StackRadar

CVE-2026-31790

High

Advisory

Published 7 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.010
62nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,917
of 17,792 indexed, latest versions
Container images
2,218
deployed by those charts
Fix available
4 of 4
affected packages

Red Hat Security Advisory: openssl security update

Carried by container images the latest versions of 1,917 of 17,792 indexed charts deploy, on 2,218 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+44 more3.0.2-0ubuntu1.23, 3.0.13-0ubuntu3.9, 3.0.19-1~deb12u2, 3.5.3-1ubuntu3.3+1 more1,210
opensslapk3.1.4-r2, 3.2.0-r0, 3.3.0-r2, 3.3.1-r0+22 more3.3.7-r0, 3.5.6-r0, 3.6.2-r0897
opensslrpm1:3.0.1-43.el9_0, 1:3.0.7-6.el9_2, 1:3.0.7-17.el9_2, 1:3.0.7-25.el9_3+10 more1:3.5.5-2.el9_8, 3.3.5-599
openssl-fips-providerrpm3.0.7-2.el9, 3.0.7-6.el9_5, 3.0.7-8.el9, 3.0.7-8.el100:3.0.7-11.el9_8, 0:3.0.7-11.el10_279
OSV records
ALPINE-CVE-2026-31790CGA-82jc-g66m-rp8rCGA-chx3-v6gr-x6h2DEBIAN-CVE-2026-31790UBUNTU-CVE-2026-31790RHSA-2026:19218RHSA-2026:27744RHSA-2026:27746RLSA-2026:19218AZL-81950ECHO-cd1b-a137-2e06
Also known as
CGA-85p3-36wg-c582, CGA-hvhw-vf7c-7ccv, RHSA-2026:28832, USN-8155-1

Charts affected

1,917 by stars
ChartLatestAffected imagesRadar Score
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
dwdraju/alpine-curl-jq:latest83bd9be2b14b
openssl@3.3.1-r3
3.3.7-r0

Open the chart page →

6,326
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

5,559
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
openssl@3.3.2-r4
3.3.7-r0

Open the chart page →

1,287
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
openssl@3.0.18-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

2,496
rediswiremindVerified publisher23.0.61 of 1See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
openssl@3.0.18-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

2,136
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

1,195
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
openssl@3.3.3-r0
3.3.7-r0

Open the chart page →

790
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
openssl@3.0.2-0ubuntu1.16
3.0.2-0ubuntu1.23

Open the chart page →

14,173
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2

Open the chart page →

11,603
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

7,697
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
hamzaarshad10/queryfrontend:1.1.5.14cd359d9a78c3
openssl@3.3.2-r0
3.3.7-r0
hamzaarshad10/querypodpy:1.7154f38e8668e
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2
murtazashah46/helmfile:latest4d11726cf803
openssl@3.0.14-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

13,783
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.9

Open the chart page →

2,142
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
grafana/grafana:11.5.15781759b3d27
openssl@3.3.2-r0
3.3.7-r0

Open the chart page →

9,395
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
3.0.19-1~deb12u2

Open the chart page →

2,684
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

1,571
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.6-r0

Open the chart page →

1,159
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-31790.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,929

Container images carrying it

2,218 by charts deploying them

A fixed version is listed for 4 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
featureformcom/quickstart-loader:latest82396f8fb5e8
openssl@3.3.0-r2
3.3.7-r0
1
featurehub/dacha2:1.9.1c8d5551b5e40
openssl@3.3.3-r0
3.3.7-r0
1
featurehub/edge:1.9.198ad426737f6
openssl@3.3.3-r0
3.3.7-r0
1
featurehub/mr:1.9.1477d8bf771a9
openssl@3.3.3-r0
3.3.7-r0
1
felipecs8/app-db-connection-test:v129e06c9c6385
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
felipecs8/conversor-temperatura:v1f945423be36d
openssl@3.3.3-r0
3.3.7-r0
1
felipecs8/landing-page:v1db6d44e325a1
openssl@3.5.1-r0
3.5.6-r0
1
ffutop/ddc-ph-kafka-egress:latest319d94c8481a
openssl@3.5.4-r0
3.5.6-r0
1
ffutop/ddc-ph-kafka-ingress:latest15832d4f19be
openssl@3.5.4-r0
3.5.6-r0
1
ffutop/ddc-transport-udp-receive:latest651ca530d787
openssl@3.5.4-r0
3.5.6-r0
1
ffutop/ddc-transport-udp-send:latest4222eb5ee847
openssl@3.5.4-r0
3.5.6-r0
1
filiparag/hetzner_ddns:1.0.15a9cbae7997c
openssl@3.5.4-r0
3.5.6-r0
1
firefart/requesttracker:5.0.40d6249906d8c
openssl@3.0.11-1~deb12u1
3.0.19-1~deb12u2
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
flanksource/apm-hub:v0.0.471dacc3195bf9
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.23
1
flanksource/batch-runner:v1.0.44689687a7cf95
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.9
1
flashbots/mev-boost:1.8.07c486b5789da
openssl@3.3.1-r3
3.3.7-r0
1
flashcatcloud/nightingale:8.5.1421acb36181b
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
1
fleetdm/fleet:v4.66.012e644b7f40e
openssl@3.3.3-r0
3.3.7-r0
1
flowable/flowable-rest:7.1.0b7ae287502cd
openssl@3.3.2-r0
3.3.7-r0
1
fluent/fluent-bit:4.0.4ca08b7d2df5b
openssl@3.0.16-1~deb12u1
3.0.19-1~deb12u2
1
fluent/fluent-bit:4.0-debuge76397ef3983
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
1
fnzv/dump1090:latestb3079b95c336
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.23
1
folioci/mod-agreements:latest29c3f233a498
openssl@3.3.1-r3
3.3.7-r0
1
folioci/mod-authtoken:latest995a25a33133
openssl@3.5.5-r0
3.5.6-r0
1
folioci/mod-courses:latest68ca414f5596
openssl@3.5.5-r0
3.5.6-r0
1
folioci/mod-ldp:latestb55696fd9065
openssl@3.3.3-r0
3.3.7-r0
1
folioci/mod-licenses:latestcfd6109bf477
openssl@3.3.1-r3
3.3.7-r0
1
folioci/mod-oa:latestae3b069d4ba5
openssl@3.3.1-r3
3.3.7-r0
1
folioci/mod-search:latest44d7ee9acdf6
openssl@3.5.1-r0
3.5.6-r0
1
folioci/mod-serials-management:latest571fa1ffe8c9
openssl@3.3.1-r3
3.3.7-r0
1
folioci/mod-service-interaction:latestf53c327a48e8
openssl@3.3.1-r3
3.3.7-r0
1
fosrl/newt:1.10.4ccd2b0e9a049
openssl@3.5.5-r0
3.5.6-r0
1
fosrl/pangolin:1.13.0c32ad797ab96
openssl@3.5.4-r0
3.5.6-r0
1
foundationdb/fdb-kubernetes-operator:v2.3.07d7b6985291e
openssl@1:3.2.2-6.el9_5
1:3.5.5-2.el9_8
1
foxcpp/maddy:0.9.2a4b839985b9b
openssl@3.3.6-r0
3.3.7-r0
1
foxcpp/maddy:0.8.2eeb5813fc4d1
openssl@3.3.5-r0
3.3.7-r0
1
freedom98/flask:k3.0d7ce1533f297
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
openssl@3.0.15-1~deb12u1
3.0.19-1~deb12u2
1
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
openssl@3.5.4-1~deb13u1
3.5.5-1~deb13u2
1
gchq/accumulo:2.0.1c460bb587d6d
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.9
1
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
openssl@3.5.4-r0
3.5.6-r0
1
gdrocha/togglr-frontend:1.0.0ffbc1571c234
openssl@3.5.4-r0
3.5.6-r0
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
openssl@3.0.2-0ubuntu1.23
no fix listed
1
geopython/pycsw:3.0.0-beta284662ea6b78b
openssl@3.0.17-1~deb12u3
3.0.19-1~deb12u2
1
gethue/hue:latest7d5c1b9f8a79
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.23
1
getmeili/meilisearch:v1.11.0b9be3d2d4251
openssl@3.3.2-r0
3.3.7-r0
1
getmeili/meilisearch:v1.13.3bed3fb650e62
openssl@3.3.3-r0
3.3.7-r0
1
getmeili/meilisearch:v1.30.0f3ecbc8c5bfb
openssl@3.5.4-r0
3.5.6-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.