StackRadar

CVE-2026-42766

Medium

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.011
63rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,216
of 17,797 indexed, latest versions
Container images
2,425
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-42766 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 2,216 of 17,797 indexed charts deploy, on 2,425 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+103 more1.0.1f-1ubuntu2.27+esm14, 1.0.2g-1ubuntu4.20+esm16, 1.1.1-1ubuntu2.1~18.04.23+esm9, 1.1.1f-1ubuntu2.24+esm4+6 more1,787
opensslapk3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more3.5.7-r0, 3.6.3-r0633
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm515
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl33.3.7-35
OSV records
ALPINE-CVE-2026-42766CGA-9fv6-c4c7-7xwrDEBIAN-CVE-2026-42766UBUNTU-CVE-2026-42766AZL-89943
Also known as
CGA-9mqf-xpvc-p77x, CGA-gf26-66cr-92gv, CGA-x9j4-77f9-qvfv, USN-8414-1, USN-8414-2

Charts affected

2,216 by stars
ChartLatestAffected imagesRadar Score
spark-history-servercloudnativeapp1.0.01 of 3See more

spark-history-server cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
lightbend/curl:7.47.0b0c9894ac8dd
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.20+esm16

Open the chart page →

14,086
unificloudnativeapp0.4.21 of 1See more

unifi cloudnativeapp 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
jacobalberty/unifi:5.10.19c409924e2463
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm16

Open the chart page →

22,525
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
nodejs@7.10.1-2nodesource1~xenial1
openssl@1.0.2g-1ubuntu4.10
no fix listed
1.0.2g-1ubuntu4.20+esm16

Open the chart page →

77,916
robot-shopcloud-native-toolkit1.1.11 of 12See more

robot-shop cloud-native-toolkit 1.1.1

1 of the 12 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
robotshop/rs-mongodb:latest119b545823cd
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

29,646
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad4 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

4 of the 6 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
openssl@3.5.1-r0
3.5.7-r0
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.25
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

18,400
cloudrevecloudreve0.2.01 of 2See more

cloudreve cloudreve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
cloudreve/cloudreve:4.18.0f7a464100bf6
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

2,842
k8s-monitoring-appcloudscriptVerified publisher1.0.01 of 1See more

k8s-monitoring-app cloudscript 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/k8s-monitoring-app:v0.0.25cab66a6b3574
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,294
cloudvaultcloudvaultOfficialVerified publisher1.0.22 of 3See more

cloudvault cloudvault 1.0.2

2 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/postgres:18.3-alpine54451ecb8ab3
openssl@3.5.6-r0
3.5.7-r0
shyamkrishna21/cloudvault:latestaf2785f5bb71
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

2,180
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

12,521
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

12,224
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

11,656
galaxy-depscloudve1.1.11 of 7See more

galaxy-deps cloudve 1.1.1

1 of the 7 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

10,599
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

16,155
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
openssl@1.0.1f-1ubuntu2.25
1.0.1f-1ubuntu2.27+esm14
galaxy/galaxy-stable:v18.018e577a626dfd
openssl@1.0.1f-1ubuntu2.25
1.0.1f-1ubuntu2.27+esm14

Open the chart page →

70,987
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

14,372
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

6,181
terminalmancloudve0.3.41 of 1See more

terminalman cloudve 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
cloudve/ttyd:latestd79c1c5881c0
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

13,187
argo-cdcluster-deploy0.3.21 of 3See more

argo-cd cluster-deploy 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

3,759
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

8,093
monitoringcluster-deploy0.3.03 of 11See more

monitoring cluster-deploy 0.3.0

3 of the 11 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
grafana/grafana:12.4.1e932bd6ed0e0
openssl@3.5.5-r0
3.5.7-r0
library/memcached:1.6.41-alpine65c80b311a96
openssl@3.5.6-r0
3.5.7-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

8,217
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
openssl@3.0.18-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

9,214
clusterfactoryclusterfactory0.2.03 of 5See more

clusterfactory clusterfactory 0.2.0

3 of the 5 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
gitea/act_runner:0.3.1c2a169c5e998
openssl@3.5.5-r0
3.5.7-r0
jenkins/jenkins:2.541.3-jdk21c4098086090c
openssl@3.5.5-1~deb13u1
3.5.6-1~deb13u2
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

7,191
gitea-jenkinsclusterfactory0.1.13 of 5See more

gitea-jenkins clusterfactory 0.1.1

3 of the 5 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
gitea/act_runner:latestb5c35d6bdbb9
openssl@3.5.6-r0
3.5.7-r0
jenkins/jenkins:2.541.3-jdk21c4098086090c
openssl@3.5.5-1~deb13u1
3.5.6-1~deb13u2
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

6,980
clusterplexclusterplexVerified publisher1.1.101 of 3See more

clusterplex clusterplex 1.1.10

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2

Open the chart page →

3,950
storage-local-pathcnapVerified publisher1.0.11 of 1See more

storage-local-path cnap 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.3534ff0847cc47
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

753
castlemockcnieg2.0.11 of 1See more

castlemock cnieg 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
castlemock/castlemock:latestb7f3f1527ba9
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11

Open the chart page →

4,695
door-agentcnoVerified publisher3.0.151 of 15See more

door-agent cno 3.0.15

1 of the 15 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31.02bf7f042e396
openssl@3.0.2-0ubuntu1.16
3.0.2-0ubuntu1.25

Open the chart page →

19,467
ms-basecodedesignplus-chartsVerified publisher0.0.321 of 1See more

ms-base codedesignplus-charts 0.0.32

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
nginxdemos/hello:0.4b28d1e16c676
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

1,294
codehubcodehubVerified publisher6.2.184 of 5See more

codehub codehub 6.2.18

4 of the 5 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
openssl@3.0.17-1~deb12u2
3.0.20-1~deb12u2
bitnamilegacy/postgresql:latest42a8200d3597
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
jupyterhub/jupyterhub:5.4.63974ba945e65
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.11
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

13,359
web3-prometheus-exportercoinpri-helm-chartsVerified publisher0.1.31 of 1See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
openssl@3.0.14-1~deb12u2
3.0.20-1~deb12u2

Open the chart page →

3,404
loki-stackcommon-chartsVerified publisher1.0.32 of 12See more

loki-stack common-charts 1.0.3

2 of the 12 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/memcached:1.6.39-alpinec8503d4491ed
openssl@3.5.4-r0
3.5.7-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

5,425
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

8,021
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

8,021
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.11 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

1 of the 7 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/rabbitmq:3.11.5-management1b0f675d2f24
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

10,185
cors-proxycors-proxyVerified publisher1.2.01 of 1See more

cors-proxy cors-proxy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

1,601
cortezacorteza1.1.02 of 3See more

corteza corteza 1.1.0

2 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.4cb9f200de5d2
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.25
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
openssl@3.0.17-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

8,456
corteza-all-in-onecorteza0.1.01 of 2See more

corteza-all-in-one corteza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.08eb7a26605c9
openssl@1.1.1f-1ubuntu2.23
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

4,698
cosanetcosanet1.0.01 of 1See more

cosanet cosanet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
openssl@3.5.1-1
3.5.6-1~deb13u2

Open the chart page →

2,227
datumcosmicrocks1.0.51 of 2See more

datum cosmicrocks 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.11

Open the chart page →

2,993
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

14,740
cospacecospace0.0.341 of 3See more

cospace cospace 0.0.34

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/twigex/cospace:lateste5ecfd607e42
openssl@3.0.20-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

2,289
mariadbcowboysysopVerified publisher20.4.21 of 1See more

mariadb cowboysysop 20.4.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

3,060
mongodbcowboysysopVerified publisher15.1.51 of 1See more

mongodb cowboysysop 15.1.5

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2

Open the chart page →

6,220
postgresqlcowboysysopVerified publisher15.5.71 of 1See more

postgresql cowboysysop 15.5.7

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2

Open the chart page →

4,815
qdrantcowboysysopVerified publisher3.0.01 of 1See more

qdrant cowboysysop 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.4.166ee661d5241
openssl@3.0.9-1
3.0.20-1~deb12u2

Open the chart page →

3,056
rediscowboysysopVerified publisher21.2.61 of 1See more

redis cowboysysop 21.2.6

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
bitnamilegacy/redis:8.0.2-debian-12-r4cdc2efa9c306
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

2,651
logstream-mastercriblio2.9.91 of 1See more

logstream-master criblio 2.9.9

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
cribl/cribl:3.0.2762747cb6796
openssl@1.1.1-1ubuntu2.1~18.04.9
openssl1.0@1.0.2n-1ubuntu5.6
1.1.1-1ubuntu2.1~18.04.23+esm9
1.0.2n-1ubuntu5.13+esm5

Open the chart page →

9,306
iam-zencryptexlabsVerified publisher0.12.231 of 4See more

iam-zen cryptexlabs 0.12.23

1 of the 4 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

3,900
pagescrypticcode-helmchart1.0.02 of 3See more

pages crypticcode-helmchart 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm4
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

20,262
csghubcsghubVerified publisher2.5.06 of 34See more

csghub csghub 2.5.0

6 of the 34 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
openssl@3.5.6-r0
3.5.7-r0
library/memcached:1.6.38-alpinee93269864a7d
openssl@3.5.1-r0
3.5.7-r0
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
openssl@3.0.17-1~deb12u2
3.0.20-1~deb12u2
opencsghq/csghub-server:v2.5.0-ee587046575c2c
openssl@3.0.18-1~deb12u1
3.0.20-1~deb12u2
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
openssl@3.0.18-1~deb12u1
3.0.20-1~deb12u2
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
openssl@3.0.14-1~deb12u2
3.0.20-1~deb12u2

Open the chart page →

49,244

Container images carrying it

2,425 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
openssl@3.0.13-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/eminaktas/oom-tracer:v0.1.0c90ca8389c87
openssl@3.5.1-r0
3.5.7-r0
1
ghcr.io/emissary-ingress/emissary:4.1.04a981156abee
openssl@3.0.20-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/ethpandaops/benchmarkoor-ui:latestd090bb2060d9
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
openssl@3.5.5-1~deb13u2
3.5.6-1~deb13u2
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
openssl@3.0.17-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
openssl@3.5.1-r0
3.5.7-r0
1
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.25
1
ghcr.io/formancehq/membership:v1.11.024a0113d5fb0
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.25
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
openssl@3.5.1-r0
3.5.7-r0
1
ghcr.io/gchq/cyberchef:11.0.045082a0ac41d
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/gearbox-protocol/safe-watcher:1.2.14e92a4508bee
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/gethomepage/homepage:v1.13.1d8d784e50901
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/gla-rad/enav-aton-service-client:latestf1629ac5f9ec
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/gla-rad/enav-ckeeper:latest415323ef112b
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/gla-rad/enav-eureka:latest05002092c621
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/gla-rad/enav-vdes-controller:latestc4c52955814f
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
1
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
1
ghcr.io/glassflow/glassflow-etl-fe:v3.2.05eaad43bd6c5
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/glassflow/glassflow-notifier:v1.0.3d1b0ce10b513
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2
1
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
openssl@3.0.20-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
openssl@3.5.1-1+deb13u1
3.5.6-1~deb13u2
1
ghcr.io/gochain/rpc-proxy/rpc-proxy:latestca01f5ab95f7
openssl@3.5.1-r0
3.5.7-r0
1
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.2c7adcc4db378
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
openssl@3.0.13-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.11
1
ghcr.io/grycap/im:latest06a16d4f279f
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11
1
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
openssl@3.0.13-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
openssl@3.5.1-r0
3.5.7-r0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
openssl@3.5.0-r0
3.5.7-r0
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/home-operations/lidarr:3.1.29df1e14c8e09
openssl@3.5.5-r0
3.5.7-r0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.