CVE-2026-42766

Medium

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.011; 63rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,476; of 17,805 indexed, latest versions
Container images: 2,730; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-42766 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 2,476 of 17,805 indexed charts deploy, on 2,730 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+103 more	1.0.1f-1ubuntu2.27+esm14, 1.0.2g-1ubuntu4.20+esm16, 1.1.1-1ubuntu2.1~18.04.23+esm9, 1.1.1f-1ubuntu2.24+esm4+6 more	1,808
opensslapk	3.2.0-r0, 3.3.1-r3, 3.3.1-r4, 3.3.2-r0+21 more	3.3.7-r1, 3.5.7-r0, 3.6.3-r0	917
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 more	no fix listed	22
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+4 more	1.0.2n-1ubuntu5.13+esm5	20
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3	3.3.7-3	5

OSV records: ALPINE-CVE-2026-42766 CGA-9fv6-c4c7-7xwr DEBIAN-CVE-2026-42766 UBUNTU-CVE-2026-42766 AZL-89943
Also known as: CGA-9mqf-xpvc-p77x, CGA-gf26-66cr-92gv, CGA-x9j4-77f9-qvfv, USN-8414-1, USN-8414-2

Charts affected

2,476 by stars

Chart

Latest

Affected images

Radar Score

commonground-gatewayopencatalogi

1.5.3

1 of 7 See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	openssl@3.0.9-1	3.0.20-1~deb12u2

Open the chart page →

9,730

opentickopenchart

0.1.0

1 of 1 See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
library/nginx :1.25.5	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

5,681

cdn-remoteopencord

0.2.4

2 of 3 See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
omecproject/cdn-antmedia :1.0.0	b4ae7d0d6b74	openssl@1.1.0g-2ubuntu4.3	1.1.1-1ubuntu2.1~18.04.23+esm9
omecproject/cdn-video-repo :1.0.0	d59ccb138ffb	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

63,773

comacopencord

1.0.0

3 of 9 See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm16
omecproject/onos-progran :1.0.0	5715e5648aa0	nodejs@8.9.4-1nodesource1 openssl@1.0.2g-1ubuntu4.10	no fix listed 1.0.2g-1ubuntu4.20+esm16
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

264,064

comac-cuopencord

0.1.1

1 of 4 See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	openssl@1.1.0g-2ubuntu4.1	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

8,232

comac-platformopencord

0.0.17

1 of 11 See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

84,039

freeradiusopencord

1.0.4

1 of 1 See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

15,754

mcord-cdn-remoteopencord

0.1.6

2 of 2 See more

mcord-cdn-remote opencord 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm16
woojoong/wowza :latest	ec230db19652	openssl@1.1.0g-2ubuntu4.1	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

43,092

mcord-cdn-remote-freeopencord

0.1.3

1 of 1 See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

29,558

mcord-control-planeopencord

0.2.2

2 of 5 See more

mcord-control-plane opencord 0.2.2

2 of the 5 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ngick8stesting/c3po-mme :mwca-mme-debug	8dd6dea45be4	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm16
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	openssl@1.1.0g-2ubuntu4.1	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

16,017

oaisimopencord

0.1.7

2 of 3 See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	openssl@1.1.1-1ubuntu2.1~18.04.6 openssl1.0@1.0.2n-1ubuntu5.4	1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	openssl@1.1.1-1ubuntu2.1~18.04.9 openssl1.0@1.0.2n-1ubuntu5.6	1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5

Open the chart page →

14,908

omec-control-planeopencord

0.1.31

4 of 8 See more

omec-control-plane opencord 0.1.31

4 of the 8 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
omecproject/c3po-hss :master-latest	638671ef4842	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm16
omecproject/c3po-hssdb :master-latest	28a90cc26716	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm4
omecproject/mme-exporter :paging-latest	bcc5f19fd676	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9
omecproject/openmme :master-latest	64776cb9edb3	openssl@1.0.2g-1ubuntu4.17	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

108,522

onosopencord

3.0.2

1 of 1 See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
onosproject/onos :2.2.1	44914a8d4b3f	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

12,950

onos-progranopencord

1.2.7

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	nodejs@8.9.4-1nodesource1 openssl@1.0.2g-1ubuntu4.10	no fix listed 1.0.2g-1ubuntu4.20+esm16

Open the chart page →

98,727

ponsimv2opencord

1.2.3

1 of 2 See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
voltha/voltha-tester :1.7.0	655c3048a602	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

69,436

sebaopencord

1.0.0

6 of 17 See more

seba opencord 1.0.0

6 of the 17 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
tpdock/freeradius :2.2.9	3da600c95a49	openssl@1.0.2g-1ubuntu4.9	1.0.2g-1ubuntu4.20+esm16
voltha/voltha-cli :1.6.0	c4e41e92f046	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm16
voltha/voltha-envoy :1.6.0	59ab2a00f712	openssl@1.0.1f-1ubuntu2.27	1.0.1f-1ubuntu2.27+esm14
voltha/voltha-netconf :1.6.0	37f80524c207	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm16
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm16
voltha/voltha-voltha :1.6.0	ff596b62de59	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

377,706

voltha-infraopencord

2.14.0

2 of 10 See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9
voltha/voltha-onos :5.1.8	e038acb950d3	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

41,185

opencost-parquet-exporteropencost

0.3.1

1 of 1 See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

11,118

opencost-lensopencost-lens

1.0.0

1 of 2 See more

opencost-lens opencost-lens 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost-ui :1.118.0	571f87e528ea	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

1,114

cron-connectoropenfaas

0.6.16

1 of 1 See more

cron-connector openfaas 0.6.16

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/cron-connector :0.7.0	982498e8a41e	openssl@3.3.2-r4	3.3.7-r1

Open the chart page →

887

kafka-connectoropenfaas

0.7.15

1 of 1 See more

kafka-connector openfaas 0.7.15

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/kafka-connector :0.7.16	0e58eac0e2f7	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

1,165

postgres-connectoropenfaas

0.1.2

1 of 1 See more

postgres-connector openfaas 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/postgres-connector :0.2.3	379e583a0a75	openssl@3.3.2-r4	3.3.7-r1

Open the chart page →

1,217

pro-builderopenfaas

0.6.13

1 of 2 See more

pro-builder openfaas 0.6.13

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/pro-builder :0.6.0	6c17297f9098	openssl@3.5.0-r0	3.5.7-r0

Open the chart page →

2,755

queue-workeropenfaas

0.2.34

1 of 1 See more

queue-worker openfaas 0.2.34

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/jetstream-queue-worker :0.5.10	e9245a0bca88	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

573

rabbitmq-connectoropenfaas

0.0.4

1 of 1 See more

rabbitmq-connector openfaas 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/rabbitmq-connector :0.1.2	349f7dca95ec	openssl@3.3.2-r4	3.3.7-r1

Open the chart page →

1,037

sqs-connectoropenfaas

0.2.7

1 of 1 See more

sqs-connector openfaas 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/sqs-connector :0.3.4	d44ed3b3128c	openssl@3.3.2-r4	3.3.7-r1

Open the chart page →

912

dokuopenlit

0.1.4

1 of 3 See more

doku openlit 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :latest	fa394da808cc	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

1,757

openlitopenlit

1.24.0

1 of 3 See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.4.1	2e6587b81a26	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

5,228

openlit-operatoropenlit

0.2.2

1 of 1 See more

openlit-operator openlit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/openlit/openlit-operator :0.0.2	457bb5ada68b	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

862

openobserveopenobserve

1.0.1

3 of 6 See more

openobserve openobserve 1.0.1

3 of the 6 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.7	ffce8bd10338	openssl@3.5.6-r0	3.5.7-r0
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	openssl@3.5.5-r0	3.5.7-r0
natsio/prometheus-nats-exporter :0.20.1	4fbf6dacb847	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

3,083

openpanelopenpanel

0.9.0

1 of 6 See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :25.10.2.65	e019438e1e05	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.25

Open the chart page →

3,486

llm-stackopenproject-helm-charts

1.1.0

1 of 2 See more

llm-stack openproject-helm-charts 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
apache/apisix :3.16.0-ubuntu	5e47692cac00	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11

Open the chart page →

2,044

kubedb-certifiedopenshift

2026.7.10

1 of 8 See more

kubedb-certified openshift 2026.7.10

1 of the 8 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/petset :v0.1.0	93fa0daf603c	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

4,502

mattermost-team-editionopenshift

6.6.83

1 of 4 See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

4,131

voyager-gatewayopenshift

2026.1.15

1 of 2 See more

voyager-gateway openshift 2026.1.15

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.1.0	13fd0cccafe8	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

2,692

open-vpnopenvpn

0.0.1

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

81,408

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	nodejs@8.10.0~dfsg-2ubuntu0.4 openssl@1.1.1-1ubuntu2.1~18.04.6 openssl1.0@1.0.2n-1ubuntu5.4	no fix listed 1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5

Open the chart page →

102,109

operatonoperaton

1.0.5

1 of 1 See more

operaton operaton 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
operaton/operaton :1.0.0-beta-4	b35867ffe4d8	openssl@3.3.3-r0	3.3.7-r1

Open the chart page →

2,125

kubernetes-syncopslevel

0.8.0

1 of 1 See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

1,756

opslevelopslevel

2025.1.22

1 of 10 See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	openssl@3.3.2-r2	3.6.3-r0

Open the chart page →

5,661

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	openssl@1.0.1f-1ubuntu2.25	1.0.1f-1ubuntu2.27+esm14

Open the chart page →

26,383

hiveopstty

0.1.9

2 of 4 See more

hive opstty 0.1.9

2 of the 4 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
alpine/curl :8.12.0	8943e8c7e8e4	openssl@3.3.2-r4	3.3.7-r1
bitnamilegacy/postgresql :16	233f361c5819	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

4,737

example-idpory

0.64.0

1 of 1 See more

example-idp ory 0.64.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
oryd/hydra-login-consent-node :v26.2.0	6465e95993b5	openssl@3.3.3-r0	3.3.7-r1

Open the chart page →

986

grrosdfir-infrastructure

1.0.3

2 of 5 See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

11,062

osdfir-infrastructureosdfir-infrastructure

2.15.0

10 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

10 of the 40 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
bitnamilegacy/git :latest	4b08d0c5af8d	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
chromadb/chroma :1.5.7	fc8dc8e11fb2	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2
library/mariadb :11.3.2	e101f9db3191	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25
library/postgres :17.5-alpine	6567bca8d7bc	openssl@3.5.1-r0	3.5.7-r0
library/postgres :17.2-alpine	7e5df973a748	openssl@3.3.2-r4	3.3.7-r1
library/redis :7.4.2-alpine	02419de7eddf	openssl@3.3.3-r0	3.3.7-r1
yetiplatform/bloomcheck :dev	85683ddfccbb	openssl@3.3.3-r0	3.3.7-r1
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	openssl@3.0.18-1~deb12u2	3.0.20-1~deb12u2
ghcr.io/openrelik/openrelik-ui :latest	7f91594d5eb3	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

203,308

fluent-bitot-container-kit

0.0.3

1 of 2 See more

fluent-bit ot-container-kit 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
quay.io/opstree/fluent-bit :5.0.3	391eef5a68ff	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2

Open the chart page →

929

loki-standaloneot-container-kit

1.0.2

3 of 5 See more

loki-standalone ot-container-kit 1.0.2

3 of the 5 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
nginxinc/nginx-unprivileged :1.29-alpine	0c79d56aee56	openssl@3.5.6-r0	3.5.7-r0
quay.io/opstree/k8s-sidecar :2.7.1	26aa9bb3386b	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
quay.io/opstree/memcached :1.6.38-alpine3.22	cabbdfd2c3fe	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2

Open the chart page →

3,667

vm-standaloneot-container-kit

0.0.4

2 of 6 See more

vm-standalone ot-container-kit 0.0.4

2 of the 6 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
quay.io/opstree/grafana :12.4.3	b61c1ed2f015	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
quay.io/opstree/k8s-sidecar :2.7.3	7075d455b219	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2

Open the chart page →

3,506

outscale-s3-exploreroutscale-s3-explorer

0.1.4

1 of 1 See more

outscale-s3-explorer outscale-s3-explorer 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/solucteam/outscale-s3-explorer :v1.0.0	9665c3e71889	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

1,816

automatap2p-avs

0.1.0

1 of 2 See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.25

Open the chart page →

3,695

Container images carrying it

2,730 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/open-telemetry/demo :3.1.0-payment	10d6bd20d8a0	openssl@3.0.18-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/open-telemetry/demo :3.1.0-image-provider	46d1a7e95109	openssl@3.5.4-r0	3.5.7-r0	1
ghcr.io/open-telemetry/demo :1.12.0-imageprovider	4e322858fe56	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-accountingservice	6d051840bb29	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-quoteservice	87eb325d306f	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-frontendproxy	9fdec1be03e4	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25	1
ghcr.io/open-telemetry/demo :1.12.0-emailservice	a1f5cebb5240	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/open-telemetry/demo :1.12.0-adservice	a59e5eead495	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.11	1
ghcr.io/open-telemetry/demo :1.12.0-recommendationservice	b294a4278407	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/open-telemetry/demo :3.1.0-email	bd7754c1e098	openssl@3.5.6-r0	3.5.7-r0	1
ghcr.io/open-telemetry/demo :3.1.0-ad	dfd7a4697116	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
ghcr.io/open-telemetry/demo :3.1.0-frontend-proxy	fd4da88bfeaa	openssl@3.0.2-0ubuntu1.29	no fix listed	1
ghcr.io/openunison/openunison-k8s-react :1.0.2	afb3e9282952	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25	1
ghcr.io/open-webui/mcpo :git-39b4867	f06525afac6b	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm4	1
ghcr.io/pabloromeo/clusterplex_orchestrator :1.4.16	0fe80de2d22c	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	1
ghcr.io/paradigmxyz/reth :v1.3.12	1e5290e8b743	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25	1
ghcr.io/paradigmxyz/reth :v2.2.0	505fca5e87d6	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11	1
ghcr.io/parca-dev/parca :v0.24.2	3776500fde82	openssl@3.5.1-r0	3.5.7-r0	1
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2	1
ghcr.io/parmincloud/haproxy-redis-sentinel :1.0.0	40a00a6456ae	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/pbufio/registry :v0.4.1	77a36c035b4b	openssl@3.5.4-r0	3.5.7-r0	1
ghcr.io/perceptolab/devops-demo-app :0.0.2	cdc0658c40fb	openssl@1.1.1-1ubuntu2.1~18.04.20	1.1.1-1ubuntu2.1~18.04.23+esm9	1
ghcr.io/pixelfederation/unbound :1.24.2_0	fce820a03964	openssl@3.5.5-r0	3.5.7-r0	1
ghcr.io/plausible/community-edition :v3.0.1	14c1afde21d6	openssl@3.3.3-r0	3.3.7-r1	1
ghcr.io/pocket-id/pocket-id :v2.7.0	45bdeaf3fcd6	openssl@3.5.6-r0	3.5.7-r0	1
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25	1
ghcr.io/qovery/iam-eks-user-mapper :main	c41e3efc6097	openssl@3.5.1-1+deb13u1	3.5.6-1~deb13u2	1
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	openssl@3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	1
ghcr.io/radar-base/radar-app-config/radar-app-config :0.6.2	4431db7b486b	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend :0.2.4	d1e55350923c	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
ghcr.io/radar-base/radar-gateway/radar-gateway :0.9.4	219d894aa7a6	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure :3.0.6	7fb9c70e96a4	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools :0.8.16	c442e8bfe6b4	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
ghcr.io/radar-base/radar-self-enrolment-ui :0.1.0	b9a7cd3cc099	openssl@3.5.4-r0	3.5.7-r0	1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend :0.6.4	6a04b43b8d9a	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11	1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-frontend :0.6.4	7e27863545fc	openssl@3.3.3-r0	3.3.7-r1	1
ghcr.io/rajnandan1/kener :3.2.18	2b993cb232eb	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/reiche-world/traefik-secrets-exporter :0.0.2	1485ff93cbf9	openssl@3.5.4-r0	3.5.7-r0	1
ghcr.io/reitermarkus/7d2d :main	39953b387b61	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2	1
ghcr.io/robbeverhelst/preparr :latest	9acc172942f3	openssl@3.5.6-r0	3.5.7-r0	1
ghcr.io/rodg/rtmp-controller :latest	67f99a5beab7	openssl@3.0.9-1	3.0.20-1~deb12u2	1
ghcr.io/sagernet/sing-box :v1.12.0	3c1ee82d450d	openssl@3.5.1-r0	3.5.7-r0	1