CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,601; of 17,832 indexed, latest versions
Container images: 2,970; deployed by those charts
Fix available: 4 of 5; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,601 of 17,832 indexed charts deploy, on 2,970 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more	1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more	1,710
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	927
opensslrpm	1:1.1.1-8.el8, 1:1.1.1c-2.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8+33 more	1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 1:3.5.5-3.el10_2+1 more	333
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 more	no fix listed	22
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	1.0.2n-1ubuntu5.13+esm4	20

OSV records: ALPINE-CVE-2026-28390 CGA-8g7f-wxpv-r4x7 DEBIAN-CVE-2026-28390 RHSA-2026:22312 RHSA-2026:38503 RLSA-2026:22312 RLSA-2026:22314 RLSA-2026:38503 UBUNTU-CVE-2026-28390 AZL-82070 ECHO-9d88-691e-4e0f
Also known as: CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,601 by stars

Chart

Latest

Affected images

Radar Score

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

8,128

Container images carrying it

2,970 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	openssl@1.1.0g-2ubuntu4.1	1.1.1-1ubuntu2.1~18.04.23+esm8	2
nginxinc/nginx-unprivileged :1.27-alpine	65e3e85dbaed	openssl@3.3.3-r0	3.3.7-r0	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm3	2
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm15	2
opea/chatqna-conversation-ui :1.0	02d5674ca863	openssl@3.3.2-r0	3.3.7-r0	2
opea/embedding-tei :1.0	5c9639de61c1	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	2
opea/reranking-tei :1.0	e48613afb191	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	2
opea/retriever-redis :1.0	eb746b263705	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2	2
opencloudeu/opencloud-rolling :2.1.0	f9634bb04905	openssl@3.3.3-r0	3.3.7-r0	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	2
opencloudeu/web-extensions :json-viewer-1.0.0	e0ac35a9576e	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	2
opendatacube/ows :latest	668cbb41473c	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9	2
oryd/kratos :v1.3.1	fe2428f103a6	openssl@3.3.2-r1	3.3.7-r0	2
percona/everest-helmtools :0.0.1	904458d04a18	openssl@3.3.4-r0	3.3.7-r0	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.23	2
qichenxu4pd/pythonexample :1.0	f3a8502bc21b	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	2
quickwit/quickwit :v0.8.2	363ff56ce456	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	2
radondb/clickhouse-server :v21.1.3.32-stable	4732df471073	openssl@1.1.1-1ubuntu2.1~18.04.9	1.1.1-1ubuntu2.1~18.04.23+esm8	2
rajnandan1/kener :3.2.19	30407afca731	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2	2
rancher/local-path-provisioner :v0.0.35	34ff0847cc47	openssl@3.5.5-r0	3.5.6-r0	2
rancher/local-path-provisioner :v0.0.29	9bebefa0b908	openssl@3.3.1-r3	3.3.7-r0	2
rclone/rclone :1.68	74c51b8817e5	openssl@3.3.2-r0	3.3.7-r0	2
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.23	2
redis/redis-stack-server :7.4.0 :7.4.0-v1	72035434f455	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.23	2
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.23	2
sigp/lighthouse :v8.1.3	44aa773dcf27	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.23	2
sigp/lighthouse :latest	9a62bb870545	openssl@3.0.2-0ubuntu1.26	no fix listed	2
smartedge/generic-multi-access-network-virtualization :1.0	4cd63c22ce36	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm3	2
speckle/speckle-preview-service :2.18.11-branch.testing2.88634-335d469 :2.18.12-branch.testing3.88744-f55b341	4bd113093583	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	2
stakater/stakater-nordmart-review :1.0.35	954d2be66e95	openssl@1:1.1.1k-6.el8_5	1:1.1.1k-17.el8_6	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm3	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	openssl@3.0.2-0ubuntu1.5	3.0.2-0ubuntu1.23	2
sysnet4admin/dashboard :blue	c5bd3bb1b5a6	openssl@3.3.3-r0	3.3.7-r0	2
testinprod/op-erigon :latest	0a125bd77a2d	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	2
timberio/vector :0.51.1-alpine	2d16ae87ec39	openssl@3.5.4-r0	3.5.6-r0	2
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	nodejs@16.14.2-deb-1nodesource1 openssl@3.0.2-0ubuntu1.9	no fix listed 3.0.2-0ubuntu1.23	2
uffizzi/controller :latest	0344805f267b	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	2
uselagoon/docker-host :v3.6.1	2c89ed939b8b	openssl@3.3.3-r0	3.3.7-r0	2
valkey/valkey :7.2.11-alpine	10328d00120d	openssl@3.5.5-r0	3.5.6-r0	2
valkey/valkey :9.0.1	546304417fea	openssl@3.5.4-1~deb13u1	3.5.5-1~deb13u2	2
valkey/valkey :8.1.4	81db6d39e1bb	openssl@3.5.1-1+deb13u1	3.5.5-1~deb13u2	2
vdiogov/glpi-conteiner :latest	6945f84f0058	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	2
wolveix/satisfactory-server :latest :v1.9.10	e103700ae6ae	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.23	2
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.9	2
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	openssl@1.0.2g-1ubuntu4.8	1.0.2g-1ubuntu4.20+esm15	2
ghcr.io/appscode/inbox-server :latest :postgres-latest	536358d7b17e	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.23	2