StackRadar

CVE-2026-31789

Critical

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.002
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,851
of 17,803 indexed, latest versions
Container images
2,117
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-31789 affecting package openssl for versions less than 3.3.5-5

Carried by container images the latest versions of 1,851 of 17,803 indexed charts deploy, on 2,117 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+44 more3.0.2-0ubuntu1.23, 3.0.13-0ubuntu3.9, 3.0.19-1~deb12u2, 3.5.3-1ubuntu3.3+1 more1,216
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0898
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl33.3.5-53
OSV records
ALPINE-CVE-2026-31789DEBIAN-CVE-2026-31789UBUNTU-CVE-2026-31789CGA-4pxx-5wwr-cqffAZL-81944ECHO-f779-bf6a-ba8e
Also known as
CGA-mfrg-992g-qvmr, CGA-mhv9-p53w-vxw8, CGA-x4mm-f7hr-pgvx, USN-8155-1

Charts affected

1,851 by stars
ChartLatestAffected imagesRadar Score
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-31789.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,936

Container images carrying it

2,117 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.9
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23
1
kaushaln1/helm_node_app:lateste9f2d5dfdba0
openssl@3.3.1-r3
3.3.7-r0
1
kayrosuno/kping:latestf3bd44b29b0d
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9
1
kenchrcum/grafana-dashboard-converter:0.3.105310497aea3f
openssl@3.5.5-r0
3.5.6-r0
1
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
openssl@3.3.2-r4
3.3.7-r0
1
khaliq/drl-exporter:latestf63cf53166f8
openssl@3.3.1-r3
3.3.7-r0
1
khaliq/pingme:v0.2.749f96888d2ab
openssl@3.5.4-r0
3.5.6-r0
1
kinseii/wazuh-agent:4.14.17160eb143728
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
1
kiwigrid/k8s-sidecar:1.27.6db85bd553253
openssl@3.3.1-r3
3.3.7-r0
1
knspar/phronetis:0.1.4609499d2dc91a
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
knspar/phronetis-operator:0.1.60c4f0543ee58
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
koenkk/zigbee2mqtt:2.7.260a295b40f4e
openssl@3.5.4-r0
3.5.6-r0
1
komodorio/komoplane:0.2.19678d02c3f2e
openssl@3.5.5-r0
3.5.6-r0
1
kong/httpbin:latesta6ac46531193
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.23
1
kong/kong:3.9.16addf50e6bd8
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
kroniak/ssh-client:latest3aef87e1a00b
openssl@3.5.5-r0
3.5.6-r0
1
krontechnology/aapm-agent:1.8.41cc7d5be6529
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.23
1
krontechnology/aapm-service:1.1.39dd602db8baa
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.23
1
krontechnology/aapm-sidecar-injector:1.2.18b42fad987b3
openssl@3.3.6-r0
3.3.7-r0
1
kserve/models-web-app:v0.13.073486345a602
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
kubeflownotebookswg/kfam:v1.9.22060a2ede788
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
kubeflownotebookswg/notebook-controller:v1.9.20f14bd28fdd5
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
kubeflownotebookswg/profile-controller:v1.9.2f05a5538ae7e
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
1
kubegems/redis:7.2.5-debian-12-r2870ee3a77add
openssl@3.0.13-1~deb12u1
3.0.19-1~deb12u2
1
kubeovn/kube-ovn:v1.14.06722b54eb5c0
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
kubesec/kubesec:latest025a365d9f18
openssl@3.3.2-r0
3.3.7-r0
1
kubeshop/testkube-api-server:2.1.162e97dc620d9b4
openssl@3.3.3-r0
3.3.7-r0
1
kubeshop/testkube-logs-server:latest094186b19698
openssl@3.3.3-r0
3.3.7-r0
1
kubeshop/tracetest:v1.7.173d7e3a2db43
openssl@3.3.2-r0
3.3.7-r0
1
kubevirtmanager/kubevirt-manager:1.5.41b98f1b5977a
openssl@3.5.5-r0
3.5.6-r0
1
kusionstack/kusion:v0.14.0126c8f0b0976
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.23
1
kuzwolka/aws9:main1ad759b961b1
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
kuzwolka/aws9:news3e8880fbbb96
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
kuzwolka/aws9:blog4a7707410bf1
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
kuzwolka/aws9:shop84a9d9766345
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
kvalitetsit/kitargus:2026-03-09-091234-10013c4c5cde2d9371c
openssl@3.5.5-r0
3.5.6-r0
1
kvalitetsit/stakit-backend:0.3.0f0af0ba589af
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.23
1
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
openssl@3.5.1-1
3.5.5-1~deb13u2
1
kyovint/kyoimgusers:1.0.080084149156e
openssl@3.5.1-1
3.5.5-1~deb13u2
1
laly9999/node-app:1dd0e503913e1
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
langflowai/langflow-frontend:latest54f67f1961fe
openssl@3.0.18-1~deb12u1
3.0.19-1~deb12u2
1
langgenius/dify-api:1.0.0066035f93856
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
langgenius/dify-api:0.6.11fca918260dd6
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.