StackRadar

CVE-2026-35189

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,945
of 17,985 indexed, latest versions
Container images
2,976
deployed by those charts
Fix available
3 of 4
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,945 of 17,985 indexed charts deploy, on 2,976 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+123 more1.0.1f-1ubuntu2.27+esm17, 1.0.2g-1ubuntu4.20+esm19, 1.1.1-1ubuntu2.1~18.04.23+esm11, 1.1.1f-1ubuntu2.24+esm6+4 more2,680
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+5 more3.3.7-r2296
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+14 moreno fix listed23
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm722
OSV records
ALPINE-CVE-2026-35189DEBIAN-CVE-2026-35189UBUNTU-CVE-2026-35189ECHO-312d-f531-8c85
Also known as
USN-8847-1, USN-8847-2
Trending
Rank 4 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

2,945 by stars
ChartLatestAffected imagesRadar Score
kube-ecr-secrets-operatorkube-ecr-secrets-operatorVerified publisher0.4.01 of 2See more

kube-ecr-secrets-operator kube-ecr-secrets-operator 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/alpine:3.21ce64758a109e
openssl@3.3.7-r1
3.3.7-r2

Open the chart page →

148
istiokubeflow1.0.02 of 2See more

istio kubeflow 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
istio/pilot:1.9.652f25f91d702
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm11
istio/proxyv2:1.9.687a9db561d2e
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm11

Open the chart page →

150,796
juicefs-tenantkubegems1.0.11 of 3See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
kubegems/redis:7.2.5-debian-12-r2870ee3a77add
openssl@3.0.13-1~deb12u1
no fix listed

Open the chart page →

4,633
kubegems-multus-cnikubegems2.4.11 of 2See more

kubegems-multus-cni kubegems 2.4.1

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.16bebbda31416
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

1,523
kube-insightkube-insight0.1.31 of 1See more

kube-insight kube-insight 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/nowakeai/kube-insight:v0.1.475849fe6548a
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

504
kubeintellectkubeintellectVerified publisher2.5.01 of 2See more

kubeintellect kubeintellect 2.5.0

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

2,474
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
openssl@3.0.9-1
no fix listed

Open the chart page →

4,613
kube-netlagkube-netlagVerified publisher1.1.01 of 1See more

kube-netlag kube-netlag 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
alazidis/kube-netlag:1.1.00e8c84152201
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.16

Open the chart page →

1,682
kube-node-readykube-node-ready0.5.01 of 1See more

kube-node-ready kube-node-ready 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/imunhatep/kube-node-ready:0.5.07439f6f9f85c
openssl@3.3.6-r0
3.3.7-r2

Open the chart page →

651
apm-serverkube-opsVerified publisher0.1.21 of 1See more

apm-server kube-ops 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
elastic/apm-server:7.17.6c7a1c63257d0
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm6

Open the chart page →

7,411
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.16

Open the chart page →

5,585
kube-pod-alertskube-pod-alertsVerified publisher0.1.81 of 1See more

kube-pod-alerts kube-pod-alerts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

1,981
kuberestkuberestVerified publisher1.4.01 of 1See more

kuberest kuberest 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
sebt3/kuberest:1.4.00ccce5d6d4d2
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,240
kubernetes-feedskubernetes-feeds0.1.11 of 3See more

kubernetes-feeds kubernetes-feeds 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
lumutools/kubernetes-feeder:lateste35ffa90b129
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

1,202
cloudflaredkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

cloudflared kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

1,645
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.31 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.6.6ae69fdd95cde
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

4,863
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

36,730
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.22 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

2 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/influxdb:2.8af89d51080c9
openssl@3.0.20-1~deb12u2
no fix listed
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

5,826
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
openssl@3.0.18-1~deb12u2
no fix listed

Open the chart page →

7,146
vaultwardenkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

vaultwarden kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

2,310
kubernetes-kiosk-chromiumkubernetes-kiosk-chromium0.1.21 of 1See more

kubernetes-kiosk-chromium kubernetes-kiosk-chromium 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
openssl@3.0.19-1~deb12u2
no fix listed

Open the chart page →

31,795
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest0b43204c37d6
openssl@3.0.2-0ubuntu1.29
3.0.2-0ubuntu1.30

Open the chart page →

41,939
kube-httpcachekubernetes-replicator0.9.11 of 1See more

kube-httpcache kubernetes-replicator 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
quay.io/mittwald/kube-httpcache:stable2169032c5840
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

4,888
testkube-logskubeshop0.2.21 of 1See more

testkube-logs kubeshop 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
kubeshop/testkube-logs-server:latest094186b19698
openssl@3.3.3-r0
3.3.7-r2

Open the chart page →

1,558
mongodbkubesphere-carryon-experimental0.1.21 of 2See more

mongodb kubesphere-carryon-experimental 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/mongo:4.2.16ca49afbcb2b
openssl@1.1.1-1ubuntu2.1~18.04.4
1.1.1-1ubuntu2.1~18.04.23+esm11

Open the chart page →

9,825
clickhousekubesphere-carryon-test0.1.11 of 2See more

clickhouse kubesphere-carryon-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
radondb/clickhouse-server:v21.1.3.32-stable4732df471073
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm11

Open the chart page →

6,978
csi-neonsankubesphere-carryon-test1.2.81 of 6See more

csi-neonsan kubesphere-carryon-test 1.2.8

1 of the 6 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm19

Open the chart page →

18,749
hertzbeatkubesphere-carryon-test1.4.11 of 4See more

hertzbeat kubesphere-carryon-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm6

Open the chart page →

8,149
mongodbkubesphere-carryon-test0.3.21 of 2See more

mongodb kubesphere-carryon-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/mongo:4.2.16ca49afbcb2b
openssl@1.1.1-1ubuntu2.1~18.04.4
1.1.1-1ubuntu2.1~18.04.23+esm11

Open the chart page →

9,825
mysqlkubesphere-carryon-test1.0.21 of 3See more

mysql kubesphere-carryon-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm6

Open the chart page →

7,576
radondb-mysqlkubesphere-carryon-test1.0.11 of 3See more

radondb-mysql kubesphere-carryon-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm6

Open the chart page →

7,576
sample-bookinfokubesphere-carryon-test1.0.01 of 4See more

sample-bookinfo kubesphere-carryon-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm19

Open the chart page →

10,014
xenondbkubesphere-carryon-test1.0.01 of 3See more

xenondb kubesphere-carryon-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm6

Open the chart page →

7,576
databend-metakubesphere-stable0.7.31 of 1See more

databend-meta kubesphere-stable 0.7.3

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
datafuselabs/databend-meta:v1.2.279ba877ee6cb4d
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

3,048
databend-querykubesphere-stable0.8.31 of 1See more

databend-query kubesphere-stable 0.8.3

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
datafuselabs/databend-query:v1.2.279a936843b85b4
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

3,048
deepflowkubesphere-stable6.2.6062 of 8See more

deepflow kubesphere-stable 6.2.606

2 of the 8 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm6
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
openssl@3.0.2-0ubuntu1.9
3.0.2-0ubuntu1.30

Open the chart page →

19,099
iomeshkubesphere-stable1.1.01 of 25See more

iomesh kubesphere-stable 1.1.0

1 of the 25 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.7.25d3f9bf9240b
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.30

Open the chart page →

49,830
IOMeshkubesphere-stable1.2.03 of 25See more

IOMesh kubesphere-stable 1.2.0

3 of the 25 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.8.01a151f602451
openssl@3.0.2-0ubuntu1.16
3.0.2-0ubuntu1.30
iomesh/node-disk-manager:1.8.0-2292ad270082e
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.16
iomesh/node-disk-operator:1.8.0-1de4aa40684ad
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.16

Open the chart page →

47,660
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm6

Open the chart page →

92,946
clickhousekubesphere-testVerified publisher0.1.11 of 2See more

clickhouse kubesphere-test 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
radondb/clickhouse-server:v21.1.3.32-stable4732df471073
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm11

Open the chart page →

6,978
csi-neonsankubesphere-testVerified publisher1.3.01 of 6See more

csi-neonsan kubesphere-test 1.3.0

1 of the 6 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
csiplugin/csi-neonsan:v1.2.21fa83d45417f
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm19

Open the chart page →

18,749
mongodbkubesphere-testVerified publisher0.3.21 of 2See more

mongodb kubesphere-test 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/mongo:4.2.16ca49afbcb2b
openssl@1.1.1-1ubuntu2.1~18.04.4
1.1.1-1ubuntu2.1~18.04.23+esm11

Open the chart page →

9,825
mysqlkubesphere-testVerified publisher1.0.21 of 3See more

mysql kubesphere-test 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm6

Open the chart page →

7,576
sample-bookinfokubesphere-testVerified publisher1.0.01 of 4See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm19

Open the chart page →

10,014
xenondbkubesphere-testVerified publisher1.0.01 of 3See more

xenondb kubesphere-test 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm6

Open the chart page →

7,576
kubestellar-consolekubestellar-consoleVerified publisher0.3.421 of 2See more

kubestellar-console kubestellar-console 0.3.42

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
openssl@3.3.3-r0
3.3.7-r2

Open the chart page →

4,655
kubestellar-uikubestellaruiVerified publisher0.1.12 of 4See more

kubestellar-ui kubestellarui 0.1.1

2 of the 4 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
mavrick1/kubestellar-b:latest45ca0429a1d4
openssl@3.3.3-r0
3.3.7-r2
mavrick1/kubestellar-f:latest56bd8eaa53a4
openssl@3.3.3-r0
3.3.7-r2

Open the chart page →

5,321
kubevirtkubevirtVerified publisher0.2.01 of 1See more

kubevirt kubevirt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
quay.io/kubevirt/virt-operator:v1.8.465d23c9ad917
openssl@3.0.18-1~deb12u2
no fix listed

Open the chart page →

748
kubevoipkubevoipOfficialVerified publisher0.6.81 of 1See more

kubevoip kubevoip 0.6.8

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/kubevoip/kubevoip:v0.6.841c603a93642
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

1,398
network-enforcerkubewardenVerified publisher0.1.21 of 3See more

network-enforcer kubewarden 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0.4ca08b7d2df5b
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

2,845

Container images carrying it

2,976 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-35189.

syft 1.42.1 · advisories as of 2 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.