StackRadar

CVE-2026-35191

Low

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
929
of 17,957 indexed, latest versions
Container images
672
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 929 of 17,957 indexed charts deploy, on 672 images.

Affected packageAffected versionsFixed inImages
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+15 more3.5.5-1ubuntu3.6667
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
OSV records
UBUNTU-CVE-2026-35191DEBIAN-CVE-2026-35191
Also known as
USN-8847-1
Trending
Rank 41 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

929 by stars
ChartLatestAffected imagesRadar Score
my-helm-chartdemohelm20.1.01 of 1See more

my-helm-chart demohelm2 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

1,765
challengedeneme0.1.01 of 2See more

challenge deneme 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/postgres:latest86c951e05bf5
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

2,527
apachedevops0.1.01 of 4See more

apache devops 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
nodejs@16.18.0-deb-1nodesource1
no fix listed

Open the chart page →

121,940
laraveldevops0.10.31 of 4See more

laravel devops 0.10.3

1 of the 4 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ghcr.io/codingducksrl/laravel:8.15be52524664c
nodejs@16.18.0-deb-1nodesource1
no fix listed

Open the chart page →

120,938
diomdiom0.2.01 of 1See more

diom diom 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
svix/diom-operator:0.3.085dba8f1caa8
openssl@3.5.6-1~deb13u2
no fix listed

Open the chart page →

1,190
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
openssl@3.5.6-1~deb13u2
no fix listed

Open the chart page →

8,087
ownclouddjjudas21Verified publisher0.3.231 of 3See more

owncloud djjudas21 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
valkey/valkey:8.1.481db6d39e1bb
openssl@3.5.1-1+deb13u1
no fix listed

Open the chart page →

11,049
truecommanddjjudas21Verified publisher0.1.01 of 1See more

truecommand djjudas21 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ixsystems/truecommand:3.2.019c218455cd2
openssl@3.5.1-1
no fix listed

Open the chart page →

5,641
webtreesdjjudas21Verified publisher3.0.01 of 1See more

webtrees djjudas21 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
openssl@3.5.6-1~deb13u1
no fix listed

Open the chart page →

6,588
netbirddmdhrumilmistryVerified publisher0.1.03 of 6See more

netbird dmdhrumilmistry 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
coturn/coturn:latestbbefd3e1fdfd
openssl@3.5.7-1~deb13u2
no fix listed
netbirdio/relay:latest0ef3133050c7
openssl@3.5.7-1~deb13u2
no fix listed
netbirdio/signal:latest04c401eb167e
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

3,729
dnsmasq-k8sdnsmasq-k8s1.4.11 of 1See more

dnsmasq-k8s dnsmasq-k8s 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
openssl@3.5.4-1~deb13u1
no fix listed

Open the chart page →

3,279
dominodomino-iisasVerified publisher0.3.12 of 3See more

domino domino-iisas 0.3.1

2 of the 3 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
openssl@3.5.1-1+deb13u1
no fix listed
ghcr.io/iisas/domino-rest:latest3009350bfc11
openssl@3.5.4-1~deb13u2
no fix listed

Open the chart page →

11,245
exim4dossif0.2.01 of 1See more

exim4 dossif 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
tianon/exim4:latestaa8ddf38e160
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

1,185
healthchecksdoubanVerified publisher1.0.101 of 2See more

healthchecks douban 1.0.10

1 of the 2 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
healthchecks/healthchecks:latestaa08a61b0dcf
openssl@3.5.6-1~deb13u2
no fix listed

Open the chart page →

2,000
cloudflaredduck-helm1.1.31 of 1See more

cloudflared duck-helm 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
openssl@3.5.4-1~deb13u2
no fix listed

Open the chart page →

1,602
postgres-backup-localduck-helm0.1.51 of 1See more

postgres-backup-local duck-helm 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
prodrigestivill/postgres-backup-local:latestf70742ebe42b
openssl@3.5.1-1
no fix listed

Open the chart page →

3,706
rundeckdwardu-helm-charts0.3.41 of 2See more

rundeck dwardu-helm-charts 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

20,125
aerios-k8s-shimeclipse-aeriosVerified publisher1.0.01 of 1See more

aerios-k8s-shim eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
openssl@3.5.6-1~deb13u2
no fix listed

Open the chart page →

1,687
hlo-allocatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-allocator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
openssl@3.5.6-1~deb13u1
no fix listed

Open the chart page →

1,704
hlo-data-aggregatoreclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-data-aggregator eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
openssl@3.5.6-1~deb13u1
no fix listed

Open the chart page →

1,873
hlo-deployment-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-deployment-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
openssl@3.5.6-1~deb13u1
no fix listed

Open the chart page →

1,884
hlo-fe-engineeclipse-aeriosVerified publisher3.0.01 of 1See more

hlo-fe-engine eclipse-aerios 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
openssl@3.5.6-1~deb13u1
no fix listed

Open the chart page →

1,873
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
openssl@3.5.4-1~deb13u1
no fix listed

Open the chart page →

14,360
redpandaeclipse-aeriosVerified publisher5.7.81 of 4See more

redpanda eclipse-aerios 5.7.8

1 of the 4 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
redpandadata/redpanda:latest9e83cfa99278
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

1,218
self-awarenesseclipse-aeriosVerified publisher1.4.41 of 2See more

self-awareness eclipse-aerios 1.4.4

1 of the 2 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
eclipseaerios/self-awareness-hardware-info:1.4.434b72f45b46a
openssl@3.5.4-1~deb13u1
no fix listed

Open the chart page →

2,476
trustmanagereclipse-aeriosVerified publisher1.0.01 of 1See more

trustmanager eclipse-aerios 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
eclipseaerios/trust-manager:1.0.0f55442e2c0ed
openssl@3.5.1-1+deb13u1
no fix listed

Open the chart page →

2,155
vaultwardenedudip0.11.01 of 1See more

vaultwarden edudip 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
openssl@3.5.6-1~deb13u2
no fix listed

Open the chart page →

2,242
esphomeegebackVerified publisher2.0.251 of 1See more

esphome egeback 2.0.25

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
esphome/esphome:2026.7.44866347cb5b4
openssl@3.5.6-1~deb13u2
no fix listed

Open the chart page →

3,490
teslamateegebackVerified publisher2.1.91 of 1See more

teslamate egeback 2.1.9

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
teslamate/teslamate:4.1.1cc87082e7d67
openssl@3.5.6-1~deb13u2
no fix listed

Open the chart page →

1,201
postgresqleks-storageclass0.1.01 of 1See more

postgresql eks-storageclass 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/postgres:17f4c66b820c6f
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

1,390
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/memcached:1.6405a445c7c81
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

95,989
backbone-helm-chartenmeshed-backboneVerified publisher7.2.16 of 7See more

backbone-helm-chart enmeshed-backbone 7.2.1

6 of the 7 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ghcr.io/nmshd/backbone-admin-ui:7.2.169c9f075d2d9
openssl@3.5.6-1~deb13u2+dhi1
no fix listed
ghcr.io/nmshd/backbone-consumer-api:7.2.1b8f0ce01d057
openssl@3.5.6-1~deb13u2+dhi1
no fix listed
ghcr.io/nmshd/backbone-database-migrator:7.2.12c0c5e022714
openssl@3.5.6-1~deb13u2+dhi1
no fix listed
ghcr.io/nmshd/backbone-event-handler:7.2.1f4d6a2006530
openssl@3.5.6-1~deb13u2+dhi1
no fix listed
ghcr.io/nmshd/backbone-housekeeper:7.2.11c1dfe35447f
openssl@3.5.6-1~deb13u2+dhi1
no fix listed
ghcr.io/nmshd/backbone-identity-deletion-jobs:7.2.1da69941fa6b8
openssl@3.5.6-1~deb13u2+dhi1
no fix listed

Open the chart page →

4,646
connector-helm-chartenmeshed-connectorOfficialVerified publisher7.5.11 of 1See more

connector-helm-chart enmeshed-connector 7.5.1

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ghcr.io/nmshd/connector:7.5.1c91f20eef0ca
openssl@3.5.7-1~deb13u2+dhi1
no fix listed

Open the chart page →

353
nginx-charteoc-chartsVerified publisher2.0.01 of 1See more

nginx-chart eoc-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

1,765
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
openssl@3.5.4-1~deb13u1
no fix listed

Open the chart page →

7,934
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
openssl@3.5.6-1~deb13u2
no fix listed

Open the chart page →

7,128
assertoorethereum-helm-chartsVerified publisher1.2.01 of 1See more

assertoor ethereum-helm-charts 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ethpandaops/assertoor:latest1efa2fba6711
openssl@3.5.6-1~deb13u2
no fix listed

Open the chart page →

3,075
buildoor-overviewethereum-helm-chartsVerified publisher0.0.11 of 1See more

buildoor-overview ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ethpandaops/buildoor:mainb3dc726f8ba5
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

1,020
doraethereum-helm-chartsVerified publisher1.0.121 of 2See more

dora ethereum-helm-charts 1.0.12

1 of the 2 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ethpandaops/dora:mastere7c0ed360365
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

3,238
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
openssl@3.5.6-1~deb13u2
no fix listed

Open the chart page →

1,931
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
nethermind/nethermind:latest1b6b01419de4
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.6

Open the chart page →

1,118
rpc-snooperethereum-helm-chartsVerified publisher0.0.21 of 1See more

rpc-snooper ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ethpandaops/rpc-snooper:latestc0b30fcf64bc
openssl@3.5.6-1~deb13u2
no fix listed

Open the chart page →

1,682
spamoorethereum-helm-chartsVerified publisher1.0.11 of 1See more

spamoor ethereum-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
ethpandaops/spamoor:latestc8c6ab0816c4
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

1,031
web3signerethereum-helm-chartsVerified publisher1.0.61 of 4See more

web3signer ethereum-helm-charts 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
consensys/web3signer:latestf146a51a1ba3
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.6

Open the chart page →

2,148
bee-overlay-exporterethersphereVerified publisher0.1.01 of 1See more

bee-overlay-exporter ethersphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/python:3.12-slim2f17fc044b57
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

739
beeport-uiethersphereVerified publisher0.76.21 of 3See more

beeport-ui ethersphere 0.76.2

1 of the 3 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

7,570
multichain-uiethersphereVerified publisher0.73.11 of 3See more

multichain-ui ethersphere 0.73.1

1 of the 3 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

7,570
static-siteethersphereVerified publisher0.73.12 of 2See more

static-site ethersphere 0.73.1

2 of the 2 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
openssl@3.5.7-1~deb13u2
no fix listed
library/node:latestfa271c47a5d8
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

6,440
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
openssl@3.5.4-1~deb13u1
no fix listed

Open the chart page →

3,473
capsizefairwinds-incubator0.2.01 of 1See more

capsize fairwinds-incubator 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-35191.

Container imageDigestPackageFixed in
library/python:3-slimcaaf356f4066
openssl@3.5.7-1~deb13u2
no fix listed

Open the chart page →

692

Container images carrying it

672 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
openssl@3.5.6-1~deb13u2
no fix listed
1
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
openssl@3.5.4-1~deb13u1
no fix listed
1
quay.io/opstree/fluent-bit:5.0.3391eef5a68ff
openssl@3.5.5-1~deb13u2
no fix listed
1
quay.io/opstree/grafana:12.4.3b61c1ed2f015
openssl@3.5.5-1~deb13u2
no fix listed
1
quay.io/opstree/k8s-sidecar:2.7.126aa9bb3386b
openssl@3.5.5-1~deb13u2
no fix listed
1
quay.io/opstree/k8s-sidecar:2.7.37075d455b219
openssl@3.5.5-1~deb13u2
no fix listed
1
quay.io/opstree/memcached:1.6.38-alpine3.22cabbdfd2c3fe
openssl@3.5.5-1~deb13u2
no fix listed
1
quay.io/poundex/tekton-stash-and-cache:0.2.2e854423caa09
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.6
1
registry.gitlab.com/dyff/workflows-aggregator:0.16.1126450354eba9
openssl@3.5.5-1ubuntu3.5
3.5.5-1ubuntu3.6
1
registry.gitlab.com/egos-tech/smtp:latestc5faeae6b5d0
openssl@3.5.7-1~deb13u2
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend:1.0.3166353ce9bf98
openssl@3.5.5-1~deb13u1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-user:1.0.31d8a9cd4e1ae3
openssl@3.5.6-1~deb13u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.104019bb2e325
openssl@3.5.7-1~deb13u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.198d46dc7e071
openssl@3.5.7-1~deb13u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.19df7d5aa03fe
openssl@3.5.7-1~deb13u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.25b0d50fcd5ea
openssl@3.5.7-1~deb13u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-kas:v19.4.14ed6de4d77e1
openssl@3.5.7-1~deb13u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab1a80159109e74
openssl@3.5.7-1~deb13u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3180688274b2c
openssl@3.5.7-1~deb13u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.17419aa33eb17
openssl@3.5.7-1~deb13u2
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.1a072f0a41f28
openssl@3.5.7-1~deb13u2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
openssl@3.5.1-1
no fix listed
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.