StackRadar

CVE-2026-42764

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.012
66th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
790
of 17,787 indexed, latest versions
Container images
822
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 790 of 17,787 indexed charts deploy, on 822 images.

Affected packageAffected versionsFixed inImages
opensslapk3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more3.5.7-r0, 3.6.3-r0633
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.3-1ubuntu2, 3.5.4-1~deb13u1+5 more3.5.3-1ubuntu3.4, 3.5.5-1ubuntu3.2, 3.5.6-1~deb13u2184
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
OSV records
ALPINE-CVE-2026-42764CGA-58rp-89w2-gh83DEBIAN-CVE-2026-42764UBUNTU-CVE-2026-42764
Also known as
CGA-j467-89mh-9mr5, CGA-qjp5-x483-c26r, CGA-wpj5-f6vw-h7r5, USN-8414-1

Charts affected

790 by stars
ChartLatestAffected imagesRadar Score
tikatikaVerified publisher0.3.01 of 1See more

tika tika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

1,825
todolist-charttodolist-chart0.1.73 of 10See more

todolist-chart todolist-chart 0.1.7

3 of the 10 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
erenozcan17/flask_analytics:v3.1c9b6f0dfbffc
openssl@3.5.1-1
3.5.6-1~deb13u2
erenozcan17/go_backend:v4.250b4f23422b6
openssl@3.5.1-r0
3.5.7-r0
erenozcan17/react_frontend:v4.56e1b14973f9b
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

6,973
togglr-backendtogglrVerified publisher1.0.01 of 1See more

togglr-backend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

3,221
togglr-frontendtogglrVerified publisher1.0.01 of 1See more

togglr-frontend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
gdrocha/togglr-frontend:1.0.0ffbc1571c234
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,109
token-servertoken-server1.0.91 of 1See more

token-server token-server 1.0.9

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
udhos/token-server:1.0.9728013f2fac1
openssl@3.5.2-r0
3.5.7-r0

Open the chart page →

1,245
traefik-secrets-exportertraefik-secrets-exporter0.0.21 of 1See more

traefik-secrets-exporter traefik-secrets-exporter 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
ghcr.io/reiche-world/traefik-secrets-exporter:0.0.21485ff93cbf9
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,675
trident-protecttrident-protect100.2606.01 of 2See more

trident-protect trident-protect 100.2606.0

1 of the 2 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,331
trident-protect-bxp-previewtrident-protect100.2511.0-bxp-preview1 of 3See more

trident-protect-bxp-preview trident-protect 100.2511.0-bxp-preview

1 of the 3 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v1.0.058b9fac358bd
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

2,183
trident-protect-consoletrident-protect100.2608.0-console1 of 3See more

trident-protect-console trident-protect 100.2608.0-console

1 of the 3 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,322
trivy-webhook-aws-security-hubtrivy-webhook-aws-security-hubVerified publisher0.1.201 of 1See more

trivy-webhook-aws-security-hub trivy-webhook-aws-security-hub 0.1.20

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
ghcr.io/csepulveda/trivy-webhook-aws-security-hub:v0.1.206836b779b060
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

616
trowtrow0.13.01 of 1See more

trow trow 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
ghcr.io/trow-registry/trow:0.10.075b7d2dcdb91
openssl@3.5.5-1~deb13u2
3.5.6-1~deb13u2

Open the chart page →

1,269
tfy-grafanatruefoundryVerified publisher0.1.211 of 3See more

tfy-grafana truefoundry 0.1.21

1 of the 3 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,062
tfy-logstruefoundryVerified publisher0.1.212 of 3See more

tfy-logs truefoundry 0.1.21

2 of the 3 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/timberio/vector:v0.50.05833723de9e4
openssl@3.5.4-r0
3.5.7-r0
public.ecr.aws/truefoundrycloud/timberio/vector:v0.52.088b8dc80ae74
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,031
truefoundry-monitoringtruefoundryVerified publisher0.1.63 of 8See more

truefoundry-monitoring truefoundry 0.1.6

3 of the 8 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
grafana/grafana:12.3.070d9599b186c
openssl@3.5.4-r0
3.5.7-r0
public.ecr.aws/truefoundrycloud/timberio/vector:v0.52.088b8dc80ae74
openssl@3.5.6-r0
3.5.7-r0
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

4,526
admin-dashboardtwenty20-helm-chartsVerified publisher1.1.01 of 1See more

admin-dashboard twenty20-helm-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.29.5-alpine-slim08c2bc93448b
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

386
timetabletwomartensVerified publisher0.2.01 of 1See more

timetable twomartens 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
2martens/timetable:latestbd1ba6ab84c9
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

1,527
wahlrechttwomartensVerified publisher0.3.01 of 1See more

wahlrecht twomartens 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
2martens/wahlrecht:latestba2c3040dab0
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

1,689
deep-learning-toolsuninettsigma29.1.21 of 3See more

deep-learning-tools uninettsigma2 9.1.2

1 of the 3 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
library/nginx:1.29.3-alpineb3c656d55d7a
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,567
unleash-enterpriseunleash1.0.31 of 1See more

unleash-enterprise unleash 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
unleashorg/unleash-enterprise:7.5.0245aeba40053
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

2,028
excalidashunxwaresVerified publisher2026.2.52 of 2See more

excalidash unxwares 2026.2.5

2 of the 2 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.4.271273af713c91
openssl@3.5.5-r0
3.5.7-r0
zimengxiong/excalidash-frontend:0.4.27242629350b06
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

2,620
proxyv2flyVerified publisher0.0.61 of 1See more

proxy v2fly 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
v2fly/v2fly-core:latestd06727b221fe
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,426
evolution-apivcnngrVerified publisher1.0.02 of 5See more

evolution-api vcnngr 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
evoapicloud/evolution-api:latest966625532d90
openssl@3.5.6-r0
3.5.7-r0
evoapicloud/evolution-manager:latestcbfeb314afb9
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

3,746
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
vcnngr/pnfrontend:latest4e4979ab8c41
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

4,768
unmanicvhdirkVerified publisher0.1.41 of 1See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
josh5/unmanic:0.2.64d49c4816260
nodejs@20.11.1-1nodesource1
no fix listed

Open the chart page →

9,347
colanodevictorlane0.3.31 of 3See more

colanode victorlane 0.3.3

1 of the 3 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
ghcr.io/colanode/server:latest7006cac874fd
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

2,076
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
openssl@3.5.2-r0
3.5.7-r0

Open the chart page →

—
wallarm-gatewaywallarmVerified publisher0.4.01 of 1See more

wallarm-gateway wallarm 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
wallarm/gateway-controller:0.4.09c6ed23e2f0e
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2

Open the chart page →

2,018
wallarm-oobwallarmVerified publisher0.23.02 of 3See more

wallarm-oob wallarm 0.23.0

2 of the 3 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
wallarm/node-helpers:6.10.1aecd88b24c51
openssl@3.5.5-r0
3.5.7-r0
wallarm/node-native-processing:0.23.07db2da8fce0b
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

2,824
wasabi-s3-operatorwasabi-s3-operatorVerified publisher0.2.71 of 1See more

wasabi-s3-operator wasabi-s3-operator 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
kenchrcum/wasabi-s3-operator:0.2.7ce657c622ce5
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

628
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

4,984
haproxy-ingresswenerme0.16.11 of 1See more

haproxy-ingress wenerme 0.16.1

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.16fd744191ef6
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

793
victoria-metrics-k8s-stackwenerme0.92.11 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,889
wexa-studiowexa-studio1.2.03 of 15See more

wexa-studio wexa-studio 1.2.0

3 of the 15 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.7-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.7-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

14,983
whereaboutswhereaboutsVerified publisher0.3.01 of 1See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

617
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
requarks/wiki:268f0d1848261
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

5,459
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,639
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
no fix listed

Open the chart page →

14,100
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2

Open the chart page →

1,281
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

1,571
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-42764.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

1,159

Container images carrying it

822 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
erenozcan17/react_frontend:v4.56e1b14973f9b
openssl@3.5.1-r0
3.5.7-r0
1
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.7-r0
1
erudikaltd/scoold:1.66.0949c56b57e8f
openssl@3.5.4-r0
3.5.7-r0
1
escaping/core-keeper-dedicated:latest87fa79255962
openssl@3.5.4-1~deb13u2
3.5.6-1~deb13u2
1
esteban1930/frontend-1:1.8.0f9078279632c
openssl@3.5.1-r0
3.5.7-r0
1
ethereum/client-go:v1.16.532b878e4144a
openssl@3.5.4-r0
3.5.7-r0
1
etherpad/etherpad:2.7.2b723fe5f2594
openssl@3.5.6-r0
3.5.7-r0
1
ethpandaops/contributoor:latest1edd4074fd79
openssl@3.5.6-r0
3.5.7-r0
1
ethpandaops/ethereum-address-metrics-exporter:latest431cd3790ed2
openssl@3.5.6-r0
3.5.7-r0
1
ethpandaops/xatu-cbt-api:latestf7dec2e07091
openssl@3.5.4-r0
3.5.7-r0
1
evcc/evcc:0.315.0327318279998
openssl@3.5.6-r0
3.5.7-r0
1
evcc/evcc:0.300.8ddf2a25afce5
openssl@3.5.5-r0
3.5.7-r0
1
evoapicloud/evolution-api:latest966625532d90
openssl@3.5.6-r0
3.5.7-r0
1
evoapicloud/evolution-manager:latestcbfeb314afb9
openssl@3.5.4-r0
3.5.7-r0
1
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
openssl@3.5.1-1
3.5.6-1~deb13u2
1
falcosecurity/falcosidekick:2.32.01976da721518
openssl@3.5.1-r0
3.5.7-r0
1
fallenbagel/jellyseerr:latest4538137bc5af
openssl@3.5.1-r0
3.5.7-r0
1
felipecs8/landing-page:v1db6d44e325a1
openssl@3.5.1-r0
3.5.7-r0
1
ffutop/ddc-ph-kafka-egress:latest319d94c8481a
openssl@3.5.4-r0
3.5.7-r0
1
ffutop/ddc-ph-kafka-ingress:latest15832d4f19be
openssl@3.5.4-r0
3.5.7-r0
1
ffutop/ddc-transport-udp-receive:latest651ca530d787
openssl@3.5.4-r0
3.5.7-r0
1
ffutop/ddc-transport-udp-send:latest4222eb5ee847
openssl@3.5.4-r0
3.5.7-r0
1
filiparag/hetzner_ddns:1.0.15a9cbae7997c
openssl@3.5.4-r0
3.5.7-r0
1
flashcatcloud/nightingale:8.5.1421acb36181b
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
1
folioci/edge-connexion:latestb4863d135524
openssl@3.5.6-r0
3.5.7-r0
1
folioci/mod-authtoken:latest995a25a33133
openssl@3.5.5-r0
3.5.7-r0
1
folioci/mod-copycat:latest1513fad2b799
openssl@3.5.6-r0
3.5.7-r0
1
folioci/mod-courses:latest68ca414f5596
openssl@3.5.5-r0
3.5.7-r0
1
folioci/mod-ebsconet:latest3ae8cb99daa3
openssl@3.5.6-r0
3.5.7-r0
1
folioci/mod-eusage-reports:latest15de67587091
openssl@3.5.6-r0
3.5.7-r0
1
folioci/mod-login:latest88de493f86db
openssl@3.5.6-r0
3.5.7-r0
1
folioci/mod-login-saml:latest5f3358ccaa0f
openssl@3.5.6-r0
3.5.7-r0
1
folioci/mod-ncip:latest8ed83674352b
openssl@3.5.6-r0
3.5.7-r0
1
folioci/mod-permissions:latest5363e98c6299
openssl@3.5.6-r0
3.5.7-r0
1
folioci/mod-pubsub:latest0a4fa4ad5d72
openssl@3.5.6-r0
3.5.7-r0
1
folioci/mod-search:latest44d7ee9acdf6
openssl@3.5.1-r0
3.5.7-r0
1
folioci/mod-user-import:latest1807734472bd
openssl@3.5.6-r0
3.5.7-r0
1
folioci/mod-users-bl:latest4e2d96c9340d
openssl@3.5.6-r0
3.5.7-r0
1
folioci/mod-z3950:latest2493041ce880
openssl@3.5.5-1~deb13u2
3.5.6-1~deb13u2
1
fosrl/newt:1.10.4ccd2b0e9a049
openssl@3.5.5-r0
3.5.7-r0
1
fosrl/pangolin:1.13.0c32ad797ab96
openssl@3.5.4-r0
3.5.7-r0
1
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
1
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
openssl@3.5.4-r0
3.5.7-r0
1
gdrocha/togglr-frontend:1.0.0ffbc1571c234
openssl@3.5.4-r0
3.5.7-r0
1
geonode/geoserver_data:2.28.4-latest435cbc5f3f05
openssl@3.5.6-r0
3.5.7-r0
1
gethue/hue:latest7d5c1b9f8a79
nodejs@24.13.1-1nodesource1
no fix listed
1
getmeili/meilisearch:v1.30.0f3ecbc8c5bfb
openssl@3.5.4-r0
3.5.7-r0
1
gitea/act_runner:nightly7940221bcfc9
openssl@3.5.6-r0
3.5.7-r0
1
gitea/act_runner:latestb5c35d6bdbb9
openssl@3.5.6-r0
3.5.7-r0
1
gitea/act_runner:0.3.1c2a169c5e998
openssl@3.5.5-r0
3.5.7-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.