StackRadar

CVE-2026-28390

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,510
of 17,790 indexed, latest versions
Container images
2,889
deployed by those charts
Fix available
4 of 5
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 2,510 of 17,790 indexed charts deploy, on 2,889 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.2g-1ubuntu4.5, 1.0.2g-1ubuntu4.6, 1.0.2g-1ubuntu4.8, 1.0.2g-1ubuntu4.9+94 more1.0.2g-1ubuntu4.20+esm15, 1.1.1-1ubuntu2.1~18.04.23+esm8, 1.1.1f-1ubuntu2.24+esm3, 3.0.2-0ubuntu1.23+4 more1,660
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0899
opensslrpm1:1.1.1-8.el8, 1:1.1.1c-2.el8_1.1, 1:1.1.1c-15.el8, 1:1.1.1c-19.el8_2+31 more1:1.1.1k-17.el8_6, 1:1.1.1k-17.el8_10, 1:3.5.5-3.el9_8, 3.3.5-5330
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm415
OSV records
ALPINE-CVE-2026-28390CGA-8g7f-wxpv-r4x7DEBIAN-CVE-2026-28390RHSA-2026:22312RHSA-2026:38503RLSA-2026:22312RLSA-2026:38503UBUNTU-CVE-2026-28390AZL-82070ECHO-9d88-691e-4e0f
Also known as
CGA-9w5g-cc3c-h84f, CGA-c8f9-m6q4-pf8c, CGA-r9mm-rw3c-wqh3, RHSA-2026:38804, RHSA-2026:38805, RHSA-2026:43513, USN-8155-1, USN-8155-2

Charts affected

2,510 by stars
ChartLatestAffected imagesRadar Score
local-path-provisionerkir4hVerified publisher0.0.351 of 1See more

local-path-provisioner kir4h 0.0.35

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.3534ff0847cc47
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

753
cdashkitwareVerified publisher0.19.02 of 3See more

cdash kitware 0.19.0

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
bitnamilegacy/postgresql:17.2.0-debian-12-r5cf63048c9209
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

12,131
redisinsightklicktippVerified publisher0.5.01 of 1See more

redisinsight klicktipp 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
redis/redisinsight:3.2.055542a762210
openssl@3.3.6-r0
3.3.7-r0

Open the chart page →

1,290
klustre-csi-pluginklustre-csi-plugin0.1.11 of 2See more

klustre-csi-plugin klustre-csi-plugin 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/klustrefs/klustre-csi-plugin:0.1.1bcf42ccda0f9
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

1,465
knowledge-platformknowledge-platform0.1.01 of 3See more

knowledge-platform knowledge-platform 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
getmeili/meilisearch:v1.30.0f3ecbc8c5bfb
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

720
visual-regression-trackerkokuwa5.1.02 of 4See more

visual-regression-tracker kokuwa 5.1.0

2 of the 4 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r15fdc6979dbc53
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
visualregressiontracker/api:5.0.11941aeb8c8bf9
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

8,680
ingress-nginxkomailo-helm-charts1.0.01 of 2See more

ingress-nginx komailo-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.11.3d56f135b6462
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

1,547
metallbkomailo-helm-charts1.2.41 of 4See more

metallb komailo-helm-charts 1.2.4

1 of the 4 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/frrouting/frr:10.4.38745af1f9bbb
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

2,129
komoplanekomodorVerified publisher0.1.81 of 1See more

komoplane komodor 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
komodorio/komoplane:0.2.19678d02c3f2e
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

954
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm8

Open the chart page →

14,827
kpingkpingOfficialVerified publisher0.3.51 of 1See more

kping kping 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
kayrosuno/kping:latestf3bd44b29b0d
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9

Open the chart page →

2,229
kubeflowkromanow94-kubeflow0.5.113 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

13 of the 30 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
kserve/models-web-app:v0.13.073486345a602
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
kubeflow/model-registry:v0.2.95783f6db428f
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-17.el8_6
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
kubeflownotebookswg/kfam:v1.9.22060a2ede788
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
kubeflownotebookswg/notebook-controller:v1.9.20f14bd28fdd5
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
library/python:3.7eedf63967cdb
openssl@3.0.9-1
3.0.19-1~deb12u2
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
gcr.io/ml-pipeline/metadata-envoy:2.3.0e8e263a919ff
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24+esm3
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
gcr.io/ml-pipeline/viewer-crd-controller:2.3.08cf8213d69e4
openssl@3.3.1-r3
3.3.7-r0

Open the chart page →

68,994
kron-aapm-agentkron-aapm-agent1.1.01 of 1See more

kron-aapm-agent kron-aapm-agent 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.1.07feef7d2ab42
openssl@1.1.1f-1ubuntu2.17
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

8,922
adventureworkskronkltdVerified publisher0.1.01 of 1See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
chriseaton/adventureworks:latest54c3384ce701
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23

Open the chart page →

4,462
dinsrokronkltdVerified publisher0.1.71 of 2See more

dinsro kronkltd 0.1.7

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
duck1123/dinsro:latest9568c5961d5d
openssl@3.3.2-r4
3.3.7-r0

Open the chart page →

1,628
fileserverkronkltdVerified publisher0.3.101 of 1See more

fileserver kronkltd 0.3.10

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
duck1123/lnd-fileserver:latest9d6fb247b714
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23

Open the chart page →

3,769
rtlkronkltdVerified publisher0.1.01 of 2See more

rtl kronkltd 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
duck1123/cert-downloader:latest0e29f19fa67c
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23

Open the chart page →

5,644
aapm-servicekron-pam-aapm-helmcharts1.2.51 of 1See more

aapm-service kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
krontechnology/aapm-service:1.1.39dd602db8baa
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.23

Open the chart page →

2,645
kron-aapm-agentkron-pam-aapm-helmcharts1.2.51 of 1See more

kron-aapm-agent kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
krontechnology/aapm-agent:1.8.41cc7d5be6529
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.23

Open the chart page →

2,746
kron-aapm-sidecarkron-pam-aapm-helmcharts1.2.51 of 1See more

kron-aapm-sidecar kron-pam-aapm-helmcharts 1.2.5

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
krontechnology/aapm-sidecar-injector:1.2.18b42fad987b3
openssl@3.3.6-r0
3.3.7-r0

Open the chart page →

126
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

3,442
fabric-operatorkubebb0.1.01 of 1See more

fabric-operator kubebb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
hyperledgerk8s/fabric-operator:7776e7129a8af8be270
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6

Open the chart page →

3,988
miniokubebb5.0.102 of 2See more

minio kubebb 5.0.10

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
hyperledgerk8s/minio-mc:RELEASE.2023-01-28T20-29-38Z729b3d128487
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6
hyperledgerk8s/minio-minio:RELEASE.2023-02-10T18-48-39Zed0b0c56f1ea
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6

Open the chart page →

7,457
apecloud-mcpkubeblocksVerified publisher0.1.01 of 1See more

apecloud-mcp kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
apecloud/apecloud-mcp:0.1.094041b080510
openssl@3.5.0-r0
3.5.6-r0

Open the chart page →

1,107
apelcoud-mcpkubeblocksVerified publisher0.1.01 of 1See more

apelcoud-mcp kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
apecloud/apecloud-mcp:0.1.094041b080510
openssl@3.5.0-r0
3.5.6-r0

Open the chart page →

1,107
aperagkubeblocksVerified publisher0.0.0-nightly2 of 3See more

aperag kubeblocks 0.0.0-nightly

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
openssl@3.5.1-1
3.5.5-1~deb13u2
apecloud/aperag-frontend:v0.0.0-nightlyb3ae37840ace
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

8,455
calicokubeblocksVerified publisher3.28.01 of 3See more

calico kubeblocks 3.28.0

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
calico/node:v3.28.0385bf6391fea
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-17.el8_6

Open the chart page →

3,288
casdoor-helm-chartskubeblocksVerified publisher1.753.01 of 1See more

casdoor-helm-charts kubeblocks 1.753.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
casbin/casdoor:v1.753.0770ad9ec3190
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

2,299
chaos-meshkubeblocksVerified publisher2.7.23 of 4See more

chaos-mesh kubeblocks 2.7.2

3 of the 4 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

13,517
ciliumkubeblocksVerified publisher1.15.11 of 2See more

cilium kubeblocks 1.15.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.15.1351d6685dc6f
openssl@3.0.2-0ubuntu1.13
3.0.2-0ubuntu1.23

Open the chart page →

5,114
gemini-schedulerkubeblocksVerified publisher0.1.11 of 1See more

gemini-scheduler kubeblocks 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
apecloud/gemini-scheduler:0.1.15832d1a9097a
openssl@3.3.1-r3
3.3.7-r0

Open the chart page →

1,412
ingress-nginxkubeblocksVerified publisher4.12.11 of 2See more

ingress-nginx kubeblocks 4.12.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

1,476
openebskubeblocksVerified publisher3.10.02 of 3See more

openebs kubeblocks 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23
openebs/node-disk-operator:2.1.06afe2123c457
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23

Open the chart page →

10,568
postgres-operatorkubeblocksVerified publisher1.12.21 of 1See more

postgres-operator kubeblocks 1.12.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.12.2d81cda253f5c
openssl@3.3.0-r2
3.3.7-r0

Open the chart page →

1,554
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6

Open the chart page →

9,249
spiderpoolkubeblocksVerified publisher1.2.02 of 4See more

spiderpool kubeblocks 1.2.0

2 of the 4 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/spiderpool/spiderpool-agent:v1.2.08bb9411e47e0
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm3
ghcr.io/spidernet-io/spiderpool/spiderpool-controller:v1.2.042304e3ed36e
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

8,457
vaultkubeblocksVerified publisher0.30.02 of 2See more

vault kubeblocks 0.30.0

2 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
hashicorp/vault:1.19.0bbb7f98dc67d
openssl@3.3.3-r0
3.3.7-r0
hashicorp/vault-k8s:1.6.2103a2d817a74
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

2,742
listener-operatorkubedoopVerified publisher0.4.01 of 6See more

listener-operator kubedoop 0.4.0

1 of the 6 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
openssl@1:3.2.2-6.el9_5.1
1:3.5.5-3.el9_8

Open the chart page →

4,430
secret-operatorkubedoopVerified publisher0.4.01 of 5See more

secret-operator kubedoop 0.4.0

1 of the 5 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
openssl@1:3.2.2-6.el9_5.1
1:3.5.5-3.el9_8

Open the chart page →

4,378
juicefs-tenantkubegems1.0.11 of 3See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
kubegems/redis:7.2.5-debian-12-r2870ee3a77add
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

4,120
kubegems-edgekubegems1.24.101 of 1See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
openssl@3.5.4-r0
3.5.6-r0

Open the chart page →

3,381
kubegems-multus-cnikubegems2.4.11 of 2See more

kubegems-multus-cni kubegems 2.4.1

1 of the 2 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.16bebbda31416
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

1,373
volcanokubegems1.12.13 of 3See more

volcano kubegems 1.12.1

3 of the 3 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
volcanosh/vc-controller-manager:v1.12.13815883c32f6
openssl@3.5.0-r0
3.5.6-r0
volcanosh/vc-scheduler:v1.12.1b24ea8af2d16
openssl@3.5.0-r0
3.5.6-r0
volcanosh/vc-webhook-manager:v1.12.1f8b50088a732
openssl@3.5.0-r0
3.5.6-r0

Open the chart page →

5,021
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
openssl@3.0.9-1
3.0.19-1~deb12u2

Open the chart page →

3,700
kubemacpoolkubemacpoolVerified publisher0.3.01 of 1See more

kubemacpool kubemacpool 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
quay.io/kubevirt/kubemacpool:v0.45.0eebb65b8a12c
openssl@1:3.2.2-6.el9_5
1:3.5.5-3.el9_8

Open the chart page →

1,624
kube-netlagkube-netlagVerified publisher1.1.01 of 1See more

kube-netlag kube-netlag 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
alazidis/kube-netlag:1.1.00e8c84152201
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9

Open the chart page →

1,483
kube-node-readykube-node-ready0.5.01 of 1See more

kube-node-ready kube-node-ready 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
ghcr.io/imunhatep/kube-node-ready:0.5.07439f6f9f85c
openssl@3.3.6-r0
3.3.7-r0

Open the chart page →

399
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm3

Open the chart page →

7,196
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9

Open the chart page →

4,991
kube-pod-alertskube-pod-alertsVerified publisher0.1.81 of 1See more

kube-pod-alerts kube-pod-alerts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-28390.

Container imageDigestPackageFixed in
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2

Open the chart page →

1,639

Container images carrying it

2,889 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm3
2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm3
2
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
2
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
openssl@3.5.1-r0
3.5.6-r0
2
ghcr.io/home-operations/readarr:0.4.18:0.4.18.28058f7551205fbd
openssl@3.5.0-r0
3.5.6-r0
2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
2
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
openssl@3.3.2-r4
3.3.7-r0
2
ghcr.io/kluster-manager/cluster-auth:v0.5.1fba6fb872281
openssl@3.5.5-r0
3.5.6-r0
2
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm8
2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss:unprivileged-oss-202503313db8145349a3
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
2
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
2
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
openssl@3.5.0-r0
3.5.6-r0
2
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
2
ghcr.io/postgresml/pgcat:main245f9d2f5f5b
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
2
ghcr.io/salaboy/fmtok8s-agenda-service:v0.0.1-native6c5efe150958
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm8
2
ghcr.io/salaboy/fmtok8s-c4p-service:v0.0.1-native3f7cc45fd20b
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm8
2
ghcr.io/salaboy/fmtok8s-frontend:v0.1.103fd01b4f56e
openssl@3.0.2-0ubuntu1.2
3.0.2-0ubuntu1.23
2
ghcr.io/smarter-project/home-ha-mock:main95ee018cf558
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
2
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
openssl@3.0.18-1~deb12u2
3.0.19-1~deb12u2
2
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
openssl@3.5.0-r0
3.5.6-r0
2
mcr.microsoft.com/azure-sql-edge:latest902628a8be89
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm3
2
public.ecr.aws/aktosecurity/confluentinc-cp-kafka:8.1.1-1-ubi9d20bd62f0182
openssl@1:3.5.1-4.el9_7
1:3.5.5-3.el9_8
2
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
openssl@3.5.1-1
3.5.5-1~deb13u2
2
quay.io/argoproj/argocd:v2.14.115fc69e31c755
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
2
quay.io/curl/curl:8.16.0b17b13321678
openssl@3.5.2-r0
3.5.6-r0
2
quay.io/flomesh/curl-ubi8:7.84.0bef31fa5f5f3
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-17.el8_6
2
quay.io/frrouting/frr:10.4.38745af1f9bbb
openssl@3.5.5-r0
3.5.6-r0
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
openssl@1:1.1.1k-6.el8_5
1:1.1.1k-17.el8_6
2
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
openssl@3.5.4-r0
3.5.6-r0
2
quay.io/kiwigrid/k8s-sidecar:1.27.4f6ed71d0f9f1
openssl@3.3.0-r2
3.3.7-r0
2
quay.io/minio/mc:RELEASE.2023-09-29T16-41-22Za784ce6e3b1b
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6
2
quay.io/minio/mc:RELEASE.2023-01-28T20-29-38Zad34abeba912
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6
2
quay.io/minio/minio:RELEASE.2023-09-30T07-02-29Z6262bc9a2730
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6
2
quay.io/minio/minio:RELEASE.2023-07-21T21-12-44Z8e5e9490cd50
openssl@1:1.1.1k-9.el8_7
1:1.1.1k-17.el8_6
2
quay.io/minio/minio:RELEASE.2023-02-10T18-48-39Za0a002cb113c
openssl@1:1.1.1k-7.el8_6
1:1.1.1k-17.el8_6
2
quay.io/mongodb/mongodb-kubernetes-operator:0.13.02dcc6393e6f7
openssl@1:1.1.1k-14.el8_6
1:1.1.1k-17.el8_6
2
quay.io/opencloudio/ibm-mongodb:4.0.24d8c631a6dc43
openssl@1:1.1.1g-15.el8_3
1:1.1.1k-17.el8_6
2
quay.io/open-cluster-management/registration-operator:v1.3.1df6c926a2b54
openssl@1:3.5.1-7.el9_7
1:3.5.5-3.el9_8
2
quay.io/openshift/origin-cli:4.7464a3af4dfe0
openssl@1:1.1.1g-18.el8_4
1:1.1.1k-17.el8_6
2
quay.io/openshift/origin-cli:4.8bb5e052770e5
openssl@1:1.1.1g-18.el8_4
1:1.1.1k-17.el8_6
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
openssl@1:1.1.1k-12.el8_9
1:1.1.1k-17.el8_6
2
quay.io/strimzi/operator:0.46.0ac434a48ac2b
openssl@1:3.2.2-6.el9_5.1
1:3.5.5-3.el9_8
2
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
openssl@1:3.2.2-6.el9_5.1
1:3.5.5-3.el9_8
2
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
openssl@3.5.4-r0
3.5.6-r0
2
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
openssl@3.5.5-r0
3.5.6-r0
2
registry.k8s.io/ingress-nginx/controller:v1.11.8695d79381ee6
openssl@3.5.0-r0
3.5.6-r0
2
registry.k8s.io/ingress-nginx/controller:v1.12.1d2fbc4ec70d8
openssl@3.3.3-r0
3.3.7-r0
2
1dev/server:11.9.0cd5b12fe5471
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.