CVE-2026-42767

Medium

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,960; of 17,813 indexed, latest versions
Container images: 2,180; deployed by those charts
Fix available: 3 of 4; affected packages

CVE-2026-42767 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 1,960 of 17,813 indexed charts deploy, on 2,180 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+53 more	3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.5.3-1ubuntu3.4, 3.5.5-1ubuntu3.2+1 more	1,539
opensslapk	3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more	3.5.7-r0, 3.6.3-r0	636
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3	3.3.7-3	5

OSV records: ALPINE-CVE-2026-42767 CGA-6x2v-fqjw-hp38 DEBIAN-CVE-2026-42767 UBUNTU-CVE-2026-42767 AZL-89922 ECHO-86de-f803-ef79
Also known as: CGA-72qw-77pm-grmj, CGA-963c-vm8f-q6wx, CGA-fccf-f32f-qfjm, USN-8414-1

Charts affected

1,960 by stars

Chart

Latest

Affected images

Radar Score

dingtalk-botxxl-job-admin

0.1.2

1 of 2 See more

dingtalk-bot xxl-job-admin 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
dellnoantechnp/dingtalk-bot :v1.0.1	034000bbcad5	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

3,185

kminionxxl-job-admin

0.13.0

1 of 1 See more

kminion xxl-job-admin 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
redpandadata/kminion :v2.3.2	56da99e8d0d3	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

668

nightingalexxl-job-admin

0.2.11

3 of 6 See more

nightingale xxl-job-admin 0.2.11

3 of the 6 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
flashcatcloud/categraf :latest	42e6ab16472e	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11
flashcatcloud/nightingale :8.0.0-beta.11	ea1b0aaabe09	openssl@3.0.16-1~deb12u1	no fix listed
library/redis :6.2	d2ad7b21cafa	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

9,738

pgcatxxl-job-admin

0.3.3

1 of 1 See more

pgcat xxl-job-admin 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
ghcr.io/postgresml/pgcat :v1.2.0	627761f6dcbc	openssl@3.0.13-1~deb12u1	no fix listed

Open the chart page →

3,196

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	openssl@3.5.6-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

1,338

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	no fix listed

Open the chart page →

2,718

changedetection-iozekker6

1.102.0

1 of 1 See more

changedetection-io zekker6 1.102.0

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.7	096dae27b5d6	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

2,697

language-toolzekker6

1.12.1

1 of 2 See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,573

zipkinzipkin

0.5.0

1 of 1 See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-slim :3.6.0	a69e1057df36	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,191

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,966

Container images carrying it

2,180 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/reactiveops/rbac-manager :v1.9.5	87e3f461446f	openssl@3.5.4-r0	3.5.7-r0	1
quay.io/seamware/fdsc-dashboard :0.6.0	f7706c316c5a	openssl@3.5.6-r0	3.5.7-r0	1
quay.io/wraft/wraft-frontend :latest	f1bbbd5e9bb9	openssl@3.5.1-r0	3.5.7-r0	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	openssl@3.0.9-1	no fix listed	1
registry.gitlab.com/dyff/dyff-api :0.57.5	b6c44d969163	openssl@3.0.20-1~deb12u2	no fix listed	1
registry.gitlab.com/dyff/dyff-orchestrator :0.22.19	9bd5d93aaff7	openssl@3.0.20-1~deb12u2	no fix listed	1
registry.gitlab.com/dyff/workflows-informer :0.4.4	bfbadc49635d	openssl@3.0.20-1~deb12u1	no fix listed	1
registry.gitlab.com/dyff/workflows-sink :0.16.3	564718e28931	openssl@3.0.20-1~deb12u2	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-backend :1.0.31	c7afac3446d6	openssl@3.5.6-1~deb13u2	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	openssl@3.0.20-1~deb12u1	no fix listed	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq :3.12.14	5a9334f371f3	openssl@3.0.13-1~deb12u1	no fix listed	1
registry.gitlab.com/evolves-fr/s3-browser :0.4.1	c350c941fe7b	openssl@3.5.6-r0	3.5.7-r0	1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry :v4.40.2-gitlab	dc1a8972c640	openssl@3.0.20-1~deb12u2	no fix listed	1
registry.gitlab.com/gitlab-org/ci-cd/gitlab-runner-pod-cleanup :latest	4369f3ba1d9a	openssl@3.5.6-r0	3.5.7-r0	1
registry.gitlab.com/school_guy/docker-typo3 :13.4.30-197d868e	d76185d7270d	openssl@3.0.20-1~deb12u1	no fix listed	1
registry.gitlab.com/shortlink-org/shortlink/bff :latest	f2194e526915	openssl@3.5.5-r0	3.5.7-r0	1
registry.gitlab.com/shortlink-org/shortlink/link :latest	86d87291ffd4	openssl@3.5.5-r0	3.5.7-r0	1
registry.gitlab.com/technostructures/posca/posca :latest	a693021686ca	openssl@3.5.6-r0	3.5.7-r0	1
registry.k8s.io/csi-secrets-store/driver :v1.6.1	b48d7d13dd06	openssl@3.0.20-1~deb12u2	no fix listed	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.0	81a13703d6b8	openssl@3.0.11-1~deb12u1	no fix listed	1
registry.k8s.io/dns/k8s-dns-node-cache :1.26.7	8b9a78d101a1	openssl@3.0.17-1~deb12u3	no fix listed	1
registry.k8s.io/dns/k8s-dns-node-cache :1.23.1	e3dccb1a21d1	openssl@3.0.11-1~deb12u2	no fix listed	1
registry.k8s.io/git-sync/git-sync :v4.5.0	0e64aedb0d0a	openssl@3.5.1-1	3.5.6-1~deb13u2	1
registry.k8s.io/git-sync/git-sync :v4.1.0	fd9722fd02e3	openssl@3.0.11-1~deb12u1	no fix listed	1
registry.k8s.io/ingress-nginx/controller :v1.13.2	1f7eaeb01933	openssl@3.5.2-r0	3.5.7-r0	1
registry.k8s.io/ingress-nginx/controller :v1.13.1	37e489b22ac7	openssl@3.5.1-r0	3.5.7-r0	1
registry.k8s.io/provider-os/manila-csi-plugin :v1.36.0	190976e2e2fe	openssl@3.5.4-r0	3.5.7-r0	1
registry.k8s.io/sig-storage/nfsplugin :v4.13.4	1eb5a85180a4	openssl@3.0.20-1~deb12u2	no fix listed	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	openssl@3.0.15-1~deb12u1	no fix listed	1