StackRadar

CVE-2026-42766

Medium

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.011
63rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,216
of 17,797 indexed, latest versions
Container images
2,425
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-42766 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 2,216 of 17,797 indexed charts deploy, on 2,425 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+103 more1.0.1f-1ubuntu2.27+esm14, 1.0.2g-1ubuntu4.20+esm16, 1.1.1-1ubuntu2.1~18.04.23+esm9, 1.1.1f-1ubuntu2.24+esm4+6 more1,787
opensslapk3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more3.5.7-r0, 3.6.3-r0633
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm515
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl33.3.7-35
OSV records
ALPINE-CVE-2026-42766CGA-9fv6-c4c7-7xwrDEBIAN-CVE-2026-42766UBUNTU-CVE-2026-42766AZL-89943
Also known as
CGA-9mqf-xpvc-p77x, CGA-gf26-66cr-92gv, CGA-x9j4-77f9-qvfv, USN-8414-1, USN-8414-2

Charts affected

2,216 by stars
ChartLatestAffected imagesRadar Score
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
openssl@3.0.18-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

7,240
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

2,781
home-assistantloeken-at-homeVerified publisher2026.5.11 of 1See more

home-assistant loeken-at-home 2026.5.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
loeken/home-assistant:2026.5.14ce6abc553b3
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

3,016
lumenvoxlumenvox7.1.02 of 11See more

lumenvox lumenvox 7.1.0

2 of the 11 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
lumenvox/admin-portal:7.112310cf52f79
openssl@3.5.6-r0
3.5.7-r0
lumenvox/file-store:7.138aa8711c9ef
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

4,352
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-assure-identity:2.0.0147854a3c916
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-audit:2.0.079428add7f38
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-binary-storage:2.0.053decadc102d
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-deployment:2.0.0ea8110886d38
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-management-api:2.0.0b9a23345eabd
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-voice-verifier:2.0.014170ad34903
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

71,369
dnsbl-exporterluzillaVerified publisher0.5.01 of 2See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,149
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

5,773
magentomagento3.2.32 of 12See more

magento magento 3.2.3

2 of the 12 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm4
library/rabbitmq:4.1.0-management935b3f84c1e4
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11

Open the chart page →

13,685
plane-enterprisemakeplaneOfficialVerified publisher3.7.21 of 13See more

plane-enterprise makeplane 3.7.2

1 of the 13 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
valkey/valkey:7.2.11-alpine10328d00120d
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

4,973
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

3,026
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

19,206
mcpmcp-chartsVerified publisher0.0.232 of 7See more

mcp mcp-charts 0.0.23

2 of the 7 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2

Open the chart page →

7,053
jellyfinmedia-servarrVerified publisher0.16.01 of 2See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2

Open the chart page →

2,788
metrics-server-exportermetrics-server-exporterVerified publisher2.4.01 of 1See more

metrics-server-exporter metrics-server-exporter 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
mrnim94/metrics-server-exporter:v2.4.086c4807a4bca
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,266
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.11

Open the chart page →

4,221
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
openssl@3.5.3-1ubuntu2
3.5.3-1ubuntu3.4

Open the chart page →

11,106
model-manager-loadermodel-manager-loader1.27.01 of 1See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
openssl@3.5.1-1
3.5.6-1~deb13u2

Open the chart page →

2,717
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

13,819
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

2,578
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.25

Open the chart page →

3,738
surveyornatsVerified publisher0.20.91 of 1See more

surveyor nats 0.20.9

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
natsio/nats-surveyor:0.9.9104a3e938b23
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

909
clowder2ncsaVerified publisher1.9.76 of 12See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2
clowder/clowder2-frontend:2.0.0-beta.4fe97882672ca
openssl@3.5.4-r0
3.5.7-r0
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2

Open the chart page →

37,538
node-provider-labelernode-provider-labelerVerified publisher0.20.01 of 1See more

node-provider-labeler node-provider-labeler 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/jossware/node-provider-labeler:v0.8.0f80e85291439
openssl@3.0.13-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

1,112
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

14,398
octopuso7studios-octopus-helm-chartsOfficialVerified publisher1.2.33 of 5See more

octopus o7studios-octopus-helm-charts 1.2.3

3 of the 5 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/nats:2.11.9-alpine777787bbb4c7
openssl@3.5.1-r0
3.5.7-r0
natsio/nats-box:0.18.0abdc9f9f0120
openssl@3.5.0-r0
3.5.7-r0
natsio/nats-server-config-reloader:0.19.181edf32a3680
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

6,120
oadaoadaVerified publisher5.0.610 of 11See more

oada oada 5.0.6

10 of the 11 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
oada/auth:4.0.0c0d077e79ef4
openssl@3.5.1-r0
3.5.7-r0
oada/http-handler:4.0.0d87efe8ba4b0
openssl@3.5.1-r0
3.5.7-r0
oada/rev-graph-update:4.0.0ebc8343f05ff
openssl@3.5.1-r0
3.5.7-r0
oada/shares:4.0.0c6ffb4e8ed63
openssl@3.5.1-r0
3.5.7-r0
oada/startup:4.0.0fc09495e2f3c
openssl@3.5.1-r0
3.5.7-r0
oada/sync-handler:4.0.0b7a2cfc137cf
openssl@3.5.1-r0
3.5.7-r0
oada/users:4.0.0b6c562fa5b1b
openssl@3.5.1-r0
3.5.7-r0
oada/webhooks:4.0.06590c60de347
openssl@3.5.1-r0
3.5.7-r0
oada/well-known:4.0.07943fde43b19
openssl@3.5.1-r0
3.5.7-r0
oada/write-handler:4.0.08464c7f48aae
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

13,339
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
openssl@3.0.14-1~deb12u2
3.0.20-1~deb12u2

Open the chart page →

5,079
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
openssl@3.0.9-1
3.0.20-1~deb12u2
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
openssl@3.0.14-1~deb12u2
3.0.20-1~deb12u2

Open the chart page →

14,920
dhcp-serveropencord1.0.21 of 1See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
networkboot/dhcpd:lateste99bbfbd6fb2
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.25

Open the chart page →

4,216
openrouter-botopenrouter-botVerified publisher0.2.01 of 1See more

openrouter-bot openrouter-bot 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
lifailon/openrouter-bot:latestea37e4b6b952
openssl@3.5.1-r0
3.5.7-r0

Open the chart page →

1,059
librechatopenshift1.9.02 of 3See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.11
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

5,875
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.41.29 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.2

9 of the 34 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.19.0ede4864215be
openssl@3.5.6-r0
3.5.7-r0
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
openssl@3.0.2-0ubuntu1.25
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-cart3f89a444250a
openssl@3.5.6-r0
3.5.7-r0
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
openssl@3.5.4-r0
3.5.7-r0
ghcr.io/open-telemetry/demo:3.0.0-load-generatorcd12cb42fb15
openssl@3.5.6-r0
3.5.7-r0
ghcr.io/open-telemetry/demo:3.0.0-paymentd498c7434d22
openssl@3.0.18-1~deb12u2
3.0.20-1~deb12u2
ghcr.io/open-telemetry/demo:3.0.0-emaild674d4081ca4
openssl@3.5.6-r0
3.5.7-r0
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

23,064
openvaultopenvaultVerified publisher0.8.12 of 2See more

openvault openvault 0.8.1

2 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
openssl@3.5.0-r0
3.5.7-r0
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

6,960
opikopikOfficialVerified publisher2.2.673See more

opik opik 2.2.67

3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.0862d86046bbc
openssl@3.5.5-r0
3.5.7-r0
library/zookeeper:3.9.4dfa9ba46d14b
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.25
redis/redis-stack-server:7.2.0-v10e44b2b49d059
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.25

Open the chart page →

—
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
openssl@3.0.2-0ubuntu1.25
no fix listed
shaowenchen/ops-server:latest315444f703f4
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.25

Open the chart page →

9,214
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
openssl@3.5.4-1~deb13u2
3.5.6-1~deb13u2

Open the chart page →

3,735
prowlarrpanzer1119Verified publisher0.4.181 of 2See more

prowlarr panzer1119 0.4.18

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
linuxserver/prowlarr:2.4.0.5397-ls149a46d0ce0a823
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

994
radarrpanzer1119Verified publisher0.2.21 of 1See more

radarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/radarr:6.0.4.10291-ls2896c0948b42c14
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

950
sonarrpanzer1119Verified publisher0.2.21 of 1See more

sonarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

948
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
bitnamilegacy/postgresqldigest-pinned926356130b77
openssl@3.0.17-1~deb12u2
3.0.20-1~deb12u2

Open the chart page →

8,591
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2

Open the chart page →

6,897
patchworkpatchworkVerified publisher0.8.61 of 2See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/patchwork:mainc01e018bced4
openssl@3.5.0-r0
3.5.7-r0

Open the chart page →

2,086
pbuf-registrypbuf-registry0.4.11 of 2See more

pbuf-registry pbuf-registry 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/pbufio/registry:v0.4.177a36c035b4b
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,948
fahclientpcktdmp2.6.01 of 2See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
foldingathome/fah-gpu:latest5ef7742d1eb4
openssl@1.1.1-1ubuntu2.1~18.04.13
1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

4,743
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2

Open the chart page →

7,160
periscopeperiscopeVerified publisher1.1.61 of 1See more

periscope periscope 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
openssl@3.0.20-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

832
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.25

Open the chart page →

7,632
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

32,112
readarrpree-helm-chartsVerified publisher1.17.11 of 1See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.18.28058f7551205fbd
openssl@3.5.0-r0
3.5.7-r0

Open the chart page →

1,099
preparrpreparr0.19.71 of 6See more

preparr preparr 0.19.7

1 of the 6 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/robbeverhelst/preparr:latest9acc172942f3
openssl@3.5.6-r0
3.5.7-r0

Open the chart page →

1,127

Container images carrying it

2,425 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.11
1
ghcr.io/home-operations/prowlarr:2.3.01a8a4b11972b
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/home-operations/qbittorrent:5.1.4bb82ad6668f8
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/home-operations/tautulli:2.17.12183820d45a1
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
openssl@3.5.4-1~deb13u2
3.5.6-1~deb13u2
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
openssl@3.0.18-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/huseyinbabal/kubetag:lateste161eddc59a0
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/icegatetech/icegate-ingest:0.1.1bae3c441894a
openssl@3.0.19-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/icegatetech/icegate-maintain:0.1.193e85b2b76ee
openssl@3.0.19-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/icegatetech/icegate-query:0.1.17542b4e7fff2
openssl@3.0.19-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
openssl@3.0.17-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/iisas/domino-rest:latest3009350bfc11
openssl@3.5.4-1~deb13u2
3.5.6-1~deb13u2
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
openssl@3.0.17-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
openssl@3.5.1-1+deb13u1
3.5.6-1~deb13u2
1
ghcr.io/innago-property-management/innago-vault-k8s-role-operator:2.0.0ed1c3fd04057
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
openssl@3.0.2-0ubuntu1.26
no fix listed
1
ghcr.io/interplex-ai/interplex:v1.1.041b0dd0d55b2
openssl@3.5.0-r0
3.5.7-r0
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
openssl@3.0.20-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.25
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/jeboehm/fetchmailmgr:0.3.2126c4691b28a4
openssl@3.5.1-r0
3.5.7-r0
1
ghcr.io/jeffvli/feishin:1.11.01eed97d6272d
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/jellyfin/jellyfin:10.11.1145f648c382a0
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2
1
ghcr.io/jeremylong/open-vulnerability-data-mirror:v9.0.49a69aa14dc3e
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/jeremylvln/shulker-operator:0.13.027c55706c126
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.11
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm9
1
ghcr.io/jfwenisch/ipfix-generator:latesta1b05567dbf6
openssl@3.6.2-r5
3.6.3-r0
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.11
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.11
1
ghcr.io/jlclx/runtimeclass-controller:latestb3a87f92a963
openssl@3.0.14-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/jossware/node-provider-labeler:v0.8.0f80e85291439
openssl@3.0.13-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
openssl@1.1.1f-1ubuntu2.5
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.25
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm4
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.