CVE-2026-3731

High

Advisory

Published 8 Mar 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 555; of 17,787 indexed, latest versions
Container images: 472; deployed by those charts
Fix available: 2 of 2; affected packages

Security update for libssh

Carried by container images the latest versions of 555 of 17,787 indexed charts deploy, on 472 images.

Affected package	Affected versions	Fixed in	Images
libsshdeb	0.6.3-4.3, 0.6.3-4.3ubuntu0.2, 0.8.0~20170825.94fa1e38-1ubuntu0.2, 0.8.0~20170825.94fa1e38-1ubuntu0.5+22 more	0.6.3-4.3ubuntu0.6+esm5, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm7, 0.9.3-2ubuntu2.5+esm4, 0.9.6-2ubuntu0.22.04.7+4 more	469
libsshrpm	0.9.8-150600.11.3.1	0.9.8-150600.11.12.1	3

OSV records: DEBIAN-CVE-2026-3731 UBUNTU-CVE-2026-3731 SUSE-SU-2026:1310-1
Also known as: USN-8093-1, USN-8093-2

Charts affected

555 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4

Open the chart page →

28,605

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4

Open the chart page →

15,230

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.7

Open the chart page →

9,248

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4

Open the chart page →

6,285

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7

Open the chart page →

14,100

Container images carrying it

472 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
rtuszik/photon-docker :2.4.0	21549c60f9e6	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.4	1
ryuunosukeds3/nadeko-bot-docker :latest	c0398f13e8a9	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.4	1
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	libssh@0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.4	1
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.4	1
scrapinghub/splash :3.4.1	a5f89bc84606	libssh@0.8.0~20170825.94fa1e38-1ubuntu0.5	0.8.0~20170825.94fa1e38-1ubuntu0.7+esm7	1
seafileltd/seafile-mc :9.0.10	6693911bcc40	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	1
seafileltd/seafile-mc :10.0.1	70628f29c663	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
seafileltd/seafile-mc :9.0.9	7ac833196f60	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	1
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
seafileltd/seafile-mc :8.0.7	ed0fcda5e6a9	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	1
shaowenchen/ops-server :latest	315444f703f4	libssh@0.9.6-2ubuntu0.22.04.4	0.9.6-2ubuntu0.22.04.7	1
sismics/docs :v1.10	f4b0ef019cf1	libssh@0.8.0~20170825.94fa1e38-1ubuntu0.7	0.8.0~20170825.94fa1e38-1ubuntu0.7+esm7	1
snipe/snipe-it :v8.3.1	141ebf2386fe	libssh@0.10.6-2ubuntu0.1	0.10.6-2ubuntu0.4	1
snipe/snipe-it :v6.0.14	55fb7636a98c	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1
stackstorm/st2actionrunner :3.8	88235ba70cad	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
stackstorm/st2api :3.8	6f56d239d280	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
stackstorm/st2auth :3.8	33ecfda16608	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
stackstorm/st2notifier :3.8	f190a6212195	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
stackstorm/st2rulesengine :3.8	259503496ff9	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
stackstorm/st2scheduler :3.8	b1de2055c362	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
stackstorm/st2stream :3.8	1c8904a3bf67	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
stackstorm/st2web :3.8	09989a26c8b7	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
stashapp/stash :latest	24dbd7607174	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	1
stashapp/stash-box :latest	a534c8afdf39	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	1
statcan/ckan :2.9	3921305425b8	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	1
structurizr/onpremises :2025.11.09	4b5ffb5119c8	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	1
svtechnmaa/svtech_debuger :v1.0.3	a934ffd63d25	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	1
thmmniii/fbs-core :v1.27.1	5438517d9fc2	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	1
timescale/timescaledb-ha :pg15-latest	a8e3322e1cf9	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	1
timescale/timescaledb-ha :pg14.6-ts2.9.1-p1	cdb9ae118899	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	1
timescale/timescaledb-ha :pg17.2-ts2.18.2	e8d0a9cc3db5	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
timescale/timescaledb-ha :pg14-ts2.6-latest	ed719c0cd19d	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	1
timothyclarke/wptagent :2018-01-23	22c41e5ca7e2	libssh@0.6.3-4.3	0.6.3-4.3ubuntu0.6+esm5	1
trinodb/trino :405	ee80ab5eeab2	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	1
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	1
wallarm/kong :3.1.0-ubuntu-4.6.0	ea9608c82e40	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	1