CVE-2026-31789
CriticalAdvisory
Published 7 Apr 2026In the index since 5 Sept 2026
- Severity
- Critical
- worst across findings
- CVSS
- 9.8
- base score, highest
- EPSS
- 0.002
- 16th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,853
- of 17,803 indexed, latest versions
- Container images
- 2,120
- deployed by those charts
- Fix available
- 3 of 3
- affected packages
CVE-2026-31789 affecting package openssl for versions less than 3.3.5-5
Carried by container images the latest versions of 1,853 of 17,803 indexed charts deploy, on 2,120 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openssldeb | 3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+44 more | 3.0.2-0ubuntu1.23, 3.0.13-0ubuntu3.9, 3.0.19-1~deb12u2, 3.5.3-1ubuntu3.3+1 more | 1,217 |
| opensslapk | 3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more | 3.3.7-r0, 3.5.6-r0, 3.6.2-r0 | 900 |
| opensslrpm | 3.3.5-1.azl3, 3.3.5-3.azl3 | 3.3.5-5 | 3 |
- OSV records
- ALPINE-CVE-2026-31789DEBIAN-CVE-2026-31789UBUNTU-CVE-2026-31789CGA-4pxx-5wwr-cqffAZL-81944ECHO-f779-bf6a-ba8e
- Also known as
- CGA-mfrg-992g-qvmr, CGA-mhv9-p53w-vxw8, CGA-x4mm-f7hr-pgvx, USN-8155-1
Charts affected
1,853 by stars
Container images carrying it
2,120 by charts deploying them
A fixed version is listed for 3 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| ghcr.io/ | e161eddc59a0 | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | fa7d5cc7fb7d | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | 8e53861be292 | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | 3009350bfc11 | openssl | 3.5.5-1~deb13u2 | 1 |
| ghcr.io/ | 74426c1fe00f | openssl | 3.3.7-r0 | 1 |
| ghcr.io/ | 74c1bee92e04 | openssl | 3.0.13-0ubuntu3.9 | 1 |
| ghcr.io/ | 379e31b8c751 | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | f8d06a32b1b2 | openssl | 3.5.5-1~deb13u2 | 1 |
| ghcr.io/ | 7439f6f9f85c | openssl | 3.3.7-r0 | 1 |
| ghcr.io/ | ed1c3fd04057 | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | 0e05a7b49c33 | openssl | no fix listed | 1 |
| ghcr.io/ | 41b0dd0d55b2 | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | 10006bc0f309 | openssl | 3.0.2-0ubuntu1.23 | 1 |
| ghcr.io/ | 3cceb9462ae1 | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | 4447636e8102 | openssl | 3.3.7-r0 | 1 |
| ghcr.io/ | 26c4691b28a4 | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | 1eed97d6272d | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | 9a69aa14dc3e | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | 27c55706c126 | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | ec01d3ac7887 | openssl | 3.0.13-0ubuntu3.9 | 1 |
| ghcr.io/ | dab685e668d9 | openssl | 3.0.13-0ubuntu3.9 | 1 |
| ghcr.io/ | 4569cae83c70 | openssl | 3.0.13-0ubuntu3.9 | 1 |
| ghcr.io/ | b3a87f92a963 | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | 4d763d58f11d | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | f80e85291439 | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | 97febecbe6cb | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | 984dc4f19162 | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | c4b1d3d0f052 | openssl | 3.3.7-r0 | 1 |
| ghcr.io/ | e5571acd10ce | openssl | 3.0.2-0ubuntu1.23 | 1 |
| ghcr.io/ | 4273dfaf0295 | openssl | 3.0.2-0ubuntu1.23 | 1 |
| ghcr.io/ | 0eb230e2381a | openssl | 3.0.2-0ubuntu1.23 | 1 |
| ghcr.io/ | 3c20900b5381 | openssl | 3.5.5-1~deb13u2 | 1 |
| ghcr.io/ | 6bebbda31416 | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | eeedf17112d7 | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | 185da4ad3e88 | openssl | 3.3.7-r0 | 1 |
| ghcr.io/ | ace1de323f4a | openssl | 3.6.2-r0 | 1 |
| ghcr.io/ | abd7d6b11b1b | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | f575a34ed3f8 | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | 315e188a07c2 | openssl | 3.3.7-r0 | 1 |
| ghcr.io/ | 708446bc6783 | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | 3475404bef5c | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | bcf42ccda0f9 | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | df6b11907d33 | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | 8978aa002bc0 | openssl | 3.0.13-0ubuntu3.9 | 1 |
| ghcr.io/ | d3ed97d142d4 | openssl | 3.3.7-r0 | 1 |
| ghcr.io/ | 757bdd779345 | openssl | 3.5.5-1~deb13u2 | 1 |
| ghcr.io/ | b5ade0d9cc6b | openssl | 3.0.19-1~deb12u2 | 1 |
| ghcr.io/ | c59f082ba8b2 | openssl | 3.3.7-r0 | 1 |
| ghcr.io/ | ebdf55fd5705 | openssl | 3.5.6-r0 | 1 |
| ghcr.io/ | 8ee3e70d77f1 | openssl | 3.5.6-r0 | 1 |