StackRadar

CVE-2026-42766

Medium

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.011
63rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,436
of 17,803 indexed, latest versions
Container images
2,706
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-42766 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 2,436 of 17,803 indexed charts deploy, on 2,706 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+103 more1.0.1f-1ubuntu2.27+esm14, 1.0.2g-1ubuntu4.20+esm16, 1.1.1-1ubuntu2.1~18.04.23+esm9, 1.1.1f-1ubuntu2.24+esm4+6 more1,786
opensslapk3.2.0-r0, 3.3.1-r3, 3.3.1-r4, 3.3.2-r0+21 more3.3.7-r1, 3.5.7-r0, 3.6.3-r0915
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm515
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl33.3.7-35
OSV records
ALPINE-CVE-2026-42766CGA-9fv6-c4c7-7xwrDEBIAN-CVE-2026-42766UBUNTU-CVE-2026-42766AZL-89943
Also known as
CGA-9mqf-xpvc-p77x, CGA-gf26-66cr-92gv, CGA-x9j4-77f9-qvfv, USN-8414-1, USN-8414-2

Charts affected

2,436 by stars
ChartLatestAffected imagesRadar Score
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

5,298
cap-captcha-serverf3k-techVerified publisher0.21.01 of 1See more

cap-captcha-server f3k-tech 0.21.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
tiago2/cap:2.159f5ae4e261e
openssl@3.5.4-1~deb13u2
3.5.6-1~deb13u2

Open the chart page →

1,694
recaptcha-v3-verifierf3k-techVerified publisher1.110.01 of 1See more

recaptcha-v3-verifier f3k-tech 1.110.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
f3ktech/recaptcha-v3-verifier:1.1.048e78987cf91
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2

Open the chart page →

1,232
fastapi-microservice-appfast-api-microservice-app1.3.04 of 4See more

fastapi-microservice-app fast-api-microservice-app 1.3.0

4 of the 4 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/mongo:7.0b6421fd6d1c5
openssl@3.0.2-0ubuntu1.26
no fix listed
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
omkara25/simple-microservice-app-user-service:v2d62cba548580
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

9,683
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
openssl@3.3.3-r0
3.3.7-r1
featurehub/edge:1.9.198ad426737f6
openssl@3.3.3-r0
3.3.7-r1
featurehub/mr:1.9.1477d8bf771a9
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

8,248
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
taigaio/taiga-protected:latestfd4568a97a59
openssl@3.5.5-1~deb13u2
3.5.6-1~deb13u2

Open the chart page →

8,557
zabbix-server-mysqlfermosit3.0.23 of 4See more

zabbix-server-mysql fermosit 3.0.2

3 of the 4 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-6.4-latest349b924472a7
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.11
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.11
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.11

Open the chart page →

13,027
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
openssl@1.1.1-1ubuntu2.1~18.04.5
openssl1.0@1.0.2n-1ubuntu5.3
1.1.1-1ubuntu2.1~18.04.23+esm9
1.0.2n-1ubuntu5.13+esm5

Open the chart page →

12,987
function-mesh-operatorfunction-mesh0.2.431 of 1See more

function-mesh-operator function-mesh 0.2.43

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
streamnative/function-mesh:v0.28.077939c8aa269
openssl@3.3.7-r0
3.3.7-r1

Open the chart page →

185
memosgabe565Verified publisher0.17.01 of 1See more

memos gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/usememos/memos:0.24.04723d86e6797
openssl@3.3.2-r4
3.3.7-r1

Open the chart page →

1,331
garage-uigarage-uiVerified publisher0.12.11 of 1See more

garage-ui garage-ui 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
noooste/garage-ui:v0.12.10b68a9237da6
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

764
gateboardgateboard1.12.51 of 1See more

gateboard gateboard 1.12.5

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
udhos/gateboard:1.12.53acc0e7599bf
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,471
gateboard-discoverygateboard1.9.51 of 1See more

gateboard-discovery gateboard 1.9.5

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
udhos/gateboard-discovery:1.9.55567c9363c4c
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,198
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

17,432
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
nodejs@14.17.0-1nodesource1
openssl@1.1.1-1ubuntu2.1~18.04.9
openssl1.0@1.0.2n-1ubuntu5.6
no fix listed
1.1.1-1ubuntu2.1~18.04.23+esm9
1.0.2n-1ubuntu5.13+esm5

Open the chart page →

23,016
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm4
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm4
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

35,377
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

15,797
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

11,719
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

14,013
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

11,593
ombigeek-cookbookVerified publisher11.5.21 of 1See more

ombi geek-cookbook 11.5.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.25

Open the chart page →

5,186
protonmail-bridgegeek-cookbookVerified publisher5.4.21 of 1See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

8,048
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

11,624
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

10,295
sonarrgeek-cookbookVerified publisher16.3.21 of 1See more

sonarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.25

Open the chart page →

13,147
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

15,910
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm4
haveagitgat/tdarr_node:2.00.101e3f9328327d
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

31,162
valheimgeek-cookbookVerified publisher4.4.21 of 1See more

valheim geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/lloesche/valheim-server:latest20fde516ce31
openssl@3.5.5-1~deb13u1
3.5.6-1~deb13u2

Open the chart page →

4,927
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

7,709
gentrace-self-hostedgentrace-self-hostedVerified publisher0.1.32 of 9See more

gentrace-self-hosted gentrace-self-hosted 0.1.3

2 of the 9 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.8512bb8a21483
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm4
library/postgres:15.38775adb39f0d
openssl@3.0.9-1
3.0.20-1~deb12u2

Open the chart page →

15,661
geo-checkergeo-checkerVerified publisher5.0.01 of 1See more

geo-checker geo-checker 5.0.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ymuski/geo-checker:5.0.05ba7fd8c7bdc
openssl@3.5.4-r0
3.5.7-r0

Open the chart page →

1,458
ghostfolioghostfolioVerified publisher0.5.41 of 3See more

ghostfolio ghostfolio 0.5.4

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
openssl@3.0.20-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

3,150
gigapipegigapipeVerified publisher0.3.01 of 1See more

gigapipe gigapipe 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/metrico/gigapipe:v4.1.6caeb2652ce5e
openssl@3.3.7-r0
3.3.7-r1

Open the chart page →

513
leantimegissilabs1.3.01 of 2See more

leantime gissilabs 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/mariadb:10.6.218a16204dc96c
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

6,469
gotosocialgotosocialVerified publisher0.2.321 of 1See more

gotosocial gotosocial 0.2.32

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
superseriousbusiness/gotosocial:0.22.10078ca451dda
openssl@3.3.7-r0
3.3.7-r1

Open the chart page →

140
meta-monitoringgrafana1.3.01 of 2See more

meta-monitoring grafana 1.3.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
grafana/alloy:v1.4.306bdcbb51fc2
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.11

Open the chart page →

3,580
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11

Open the chart page →

4,209
castopodh2mVerified publisher1.12.101 of 3See more

castopod h2m 1.12.10

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
castopod/castopod:1.12.101fd37280cbb2
openssl@3.0.14-1~deb12u2
3.0.20-1~deb12u2

Open the chart page →

10,172
haproxy-redis-sentinelhaproxy-redis-sentinelVerified publisher0.1.32 of 2See more

haproxy-redis-sentinel haproxy-redis-sentinel 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/haproxy:3.1-bookworm49a0a0d6f0b8
openssl@3.0.17-1~deb12u2
3.0.20-1~deb12u2
ghcr.io/parmincloud/haproxy-redis-sentinel:1.0.040a00a6456ae
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

4,332
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

6,438
boundary-controllerhashicorpVerified publisher0.1.11 of 1See more

boundary-controller hashicorp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
hashicorp/boundary-enterprise:1.0.1-ent38d2f9bdee0d
openssl@3.3.7-r0
3.3.7-r1

Open the chart page →

159
boundary-workerhashicorpVerified publisher0.1.11 of 1See more

boundary-worker hashicorp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
hashicorp/boundary-enterprise:1.0.1-ent38d2f9bdee0d
openssl@3.3.7-r0
3.3.7-r1

Open the chart page →

159
hawkhawk1.1.52 of 4See more

hawk hawk 1.1.5

2 of the 4 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
ghcr.io/privacyengineering/hawk-service:latestbfedf47bb5e0
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.25

Open the chart page →

13,704
clickstackhdx-oss-v21.1.12 of 5See more

clickstack hdx-oss-v2 1.1.1

2 of the 5 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.7-alpine258d43821508
openssl@3.5.4-r0
3.5.7-r0
library/mongo:5.0.32-focal3b6c281e1c08
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm4

Open the chart page →

4,761
headscale-uiheadscale-uiVerified publisher0.2.91 of 1See more

headscale-ui headscale-ui 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
ghcr.io/gurucomputing/headscale-ui:2026.03.17015f5ba04bcb
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

1,483
app-blueprinthelm-app-blueprintVerified publisher0.2.11 of 1See more

app-blueprint helm-app-blueprint 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

843
guacamolehelmforgeVerified publisher1.5.22 of 5See more

guacamole helmforge 1.5.2

2 of the 5 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11
library/postgres:17.5-bookwormfbcea1bd13b6
openssl@3.0.17-1~deb12u2
3.0.20-1~deb12u2

Open the chart page →

8,908
uptime-kumahelmforgeVerified publisher1.5.131 of 1See more

uptime-kuma helmforge 1.5.13

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
openssl@3.0.20-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

30,398
velerohelmforgeVerified publisher1.4.101 of 2See more

velero helmforge 1.4.10

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
velero/velero:v1.18.237396519f399
openssl@3.0.2-0ubuntu1.25
no fix listed

Open the chart page →

1,449
helmuphelmupVerified publisher0.1.03 of 3See more

helmup helmup 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-42766.

Container imageDigestPackageFixed in
sirrend/helmup-engine:0.1.13699e79e3d4e2
openssl@3.0.13-1~deb12u1
3.0.20-1~deb12u2
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
openssl@3.0.13-1~deb12u1
3.0.20-1~deb12u2
sirrend/helmup-notifications-service:0.1.3997866417011
openssl@3.0.13-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

16,596

Container images carrying it

2,706 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.4-thick3c20900b5381
openssl@3.5.4-1~deb13u2
3.5.6-1~deb13u2
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.16bebbda31416
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/kadajett/podscope:0.2.3eeedf17112d7
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/kagent-dev/doc2vec/mcp:1.1.14ace1de323f4a
openssl@3.6.0-r4
3.6.3-r0
1
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
openssl@3.5.1-r0
3.5.7-r0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
openssl@3.5.1-r0
3.5.7-r0
1
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/kikplate/kikplate-api:main2fbce0601a3c
openssl@3.3.7-r0
3.3.7-r1
1
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
openssl@3.3.7-r0
3.3.7-r1
1
ghcr.io/kluster-manager/fluxcd-addon:v0.0.103475404bef5c
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/klustrefs/klustre-csi-plugin:0.1.1bcf42ccda0f9
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.1~18.04.23+esm9
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/kubelauncher/openldap8978aa002bc0
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.11
1
ghcr.io/kubeservice-stack/customlimitrange-manager:v1.3.0d3ed97d142d4
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/kubestellar/console:v0.3.41457cfc94b4da
openssl@3.5.6-r0
3.5.7-r0
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
openssl@3.0.19-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
openssl@3.5.1-1+deb13u1
3.5.6-1~deb13u2
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm4
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
openssl@3.0.9-1
3.0.20-1~deb12u2
1
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.11
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
openssl@3.0.14-1~deb12u2
3.0.20-1~deb12u2
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
openssl@1.1.1-1ubuntu2.1~18.04.13
1.1.1-1ubuntu2.1~18.04.23+esm9
1
ghcr.io/linuxserver/bookstack:version-v24.12.1cc795b254b73
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/linuxserver/ombi:4.53.50caadf03b804
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.11
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.25
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11
1
ghcr.io/linuxserver/radarr:6.0.4.10291-ls2896c0948b42c14
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/linuxserver/radarr:6.0.4c8a55bd83672
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm9
1
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
openssl@3.5.4-r0
3.5.7-r0
1
ghcr.io/liturgical-app/calendar-api:0.0.9688a685e2bde
openssl@3.5.1-r0
3.5.7-r0
1
ghcr.io/liturgical-app/liturgical-api:1.0.12637bdcebdd8d
openssl@3.5.5-r0
3.5.7-r0
1
ghcr.io/liturgical-app/liturgical-app:1.2.041f25aded572
openssl@3.5.1-r0
3.5.7-r0
1
ghcr.io/livepeer/cloudflared-ingress-operator:latestc179cdcaa050
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
openssl@3.5.5-1~deb13u1
3.5.6-1~deb13u2
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.