StackRadar

CVE-2026-34182

Critical

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.006
48th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,998
of 17,813 indexed, latest versions
Container images
2,250
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-34182 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 1,998 of 17,813 indexed charts deploy, on 2,250 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+49 more3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.0.20-1~deb12u2, 3.5.3-1ubuntu3.4+2 more1,339
opensslapk3.2.0-r0, 3.3.1-r3, 3.3.1-r4, 3.3.2-r0+21 more3.3.7-r1, 3.5.7-r0, 3.6.3-r0906
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl33.3.7-35
OSV records
ALPINE-CVE-2026-34182CGA-2wwv-w5xp-m9x8DEBIAN-CVE-2026-34182UBUNTU-CVE-2026-34182AZL-89931
Also known as
CGA-4gg8-v3p2-g8wv, CGA-cqrg-76ch-37jw, CGA-v77x-mff6-j494, USN-8414-1

Charts affected

1,998 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,250 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/appscode/taskqueue:v0.0.36877c958a3c6
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/appscode/trickster:v2.0.0cdbbed831f28
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/argelbargel/vault-raft-snapshot-agent:v0.12.5345174727a2b
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/aserto-dev/topaz:0.32.594c708ecf7dc4
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/ashvinbambhaniya/nexus-tasks-backend:2.0.0f80349eb018b
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
openssl@3.0.18-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
openssl@3.0.17-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
openssl@3.0.14-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/astriaorg/flame:0.1.0c8af1c5aae40
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11
1
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
openssl@3.0.17-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
openssl@3.0.17-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/atolat/open-cache:latestd6105dd73eb4
openssl@3.3.6-r0
3.3.7-r1
1
ghcr.io/attestkeep/attestkeep-k8s:1.1.110ce4cac41c4
openssl@3.3.7-r0
3.3.7-r1
1
ghcr.io/atuinsh/atuin:18.12.0e953fa9e36ef
openssl@3.0.18-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/autobrr/qui:v1.14.110b7945d4f09
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/babykart/gozone:0.18.08e0b24cf071a
openssl@3.3.7-r0
3.3.7-r1
1
ghcr.io/bank-vaults/bank-vaults:v1.33.198b6ea2ed319
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/bank-vaults/vault-secrets-webhook:v1.23.198baf045a1c9
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.25
1
ghcr.io/bastienwirtz/homer:v25.11.15c3a0fb561e0
openssl@3.3.5-r0
3.3.7-r1
1
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.25
1
ghcr.io/bensoer/external-secrets-reloader:v0.1.38e31b5a81853
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
openssl@3.5.2-r0
3.6.3-r0
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
openssl@3.0.17-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/bitmagnet-io/bitmagnet:v0.10.0cf2c16fac5b5
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
openssl@3.5.0-r0
3.5.7-r0
1
ghcr.io/blessingnator/keycloak-mcn-backend:2.0.5967470f05472
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/blessingnator/keycloak-mcn-frontend:2.0.1ddd462dbde39
openssl@3.3.6-r0
3.3.7-r1
1
ghcr.io/bluesky-social/pds:0.4.208637083d9369d
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/bnb-chain/bsc:1.6.2fd0e3ec7d960
openssl@3.3.5-r0
3.3.7-r1
1
ghcr.io/borgmatic-collective/borgmatic:1.9.9835b72878606
openssl@3.3.2-r4
3.3.7-r1
1
ghcr.io/bouquet2/copilot-api-docker:v0.7.06b0507a20602
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.11
1
ghcr.io/browsersec/kubebrowse-frontend:chore-improve-backbd6bea5e487c
openssl@3.5.1-r0
3.5.7-r0
1
ghcr.io/bryopsida/openmct:main38b6a50a62b2
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/bryopsida/patchwork:mainc01e018bced4
openssl@3.5.0-r0
3.5.7-r0
1
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
openssl@3.5.1-r0
3.5.7-r0
1
ghcr.io/bryopsida/syslog-portal:main3947bfd04f49
openssl@3.5.0-r0
3.5.7-r0
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
openssl@3.0.13-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/bulwarkmail/webmail:1.6.0f0a266506fcf
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
openssl@3.5.5-r0
3.5.7-r0
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.