StackRadar

CVE-2026-35189

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,956
of 17,985 indexed, latest versions
Container images
2,991
deployed by those charts
Fix available
3 of 4
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,956 of 17,985 indexed charts deploy, on 2,991 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+123 more1.0.1f-1ubuntu2.27+esm17, 1.0.2g-1ubuntu4.20+esm19, 1.1.1-1ubuntu2.1~18.04.23+esm11, 1.1.1f-1ubuntu2.24+esm6+4 more2,694
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+5 more3.3.7-r2297
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+14 moreno fix listed23
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm722
OSV records
ALPINE-CVE-2026-35189DEBIAN-CVE-2026-35189ECHO-312d-f531-8c85UBUNTU-CVE-2026-35189
Also known as
USN-8847-1, USN-8847-2
Trending
Rank 5 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

2,956 by stars
ChartLatestAffected imagesRadar Score
todoapitodoapi-appVerified publisher0.1.01 of 2See more

todoapi todoapi-app 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
openssl@1.1.1-1ubuntu2.1~18.04.23
openssl1.0@1.0.2n-1ubuntu5.13
1.1.1-1ubuntu2.1~18.04.23+esm11
1.0.2n-1ubuntu5.13+esm7

Open the chart page →

7,369
todolist-charttodolist-chart0.1.71 of 10See more

todolist-chart todolist-chart 0.1.7

1 of the 10 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
openssl@3.5.1-1
3.5.7-1~deb13u3

Open the chart page →

8,537
test0tohlejezkouska0.1.01 of 2See more

test0 tohlejezkouska 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

3,332
tor-proxytor-proxy1.0.01 of 1See more

tor-proxy tor-proxy 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
gvpaleevkz/tor-proxy:v1.0.0563bd91fb0fb
openssl@3.3.7-r0
3.3.7-r2

Open the chart page →

233
netbirdtotmicro1.8.23 of 4See more

netbird totmicro 1.8.2

3 of the 4 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
netbirdio/management:0.60.252682e5f48f9
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.16
netbirdio/relay:0.60.2a10762533793
openssl@3.0.17-1~deb12u3
no fix listed
netbirdio/signal:0.60.267176bcbf6ab
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

7,378
traefik-external-dns-controllertraefik-external-dns-operator2.3.01 of 1See more

traefik-external-dns-controller traefik-external-dns-operator 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-controller:2.3.0cc22a16fac81
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

1,360
traefik-external-dns-operatortraefik-external-dns-operator1.0.11 of 1See more

traefik-external-dns-operator traefik-external-dns-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
openssl@3.3.3-r0
3.3.7-r2

Open the chart page →

1,421
pr-previewtrainyard-pr-previewVerified publisher1.1.11 of 1See more

pr-preview trainyard-pr-preview 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

1,859
apptreenityVerified publisher0.1.531 of 2See more

app treenity 0.1.53

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/postgres:17f4c66b820c6f
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

1,693
treenitytreenityVerified publisher0.1.31 of 4See more

treenity treenity 0.1.3

1 of the 4 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/postgres:14816cf7d06ec3
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

3,816
cicd-proxytremolo1.0.121 of 1See more

cicd-proxy tremolo 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/tremolosecurity/kube-oidc-proxy:1.0.13c5153b5f079c
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16

Open the chart page →

520
openunison-operatortremolo3.0.311 of 1See more

openunison-operator tremolo 3.0.31

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-kubernetes-operator:1.0.13a0178e08639a
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16

Open the chart page →

882
orchestratremolo3.1.563 of 5See more

orchestra tremolo 3.1.56

3 of the 5 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-k8s:1.0.51fbd5ad963d68
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16
ghcr.io/openunison/openunison-kubernetes-operator:1.0.13a0178e08639a
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16
ghcr.io/tremolosecurity/kube-oidc-proxy:1.0.13c5153b5f079c
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16

Open the chart page →

3,289
orchestra-kube-oidc-proxytremolo1.0.191 of 1See more

orchestra-kube-oidc-proxy tremolo 1.0.19

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/tremolosecurity/kube-oidc-proxy:1.0.13c5153b5f079c
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16

Open the chart page →

520
orchestra-login-portaltremolo2.3.981 of 1See more

orchestra-login-portal tremolo 2.3.98

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/openunison/openunison-k8s-react:1.0.2b595875df660
openssl@3.0.2-0ubuntu1.29
3.0.2-0ubuntu1.30

Open the chart page →

1,903
trident-protect-consoletrident-protect100.2609.0-console1 of 3See more

trident-protect-console trident-protect 100.2609.0-console

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v3.0.0cad26cd945d1
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

7,044
gtm-server-container-clustertrieb-work0.1.81 of 1See more

gtm-server-container-cluster trieb-work 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
gcr.io/cloud-tagging-10302018/gtm-cloud-image:stable688d35c6c544
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

690
saleor-appstrieb-work0.6.04 of 5See more

saleor-apps trieb-work 0.6.0

4 of the 5 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/redis:8.2.2f0957bcaa75f
openssl@3.0.17-1~deb12u3
no fix listed
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed:1.23.11d435b4ab372
openssl@3.3.3-r0
3.3.7-r2
ghcr.io/trieb-work/saleor-apps/saleor-app-search:1.24.328edefb6c92d
openssl@3.3.3-r0
3.3.7-r2
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp:1.4.357a06bfba327
openssl@3.3.3-r0
3.3.7-r2

Open the chart page →

8,936
traceetrivy-operator0.24.11 of 1See more

tracee trivy-operator 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
aquasec/tracee:0.24.1cfbbfee972e6
openssl@3.3.5-r0
3.3.7-r2

Open the chart page →

1,604
trowtrow0.13.01 of 1See more

trow trow 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/trow-registry/trow:0.10.075b7d2dcdb91
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

1,551
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

19,415
altinnendata-apitumogroup0.1.201 of 1See more

altinnendata-api tumogroup 0.1.20

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
sondresjo/altinnendata-api:v1.8.3a04fe506ae88
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16

Open the chart page →

498
altinnendata-apptumogroup0.1.231 of 1See more

altinnendata-app tumogroup 0.1.23

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
sondresjo/altinnendata-app:v1.9.73150a3038fbf
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

891
bobby-apitumogroup1.0.11 of 1See more

bobby-api tumogroup 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
sondresjo/bobby-api:latestfe534731909a
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

2,542
nstuning-apitumogroup0.1.251 of 1See more

nstuning-api tumogroup 0.1.25

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
sondresjo/nstuning-api:v1.7.1b96b0e32ba0d
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16

Open the chart page →

498
nstuning-apptumogroup0.1.221 of 1See more

nstuning-app tumogroup 0.1.22

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
sondresjo/nstuning-app:v1.6.15b7cc8f543551
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

891
pyttogpanne-apitumogroup0.1.51 of 1See more

pyttogpanne-api tumogroup 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
sondresjo/pyttogpanne-api:v1.0.370ef40e6caa6
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16

Open the chart page →

498
pyttogpanne-apptumogroup0.1.41 of 1See more

pyttogpanne-app tumogroup 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
sondresjo/pyttogpanne-app:v1.0.3706b0218f7b4
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

891
sjolystinnovation-apptumogroup0.1.51 of 1See more

sjolystinnovation-app tumogroup 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
sondresjo/sjolystinnovation-app:v1.3.04ce832347953
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

882
twentytwenty-crm0.1.111 of 4See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
redis/redis-stack-server:7.2.0-v10e44b2b49d059
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.30

Open the chart page →

6,453
simple-mongodbtyk-helm0.1.11 of 1See more

simple-mongodb tyk-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/mongo:4.44be76f674fc4
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm6

Open the chart page →

4,635
tyk-control-planetyk-helm5.4.12 of 7See more

tyk-control-plane tyk-helm 5.4.1

2 of the 7 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
tykio/tyk-dashboard:v5.13.21161bd297135
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
openssl@3.5.7-1~deb13u2+fips+dhi0
3.5.7-1~deb13u3

Open the chart page →

4,034
tyk-dashboardtyk-helm5.4.11 of 1See more

tyk-dashboard tyk-helm 5.4.1

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
tykio/tyk-dashboard:v5.13.21161bd297135
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

819
tyk-data-planetyk-helm5.4.11 of 3See more

tyk-data-plane tyk-helm 5.4.1

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
openssl@3.5.7-1~deb13u2+fips+dhi0
3.5.7-1~deb13u3

Open the chart page →

934
tyk-dev-portaltyk-helm5.4.11 of 2See more

tyk-dev-portal tyk-helm 5.4.1

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
tykio/portal:v1.19.078ffedae485e
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

727
tyk-stacktyk-helm5.4.12 of 7See more

tyk-stack tyk-helm 5.4.1

2 of the 7 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
tykio/tyk-dashboard:v5.13.21161bd297135
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
openssl@3.5.7-1~deb13u2+fips+dhi0
3.5.7-1~deb13u3

Open the chart page →

4,024
umbrella-chartumbrella-chartVerified publisher0.1.13 of 5See more

umbrella-chart umbrella-chart 0.1.1

3 of the 5 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
hassroutyyoussef/accountservice:latest1f01edf1ee0c
openssl@3.0.15-1~deb12u1
no fix listed
hassroutyyoussef/orderservice:latest2fc3d1617928
openssl@3.0.15-1~deb12u1
no fix listed
hassroutyyoussef/userservice:lateste0392e2b4a90
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

8,190
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

9,723
applicationuniversal-helm-chartVerified publisher0.4.51 of 1See more

application universal-helm-chart 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

1,859
unlaunla0.10.03 of 3See more

unla unla 0.10.0

3 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
library/postgres:16a3b7f434b2dc
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3
ghcr.io/amoylab/unla/mcp-gateway:latest960cb3cfce77
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.30
ghcr.io/amoylab/unla/web:latesteac1df1c5e66
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

10,407
kenerunxwaresVerified publisher2026.2.51 of 1See more

kener unxwares 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
rajnandan1/kener:3.2.1930407afca731
openssl@3.0.17-1~deb12u1
no fix listed

Open the chart page →

6,123
opencloudunxwaresVerified publisher0.2.37 of 13See more

opencloud unxwares 0.2.3

7 of the 13 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.16
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
openssl@3.0.15-1~deb12u1
no fix listed
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
openssl@3.0.15-1~deb12u1
no fix listed
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
openssl@3.0.15-1~deb12u1
no fix listed
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
openssl@3.0.15-1~deb12u1
no fix listed
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
openssl@3.0.15-1~deb12u1
no fix listed
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

48,086
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm19

Open the chart page →

15,888
uptime-platformuptime-platformVerified publisher0.1.31 of 3See more

uptime-platform uptime-platform 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
sashastudent/uptime-platform:latest37a82b4e598e
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

914
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
openssl@3.0.9-1
no fix listed

Open the chart page →

15,158
vault-raft-snapshot-agentvault-raft-snapshot-agentVerified publisher0.6.91 of 1See more

vault-raft-snapshot-agent vault-raft-snapshot-agent 0.6.9

1 of the 1 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/argelbargel/vault-raft-snapshot-agent:v0.12.5345174727a2b
openssl@3.3.3-r0
3.3.7-r2

Open the chart page →

1,685
vaultwardenvaultwarden-helmVerified publisher1.2.71 of 2See more

vaultwarden vaultwarden-helm 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

2,242
simple-prima-notavcnngrVerified publisher0.5.32 of 4See more

simple-prima-nota vcnngr 0.5.3

2 of the 4 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
openssl@3.3.3-r0
3.3.7-r2
vcnngr/pnbackend:latesteaf44ad0ad1f
openssl@3.3.3-r0
3.3.7-r2

Open the chart page →

5,765
telegram-rebotvcnngrVerified publisher1.0.02 of 3See more

telegram-rebot vcnngr 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
vcnngr/telegram-login:latest1a849a997b6d
openssl@3.0.15-1~deb12u1
no fix listed
vcnngr/telegram-rebot:latest30f1f05e57a6
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

5,528
velocityvelocity1.0.01 of 2See more

velocity velocity 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-35189.

Container imageDigestPackageFixed in
unitbuilds/velocity-workflow:1.0.0f85a34f5bb28
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16

Open the chart page →

1,103

Container images carrying it

2,991 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-35189.

syft 1.42.1 · advisories as of 3 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.