StackRadar

CVE-2026-34182

Critical

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,998
of 17,813 indexed, latest versions
Container images
2,250
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-34182 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 1,998 of 17,813 indexed charts deploy, on 2,250 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+49 more3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.0.20-1~deb12u2, 3.5.3-1ubuntu3.4+2 more1,339
opensslapk3.2.0-r0, 3.3.1-r3, 3.3.1-r4, 3.3.2-r0+21 more3.3.7-r1, 3.5.7-r0, 3.6.3-r0906
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl33.3.7-35
OSV records
ALPINE-CVE-2026-34182CGA-2wwv-w5xp-m9x8DEBIAN-CVE-2026-34182UBUNTU-CVE-2026-34182AZL-89931
Also known as
CGA-4gg8-v3p2-g8wv, CGA-cqrg-76ch-37jw, CGA-v77x-mff6-j494, USN-8414-1

Charts affected

1,998 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,250 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
trinodb/trino:405ee80ab5eeab2
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.25
1
truebyteinnovationllp/redis:7.4.2-alpine3.21fae12abbc74c
openssl@3.3.7-r0
3.3.7-r1
1
trueosiris/vrising:latest9356f98ad561
openssl@3.0.2-0ubuntu1.23
3.0.2-0ubuntu1.25
1
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
openssl@3.5.4-1~deb13u2
3.5.6-1~deb13u2
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.25
1
tykling/dns_exporter:1.2.3cd6d650c01c1
openssl@3.5.6-r0
3.5.7-r0
1
typesense/typesense:0.25.1035ccfbc3fd8
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.25
1
typesense/typesense:30.191604dc128e2
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.25
1
typesense/typesense:28.0.rc35dea1b62b7b6e
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.25
1
ubuntu/squid:5.2-22.04_beta723891b5bc74
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.25
1
udhos/apiping:1.5.041ab9bae6f3b
openssl@3.5.4-r0
3.5.7-r0
1
udhos/eks-auto-pod-id-assoc:0.6.0196ef68af380
openssl@3.5.6-r0
3.5.7-r0
1
udhos/gateboard:1.12.53acc0e7599bf
openssl@3.5.4-r0
3.5.7-r0
1
udhos/gateboard-discovery:1.9.55567c9363c4c
openssl@3.5.4-r0
3.5.7-r0
1
udhos/k8s-mutating-admission-webhook:1.15.1e588db500edf
openssl@3.5.6-r0
3.5.7-r0
1
udhos/mongoping:1.3.103b08b63f524
openssl@3.3.3-r0
3.3.7-r1
1
udhos/rabbitping:1.3.0474c467bbf42
openssl@3.3.3-r0
3.3.7-r1
1
udhos/redis-enforce-expire:1.0.0615b6a7d742e
openssl@3.5.5-r0
3.5.7-r0
1
udhos/secrets:1.0.6daa2b4eaac09
openssl@3.3.3-r0
3.3.7-r1
1
udhos/sqs-to-sns:2.0.15cf7979da82e1
openssl@3.5.6-r0
3.5.7-r0
1
udhos/token-server:1.0.9728013f2fac1
openssl@3.5.2-r0
3.5.7-r0
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
openssl@3.5.5-r0
3.5.7-r0
1
unleashorg/unleash-server:7.5.09adb37e399ba
openssl@3.5.5-r0
3.5.7-r0
1
uptrace/uptrace:2.0.234a02c3b2d12
openssl@3.5.4-r0
3.5.7-r0
1
v2fly/v2fly-core:latestd06727b221fe
openssl@3.5.4-r0
3.5.7-r0
1
vabene1111/recipes:2.3.50f8d061895e9
openssl@3.5.4-r0
3.5.7-r0
1
valkey/valkey:8.1.61f84517eca8e
openssl@3.5.5-1~deb13u1
3.5.6-1~deb13u2
1
valkey/valkey:8.0.1c5d4f082b76d
openssl@3.0.14-1~deb12u2
3.0.20-1~deb12u2
1
vaultwarden/server:1.35.443498a94b22f
openssl@3.5.4-1~deb13u2
3.5.6-1~deb13u2
1
vaultwarden/server:1.34.384fd8a47f58d
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
1
vaultwarden/server:1.35.79a8eec71f4a5
openssl@3.5.5-1~deb13u2
3.5.6-1~deb13u2
1
vaultwarden/server:1.36.0-alpined3531610b486
openssl@3.5.6-r0
3.5.7-r0
1
vcnngr/pnbackend:latesteaf44ad0ad1f
openssl@3.3.3-r0
3.3.7-r1
1
vcnngr/pnfrontend:latest4e4979ab8c41
openssl@3.5.1-r0
3.5.7-r0
1
vcnngr/telegram-login:latest1a849a997b6d
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
vcnngr/telegram-rebot:latest30f1f05e57a6
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
vectorim/element-web:v1.11.9613d0ea68d7ff
openssl@3.3.3-r0
3.3.7-r1
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
1
velero/velero:v1.18.0e4d1e79be2ee
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.25
1
venturenox/redis:latest83b471c193ba
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
venturenox/sagawise:latestc11d32f18718
openssl@3.3.2-r4
3.3.7-r1
1
verapdf/rest:v1.30.2341359ac6af5
openssl@3.5.6-r0
3.5.7-r0
1
versity/versitygw:v1.0.145192635d0353
openssl@3.3.3-r0
3.3.7-r1
1
versity/versitygw:v1.1.0f730e0dbc1ef
openssl@3.5.4-r0
3.5.7-r0
1
victoriametrics/victoria-logs:v1.15.0-victorialogsd7435244eb19
openssl@3.3.3-r0
3.3.7-r1
1
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
openssl@3.5.0-r0
3.5.7-r0
1
vineyardcloudnative/vineyard-operator:latest9d419aa18faa
openssl@3.0.13-1~deb12u1
3.0.20-1~deb12u2
1
visualregressiontracker/api:5.0.11941aeb8c8bf9
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.