StackRadar

CVE-2026-31789

Critical

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.002
16th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,856
of 17,797 indexed, latest versions
Container images
2,123
deployed by those charts
Fix available
3 of 3
affected packages

CVE-2026-31789 affecting package openssl for versions less than 3.3.5-5

Carried by container images the latest versions of 1,856 of 17,797 indexed charts deploy, on 2,123 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+44 more3.0.2-0ubuntu1.23, 3.0.13-0ubuntu3.9, 3.0.19-1~deb12u2, 3.5.3-1ubuntu3.3+1 more1,218
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0902
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl33.3.5-53
OSV records
ALPINE-CVE-2026-31789DEBIAN-CVE-2026-31789UBUNTU-CVE-2026-31789CGA-4pxx-5wwr-cqffAZL-81944ECHO-f779-bf6a-ba8e
Also known as
CGA-mfrg-992g-qvmr, CGA-mhv9-p53w-vxw8, CGA-x4mm-f7hr-pgvx, USN-8155-1

Charts affected

1,856 by stars
ChartLatestAffected imagesRadar Score
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-31789.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.9

Open the chart page →

2,152
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-31789.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

9,401
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-31789.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

2,692
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-31789.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

1,565
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-31789.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

1,160
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-31789.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,936

Container images carrying it

2,123 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
langgenius/dify-api:1.0.0066035f93856
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
langgenius/dify-api:0.6.11fca918260dd6
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
1
langgenius/dify-web:1.16.187dd47e4e28f
openssl@3.5.5-r0
3.5.6-r0
1
langgenius/dify-web:1.10.1-fix.1c306ac577912
openssl@3.3.5-r0
3.3.7-r0
1
langgenius/dify-web:1.0.0d64914ff0d6d
openssl@3.3.3-r0
3.3.7-r0
1
layer5/meshery:stable-latest78a8be21bef3
openssl@3.3.3-r0
3.3.7-r0
1
leantime/leantime:3.3.3ad4bfb0699d3
openssl@3.3.2-r1
3.3.7-r0
1
leonardomulticloud/svc-vault-frontend:v1.0.0e42a341e0299
openssl@3.3.2-r1
3.3.7-r0
1
lib42/jackett:latesta55596cda383
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
library/alpine:3.23.325109184c71b
openssl@3.5.5-r0
3.5.6-r0
1
library/caddy:2.9-alpineb4e3952384eb
openssl@3.3.3-r0
3.3.7-r0
1
library/couchdb:3.4.22817ad50b5c5
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
library/docker:28.5.2-dind2a232a42256f
openssl@3.5.4-r0
3.5.6-r0
1
library/docker:27-cli851f91d24121
openssl@3.3.3-r0
3.3.7-r0
1
library/docker:27-dindaa3df78ecf32
openssl@3.3.3-r0
3.3.7-r0
1
library/docker:26.1-dinddd43b430341a
openssl@3.3.1-r3
3.3.7-r0
1
library/eclipse-mosquitto:2.0.2021421af7b32b
openssl@3.3.3-r0
3.3.7-r0
1
library/flink:1.14.6-scala_2.122461f02672b3
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.23
1
library/ghost:6.22.0-alpine3.23ac533a6988ee
openssl@3.5.5-r0
3.5.6-r0
1
library/haproxy:3.1-bookworm49a0a0d6f0b8
openssl@3.0.17-1~deb12u2
3.0.19-1~deb12u2
1
library/haproxy:2.9.6fc5748ff7c72
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2
1
library/httpd:2.4.631ae8051591a5
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
library/influxdb:1.12.3-meta8812029260b5
openssl@3.0.18-1~deb12u2
3.0.19-1~deb12u2
1
library/influxdb:1.12.3-datab0f9fc41ed79
openssl@3.0.18-1~deb12u2
3.0.19-1~deb12u2
1
library/kong:3.8.0712e407b20ea
openssl@3.0.2-0ubuntu1.26
no fix listed
1
library/mariadb:10.11.21c33370a599c
openssl@3.0.2-0ubuntu1.9
3.0.2-0ubuntu1.23
1
library/mariadb:12.0.25b6a1eac15b8
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.9
1
library/mariadb:12.2.2b1cb255a9939
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.9
1
library/mariadb:10.10.2bfc25a68e113
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23
1
library/mariadb:10.9.4fbb8456ebdb1
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.23
1
library/mariadb:11.7.2fcc7fcd7114a
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
library/matomo:5.1.2-apache2415789e1602
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
library/memcached:1.6.32-alpine0a27d9d5084f
openssl@3.3.2-r1
3.3.7-r0
1
library/memcached:1.6.29-alpine462ae4a35c26
openssl@3.3.1-r3
3.3.7-r0
1
library/memcached:1.6.39-alpine3.227b45203a99eb
openssl@3.5.4-r0
3.5.6-r0
1
library/memcached:1.6.409ae868852d0b
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
1
library/memcached:1.6.40cc523a19da58
openssl@3.5.4-1~deb13u2
3.5.5-1~deb13u2
1
library/memcached:1.6.38-alpinee93269864a7d
openssl@3.5.1-r0
3.5.6-r0
1
library/mongo:7.0.140032d2ca20db
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.23
1
library/mongo:7.0-jammy:7-jammy406a4fdca9fc
openssl@3.0.2-0ubuntu1.26
no fix listed
1
library/mongo:6.0.12646902910d6a
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.23
1
library/mongo:7.0-jammy84c4a18b60a0
openssl@3.0.2-0ubuntu1.29
no fix listed
1
library/mongo:7.0.28-jammy88785f6f665a
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.23
1
library/mongo:7.0.12ae1cf99fa7bf
openssl@3.0.2-0ubuntu1.17
3.0.2-0ubuntu1.23
1
library/mongo:8.0.11dca8d11fe467
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
library/nats:2.12.2-alpine2d5fce3229ae
openssl@3.5.4-r0
3.5.6-r0
1
library/nats:2.11.9-alpine777787bbb4c7
openssl@3.5.1-r0
3.5.6-r0
1
library/nats:2.12.3-alpine88fe8e0e09d6
openssl@3.5.4-r0
3.5.6-r0
1
library/nats:2.10.17-alpineb7752304692b
openssl@3.3.1-r0
3.3.7-r0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.