StackRadar

CVE-2026-34182

Critical

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,008
of 17,805 indexed, latest versions
Container images
2,270
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-34182 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 2,008 of 17,805 indexed charts deploy, on 2,270 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+49 more3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.0.20-1~deb12u2, 3.5.3-1ubuntu3.4+2 more1,348
opensslapk3.2.0-r0, 3.3.1-r3, 3.3.1-r4, 3.3.2-r0+21 more3.3.7-r1, 3.5.7-r0, 3.6.3-r0917
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl33.3.7-35
OSV records
ALPINE-CVE-2026-34182CGA-2wwv-w5xp-m9x8DEBIAN-CVE-2026-34182UBUNTU-CVE-2026-34182AZL-89931
Also known as
CGA-4gg8-v3p2-g8wv, CGA-cqrg-76ch-37jw, CGA-v77x-mff6-j494, USN-8414-1

Charts affected

2,008 by stars
ChartLatestAffected imagesRadar Score
kminionxxl-job-adminVerified publisher0.13.01 of 1See more

kminion xxl-job-admin 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-34182.

Container imageDigestPackageFixed in
redpandadata/kminion:v2.3.256da99e8d0d3
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

668
nightingalexxl-job-adminVerified publisher0.2.112 of 6See more

nightingale xxl-job-admin 0.2.11

2 of the 6 container images this version deploys carry CVE-2026-34182.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.11
flashcatcloud/nightingale:8.0.0-beta.11ea1b0aaabe09
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

9,730
pgcatxxl-job-adminVerified publisher0.3.31 of 1See more

pgcat xxl-job-admin 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-34182.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
openssl@3.0.13-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

3,192
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-34182.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2

Open the chart page →

1,334
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34182.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2

Open the chart page →

2,714
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-34182.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

1,571
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-34182.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

1,187
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-34182.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,964

Container images carrying it

2,270 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
library/varnish:7.5.04d0bb287d87b
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
library/varnish:alpinea84e1d4adb58
openssl@3.5.5-r0
3.5.7-r0
1
library/wordpress:6.4.3-apache8ae66efb09a2
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
1
library/wordpress:6.9.4-fpmad4a8bae2eb4
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2
1
library/wordpress:php8.1-apachef73396626d2f
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
1
library/znc:1.10.1c731c6a9b8b6
openssl@3.5.6-r0
3.5.7-r0
1
library/zookeeper:3.8-temurin55d1e5b2e601
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.25
1
library/zookeeper:3.9.57d0f24ebb67b
openssl@3.0.2-0ubuntu1.29
no fix listed
1
library/zookeeper:3.9.4dfa9ba46d14b
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.25
1
libretranslate/libretranslate:v1.9.61de2d7056bb8
openssl@3.0.18-1~deb12u2
3.0.20-1~deb12u2
1
lifailon/openrouter-bot:latestea37e4b6b952
openssl@3.5.1-r0
3.5.7-r0
1
linkstackorg/linkstack:latest1c8b05399ee4
openssl@3.5.5-r0
3.5.7-r0
1
linode/linode-blockstorage-csi-driver:v1.1.409f3282bf53d
openssl@3.5.5-r0
3.5.7-r0
1
linuxserver/airsonic-advanced:11.1.4d286a7f55a59
openssl@3.3.7-r0
3.3.7-r1
1
linuxserver/bookstack:26.05.202605282ebf97852661
openssl@3.5.6-r0
3.5.7-r0
1
linuxserver/calibre-web:0.6.24241009026e6f
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11
1
linuxserver/code-server:4.10.1a5e43a05ae79
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.25
1
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
openssl@3.3.3-r0
3.3.7-r1
1
linuxserver/foldingathome:7.6.219a997426d71e
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.11
1
linuxserver/jackett:0.24.20929bca08e2e6f1
openssl@3.5.6-r0
3.5.7-r0
1
linuxserver/jackett:0.24.2066f1f23e0c9845
openssl@3.5.6-r0
3.5.7-r0
1
linuxserver/overseerr:1.35.06108ed066d4a
openssl@3.5.5-r0
3.5.7-r0
1
linuxserver/prowlarr:2.4.0.5397-ls149a46d0ce0a823
openssl@3.5.6-r0
3.5.7-r0
1
lis314/project-zomboid-docker:latestaa2089c37920
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
lissy93/domain-locker:latestd3c95edc0a8b
openssl@3.5.6-r0
3.5.7-r0
1
lissy93/networking-toolbox:latest700862839553
openssl@3.5.5-r0
3.5.7-r0
1
listmonk/listmonk:v6.0.0bf3903d54a46
openssl@3.5.4-r0
3.5.7-r0
1
litellm/litellm-non_root:v1.82.3-stable09b217802ded
openssl@3.6.1-r3
3.6.3-r0
1
litlyx/litlyx-consumer:latest02225e77d316
openssl@3.5.4-r0
3.5.7-r0
1
litlyx/litlyx-dashboard:lateste64ff2d52385
openssl@3.5.4-r0
3.5.7-r0
1
litlyx/litlyx-producer:latest10407f36613f
openssl@3.5.4-r0
3.5.7-r0
1
livekit/ingress:v1.2.21ab01641b366
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.25
1
livekit/livekit-server:v1.9.03602a85840d5
openssl@3.5.0-r0
3.5.7-r0
1
lmacka/snappass:2.1.293f5c048b7d4
openssl@3.5.4-1~deb13u2
3.5.6-1~deb13u2
1
localstack/localstack:3.19d278167f2b7
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
1
locustio/locust:2.24.151d866285170
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
1
loeken/home-assistant:2026.5.14ce6abc553b3
openssl@3.5.6-r0
3.5.7-r0
1
loeken/jellyfin:10.11.87efbc24e47b0
openssl@3.5.6-r0
3.5.7-r0
1
loeken/radarr:5.27.0-nightlya24409d3846d
openssl@3.3.4-r0
3.3.7-r1
1
logiqai/flash:v3.10.265b996bc7bdc
openssl@3.0.14-1~deb12u2
3.0.20-1~deb12u2
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
openssl@3.0.18-1~deb12u2
3.0.20-1~deb12u2
1
louislam/uptime-kuma:2.0.24c364ef96aad
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2
1
louislam/uptime-kuma:2.4.091e963bfda56
openssl@3.0.20-1~deb12u1
3.0.20-1~deb12u2
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2
1
luligu/matterbridge:3.0.28f97884bebc2
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
lumenvox/admin-portal:7.112310cf52f79
openssl@3.5.6-r0
3.5.7-r0
1
lumenvox/file-store:7.138aa8711c9ef
openssl@3.5.6-r0
3.5.7-r0
1
maildev/maildev:2.2.1180ef51f65ee
openssl@3.3.2-r4
3.3.7-r1
1
makemake1337/blutgang:latest8a55174fc830
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
1
makersquad/harp-proxy:0.8.1a40dd258c527
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.