StackRadar

CVE-2026-31789

Critical

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.002
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,851
of 17,792 indexed, latest versions
Container images
2,110
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-31789 affecting package openssl for versions less than 3.3.5-5

Carried by container images the latest versions of 1,851 of 17,792 indexed charts deploy, on 2,110 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+44 more3.0.2-0ubuntu1.23, 3.0.13-0ubuntu3.9, 3.0.19-1~deb12u2, 3.5.3-1ubuntu3.3+1 more1,210
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0897
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl33.3.5-53
OSV records
ALPINE-CVE-2026-31789DEBIAN-CVE-2026-31789UBUNTU-CVE-2026-31789CGA-4pxx-5wwr-cqffAZL-81944ECHO-f779-bf6a-ba8e
Also known as
CGA-mfrg-992g-qvmr, CGA-mhv9-p53w-vxw8, CGA-x4mm-f7hr-pgvx, USN-8155-1

Charts affected

1,851 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-31789.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,929

Container images carrying it

2,110 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
devopshq/artifactory-cleanup:1.0.1830e093bffa91
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
devopsiaci/self-learning-platform:1.1.3d9441c931f75
openssl@3.5.5-r0
3.5.6-r0
1
devopstales/kubedash:3.1.08bb837da5aec
openssl@3.3.3-r0
3.3.7-r0
1
devravinder/node-express-app:1.0.05325a96967b5
openssl@3.3.2-r4
3.3.7-r0
1
devture/exim-relay:4.98-r0-47ba30080c7a6
openssl@3.3.2-r4
3.3.7-r0
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
dgraph/ratel:v25.0.34cae1ff95027
openssl@3.5.4-r0
3.5.6-r0
1
directus/directus:11.1.0e3c8bb975350
openssl@3.3.1-r3
3.3.7-r0
1
diygod/rsshub:2025-11-097a6312cac0d5
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
1
djjudas21/alertify:0.1.0ba22be670c37
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
djjudas21/bearhugmugs:0.1.14fa898a52d97
openssl@3.3.2-r1
3.3.7-r0
1
djjudas21/ecowitt-exporter:2.2.073aab45ef10d
openssl@3.5.0-r0
3.5.6-r0
1
djjudas21/liturgical-colour-app:0.7.2954935971d42
openssl@3.5.1-r0
3.5.6-r0
1
djjudas21/nova-exporter:0.0.10e9094580885c
openssl@3.5.1-r0
3.5.6-r0
1
djjudas21/smtp-relay:0.11.0ffd8143952f6
openssl@3.5.4-r0
3.5.6-r0
1
dobtc/bitcoin:25.1a870f7cb1105
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
documenso/documenso:v1.8.17f16a9449f18
openssl@3.3.2-r0
3.3.7-r0
1
docuseal/docuseal:2.4.17493fd7f6728
openssl@3.5.5-r0
3.5.6-r0
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
openssl@3.5.1-1
3.5.5-1~deb13u2
1
domainmod/domainmod:4.23.04017bfe4c597
openssl@3.0.9-1
3.0.19-1~deb12u2
1
dpage/pgadmin4:9.11.050700ac17936
openssl@3.5.4-r0
3.5.6-r0
1
dpage/pgadmin4:9.252cb72a9e3da
openssl@3.3.3-r0
3.3.7-r0
1
dpage/pgadmin4:8.13561c1f8f99f2
openssl@3.3.2-r0
3.3.7-r0
1
dragonflyoss/client:v0.1.82edf3e921f4e0
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
dremio/dremio-oss:24.1.080ed2e3b7c43
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23
1
drpcorg/dshackle:0.54.08858fae1859d
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23
1
drumsergio/duplicacy-container:0.1.0dd3ee9703969
openssl@3.5.5-r0
3.5.6-r0
1
drumsergio/duplicacy-exporter:0.3.4ca3476077215
openssl@3.5.5-r0
3.5.6-r0
1
drumsergio/genieacs:1.2.16.028244054e1bf
openssl@3.0.18-1~deb12u2
3.0.19-1~deb12u2
1
drumsergio/pumperly:1.4.885bbc3915e9e
openssl@3.5.5-r0
3.5.6-r0
1
dserio83/velero-api:0.3.16b3d9115fee2
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
dserio83/velero-watchdog:0.1.8d5deae589229
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
duck1123/cert-downloader:latest0e29f19fa67c
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23
1
duck1123/dinsro:latest9568c5961d5d
openssl@3.3.2-r4
3.3.7-r0
1
duck1123/lnd-fileserver:latest9d6fb247b714
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.23
1
durellirsd/security-smells-api:v17398aca4fc2e
openssl@3.3.0-r2
3.3.7-r0
1
dvdlevanon/kubernetes-database-scaler:v0.0.361e79c1643fe4
openssl@3.5.0-r0
3.5.6-r0
1
dwdraju/alpine-curl-jq:latest83bd9be2b14b
openssl@3.3.1-r3
3.3.7-r0
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
openssl@3.5.5-r0
3.5.6-r0
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
1
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
openssl@3.5.5-r0
3.5.6-r0
1
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
1
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
openssl@3.5.1-1+deb13u1
3.5.5-1~deb13u2
1
elautoestopista/aeneabot:4.2.1125ba620d528
openssl@3.5.4-r0
3.5.6-r0
1
elautoestopista/raponchi:0.3.0b6f74db9fc81
openssl@3.3.0-r2
3.3.7-r0
1
emirozbir/dashdns-admission-webhook:v2.0.56801ba2a3fc3
openssl@3.5.5-r0
3.5.6-r0
1
emqx/ecp-emqx-agent-downloader:2.5.1a8431baa7950
openssl@3.3.2-r0
3.3.7-r0
1
emqxecp/otelcol:2.5.04c31d9bec846
openssl@3.3.2-r0
3.3.7-r0
1
emqx/ecp-ui:2.5.1e33e9816f147
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.