CVE-2026-35189

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.003; 17th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,956; of 17,985 indexed, latest versions
Container images: 2,991; deployed by those charts
Fix available: 3 of 4; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,956 of 17,985 indexed charts deploy, on 2,991 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+123 more	1.0.1f-1ubuntu2.27+esm17, 1.0.2g-1ubuntu4.20+esm19, 1.1.1-1ubuntu2.1~18.04.23+esm11, 1.1.1f-1ubuntu2.24+esm6+4 more	2,694
opensslapk	3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+5 more	3.3.7-r2	297
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+14 more	no fix listed	23
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more	1.0.2n-1ubuntu5.13+esm7	22

OSV records: ALPINE-CVE-2026-35189 DEBIAN-CVE-2026-35189 ECHO-312d-f531-8c85 UBUNTU-CVE-2026-35189
Also known as: USN-8847-1, USN-8847-2
Trending: Rank 5 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

2,956 by stars

Chart

Latest

Affected images

Radar Score

voltha-infraopencord

2.14.0

2 of 10 See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm11
voltha/voltha-onos :5.1.8	e038acb950d3	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm11

Open the chart page →

45,109

opencost-parquet-exporteropencost

0.3.1

1 of 1 See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	openssl@3.0.15-1~deb12u1	no fix listed

Open the chart page →

11,911

cron-connectoropenfaas

0.6.16

1 of 1 See more

cron-connector openfaas 0.6.16

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/cron-connector :0.7.0	982498e8a41e	openssl@3.3.2-r4	3.3.7-r2

Open the chart page →

1,246

postgres-connectoropenfaas

0.1.2

1 of 1 See more

postgres-connector openfaas 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/postgres-connector :0.2.3	379e583a0a75	openssl@3.3.2-r4	3.3.7-r2

Open the chart page →

1,604

rabbitmq-connectoropenfaas

0.0.4

1 of 1 See more

rabbitmq-connector openfaas 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/rabbitmq-connector :0.1.2	349f7dca95ec	openssl@3.3.2-r4	3.3.7-r2

Open the chart page →

1,413

sqs-connectoropenfaas

0.2.7

1 of 1 See more

sqs-connector openfaas 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/sqs-connector :0.3.4	d44ed3b3128c	openssl@3.3.2-r4	3.3.7-r2

Open the chart page →

1,273

dokuopenlit

0.1.4

1 of 3 See more

doku openlit 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :latest	42acb460c63b	openssl@3.0.2-0ubuntu1.29	3.0.2-0ubuntu1.30

Open the chart page →

1,867

openlitopenlit

1.24.0

1 of 3 See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.4.1	2e6587b81a26	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm6

Open the chart page →

5,809

openlit-controlleropenlit

0.10.0

1 of 1 See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/openlit/openlit-controller :0.10.0	165efd4469ea	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

1,751

openpanelopenpanel

0.9.0

1 of 6 See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :25.10.2.65	e019438e1e05	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.30

Open the chart page →

4,472

llm-stackopenproject-helm-charts

2.0.0

2 of 2 See more

llm-stack openproject-helm-charts 2.0.0

2 of the 2 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
apache/apisix :3.16.0-ubuntu	5e47692cac00	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.16
library/python :3.12-slim	f77ac9e44ae9	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

2,119

fineractopenshift

0.1.1

2 of 4 See more

fineract openshift 0.1.1

2 of the 4 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
library/mariadb :11.4	70cc072b29b4	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
library/nginx :latest	abe47724e466	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

8,931

kubedb-certifiedopenshift

2026.7.10

5 of 8 See more

kubedb-certified openshift 2026.7.10

5 of the 8 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/kubedb/kubedb-autoscaler :v0.51.0	5d1182ac21f0	openssl@3.0.20-1~deb12u2	no fix listed
ghcr.io/kubedb/kubedb-crd-manager :v0.21.0	9506a6cb98d1	openssl@3.0.20-1~deb12u2	no fix listed
ghcr.io/kubedb/kubedb-ops-manager :v0.53.0	6d4c9fe66e4f	openssl@3.0.20-1~deb12u2	no fix listed
ghcr.io/kubedb/kubedb-provisioner :v0.66.0	e7041c3b41e7	openssl@3.0.20-1~deb12u2	no fix listed
ghcr.io/kubedb/kubedb-webhook-server :v0.42.0	f7dcade6523b	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

5,863

mattermost-team-editionopenshift

6.6.83

1 of 4 See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	openssl@3.0.17-1~deb12u2	no fix listed

Open the chart page →

5,023

voyager-gatewayopenshift

2026.1.15

1 of 2 See more

voyager-gateway openshift 2026.1.15

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.1.0	13fd0cccafe8	openssl@3.0.18-1~deb12u1	no fix listed

Open the chart page →

3,272

sohaopensoha

0.1.10

1 of 2 See more

soha opensoha 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
pgvector/pgvector :0.8.5-pg18-trixie	9d2e61c7352b	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

2,292

open-vpnopenvpn

0.0.1

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm11

Open the chart page →

81,964

terminalsopen-webui

0.7.0

2 of 2 See more

terminals open-webui 0.7.0

2 of the 2 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/open-webui/terminals :latest	6850ed976e7e	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
ghcr.io/open-webui/terminals-operator :latest	5e1ceb6b3b26	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

2,280

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	nodejs@8.10.0~dfsg-2ubuntu0.4 openssl@1.1.1-1ubuntu2.1~18.04.6 openssl1.0@1.0.2n-1ubuntu5.4	no fix listed 1.1.1-1ubuntu2.1~18.04.23+esm11 1.0.2n-1ubuntu5.13+esm7

Open the chart page →

107,385

operatonoperaton

1.0.5

1 of 1 See more

operaton operaton 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
operaton/operaton :1.0.0-beta-4	b35867ffe4d8	openssl@3.3.3-r0	3.3.7-r2

Open the chart page →

2,360

kubernetes-syncopslevel

0.8.0

1 of 1 See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	openssl@3.0.14-1~deb12u2	no fix listed

Open the chart page →

2,209

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	openssl@1.0.1f-1ubuntu2.25	1.0.1f-1ubuntu2.27+esm17

Open the chart page →

26,967

hiveopstty

0.1.9

2 of 4 See more

hive opstty 0.1.9

2 of the 4 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
alpine/curl :8.12.0	8943e8c7e8e4	openssl@3.3.2-r4	3.3.7-r2
bitnamilegacy/postgresql :16	233f361c5819	openssl@3.0.15-1~deb12u1	no fix listed

Open the chart page →

5,139

example-idpory

0.64.0

1 of 1 See more

example-idp ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
oryd/hydra-login-consent-node :v26.2.0	6465e95993b5	openssl@3.3.3-r0	3.3.7-r2

Open the chart page →

1,206

grrosdfir-infrastructure

1.0.3

2 of 5 See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.30
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	openssl@3.0.13-1~deb12u1	no fix listed

Open the chart page →

12,648

osdfir-infrastructureosdfir-infrastructure

2.15.0

28 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

28 of the 40 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
bitnamilegacy/git :latest	4b08d0c5af8d	openssl@3.0.16-1~deb12u1	no fix listed
chromadb/chroma :1.5.7	fc8dc8e11fb2	openssl@3.5.5-1~deb13u1	3.5.7-1~deb13u3
library/mariadb :11.3.2	e101f9db3191	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.30
library/postgres :17.2-alpine	7e5df973a748	openssl@3.3.2-r4	3.3.7-r2
library/redis :7.4.2-alpine	02419de7eddf	openssl@3.3.3-r0	3.3.7-r2
yetiplatform/bloomcheck :dev	85683ddfccbb	openssl@3.3.3-r0	3.3.7-r2
yetiplatform/yeti :2.9.0	9bcbe2650a14	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
yetiplatform/yeti-frontend :2.9.0	873ef15d267b	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	openssl@3.0.13-1~deb12u1	no fix listed
ghcr.io/openrelik/openrelik-mediator :latest	42efc445b19e	openssl@3.0.20-1~deb12u2	no fix listed
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	openssl@3.0.18-1~deb12u2	no fix listed
ghcr.io/openrelik/openrelik-server :latest	ce1132261523	openssl@3.0.20-1~deb12u2	no fix listed
ghcr.io/openrelik/openrelik-worker-analyzer-config :latest	1269d3d8d2c2	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-analyzer-logs :latest	b175cc61959a	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-bulkextractor :latest	67498ee2e639	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-capa :latest	71323a4f3fc5	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-chromecreds :latest	76d4fbcc6ff0	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-cloud-logs :latest	a5d7e3cf71d3	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-containers :latest	a6d5abe94706	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-dfindexeddb :latest	31966a825782	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-extraction :latest	ec9fc5864cd5	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-floss :latest	7a331eb83c6a	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-grep :latest	470ff3529746	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-os-creds :latest	7fc7ec101f08	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-plaso :latest	75537ea8c851	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-strings :latest	6e05055b701f	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-timesketch :latest	4cb88b603cdc	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16
ghcr.io/openrelik/openrelik-worker-yara :latest	bd7fbf4505b5	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16

Open the chart page →

235,387

yetiosdfir-infrastructure

1.0.5

2 of 4 See more

yeti osdfir-infrastructure 1.0.5

2 of the 4 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
yetiplatform/yeti :latest	9c3006cedcca	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3
yetiplatform/yeti-frontend :latest	709064278c7e	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

8,018

fluent-bitot-container-kit

0.0.3

1 of 2 See more

fluent-bit ot-container-kit 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
quay.io/opstree/fluent-bit :5.0.3	391eef5a68ff	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

1,107

loki-standaloneot-container-kit

1.0.2

2 of 5 See more

loki-standalone ot-container-kit 1.0.2

2 of the 5 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
quay.io/opstree/k8s-sidecar :2.7.1	26aa9bb3386b	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3
quay.io/opstree/memcached :1.6.38-alpine3.22	cabbdfd2c3fe	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

4,489

vm-standaloneot-container-kit

0.0.4

2 of 6 See more

vm-standalone ot-container-kit 0.0.4

2 of the 6 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
quay.io/opstree/grafana :12.4.3	b61c1ed2f015	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3
quay.io/opstree/k8s-sidecar :2.7.3	7075d455b219	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

4,554

webot-container-kit

0.1.0

1 of 1 See more

web ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

1,859

workerot-container-kit

0.1.0

1 of 1 See more

worker ot-container-kit 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

1,859

otsots

1.9.0

1 of 2 See more

ots ots 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
library/redis :8.10.2	d5ac52db24d4	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

773

akash-hostname-operatorovrclk-2

11.5.1

1 of 1 See more

akash-hostname-operator ovrclk-2 11.5.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/provider :0.6.8	8c780ae8d1bb	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.16

Open the chart page →

4,013

akash-inventory-operatorovrclk-2

11.5.1

1 of 1 See more

akash-inventory-operator ovrclk-2 11.5.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/provider :0.6.8	8c780ae8d1bb	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.16

Open the chart page →

4,013

akash-ip-operatorovrclk-2

11.5.1

1 of 1 See more

akash-ip-operator ovrclk-2 11.5.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/provider :0.6.8	8c780ae8d1bb	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.16

Open the chart page →

4,013

console-apiovrclk-2

0.1.1

1 of 1 See more

console-api ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/console-api :2.64.0	ba359097329d	openssl@3.3.3-r0	3.3.7-r2

Open the chart page →

4,320

console-webovrclk-2

0.1.1

1 of 1 See more

console-web ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/deploy-web :2.46.0	ac540172c120	openssl@3.3.3-r0	3.3.7-r2

Open the chart page →

3,079

providerovrclk-2

11.5.1

1 of 1 See more

provider ovrclk-2 11.5.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/provider :0.6.8	8c780ae8d1bb	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.16

Open the chart page →

4,013

provider-consoleovrclk-2

0.1.0

1 of 1 See more

provider-console ovrclk-2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/provider-console :1.0.0	4d4c19a8d3ff	openssl@3.3.2-r4	3.3.7-r2

Open the chart page →

2,577

provider-proxyovrclk-2

0.1.1

1 of 1 See more

provider-proxy ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/provider-proxy :1.4.3	53f533d7c6f8	openssl@3.3.3-r0	3.3.7-r2

Open the chart page →

3,231

lens-metric-proxyowan-charts

0.1.0

1 of 1 See more

lens-metric-proxy owan-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
library/nginx :stable	0aa2d81d65bc	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

1,859

automatap2p-avs

0.1.0

1 of 2 See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.29	3.0.2-0ubuntu1.30

Open the chart page →

4,339

avap2p-avs

0.1.0

1 of 1 See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	openssl@3.0.13-1~deb12u1	no fix listed

Open the chart page →

3,896

k3p2p-avs

0.1.5

1 of 2 See more

k3 p2p-avs 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.29	3.0.2-0ubuntu1.30

Open the chart page →

2,588

mishtip2p-avs

0.1.0

1 of 2 See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.29	3.0.2-0ubuntu1.30

Open the chart page →

4,547

radiusp2p-avs

0.1.0

1 of 1 See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
theradius/loggia :0.4	63ba348546ec	openssl@3.0.11-1~deb12u2	no fix listed

Open the chart page →

13,132

ungatep2p-avs

0.1.0

3 of 3 See more

ungate p2p-avs 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	openssl@3.0.13-1~deb12u1	no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	openssl@3.0.13-1~deb12u1	no fix listed
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.29	3.0.2-0ubuntu1.30

Open the chart page →

29,562

p4p4

0.1.0

4 of 7 See more

p4 p4 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	openssl@1.1.1-1ubuntu2.1~18.04.21	1.1.1-1ubuntu2.1~18.04.23+esm11
library/mongo :5.0-focal	5e15a3f014ed	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm6
library/rabbitmq :3.11-management	c3f70098e01d	openssl@3.0.2-0ubuntu1.14	3.0.2-0ubuntu1.30
mastercloudapps/planner :v1.23	40a950b311b2	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.30

Open the chart page →

30,492

myappp4-helm

0.1.0

1 of 6 See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-35189.

Container image	Digest	Package	Fixed in
library/mongo :4.2.3	58b25d51baa1	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm11

Open the chart page →

23,214

Container images carrying it

2,991 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	openssl@3.0.11-1~deb12u2	no fix listed	1
public.ecr.aws/zinclabs/openobserve :v0.8.1	27f8de509169	openssl@3.0.11-1~deb12u2	no fix listed	1
quay.io/aerokube/jumphost :1.0.1	70fd7c00418d	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.30	1
quay.io/aerokube/keygen :1.0.1	578934444f04	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.30	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.30	1
quay.io/argoproj/argocd :v2.10.7	83c86003b781	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.30	1
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.16	1
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.16	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.30	1
quay.io/argoprojlabs/gitops-promoter :v0.42.0	105b74aaf5e9	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	openssl@3.0.2-0ubuntu1.13	3.0.2-0ubuntu1.30	1
quay.io/cilium/cilium :v1.18.2	858f807ea4e2	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.16	1
quay.io/cilium/cilium :v1.17.14	cdcfab5b4466	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.16	1
quay.io/cilium/cilium-envoy :v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be	60031f396695	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.16	1
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.16	1
quay.io/clustersecret/clustersecret :0.0.14	a9f835d1b241	openssl@3.0.15-1~deb12u1	no fix listed	1
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	openssl@3.0.17-1~deb12u2	no fix listed	1
quay.io/enix/topomatik :1.3.1	d9f0bec83ef0	openssl@3.0.2-0ubuntu1.23	3.0.2-0ubuntu1.30	1
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	openssl@1.1.1-1ubuntu2.1~18.04.20	1.1.1-1ubuntu2.1~18.04.23+esm11	1
quay.io/evryfs/spring-boot-admin :2.7.10	60950ef63764	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.30	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.30	1
quay.io/galaxyproject/galaxy-min :26.1.1	2c324c9789f5	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3	1
quay.io/go-skynet/local-ai :latest	0632c21ddbe4	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16	1
quay.io/groundcover/tools :20260929	e8a79ea4cf39	openssl@3.5.7-1~deb13u2+e1	3.5.7-1~deb13u3	1
quay.io/heubeck/examiner :1.14.6	1154472ff8c4	openssl@3.0.17-1~deb12u3	no fix listed	1
quay.io/isindir/sops-secrets-operator :0.21.2	7bba7083dfa0	openssl@3.5.5-1ubuntu3.3	3.5.5-1ubuntu3.6	1
quay.io/jupyterhub/configurable-http-proxy :5.1.0	eb10d5bf045c	openssl@3.3.4-r0	3.3.7-r2	1
quay.io/jupyterhub/k8s-hub :4.4.2	108fbb01c3fe	openssl@3.0.20-1~deb12u2	no fix listed	1
quay.io/jupyterhub/k8s-hub :4.3.5	113e372cf71b	openssl@3.0.19-1~deb12u2	no fix listed	1
quay.io/jupyterhub/k8s-hub :4.3.4	92f883d09270	openssl@3.0.19-1~deb12u2	no fix listed	1
quay.io/jupyterhub/k8s-singleuser-sample :4.4.2	65e1b09fc8c9	openssl@3.0.20-1~deb12u2	no fix listed	1
quay.io/kannika/kannika-console :0.19.0	9f5d1079572d	openssl@3.0.20-1~deb12u2	no fix listed	1
quay.io/kiwigrid/k8s-sidecar :1.30.3	49dcce269568	openssl@3.3.3-r0	3.3.7-r2	1
quay.io/kubevirt/virt-operator :v1.7.0	37d2ef21e3e5	openssl@3.0.16-1~deb12u1	no fix listed	1
quay.io/kubevirt/virt-operator :v1.8.4	65d23c9ad917	openssl@3.0.18-1~deb12u2	no fix listed	1
quay.io/maxiv/pieeat :0.9.3	099715479210	openssl@3.5.6-1~deb13u1	3.5.7-1~deb13u3	1
quay.io/mittwald/kube-httpcache :stable	2169032c5840	openssl@3.0.16-1~deb12u1	no fix listed	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	openssl@1.0.2g-1ubuntu4.17	1.0.2g-1ubuntu4.20+esm19	1
quay.io/ocellusai/operator :v0.10.5	9ff01f642e2b	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3	1
quay.io/open-cluster-management/cluster-proxy :v0.12.0	35f9c3ad644a	openssl@3.3.7-r0	3.3.7-r2	1
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.16	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm19	1
quay.io/opsmxpublic/ubi8-oes-datascience :isd-spin-2025.10.01-af26a30d4-202511261054	d8f66f4117fe	openssl@3.5.4-1~deb13u1	3.5.7-1~deb13u3	1
quay.io/opstree/fluent-bit :5.0.3	391eef5a68ff	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3	1
quay.io/opstree/grafana :12.4.3	b61c1ed2f015	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3	1
quay.io/opstree/k8s-sidecar :2.7.1	26aa9bb3386b	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3	1
quay.io/opstree/k8s-sidecar :2.7.3	7075d455b219	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3	1
quay.io/opstree/memcached :1.6.38-alpine3.22	cabbdfd2c3fe	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u3	1
quay.io/poundex/tekton-stash-and-cache :0.2.2	e854423caa09	openssl@3.5.5-1ubuntu3.3	3.5.5-1ubuntu3.6	1
quay.io/prometheuscommunity/smartctl-exporter :v0.14.0	cfe22c36d7d2	openssl@3.3.3-r0	3.3.7-r2	1