CVE-2026-3731

High

Advisory

Published 8 Mar 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 557; of 17,787 indexed, latest versions
Container images: 474; deployed by those charts
Fix available: 2 of 2; affected packages

Security update for libssh

Carried by container images the latest versions of 557 of 17,787 indexed charts deploy, on 474 images.

Affected package	Affected versions	Fixed in	Images
libsshdeb	0.6.3-4.3, 0.6.3-4.3ubuntu0.2, 0.8.0~20170825.94fa1e38-1ubuntu0.2, 0.8.0~20170825.94fa1e38-1ubuntu0.5+22 more	0.6.3-4.3ubuntu0.6+esm5, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm7, 0.9.3-2ubuntu2.5+esm4, 0.9.6-2ubuntu0.22.04.7+4 more	471
libsshrpm	0.9.8-150600.11.3.1	0.9.8-150600.11.12.1	3

OSV records: DEBIAN-CVE-2026-3731 UBUNTU-CVE-2026-3731 SUSE-SU-2026:1310-1
Also known as: USN-8093-1, USN-8093-2

Charts affected

557 by stars

Chart

Latest

Affected images

Radar Score

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4

Open the chart page →

9,225

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4

Open the chart page →

9,225

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4

Open the chart page →

28,699

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4

Open the chart page →

15,287

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.7

Open the chart page →

9,296

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4

Open the chart page →

6,323

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7

Open the chart page →

14,172

Container images carrying it

474 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
haveagitgat/tdarr :2.00.18	1256348872ce	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
haveagitgat/tdarr_node :2.00.10	1e3f9328327d	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	1
haveagitgat/tdarr_node :2.17.01	3ff0913202dd	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
helicone/clickhouse-migration-runner :v2025.03.05-1	4c69b971a7e4	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4	1
hivemq/hivemq-operator :4.7.10	241d6a8e1963	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	1
hmediade/printserver :latest	481a552c8e1c	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
hmediade/printserver-init :latest	7f005eb6c718	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
housewrecker/gaps :latest	f417dd0a7547	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
hugohg34/toposervice :0.0.2	812a03b3f274	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
inseefrlab/shelly :cloudshell	31f04ca7436b	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.7	1
instill/artifact-backend :b28766a	c4a393e601ed	libssh@0.11.2-1+deb13u1	0.11.5-0+deb13u1	1
instructure/kinesalite :latest	34400d82f28f	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4	1
intel/dlstreamer-pipeline-server :2022.1.1-ubuntu20	aa8f5483a2ef	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
intelowlproject/intelowl :v6.6.1	0b22e547ea6b	libssh@0.10.6-0+deb12u2	no fix listed	1
intel/trusted-certificate-issuer :0.5.0	591a9db4a427	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
ispras/svacer :11-2-0	42aa9fa9f189	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
istio/examples-bookinfo-reviews-v1 :1.17.0	b8f16a765eea	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
istio/examples-bookinfo-reviews-v2 :1.17.0	72f25a55f078	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
istio/examples-bookinfo-reviews-v3 :1.17.0	8f92fc1b6592	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
istio/install-cni :1.23.6	ab34c4740f44	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	1
istio/install-cni :1.29.0	ce27c9ce43c8	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.4	1
istio/operator :1.12.0	6cfce8a071b9	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
istio/operator :1.18.2	70f9d1fe5fff	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.7	1
istio/pilot :1.29.0	325156535773	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.4	1
istio/pilot :1.23.6	9c3d6a218181	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	1
istio/pilot :1.16.0	ac0284d75ec9	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	1
istio/pilot :1.17.1	ce9d87606701	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	1
istio/pilot :1.15.2	db08d6963975	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	1
istio/pilot :1.29.1	f8b0e412ac4a	libssh@0.10.6-2ubuntu0.3	0.10.6-2ubuntu0.4	1
istio/proxyv2 :1.14.1	df69c1a7af7c	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
istio/ztunnel :1.25.0	05f3972d80a9	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	1
jaedb/iris :latest	048cfbf58d57	libssh@0.10.6-0+deb12u1	no fix listed	1
jakowenko/double-take :1.6.0	b858bac9e32a	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
jedi132000/nextapp :latest	dc2a81e92f23	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
jhipster/jhipster-registry :latest	7184525acd4d	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4	1
jingking/geonetwork-hnap :4.2.8	43e74ab234e1	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4	1
josh5/unmanic :0.2.6	4d49c4816260	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	1
jupyterhub/k8s-hub :1.2.0	e4770285aaf7	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
jupyterhub/k8s-singleuser-sample :0.11.1	e3e6f3051df8	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	1
kafkace/kafka :v3.7.1-63ba8d2	7adc206bf5a4	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	1
kafkakraft/kafka-connect :3.7.0	062d697db7e5	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
kafkakraft/kafka-controller :3.7.0	f261ad288fce	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
kafkakraft/kafkakraft :3.7.0	2e4b593b878b	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
kayrosuno/kping :latest	f3bd44b29b0d	libssh@0.10.6-2ubuntu0.3	0.10.6-2ubuntu0.4	1
kfirfer/phppgadmin :7.13.0-2	2efb4a5d74a3	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
kong/httpbin :latest	a6ac46531193	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
krontechnology/aapm-agent :1.1.0	7feef7d2ab42	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1