CVE-2026-35414
HighAdvisory
Published 2 Apr 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.002
- 7th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 260
- of 17,781 indexed, latest versions
- Container images
- 252
- deployed by those charts
- Fix available
- 1 of 1
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 260 of 17,781 indexed charts deploy, on 252 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensshdeb | 1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+45 more | 1:7.2p2-4ubuntu2.10+esm9, 1:8.9p1-3ubuntu0.15, 1:9.2p1-2+deb12u10, 1:9.6p1-3ubuntu13.16+1 more | 252 |
- OSV records
- DEBIAN-CVE-2026-35414UBUNTU-CVE-2026-35414
- Also known as
- USN-8222-1, USN-8577-1
Charts affected
260 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| helm-testtest-helm-artifacthubVerified publisher | 1.0.0 | 1 of 2See more | 11,648 |
| codegentest-opea | 1.0.0 | 1 of 5See more | 28,814 |
| codetranstest-opea | 1.0.0 | 1 of 5See more | 28,385 |
| docsumtest-opea | 1.0.0 | 1 of 5See more | 28,858 |
| vehicle-dashboardtest-vehi-dash | 0.1.0 | 1 of 7See more | 20,270 |
| tfy-distributortruefoundryVerified publisher | 0.0.1 | 1 of 4See more | 17,323 |
| demo-backendv2flyVerified publisher | 0.0.3 | 1 of 1See more | 14,358 |
| browserlessvictorlane | 0.2.0 | 1 of 1See more | 4,305 |
| marge-botwiremindVerified publisher | 1.4.4 | 1 of 1See more | 5,542 |
| playwright-synthetic-monitoringwork-adventure | 1.0.1 | 1 of 1See more | 14,100 |
Container images carrying it
252 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| beyzkaya/ | 12a6a3d1c5f9 | openssh | 1:9.2p1-2+deb12u10 | 1 |
| bitnamilegacy/ | 4b08d0c5af8d | openssh | 1:9.2p1-2+deb12u10 | 1 |
| bloxstaking/ | bf6d7d2fdc93 | openssh | 1:9.2p1-2+deb12u10 | 1 |
| bnjbvr/ | 37e216b182c8 | openssh | 1:9.2p1-2+deb12u10 | 1 |
| calltelemetry/ | 05d13269e350 | openssh | 1:9.2p1-2+deb12u10 | 1 |
| carlosmz87/ | 8ffa63aa995d | openssh | 1:9.2p1-2+deb12u10 | 1 |
| castopod/ | 1fd37280cbb2 | openssh | 1:9.2p1-2+deb12u10 | 1 |
| checkmk/ | c11b422210c4 | openssh | no fix listed | 1 |
| chetangautamm/ | b4b94155ff5a | openssh | no fix listed | 1 |
| chetangautamm/ | e7f7049e1544 | openssh | no fix listed | 1 |
| cheveo/ | 82240f890884 | openssh | 1:8.9p1-3ubuntu0.15 | 1 |
| chiefonboarding/ | 59bc7aa60fe7 | openssh | 1:10.0p1-7+deb13u3 | 1 |
| cortezaproject/ | 4ea78dfe5364 | openssh | 1:9.2p1-2+deb12u10 | 1 |
| countly/ | e3c238248f99 | openssh | no fix listed | 1 |
| cribl/ | 762747cb6796 | openssh | no fix listed | 1 |
| datamate/ | 2dd66b722464 | openssh | 1:8.9p1-3ubuntu0.15 | 1 |
| dblaci/ | eea697611af4 | openssh | 1:8.9p1-3ubuntu0.15 | 1 |
| dongjiang1989/ | 4bf9ae391948 | openssh | no fix listed | 1 |
| eclipseaerios/ | e7f5ba0bc64d | openssh | 1:10.0p1-7+deb13u3 | 1 |
| esphome/ | 9ab8cc88b28c | openssh | 1:9.2p1-2+deb12u10 | 1 |
| esphome/ | b2c6322700ac | openssh | 1:9.2p1-2+deb12u10 | 1 |
| esphome/ | def8b6e4f517 | openssh | 1:9.2p1-2+deb12u10 | 1 |
| ethereumex/ | a7603aa8df4c | openssh | 1:7.2p2-4ubuntu2.10+esm9 | 1 |
| falcosecurity/ | 932956d86c99 | openssh | 1:9.2p1-2+deb12u10 | 1 |
| fiware/ | 29456835bb2c | openssh | no fix listed | 1 |
| fiware/ | d551a13e8278 | openssh | 1:9.2p1-2+deb12u10 | 1 |
| gethue/ | 11b649636e68 | openssh | no fix listed | 1 |
| gethue/ | 5702b2c37ff9 | openssh | no fix listed | 1 |
| gethue/ | 7d5c1b9f8a79 | openssh | 1:8.9p1-3ubuntu0.15 | 1 |
| gitlab/ | 860d4a3fec7a | openssh | no fix listed | 1 |
| haugene/ | 059216cfae4b | openssh | no fix listed | 1 |
| haveagitgat/ | 1256348872ce | openssh | no fix listed | 1 |
| helicone/ | 4c69b971a7e4 | openssh | no fix listed | 1 |
| helicone/ | 4a913936c97b | openssh | 1:9.2p1-2+deb12u10 | 1 |
| hiboxsystems/ | b59f01bc0418 | openssh | 1:10.0p1-7+deb13u3 | 1 |
| hiboxsystems/ | dcffb926e563 | openssh | 1:9.2p1-2+deb12u10 | 1 |
| hirosystems/ | 9c98b23c1515 | openssh | 1:9.2p1-2+deb12u10 | 1 |
| hmediade/ | 7f005eb6c718 | openssh | 1:8.9p1-3ubuntu0.15 | 1 |
| hyperledger/ | c65891b6c237 | openssh | 1:7.2p2-4ubuntu2.10+esm9 | 1 |
| ibmcom/ | b5d8c6714dbc | openssh | 1:7.2p2-4ubuntu2.10+esm9 | 1 |
| ibmcom/ | e17bdccc5030 | openssh | 1:7.2p2-4ubuntu2.10+esm9 | 1 |
| ildarmukhametzyanov/ | 15d23720a3ee | openssh | 1:9.2p1-2+deb12u10 | 1 |
| inseefrlab/ | 31f04ca7436b | openssh | 1:8.9p1-3ubuntu0.15 | 1 |
| instill/ | c4a393e601ed | openssh | 1:10.0p1-7+deb13u3 | 1 |
| instill/ | ebe12f77a3f9 | openssh | 1:10.0p1-7+deb13u3 | 1 |
| instill/ | e980125e5ba5 | openssh | 1:10.0p1-7+deb13u3 | 1 |
| intelowlproject/ | 0b22e547ea6b | openssh | 1:9.2p1-2+deb12u10 | 1 |
| ironmansoftware/ | 1943c73cce31 | openssh | no fix listed | 1 |
| itzg/ | 4e29d14082d9 | openssh | no fix listed | 1 |
| itzg/ | 8672e335dbef | openssh | no fix listed | 1 |