CVE-2026-31790

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.010; 62nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,925; of 17,790 indexed, latest versions
Container images: 2,237; deployed by those charts
Fix available: 4 of 4; affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 1,925 of 17,790 indexed charts deploy, on 2,237 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+44 more	3.0.2-0ubuntu1.23, 3.0.13-0ubuntu3.9, 3.0.19-1~deb12u2, 3.5.3-1ubuntu3.3+1 more	1,223
opensslapk	3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more	3.3.7-r0, 3.5.6-r0, 3.6.2-r0	902
opensslrpm	1:3.0.1-43.el9_0, 1:3.0.7-6.el9_2, 1:3.0.7-17.el9_2, 1:3.0.7-25.el9_3+10 more	1:3.5.5-2.el9_8, 3.3.5-5	100
openssl-fips-providerrpm	3.0.7-2.el9, 3.0.7-6.el9_5, 3.0.7-8.el9, 3.0.7-8.el10	0:3.0.7-11.el9_8, 0:3.0.7-11.el10_2	80

OSV records: ALPINE-CVE-2026-31790 CGA-82jc-g66m-rp8r CGA-chx3-v6gr-x6h2 DEBIAN-CVE-2026-31790 UBUNTU-CVE-2026-31790 RHSA-2026:19218 RHSA-2026:27744 RHSA-2026:27746 RLSA-2026:19218 AZL-81950 ECHO-cd1b-a137-2e06
Also known as: CGA-85p3-36wg-c582, CGA-hvhw-vf7c-7ccv, RHSA-2026:28832, USN-8155-1

Charts affected

1,925 by stars

Chart

Latest

Affected images

Radar Score

giteawenerme

12.7.0

3 of 4 See more

gitea wenerme 12.7.0

3 of the 4 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	openssl@3.0.17-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

8,874

hazelcastwenerme

5.10.3

1 of 2 See more

hazelcast wenerme 5.10.3

1 of the 2 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
hazelcast/hazelcast :5.5.0	5dd5d31c7a06	openssl@3.3.1-r3	3.3.7-r0

Open the chart page →

2,624

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

9,183

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23
openebs/node-disk-operator :2.1.0	6afe2123c457	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.23

Open the chart page →

10,587

wexa-studiowexa-studio

1.2.0

4 of 15 See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	openssl@3.5.0-r0	3.5.6-r0
temporalio/server :1.29.1	c1e3326b2ce1	openssl@3.5.0-r0	3.5.6-r0
temporalio/ui :2.44.0	0b36e00aad30	openssl@3.5.4-r0	3.5.6-r0

Open the chart page →

15,044

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.23

Open the chart page →

9,320

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.9

Open the chart page →

2,235

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	openssl@3.0.17-1~deb12u2	3.0.19-1~deb12u2
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	openssl@3.0.18-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

7,664

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
dwdraju/alpine-curl-jq :latest	83bd9be2b14b	openssl@3.3.1-r3	3.3.7-r0

Open the chart page →

6,326

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

5,559

postgres-operatorwiremind

1.14.0-wiremind0

1 of 1 See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	openssl@3.3.2-r4	3.3.7-r0

Open the chart page →

1,287

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	openssl@3.0.18-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

2,496

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	openssl@3.0.18-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

2,136

registrywiremind

0.1.1

1 of 1 See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
ghcr.io/distribution/distribution :3.0.0	4ba3adf47f5c	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

1,195

silence-operatorwiremind

0.0.8

1 of 1 See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
giantswarm/silence-operator :0.13.0	a6cac55aa2d4	openssl@3.3.3-r0	3.3.7-r0

Open the chart page →

790

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	openssl@3.0.2-0ubuntu1.16	3.0.2-0ubuntu1.23

Open the chart page →

14,173

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2

Open the chart page →

11,603

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

7,697

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
hamzaarshad10/queryfrontend :1.1.5.14	cd359d9a78c3	openssl@3.3.2-r0	3.3.7-r0
hamzaarshad10/querypodpy :1.7	154f38e8668e	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2
murtazashah46/helmfile :latest	4d11726cf803	openssl@3.0.14-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

13,783

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.9

Open the chart page →

2,142

ygdrassil-monitoringygdrassil

0.4.0

1 of 10 See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
grafana/grafana :11.5.1	5781759b3d27	openssl@3.3.2-r0	3.3.7-r0

Open the chart page →

9,395

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2

Open the chart page →

2,684

language-toolzekker6

1.12.1

1 of 2 See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,571

zipkinzipkin

0.5.0

1 of 1 See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-slim :3.6.0	a69e1057df36	openssl@3.5.5-r0	3.5.6-r0

Open the chart page →

1,159

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-31790.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,929

Container images carrying it

2,237 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
davidy/giphy-app :1.0.2-arm	41b2355cc23a	openssl@3.3.2-r1	3.3.7-r0	1
dblaci/ubuntu-ssh-rsync :20231020	eea697611af4	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	1
ddosify/alaz :v0.12.0	ea602056d9ce	openssl@3.0.13-1~deb12u1	3.0.19-1~deb12u2	1
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
ddosify/selfhosted_backend :3.2.9	3c11e3182652	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
ddosify/selfhosted_hammermanager :2.0.2	b796b8c73011	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
deconzcommunity/deconz :2.29.2	062de2362641	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
deepflowce/deepflow-agent :v6.2.6.5	29332fee7fc2	openssl@3.0.2-0ubuntu1.9	3.0.2-0ubuntu1.23	1
deimosfr/dnsmasq-k8s :1.4.1	284c4040fc6d	openssl@3.5.4-1~deb13u1	3.5.5-1~deb13u2	1
deluan/navidrome :0.61.2	9fa40b3d8dec	openssl@3.3.6-r0	3.3.7-r0	1
denniswitt/yas3p :0.2.4	88a235619af6	openssl@3.5.5-r0	3.5.6-r0	1
devopsgoofy/k8s-platform :latest	ad865312099f	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
devopshq/artifactory-cleanup :1.0.18	30e093bffa91	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
devopsiaci/self-learning-platform :1.1.3	d9441c931f75	openssl@3.5.5-r0	3.5.6-r0	1
devopstales/kubedash :3.1.0	8bb837da5aec	openssl@3.3.3-r0	3.3.7-r0	1
devravinder/node-express-app :1.0.0	5325a96967b5	openssl@3.3.2-r4	3.3.7-r0	1
devture/exim-relay :4.98-r0-4	7ba30080c7a6	openssl@3.3.2-r4	3.3.7-r0	1
dgraph/dgraph :v24.1.4	b57fa31f9b7f	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.9	1
dgraph/ratel :v25.0.3	4cae1ff95027	openssl@3.5.4-r0	3.5.6-r0	1
directus/directus :11.1.0	e3c8bb975350	openssl@3.3.1-r3	3.3.7-r0	1
diygod/rsshub :2025-11-09	7a6312cac0d5	openssl@3.0.17-1~deb12u3	3.0.19-1~deb12u2	1
djjudas21/alertify :0.1.0	ba22be670c37	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
djjudas21/bearhugmugs :0.1.1	4fa898a52d97	openssl@3.3.2-r1	3.3.7-r0	1
djjudas21/ecowitt-exporter :2.2.0	73aab45ef10d	openssl@3.5.0-r0	3.5.6-r0	1
djjudas21/liturgical-colour-app :0.7.2	954935971d42	openssl@3.5.1-r0	3.5.6-r0	1
djjudas21/nova-exporter :0.0.10	e9094580885c	openssl@3.5.1-r0	3.5.6-r0	1
djjudas21/smtp-relay :0.11.0	ffd8143952f6	openssl@3.5.4-r0	3.5.6-r0	1
dobtc/bitcoin :25.1	a870f7cb1105	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
documenso/documenso :v1.8.1	7f16a9449f18	openssl@3.3.2-r0	3.3.7-r0	1
docuseal/docuseal :2.4.1	7493fd7f6728	openssl@3.5.5-r0	3.5.6-r0	1
dokuwiki/dokuwiki :2025-05-14a	f08ecfdda239	openssl@3.5.1-1	3.5.5-1~deb13u2	1
domainmod/domainmod :4.23.0	4017bfe4c597	openssl@3.0.9-1	3.0.19-1~deb12u2	1
dpage/pgadmin4 :9.11.0	50700ac17936	openssl@3.5.4-r0	3.5.6-r0	1
dpage/pgadmin4 :9.2	52cb72a9e3da	openssl@3.3.3-r0	3.3.7-r0	1
dpage/pgadmin4 :8.13	561c1f8f99f2	openssl@3.3.2-r0	3.3.7-r0	1
dragonflyoss/client :v0.1.82	edf3e921f4e0	openssl@3.0.11-1~deb12u2	3.0.19-1~deb12u2	1
dremio/dremio-oss :24.1.0	80ed2e3b7c43	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	1
drpcorg/dshackle :0.54.0	8858fae1859d	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	1
drumsergio/duplicacy-container :0.1.0	dd3ee9703969	openssl@3.5.5-r0	3.5.6-r0	1
drumsergio/duplicacy-exporter :0.3.4	ca3476077215	openssl@3.5.5-r0	3.5.6-r0	1
drumsergio/genieacs :1.2.16.0	28244054e1bf	openssl@3.0.18-1~deb12u2	3.0.19-1~deb12u2	1
drumsergio/pumperly :1.4.8	85bbc3915e9e	openssl@3.5.5-r0	3.5.6-r0	1
dserio83/velero-api :0.3.1	6b3d9115fee2	openssl@3.0.16-1~deb12u1	3.0.19-1~deb12u2	1
dserio83/velero-watchdog :0.1.8	d5deae589229	openssl@3.0.15-1~deb12u1	3.0.19-1~deb12u2	1
duck1123/cert-downloader :latest	0e29f19fa67c	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	1
duck1123/dinsro :latest	9568c5961d5d	openssl@3.3.2-r4	3.3.7-r0	1
duck1123/lnd-fileserver :latest	9d6fb247b714	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.23	1
durellirsd/security-smells-api :v1	7398aca4fc2e	openssl@3.3.0-r2	3.3.7-r0	1
dvdlevanon/kubernetes-database-scaler :v0.0.36	1e79c1643fe4	openssl@3.5.0-r0	3.5.6-r0	1