CVE-2026-42766

Medium

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.011; 63rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,436; of 17,803 indexed, latest versions
Container images: 2,706; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-42766 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 2,436 of 17,803 indexed charts deploy, on 2,706 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+103 more	1.0.1f-1ubuntu2.27+esm14, 1.0.2g-1ubuntu4.20+esm16, 1.1.1-1ubuntu2.1~18.04.23+esm9, 1.1.1f-1ubuntu2.24+esm4+6 more	1,786
opensslapk	3.2.0-r0, 3.3.1-r3, 3.3.1-r4, 3.3.2-r0+21 more	3.3.7-r1, 3.5.7-r0, 3.6.3-r0	915
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm5	15
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3	3.3.7-3	5

OSV records: ALPINE-CVE-2026-42766 CGA-9fv6-c4c7-7xwr DEBIAN-CVE-2026-42766 UBUNTU-CVE-2026-42766 AZL-89943
Also known as: CGA-9mqf-xpvc-p77x, CGA-gf26-66cr-92gv, CGA-x9j4-77f9-qvfv, USN-8414-1, USN-8414-2

Charts affected

2,436 by stars

Chart

Latest

Affected images

Radar Score

claude-code-hubclaude-code-hub

0.1.0

1 of 4 See more

claude-code-hub claude-code-hub 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
library/redis :7-alpine	ff02b58f971e	openssl@3.3.7-r0	3.3.7-r1

Open the chart page →

2,360

cloudflared-ingress-operatorcloudflared-ingress-operator

0.3.2

1 of 1 See more

cloudflared-ingress-operator cloudflared-ingress-operator 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/livepeer/cloudflared-ingress-operator :latest	c179cdcaa050	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

1,773

tensorflow-notebookcloudnativeapp

0.1.2

1 of 1 See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
tensorflow/tensorflow :1.6.0-devel	1e3172090703	openssl@1.0.2g-1ubuntu4.10	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

91,485

bastioncloudposse

0.2.0

1 of 2 See more

bastion cloudposse 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
cloudposse/bastion :latest	0d9507e8a760	openssl@3.3.6-r0	3.3.7-r1

Open the chart page →

1,724

openstack-manila-csicloud-provider-openstack

2.36.3

1 of 5 See more

openstack-manila-csi cloud-provider-openstack 2.36.3

1 of the 5 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
registry.k8s.io/provider-os/manila-csi-plugin :v1.36.0	190976e2e2fe	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

3,785

cloudttycloudtty

0.8.10

1 of 2 See more

cloudtty cloudtty 0.8.10

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/cloudtty/cloudshell :v0.8.10	23e8d178e02c	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

3,026

clustereye-stackclustereye

0.1.1

2 of 5 See more

clustereye-stack clustereye 0.1.1

2 of the 5 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
envoyproxy/envoy :v1.31.0	2bf7f042e396	openssl@3.0.2-0ubuntu1.16	3.0.2-0ubuntu1.25
johnblack77/clustereye-api :latest	9b8dbc0264ac	openssl@3.3.7-r0	3.3.7-r1

Open the chart page →

5,062

clusternet-hubclusternet

1.0.0

1 of 1 See more

clusternet-hub clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/clusternet/clusternet-hub :v1.0.0	59f75504c5d4	openssl@3.3.2-r4	3.3.7-r1

Open the chart page →

1,554

clusternet-schedulerclusternet

1.0.0

1 of 1 See more

clusternet-scheduler clusternet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/clusternet/clusternet-scheduler :v1.0.0	a6ae5aff81ce	openssl@3.3.2-r4	3.3.7-r1

Open the chart page →

1,554

cluster-setupcluster-setup

1.5.0

3 of 8 See more

cluster-setup cluster-setup 1.5.0

3 of the 8 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.43.1	0881d3c9359b	openssl@3.3.3-r0	3.3.7-r1
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	openssl@3.3.3-r0	3.3.7-r1
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11

Open the chart page →

10,463

commonground-gatewaycommonground-gateway

1.5.4

1 of 7 See more

commonground-gateway commonground-gateway 1.5.4

1 of the 7 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	openssl@3.0.9-1	3.0.20-1~deb12u2

Open the chart page →

9,723

cosmotech-copilot-apicosmotech-api

0.1.1

1 of 1 See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api :latest	a2be95de450c	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2

Open the chart page →

11,476

oci-registrycronce

0.4.5

1 of 1 See more

oci-registry cronce 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
mcronce/oci-registry :v0.4.5	09519cd7bd2f	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

1,329

cryptlex-enterprisecryptlex

3.21.27

1 of 8 See more

cryptlex-enterprise cryptlex 3.21.27

1 of the 8 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
library/redis :7-alpine	ff02b58f971e	openssl@3.3.7-r0	3.3.7-r1

Open the chart page →

1,255

paperless-ngxcrystalnet

0.2.22

1 of 3 See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

13,840

nifid4n

2.0.0

1 of 5 See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
apache/nifi-registry :1.26.0	7cdfd8deec92	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25

Open the chart page →

5,456

aibrixdanchev

0.7.0

1 of 5 See more

aibrix danchev 0.7.0

1 of the 5 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
aibrix/metadata-service :v0.7.0	63fb81a64377	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

5,437

data-fairdata354-helm

1.1.2

3 of 12 See more

data-fair data354-helm 1.1.2

3 of the 12 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
library/mongo :4.4	4be76f674fc4	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm4
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
ghcr.io/data-fair/notify :3	c739b74dabb0	openssl@3.3.3-r0	3.3.7-r1

Open the chart page →

38,748

datacube-explorerdatacube-charts

0.5.32

1 of 1 See more

datacube-explorer datacube-charts 0.5.32

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
opendatacube/explorer :latest	120457ffcd69	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11

Open the chart page →

4,949

dbrepodbrepo

1.13.3

15 of 25 See more

dbrepo dbrepo 1.13.3

15 of the 25 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
bitnamilegacy/mariadb :11.4.5-debian-12-r12	8bc50a0961a7	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
bitnamilegacy/mariadb-galera :11.3.2-debian-12-r9	aee9c668098f	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2
bitnamilegacy/mysqld-exporter :0.15.1-debian-12-r26	11a5f0b79e79	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2
bitnamilegacy/nginx :1.28.0-debian-12-r0	eaf9066e86f6	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
bitnamilegacy/openldap :2.6.8-debian-12-r1	6e412c178ef9	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
bitnamilegacy/opensearch :2.18.0-debian-12-r0	d8440eb6b290	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
bitnamilegacy/os-shell :12-debian-12-r32	17444b4b2c96	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
bitnamilegacy/postgres-exporter :0.15.0-debian-12-r44	e7e1b3a90682	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
bitnamilegacy/postgresql :17.0.0-debian-12-r9	d885ac277163	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
bitnamilegacy/postgresql :17.6.0-debian-12-r0	de520acd66fc	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2
bitnamilegacy/prometheus :2.54.1-debian-12-r4	08b1b7cb6a5b	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
bitnamilegacy/rabbitmq :3.13.7-debian-12-r2	cd593809e359	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2
bitnamilegacy/seaweedfs :3.87.0-debian-12-r1	0cb31d0fc356	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
bitnamilegacy/valkey :latest	0384ca2eec63	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

53,597

dcachedcache

0.1.0

1 of 4 See more

dcache dcache 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
kroniak/ssh-client :latest	3aef87e1a00b	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

488

mealiedeimosfr-charts

1.0.15

1 of 1 See more

mealie deimosfr-charts 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v3.24.0	0b08ac3a9f0a	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

4,091

kubedashdevopstales

4.0.0

3 of 8 See more

kubedash devopstales 4.0.0

3 of the 8 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
library/postgres :18.3	a9abf4275f9e	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2
library/redis :8.6.2	009cc37796fb	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2
oliver006/redis_exporter :v1.82.0-alpine	da9e89ee4e75	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

9,362

dial-coredial

6.0.0

1 of 2 See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
valkey/valkey :9.0.2	930b41430fb7	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2

Open the chart page →

1,570

powershelluniversaldigitalhub

0.1.2

1 of 1 See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ironmansoftware/universal :3.3.1-ubuntu-20.04	1943c73cce31	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

72,845

directusdirectus-io

2.1.0

3 of 3 See more

directus directus-io 2.1.0

3 of the 3 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
bitnamilegacy/mysql :9.4.0-debian-12-r1	ec13e229247a	openssl@3.0.17-1~deb12u1	3.0.20-1~deb12u2
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2
directus/directus :12.0.2	9c8470ea465c	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

7,645

smtp-relaydjjudas21

0.8.0

1 of 1 See more

smtp-relay djjudas21 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
djjudas21/smtp-relay :0.11.0	ffd8143952f6	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

676

domain-lockerdomain-locker

0.2.8

1 of 3 See more

domain-locker domain-locker 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
lissy93/domain-locker :latest	d3c95edc0a8b	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,886

dominodomino

0.1.11

2 of 3 See more

domino domino 0.1.11

2 of the 3 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
library/postgres :13	4689940c6838	openssl@3.5.1-1+deb13u1	3.5.6-1~deb13u2
ghcr.io/tauffer-consulting/domino-rest :latest	8bf880fe8c73	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

8,929

seafiledr300481

0.12.1

1 of 1 See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	openssl@3.0.2-0ubuntu1.17	3.0.2-0ubuntu1.25

Open the chart page →

68,853

dragonfly-stackdragonfly

0.1.2

1 of 7 See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
dragonflyoss/client :v0.1.82	edf3e921f4e0	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

18,901

rstudiodsri-helm-charts

0.1.28

1 of 1 See more

rstudio dsri-helm-charts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/maastrichtu-ids/rstudio :latest	981aa4c109e1	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11

Open the chart page →

64,698

glpieftechcombr-glpi

2.12.1

2 of 5 See more

glpi eftechcombr-glpi 2.12.1

2 of the 5 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
eftechcombr/glpi :php-fpm-12.0.0-rc2	7573fa8503ee	openssl@3.5.4-r0	3.5.7-r0
eftechcombr/glpi :nginx-12.0.0-rc2	e5db0c32f930	openssl@3.3.3-r0	3.3.7-r1

Open the chart page →

4,603

elchi-stackelchi

1.13.0

5 of 10 See more

elchi-stack elchi 1.13.0

5 of the 10 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.8	1ffa82edee00	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.24+esm4
envoyproxy/envoy :v1.33.0	56da5afd7df3	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25
grafana/grafana :12.2.0	74144189b384	openssl@3.5.1-r0	3.5.7-r0
jhonbrownn/elchi-backend :v1.6.14-v0.14.0-envoy1.39.0	31aee9ba2c63	openssl@3.3.7-r0	3.3.7-r1
library/mongo :6.0.12	646902910d6a	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25

Open the chart page →

15,753

emqx-eeemqx-operator

4.4.38

1 of 2 See more

emqx-ee emqx-operator 4.4.38

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
emqx/emqx-ee :4.4.38	d48360ed86f4	openssl@3.3.7-r0	3.3.7-r1

Open the chart page →

187

enavenav-service-architecture

0.0.7

8 of 10 See more

enav enav-service-architecture 0.0.7

8 of the 10 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/enav-api-gateway :latest	8f4345c77dda	openssl@3.5.6-r0	3.5.7-r0
ghcr.io/gla-rad/enav-aton-admin-service :latest	cf85570b1324	openssl@3.5.6-r0	3.5.7-r0
ghcr.io/gla-rad/enav-aton-service :latest	3be878690629	openssl@3.5.6-r0	3.5.7-r0
ghcr.io/gla-rad/enav-aton-service-client :latest	f1629ac5f9ec	openssl@3.5.6-r0	3.5.7-r0
ghcr.io/gla-rad/enav-ckeeper :latest	415323ef112b	openssl@3.5.6-r0	3.5.7-r0
ghcr.io/gla-rad/enav-eureka :latest	05002092c621	openssl@3.5.6-r0	3.5.7-r0
ghcr.io/gla-rad/enav-msg-broker :latest	6fe372e4e481	openssl@3.5.6-r0	3.5.7-r0
ghcr.io/gla-rad/enav-vdes-controller :latest	c4c52955814f	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

15,821

enbuildenbuild

0.0.50

3 of 6 See more

enbuild enbuild 0.0.50

3 of the 6 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	openssl@3.0.20-1~deb12u1	3.0.20-1~deb12u2
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq :3.12.14	5a9334f371f3	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

31,809

kubevirtencircle360-oss

0.2.1

1 of 1 See more

kubevirt encircle360-oss 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
quay.io/kubevirt/virt-operator :v1.7.0	37d2ef21e3e5	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

880

eoapieoapi

0.16.3

2 of 7 See more

eoapi eoapi 0.16.3

2 of the 7 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.34.1	8413f8890d19	openssl@3.5.4-r0	3.5.7-r0
nginxinc/nginx-unprivileged :1.27.4-alpine	62a904036bfc	openssl@3.3.3-r0	3.3.7-r1

Open the chart page →

2,952

copypartyernail-copyparty

2.0.0

1 of 1 See more

copyparty ernail-copyparty 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
copyparty/ac :1.19.20	0a0a8605062c	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

1,700

scoolderudika

0.3.0

1 of 1 See more

scoold erudika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
erudikaltd/scoold :1.66.0	949c56b57e8f	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

1,612

beaconchain-explorerethereum-helm-charts

0.1.6

1 of 2 See more

beaconchain-explorer ethereum-helm-charts 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
gobitfly/eth2-beaconchain-explorer :latest	1d08a7986348	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25

Open the chart page →

3,110

ethereumjsethereum-helm-charts

0.1.2

1 of 2 See more

ethereumjs ethereum-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ethpandaops/ethereumjs :master	fb84b718500f	openssl@3.3.3-r0	3.3.7-r1

Open the chart page →

1,590

ipfs-clusterethereum-helm-charts

0.1.14

1 of 3 See more

ipfs-cluster ethereum-helm-charts 0.1.14

1 of the 3 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ipfs/ipfs-cluster :latest	a83266c524f1	openssl@3.3.7-r0	3.3.7-r1

Open the chart page →

4,787

lighthouseethereum-helm-charts

1.1.9

1 of 2 See more

lighthouse ethereum-helm-charts 1.1.9

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
sigp/lighthouse :latest	9a62bb870545	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

1,601

iobrokereugen

0.2.6

1 of 1 See more

iobroker eugen 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/buanet/iobroker :v9.1.2	ca7dc7362968	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

11,559

vulnz-nvd-mirroreugen

1.0.0

1 of 1 See more

vulnz-nvd-mirror eugen 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/jeremylong/open-vulnerability-data-mirror :v9.0.4	9a69aa14dc3e	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,672

evccevcc

1.0.47

1 of 1 See more

1,192

mcrouterevryfs-oss

0.4.0

1 of 2 See more

mcrouter evryfs-oss 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	openssl@1.1.1-1ubuntu2.1~18.04.20	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

6,535

akauntingf3k-tech

1.3121.0

1 of 4 See more

akaunting f3k-tech 1.3121.0

1 of the 4 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
bitnamilegacy/mariadb :latest	bbd4e17f1ef8	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

4,395

Container images carrying it

2,706 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/spidernet-io/spiderpool/spiderpool-controller :v1.2.0	42304e3ed36e	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.24+esm4	1
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins :19f19457ae7cec86457b0411543a3cf21dd9f95a	8edc39be1e22	openssl@3.5.6-r0	3.5.7-r0	1
ghcr.io/squent/kuma-ingress-watcher :1.7.0	14d45b2a1f00	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/star-whale/server :0.6.15	8368359c8dd0	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm4	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.24+esm4	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	openssl@1.1.1f-1ubuntu2.23	1.1.1f-1ubuntu2.24+esm4	1
ghcr.io/streamvisor/streamvisor :4.1.4	0bc598b2ac9a	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11	1
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.11	1
ghcr.io/substra/substra-frontend :1.0.0	e230e6ac0722	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/sudo-kraken/3d-printing-cost-calculators :v1.1.1	220c5e4e1a3d	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	1
ghcr.io/sudo-kraken/authentik-webfinger-proxy :v1.1.1	e1351a977607	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	1
ghcr.io/sudo-kraken/fantasy-dice-chamber :v1.3.2	99fd4cb0f4fe	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	1
ghcr.io/sudo-kraken/finances-tracker :v1.1.1	c73527cde81c	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	1
ghcr.io/sudo-kraken/jf-pushover-webhook :v1.1.0	ee9cf22a39ab	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	1
ghcr.io/tale/headplane :0.5.5	0dbc52cffc19	openssl@3.3.3-r0	3.3.7-r1	1
ghcr.io/tale/headplane :0.6.3	9476cc5adb12	openssl@3.0.18-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/tarkyaio/tarka :0.4.1	e8d3f1512f06	openssl@3.6.2-r2	3.6.3-r0	1
ghcr.io/tarkyaio/tarka-ui :0.4.1	b2dfabe13cfe	openssl@3.6.2-r2	3.6.3-r0	1
ghcr.io/tauffer-consulting/domino-rest :latest	8bf880fe8c73	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/techwolf12/pocketbase :0.29.3	106099641679	openssl@3.5.1-r0	3.5.7-r0	1
ghcr.io/theconnman/docker-hub-rss :0.6.2	38eba84b2be8	openssl@3.5.4-r0	3.5.7-r0	1
ghcr.io/themesama/kubernetes-kustomize-patcher :latest	b1bf0669e3a0	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/thoroslives/zilean :v3.10.1	bce6aca0f6ca	openssl@3.5.6-r0	3.5.7-r0	1
ghcr.io/tjm/vault-gcp-secrets :v1.19.5	9f157fe035f1	openssl@3.3.3-r0	3.3.7-r1	1
ghcr.io/topolvm/pie :0.18.0	aa467443e407	openssl@3.0.2-0ubuntu1.26	no fix listed	1
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	openssl@3.0.2-0ubuntu1.26	no fix listed	1
ghcr.io/topolvm/topolvm-with-sidecar :0.35.0	b354978c440d	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25	1
ghcr.io/trieb-work/saleor-apps/saleor-app-products-feed :1.23.1	1d435b4ab372	openssl@3.3.3-r0	3.3.7-r1	1
ghcr.io/trieb-work/saleor-apps/saleor-app-search :1.24.3	28edefb6c92d	openssl@3.3.3-r0	3.3.7-r1	1
ghcr.io/trieb-work/saleor-apps/saleor-app-smtp :1.4.3	57a06bfba327	openssl@3.3.3-r0	3.3.7-r1	1
ghcr.io/trow-registry/trow :0.10.0	75b7d2dcdb91	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	1
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.11	1
ghcr.io/twigex/cospace :latest	e5ecfd607e42	openssl@3.0.20-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/umami-software/umami :3.0.3	28f263fe06f7	openssl@3.5.4-r0	3.5.7-r0	1
ghcr.io/umami-software/umami :postgresql-v2.20.1	73ca19b41745	openssl@3.5.4-r0	3.5.7-r0	1
ghcr.io/umami-software/umami :3.1.0	e3f80c0625aa	openssl@3.5.6-r0	3.5.7-r0	1
ghcr.io/upcloudltd/upcloud-csi	5af91c663788	openssl@3.5.6-r0	3.5.7-r0	1
ghcr.io/usememos/memos :0.24.0	4723d86e6797	openssl@3.3.2-r4	3.3.7-r1	1
ghcr.io/vinny1892/octantis :latest	45459c0910fc	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2	1
ghcr.io/virtuos/librechat_exporter :2.0.0	50ea1cf0086f	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/vojtechpastyrik/squawk :0.1.10	4005df5f7229	openssl@3.3.6-r0	3.3.7-r1	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25	1