CVE-2026-42766

Medium

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.011; 63rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,476; of 17,805 indexed, latest versions
Container images: 2,730; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-42766 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 2,476 of 17,805 indexed charts deploy, on 2,730 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+103 more	1.0.1f-1ubuntu2.27+esm14, 1.0.2g-1ubuntu4.20+esm16, 1.1.1-1ubuntu2.1~18.04.23+esm9, 1.1.1f-1ubuntu2.24+esm4+6 more	1,808
opensslapk	3.2.0-r0, 3.3.1-r3, 3.3.1-r4, 3.3.2-r0+21 more	3.3.7-r1, 3.5.7-r0, 3.6.3-r0	917
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 more	no fix listed	22
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+4 more	1.0.2n-1ubuntu5.13+esm5	20
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3	3.3.7-3	5

OSV records: ALPINE-CVE-2026-42766 CGA-9fv6-c4c7-7xwr DEBIAN-CVE-2026-42766 UBUNTU-CVE-2026-42766 AZL-89943
Also known as: CGA-9mqf-xpvc-p77x, CGA-gf26-66cr-92gv, CGA-x9j4-77f9-qvfv, USN-8414-1, USN-8414-2

Charts affected

2,476 by stars

Chart

Latest

Affected images

Radar Score

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

7,775

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

6,367

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

5,588

metabasewiremind

2.27.5-wiremind0

1 of 1 See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.61.1.x	9491ed11c901	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,641

postgres-operatorwiremind

1.14.0-wiremind0

1 of 1 See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	openssl@3.3.2-r4	3.3.7-r1

Open the chart page →

1,433

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

2,522

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

2,165

registrywiremind

0.1.1

1 of 1 See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/distribution/distribution :3.0.0	4ba3adf47f5c	openssl@3.3.3-r0	3.3.7-r1

Open the chart page →

1,358

silence-operatorwiremind

0.0.8

1 of 1 See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
giantswarm/silence-operator :0.13.0	a6cac55aa2d4	openssl@3.3.3-r0	3.3.7-r1

Open the chart page →

935

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1 openssl@3.0.2-0ubuntu1.16	no fix listed 3.0.2-0ubuntu1.25

Open the chart page →

14,245

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

11,647

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

7,679

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
hamzaarshad10/querypodpy :1.7	154f38e8668e	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
murtazashah46/helmfile :latest	4d11726cf803	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

13,895

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.11

Open the chart page →

2,166

cloudeye-exporterxxl-job-admin

0.1.2

1 of 1 See more

cloudeye-exporter xxl-job-admin 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
dellnoantechnp/cloudeye-exporter :v2.0.31	6873356c882d	openssl@3.0.18-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

2,693

dingtalk-botxxl-job-admin

0.1.2

1 of 2 See more

dingtalk-bot xxl-job-admin 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
dellnoantechnp/dingtalk-bot :v1.0.1	034000bbcad5	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

3,180

kminionxxl-job-admin

0.13.0

1 of 1 See more

kminion xxl-job-admin 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
redpandadata/kminion :v2.3.2	56da99e8d0d3	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

668

nightingalexxl-job-admin

0.2.11

2 of 6 See more

nightingale xxl-job-admin 0.2.11

2 of the 6 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
flashcatcloud/categraf :latest	42e6ab16472e	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11
flashcatcloud/nightingale :8.0.0-beta.11	ea1b0aaabe09	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

9,730

pgcatxxl-job-admin

0.3.3

1 of 1 See more

pgcat xxl-job-admin 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/postgresml/pgcat :v1.2.0	627761f6dcbc	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

3,192

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	openssl@3.5.6-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

1,334

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

2,714

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	openssl@1.1.1-1ubuntu2.1~18.04.23	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

2,485

language-toolzekker6

1.12.1

1 of 2 See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,571

zipkinzipkin

0.5.0

1 of 1 See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-slim :3.6.0	a69e1057df36	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,187

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	openssl@1.1.1-1ubuntu2.1~18.04.14	1.1.1-1ubuntu2.1~18.04.23+esm9
yandex/clickhouse-server :21.3.20	4eccfffb01d7	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

9,296

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-42766.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,964

Container images carrying it

2,730 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium :0.1.2	7bff29dcec72	openssl@3.0.19-1~deb12u2	3.0.20-1~deb12u2	1
ghcr.io/zalando/postgres-operator :v1.14.0	4f40cfc2283b	openssl@3.3.2-r4	3.3.7-r1	1
ghcr.io/zeroclaw-labs/zeroclaw :v0.1.7	497893753e16	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2	1
ghcr.io/zokeber/velero-notifications :0.0.17	6d84f6c4ce20	openssl@3.5.5-r0	3.5.7-r0	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/zoriya/kyoo_back :4.7.1	416e980f76a6	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/zoriya/kyoo_front :4.7.1	d7f76c9c65d9	openssl@3.3.2-r4	3.3.7-r1	1
ghcr.io/zoriya/kyoo_migrations :4.7.1	f7e607f24071	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/zystem-io/zymtrace-pub-gateway :26.9.2	ae9ae0925ff8	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.25	1
ghcr.io/zystem-io/zymtrace-pub-ui :26.9.2	9a32b89c0c19	openssl@3.5.0-r0	3.5.7-r0	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm4	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	openssl@1.1.1-1ubuntu2.1~18.04.23 openssl1.0@1.0.2n-1ubuntu5.13	1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm4	1
mcr.microsoft.com/mssql/server :2022-latest	ba4c8329f48f	openssl@3.0.2-0ubuntu1.25	no fix listed	1
mcr.microsoft.com/mssql/server :2025-CU5-ubuntu-24.04	cee0f4db03b5	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	openssl@1.1.1-1ubuntu2.1~18.04.23 openssl1.0@1.0.2n-1ubuntu5.13	1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner :v5.2.0	afdfa3da79df	openssl@3.3.5-1.azl3	3.3.7-3	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer :v1.13.2	fa8eba9843ff	openssl@3.3.5-3.azl3	3.3.7-3	1
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.15.0	59b9d0348428	openssl@3.3.5-3.azl3	3.3.7-3	1
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver :v1.5.6	5f91243cfd60	openssl@3.3.5-5.azl3	3.3.7-3	1
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds :v1.5.6	cb0112636dc4	openssl@3.3.5-5.azl3	3.3.7-3	1
mcr.microsoft.com/playwright/mcp :v0.0.43	e101b832b34d	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.74.4_local	1ed844ecab29	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11	1
public.ecr.aws/aktosecurity/akto-puppeteer-replay :1.49.4_latest	f1c5763d565e	openssl@3.5.6-r0	3.5.7-r0	1
public.ecr.aws/aktosecurity/mirror-api-logging :k8s_ebpf_core_imp	d94ce715f051	openssl@3.5.5-r0	3.5.7-r0	1
public.ecr.aws/aktosecurity/redis	47200b041382	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	1
public.ecr.aws/aktosecurity/redis :latestV8.6.2	832d7785830f	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	1
public.ecr.aws/buildkite/agent-metrics :v5.11.0	16e7f5c7161e	openssl@3.5.1-r0	3.5.7-r0	1
public.ecr.aws/datadog/agent :7.73.0	f4925b15ce94	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11	1
public.ecr.aws/decisiveai/valkey :9.0.1	59c7e728fb3a	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse :v3.0.1	dc5a516c2333	openssl@3.0.19-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/k6v9y5g3/cluster-agent :master.575	36d051110158	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
public.ecr.aws/k6v9y5g3/cluster-agent :cost_k8s_process.576	9e14a72b066d	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
public.ecr.aws/spotinst/spot-network-client :1.0.14	86380a01587d	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	openssl@1.1.1-1ubuntu2.1~18.04.20	1.1.1-1ubuntu2.1~18.04.23+esm9	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm4	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/truefoundrycloud/timberio/vector :v0.50.0	5833723de9e4	openssl@3.5.4-r0	3.5.7-r0	1
public.ecr.aws/zinclabs/openobserve :v0.8.1	27f8de509169	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
quay.io/aerokube/jumphost :1.0.1	70fd7c00418d	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25	1
quay.io/aerokube/keygen :1.0.1	578934444f04	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25	1