StackRadar

CVE-2026-34181

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.002
15th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
789
of 17,787 indexed, latest versions
Container images
820
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 789 of 17,787 indexed charts deploy, on 820 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more3.5.7-r0, 3.6.3-r0631
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.3-1ubuntu2, 3.5.4-1~deb13u1+5 more3.5.3-1ubuntu3.4, 3.5.5-1ubuntu3.2, 3.5.6-1~deb13u2184
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
OSV records
ALPINE-CVE-2026-34181CGA-2p6j-cvxh-gg7mDEBIAN-CVE-2026-34181UBUNTU-CVE-2026-34181
Also known as
CGA-5g4c-gpf6-xvxh, CGA-6jgq-q8x4-jwm9, CGA-mj3g-mrrh-cg33, USN-8414-1

Charts affected

789 by stars
ChartLatestAffected imagesRadar Score
tikatikaVerified publisher0.3.01 of 1See more

tika tika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

1,825
todolist-charttodolist-chart0.1.73 of 10See more

todolist-chart todolist-chart 0.1.7

3 of the 10 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
openssl@3.5.1-1
3.5.6-1~deb13u2
erenozcan17/go_backend:v4.250b4f23422b6
openssl@3.5.1-r0
3.5.7-r0
erenozcan17/react_frontend:v4.56e1b14973f9b
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

6,973
togglr-backendtogglrVerified publisher1.0.01 of 1See more

togglr-backend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

3,221
togglr-frontendtogglrVerified publisher1.0.01 of 1See more

togglr-frontend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
gdrocha/togglr-frontend:1.0.0ffbc1571c234
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,109
token-servertoken-server1.0.91 of 1See more

token-server token-server 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
udhos/token-server:1.0.9728013f2fac1
openssl@3.5.2-r0
3.5.7-r0

Open the chart page →

1,245
traefik-secrets-exportertraefik-secrets-exporter0.0.21 of 1See more

traefik-secrets-exporter traefik-secrets-exporter 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,675
trident-protecttrident-protect100.2606.01 of 2See more

trident-protect trident-protect 100.2606.0

1 of the 2 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,331
trident-protect-bxp-previewtrident-protect100.2511.0-bxp-preview1 of 3See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

1 of the 3 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v1.0.058b9fac358bd
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

2,183
trident-protect-consoletrident-protect100.2608.0-console1 of 3See more

trident-protect-console trident-protect 100.2608.0-console

1 of the 3 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,322
trivy-webhook-aws-security-hubtrivy-webhook-aws-security-hubVerified publisher0.1.201 of 1See more

trivy-webhook-aws-security-hub trivy-webhook-aws-security-hub 0.1.20

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
ghcr.io/csepulveda/trivy-webhook-aws-security-hub:v0.1.206836b779b060
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

616
trowtrow0.13.01 of 1See more

trow trow 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
ghcr.io/trow-registry/trow:0.10.075b7d2dcdb91
openssl@3.5.5-1~deb13u2
3.5.6-1~deb13u2

Open the chart page →

1,269
tfy-grafanatruefoundryVerified publisher0.1.211 of 3See more

tfy-grafana truefoundry 0.1.21

1 of the 3 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,062
tfy-logstruefoundryVerified publisher0.1.212 of 3See more

tfy-logs truefoundry 0.1.21

2 of the 3 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/timberio/vector:v0.50.05833723de9e4
openssl@3.5.4-r0
3.5.7-r0
public.ecr.aws/truefoundrycloud/timberio/vector:v0.52.088b8dc80ae74
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,031
truefoundry-monitoringtruefoundryVerified publisher0.1.63 of 8See more

truefoundry-monitoring truefoundry 0.1.6

3 of the 8 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
openssl@3.5.4-r0
3.5.7-r0
public.ecr.aws/truefoundrycloud/timberio/vector:v0.52.088b8dc80ae74
openssl@3.5.6-r0
3.5.7-r0
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

4,526
admin-dashboardtwenty20-helm-chartsVerified publisher1.1.01 of 1See more

admin-dashboard twenty20-helm-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29.5-alpine-slim08c2bc93448b
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

386
timetabletwomartensVerified publisher0.2.01 of 1See more

timetable twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
2martens/timetable:latestbd1ba6ab84c9
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

1,527
wahlrechttwomartensVerified publisher0.3.01 of 1See more

wahlrecht twomartens 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
2martens/wahlrecht:latestba2c3040dab0
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

1,689
deep-learning-toolsuninettsigma29.1.21 of 3See more

deep-learning-tools uninettsigma2 9.1.2

1 of the 3 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
library/nginx:1.29.3-alpineb3c656d55d7a
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,567
unleash-enterpriseunleash1.0.31 of 1See more

unleash-enterprise unleash 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

2,028
excalidashunxwaresVerified publisher2026.2.52 of 2See more

excalidash unxwares 2026.2.5

2 of the 2 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.4.271273af713c91
openssl@3.5.5-r0
3.5.7-r0
zimengxiong/excalidash-frontend:0.4.27242629350b06
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

2,620
proxyv2flyVerified publisher0.0.61 of 1See more

proxy v2fly 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
v2fly/v2fly-core:latestd06727b221fe
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,426
evolution-apivcnngrVerified publisher1.0.02 of 5See more

evolution-api vcnngr 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
openssl@3.5.6-r0
3.5.7-r0
evoapicloud/evolution-manager:latestcbfeb314afb9
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

3,746
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
vcnngr/pnfrontend:latest4e4979ab8c41
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

4,768
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
no fix listed

Open the chart page →

9,347
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

2,076
wallarm-gatewaywallarmVerified publisher0.4.01 of 1See more

wallarm-gateway wallarm 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
wallarm/gateway-controller:0.4.09c6ed23e2f0e
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2

Open the chart page →

2,018
wallarm-oobwallarmVerified publisher0.23.02 of 3See more

wallarm-oob wallarm 0.23.0

2 of the 3 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
wallarm/node-helpers:6.10.1aecd88b24c51
openssl@3.5.5-r0
3.5.7-r0
wallarm/node-native-processing:0.23.07db2da8fce0b
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

2,824
wasabi-s3-operatorwasabi-s3-operatorVerified publisher0.2.71 of 1See more

wasabi-s3-operator wasabi-s3-operator 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
kenchrcum/wasabi-s3-operator:0.2.7ce657c622ce5
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

628
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

4,984
haproxy-ingresswenerme0.16.11 of 1See more

haproxy-ingress wenerme 0.16.1

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.16fd744191ef6
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

793
victoria-metrics-k8s-stackwenerme0.92.11 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,889
wexa-studiowexa-studio1.2.03 of 15See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.7-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.7-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

14,983
whereaboutswhereaboutsVerified publisher0.3.01 of 1See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

617
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

5,459
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,639
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed

Open the chart page →

14,100
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2

Open the chart page →

1,281
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

1,571
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-34181.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

1,159

Container images carrying it

820 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
copyparty/ac:1.19.200a0a8605062c
openssl@3.5.4-r0
3.5.7-r0
1
coturn/coturn:4.10.0-r1f4c2af06c3c5
openssl@3.5.5-1~deb13u2
3.5.6-1~deb13u2
1
cr0hn/ja-shortener:v0.1.414482d0bc4a1
openssl@3.5.1-r0
3.5.7-r0
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
1
dalibo/explain.dalibo.com:2.20.12a0b749c2f7f
openssl@3.5.5-r0
3.5.7-r0
1
dariomader/twampy:v0.0.2d2f4a8c5e690
openssl@3.2.0-r0
3.6.3-r0
1
dashops/dash-ops:latest23537693ff05
openssl@3.5.6-r0
3.5.7-r0
1
datappeal/trino-loadbalancer:sha-950abbae6b5b9fdb2e6d
openssl@3.5.1-r0
3.5.7-r0
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
1
denniswitt/yas3p:0.2.488a235619af6
openssl@3.5.5-r0
3.5.7-r0
1
dependencytrack/apiserver:4.14.21ba4f004e1ec
openssl@3.5.5-1~deb13u2
3.5.6-1~deb13u2
1
dependencytrack/frontend:4.14.200560b57a6cf
openssl@3.5.6-r0
3.5.7-r0
1
devkrishan001/backend:latestf1c3acadeabe
openssl@3.5.6-r0
3.5.7-r0
1
devkrishan001/frontend:latesta0ad60836e6b
openssl@3.5.6-r0
3.5.7-r0
1
devopsiaci/self-learning-platform:1.1.3d9441c931f75
openssl@3.5.5-r0
3.5.7-r0
1
dgraph/ratel:v25.0.34cae1ff95027
openssl@3.5.4-r0
3.5.7-r0
1
directus/directus:12.0.29c8470ea465c
openssl@3.5.6-r0
3.5.7-r0
1
distribution/distribution:3.1.1bca24727f400
openssl@3.5.6-r0
3.5.7-r0
1
djjudas21/ecowitt-exporter:2.2.073aab45ef10d
openssl@3.5.0-r0
3.5.7-r0
1
djjudas21/liturgical-colour-app:0.7.2954935971d42
openssl@3.5.1-r0
3.5.7-r0
1
djjudas21/nova-exporter:0.0.10e9094580885c
openssl@3.5.1-r0
3.5.7-r0
1
djjudas21/smtp-relay:0.11.0ffd8143952f6
openssl@3.5.4-r0
3.5.7-r0
1
docuseal/docuseal:2.4.17493fd7f6728
openssl@3.5.5-r0
3.5.7-r0
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
openssl@3.5.1-1
3.5.6-1~deb13u2
1
donetick/donetick:v0.1.60849a43d9e363
openssl@3.5.1-r0
3.5.7-r0
1
dpage/pgadmin4:9.11.050700ac17936
openssl@3.5.4-r0
3.5.7-r0
1
dragonflyoss/scheduler:v2.5.2-rc.06d710dc2bae0
openssl@3.5.6-r0
3.5.7-r0
1
drumsergio/duplicacy-container:0.1.0dd3ee9703969
openssl@3.5.5-r0
3.5.7-r0
1
drumsergio/duplicacy-exporter:0.3.4ca3476077215
openssl@3.5.5-r0
3.5.7-r0
1
drumsergio/lynxprompt:2.0.75c6afb6679301
openssl@3.5.6-r0
3.5.7-r0
1
drumsergio/pumperly:1.4.885bbc3915e9e
openssl@3.5.5-r0
3.5.7-r0
1
dunglas/mercure:v0.24.080fcb704a741
openssl@3.5.6-r0
3.5.7-r0
1
dvdlevanon/kubernetes-database-scaler:v0.0.361e79c1643fe4
openssl@3.5.0-r0
3.5.7-r0
1
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
openssl@3.5.5-r0
3.5.7-r0
1
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2
1
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2
1
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2
1
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
1
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
openssl@3.5.5-r0
3.5.7-r0
1
eclipseaerios/management-portal-frontend:1.2.23a8e4cf60629
openssl@3.5.6-r0
3.5.7-r0
1
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
1
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
openssl@3.5.1-1+deb13u1
3.5.6-1~deb13u2
1
edoburu/pgbouncer:latest4c1ca296ef52
openssl@3.5.6-r0
3.5.7-r0
1
eftechcombr/glpi:php-fpm-12.0.0-rc1f3d0ed01709e
openssl@3.5.4-r0
3.5.7-r0
1
elautoestopista/aeneabot:4.2.1125ba620d528
openssl@3.5.4-r0
3.5.7-r0
1
emirozbir/dashdns-admission-webhook:v2.0.56801ba2a3fc3
openssl@3.5.5-r0
3.5.7-r0
1
emqx/emqx:5.8.935b46f7aa7a0
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
1
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
openssl@3.5.1-1
3.5.6-1~deb13u2
1
erenozcan17/go_backend:v4.250b4f23422b6
openssl@3.5.1-r0
3.5.7-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.