CVE-2026-3731

High

Advisory

Published 8 Mar 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 555; of 17,787 indexed, latest versions
Container images: 472; deployed by those charts
Fix available: 2 of 2; affected packages

Security update for libssh

Carried by container images the latest versions of 555 of 17,787 indexed charts deploy, on 472 images.

Affected package	Affected versions	Fixed in	Images
libsshdeb	0.6.3-4.3, 0.6.3-4.3ubuntu0.2, 0.8.0~20170825.94fa1e38-1ubuntu0.2, 0.8.0~20170825.94fa1e38-1ubuntu0.5+22 more	0.6.3-4.3ubuntu0.6+esm5, 0.8.0~20170825.94fa1e38-1ubuntu0.7+esm7, 0.9.3-2ubuntu2.5+esm4, 0.9.6-2ubuntu0.22.04.7+4 more	469
libsshrpm	0.9.8-150600.11.3.1	0.9.8-150600.11.12.1	3

OSV records: DEBIAN-CVE-2026-3731 UBUNTU-CVE-2026-3731 SUSE-SU-2026:1310-1
Also known as: USN-8093-1, USN-8093-2

Charts affected

555 by stars

Chart

Latest

Affected images

Radar Score

webhookie-allwebhookie

0.1.2

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4

Open the chart page →

28,605

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4

Open the chart page →

15,230

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.7

Open the chart page →

9,248

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4

Open the chart page →

6,285

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-3731.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7

Open the chart page →

14,100

Container images carrying it

472 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
dellcloud/pages :monitor	6ba7b22caacd	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	79
library/mongo :5.0.6-focal	8e70544b6c76	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	10
library/kong :3.6	a42d2b4503e7	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	7
library/mongo :4.4	4be76f674fc4	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4	5
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.7	4
library/mongo :5.0-focal	5e15a3f014ed	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4	4
mastercloudapps/planner :v1.23	40a950b311b2	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	4
ciscolabs/rtsp-client :latest	a7b60ec88285	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	3
ciscolabs/rtsp-server :latest	b59fc10bb821	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	3
cloudve/cloudlaunch-server :latest	4a3d7fae90bb	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	3
codeurjc/planner :v1.0	800cf520c245	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	3
dgraph/dgraph :v21.12.0	3b55ea83fffe	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	3
gchq/hdfs :3.3.3	5ec58edbb2db	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	3
guacamole/guacamole :1.6.0	f344085e618b	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	3
jacobalberty/unifi :v10.0.162	896c0ab82d33	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4	3
omecproject/cdn-video-repo :1.0.0 :remote-v3	d59ccb138ffb	libssh@0.6.3-4.3ubuntu0.2	0.6.3-4.3ubuntu0.6+esm5	3
selenium/hub :3.141.59	02f251d48d5f	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	3
xenondb/percona :5.7.33	0e26872a2b67	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.7	3
apache/nifi-registry :1.26.0	7cdfd8deec92	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	2
apache/rocketmq :5.4.0	319cd8a81ed1	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.4	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	2
eqalpha/keydb :latest	6537505c4235	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	2
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	libssh@0.9.3-2ubuntu2.3	0.9.3-2ubuntu2.5+esm4	2
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	2
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	2
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	2
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	2
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	2
gradiant/ueransim :3.2.6	015b30d5fa0f	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	2
interlayhq/interbtc :latest	a66d0e35e70f	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4	2
istio/proxyv2 :1.18.0	757d28c24100	libssh@0.9.6-2ubuntu0.22.04.1	0.9.6-2ubuntu0.22.04.7	2
kurento/kurento-media-server :latest	03c0d34d0828	libssh@0.10.6-2ubuntu0.2	0.10.6-2ubuntu0.4	2
library/cassandra :4.1.3	7cbcec0086ac	libssh@0.9.6-2ubuntu0.22.04.3	0.9.6-2ubuntu0.22.04.7	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	2
library/mongo :5.0	41108d183e97	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4	2
mesosphere/kubeaddons-catalog :v0.11.4	073db43d0b8b	libssh@0.9.3-2ubuntu2.1	0.9.3-2ubuntu2.5+esm4	2
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	libssh@0.9.3-2ubuntu2.2	0.9.3-2ubuntu2.5+esm4	2
opendatacube/ows :latest	668cbb41473c	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	libssh@0.9.3-2ubuntu2.5	0.9.3-2ubuntu2.5+esm4	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	2
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	2
wolveix/satisfactory-server :latest :v1.9.10	e103700ae6ae	libssh@0.9.6-2ubuntu0.22.04.4	0.9.6-2ubuntu0.22.04.7	2
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	2
ghcr.io/appscode/inbox-server :latest :postgres-latest	536358d7b17e	libssh@0.9.6-2ubuntu0.22.04.5	0.9.6-2ubuntu0.22.04.7	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	libssh@0.10.6-2build2	0.10.6-2ubuntu0.4	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	libssh@0.9.6-2build1	0.9.6-2ubuntu0.22.04.7	2