.el9_5	1:3.5.5-3.el9_8	1
quay.io/strimzi/operator :0.45.1	58c727cd2e68	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8	1
quay.io/strimzi/operator :0.32.0	c5e0e5dca750	openssl@1:1.1.1k-7.el8_6	1:1.1.1k-17.el8_6	1
quay.io/strimzi/operator :0.36.1	e9e03b31007c	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	1
quay.io/underndog/samba :1.2.0-not-recycle	cca801de9fa5	openssl@3.3.3-r0	3.3.7-r0	1
quay.io/wi_stefan/dss-validation-service :0.0.1	8e928db29ee1	openssl@1:1.1.1k-9.el8_7	1:1.1.1k-17.el8_6	1
quay.io/wraft/wraft-frontend :latest	f1bbbd5e9bb9	openssl@3.5.1-r0	3.5.6-r0	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	openssl@3.0.9-1	3.0.19-1~deb12u2	1
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.1~18.04.23+esm8	1
registry.gitlab.com/dyff/dyff-frontend :0.20.2	481be0beaafe	openssl@3.3.3-r0	3.3.7-r0	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	openssl@3.5.5-1~deb13u1	3.5.5-1~deb13u2	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	openssl@1:1.1.1g-15.el8_3	1:1.1.1k-17.el8_6	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq :3.12.14	5a9334f371f3	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	openssl@1:1.1.1k-5.el8_5	1:1.1.1k-17.el8_6	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	openssl@1.1.1f-1ubuntu2.2	1.1.1f-1ubuntu2.24+esm3	1
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-17.el8_6	1
registry.gitlab.com/shortlink-org/shortlink/bff :latest	f2194e526915	openssl@3.5.5-r0	3.5.6-r0	1
registry.gitlab.com/shortlink-org/shortlink/link :latest	86d87291ffd4	openssl@3.5.5-r0	3.5.6-r0	1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller :2.1.2	301847adfe16	openssl@1:3.2.2-6.el9_5.1	1:3.5.5-3.el9_8	1
registry.gitlab.com/xrow-public/helm-iframely/iframely :2.3.5	fcf07d5ff7e2	openssl@1:3.5.1-7.el9_7	1:3.5.5-3.el9_8	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	openssl@3.0.11-1~deb12u1	3.0.19-1~deb12u2	1
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	openssl@3.5.1-1	3.5.5-1~deb13u2	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	openssl@3.0.11-1~deb12u1	3.0.19-1~deb12u2	1
registry.k8s.io/ingress-nginx/controller :v1.13.2	1f7eaeb01933	openssl@3.5.2-r0	3.5.6-r0	1
registry.k8s.io/ingress-nginx/controller :v1.13.1	37e489b22ac7	openssl@3.5.1-r0	3.5.6-r0	1
registry.k8s.io/ingress-nginx/controller :v1.11.3	d56f135b6462	openssl@3.3.2-r0	3.3.7-r0	1
registry.k8s.io/ingress-nginx/controller :v1.12.0	e6b8de175acd	openssl@3.3.2-r4	3.3.7-r0	1
registry.k8s.io/provider-os/manila-csi-plugin :v1.36.0	190976e2e2fe	openssl@3.5.4-r0	3.5.6-r0	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1