CVE-2026-3731

High

Advisory

Published 8 Mar 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 555; of 17,787 indexed, latest versions
Container images: 472; deployed by those charts
Fix available: 2 of 2; affected packages

Security update for libssh

Carried by container images the latest versions of 555 of 17,787 indexed charts deploy, on 472 images.

Affected package	Affected versions	Fixed in	Images
libsshdeb	0.6.3-4.3, 0.6.3-4.3ubuntu0.2, 0.8.0~20170825.94fa1e38-1ubuntu0.2, 0.8.0~20170825.94fa1e38-1ubuntu0.5+22 more	0.6.3-4.3ubuntu0.6+esm5, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm7, 0.9.3-2ubuntu2.5+esm4, 0.9.6-2ubuntu0.22.04.7+4 more	469
libsshrpm	0.9.8-150600.11.3.1	0.9.8-150600.11.12.1	3

OSV records: DEBIAN-CVE-2026-3731 UBUNTU-CVE-2026-3731 SUSE-SU-2026:1310-1
Also known as: USN-8093-1, USN-8093-2

Charts affected

555 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4

Open the chart page →

28,605

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4

Open the chart page →

15,230

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.7

Open the chart page →

9,248

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4

Open the chart page →

6,285

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7

Open the chart page →

14,100

Container images carrying it

472 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	libssh@0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.4	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.4	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	libssh@0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.4	1
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.4	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4	1
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
ghcr.io/wolveix/satisfactory-server :v1.9.10	e0f2f8c97598	libssh@0.9.6-2ubuntu0.22.04.4	0.9.6-2ubuntu0.22.04.7	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
public.ecr.aws/spotinst/spot-network-client :1.0.14	86380a01587d	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.4	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	1
quay.io/aerokube/keygen :1.0.1	578934444f04	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	1
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	1
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	libssh@0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.4	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.7	1
quay.io/evryfs/spring-boot-admin :2.7.10	60950ef63764	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	1