CVE-2026-42767

Medium

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.006; 45th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,923; of 17,790 indexed, latest versions
Container images: 2,156; deployed by those charts
Fix available: 3 of 4; affected packages

CVE-2026-42767 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 1,923 of 17,790 indexed charts deploy, on 2,156 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+53 more	3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.5.3-1ubuntu3.4, 3.5.5-1ubuntu3.2+1 more	1,514
opensslapk	3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more	3.5.7-r0, 3.6.3-r0	637
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3	3.3.7-3	5

OSV records: ALPINE-CVE-2026-42767 CGA-6x2v-fqjw-hp38 DEBIAN-CVE-2026-42767 UBUNTU-CVE-2026-42767 AZL-89922 ECHO-86de-f803-ef79
Also known as: CGA-72qw-77pm-grmj, CGA-963c-vm8f-q6wx, CGA-fccf-f32f-qfjm, USN-8414-1

Charts affected

1,923 by stars

Chart

Latest

Affected images

Radar Score

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25
openebs/node-disk-operator :2.1.0	6afe2123c457	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25

Open the chart page →

10,587

vectorwenerme

0.58.0

1 of 1 See more

vector wenerme 0.58.0

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
timberio/vector :0.58.0-distroless-libc	6c93dfe2554c	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

349

victoria-metrics-k8s-stackwenerme

0.92.1

1 of 7 See more

victoria-metrics-k8s-stack wenerme 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
quay.io/kiwigrid/k8s-sidecar :2.8.1	abb55b2165c6	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,910

wexa-studiowexa-studio

1.2.0

4 of 15 See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	openssl@3.0.11-1~deb12u2	no fix listed
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	openssl@3.5.0-r0	3.5.7-r0
temporalio/server :1.29.1	c1e3326b2ce1	openssl@3.5.0-r0	3.5.7-r0
temporalio/ui :2.44.0	0b36e00aad30	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

15,044

whereaboutswhereabouts

0.3.0

1 of 1 See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/whereabouts :v0.9.4	f279fd7dc112	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

618

wikiwikijs

3.0.0

1 of 2 See more

5,483

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25

Open the chart page →

9,320

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11

Open the chart page →

2,235

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	openssl@3.0.17-1~deb12u2	no fix listed
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	openssl@3.0.18-1~deb12u1	no fix listed

Open the chart page →

7,664

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	openssl@3.0.11-1~deb12u2	no fix listed

Open the chart page →

5,559

metabasewiremind

2.27.5-wiremind0

1 of 1 See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.61.1.x	9491ed11c901	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,640

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	openssl@3.0.18-1~deb12u1	no fix listed

Open the chart page →

2,496

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	openssl@3.0.18-1~deb12u1	no fix listed

Open the chart page →

2,136

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1 openssl@3.0.2-0ubuntu1.16	no fix listed 3.0.2-0ubuntu1.25

Open the chart page →

14,173

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	no fix listed

Open the chart page →

11,603

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	no fix listed

Open the chart page →

7,697

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	openssl@3.0.14-1~deb12u2	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	openssl@3.0.14-1~deb12u2	no fix listed
murtazashah46/helmfile :latest	4d11726cf803	openssl@3.0.14-1~deb12u2	no fix listed

Open the chart page →

13,783

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.11

Open the chart page →

2,142

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	openssl@3.5.6-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

1,304

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	no fix listed

Open the chart page →

2,684

language-toolzekker6

1.12.1

1 of 2 See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,571

zipkinzipkin

0.5.0

1 of 1 See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-slim :3.6.0	a69e1057df36	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,159

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-42767.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,929

Container images carrying it

2,156 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
andrewgolikov55/intel-gpu-exporter :latest	fcc001b61c0e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.25	1
andrewmackrodt/firefox-x11 :142.0.1-r1	33f9080470c9	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25	1
ankane/pgvector :v0.5.1	d3a9d8ac27bb	openssl@3.0.11-1~deb12u1	no fix listed	1
antrea/antrea-ui-frontend :v0.8.0	ee9686bcefb8	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	1
anujdatar/cups :25.07.01	685df04a643b	openssl@3.0.16-1~deb12u1	no fix listed	1
apache/activemq-artemis :2.44.0	0305c26f19ed	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11	1
apache/activemq-artemis :2.37.0	bae523439ee3	openssl@3.0.13-0ubuntu3.2	3.0.13-0ubuntu3.11	1
apache/airflow :2.8.4-python3.9	64e58748b6b9	openssl@3.0.11-1~deb12u2	no fix listed	1
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	openssl@3.0.14-1~deb12u2	no fix listed	1
apache/airflow :2.8.1	e5560ad0b86e	openssl@3.0.11-1~deb12u2	no fix listed	1
apache/apisix :3.16.0-ubuntu	5e47692cac00	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11	1
apache/gravitino-iceberg-rest :1.3.0	80136ae753ee	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.25	1
apache/hertzbeat :1.8.0	75d48a62748f	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
apache/hertzbeat-collector :1.8.0	a2bab1be574c	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
apache/kafka :4.1.0	bff074a5d005	openssl@3.5.2-r0	3.5.7-r0	1
apache/kafka-native :4.1.0	9a9d16e60894	openssl@3.5.1-r0	3.5.7-r0	1
apache/nifi-registry :1.27.0	63b8e3e40742	openssl@3.0.2-0ubuntu1.16	3.0.2-0ubuntu1.25	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.25	1
apachepulsar/pulsar :3.0.7	9c9947de139d	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25	1
apache/ranger :2.7.0	76c176e8a0e4	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25	1
apache/rocketmq :5.3.0	434d8398f996	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.11	1
apache/rocketmq-exporter :0.0.2	c8fb51195444	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.25	1
apache/skywalking-ui :9.2.0	295f1dc87d98	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.25	1
apache/superset :4.0.1	ab9467fd712c	openssl@3.0.11-1~deb12u2	no fix listed	1
apache/tika :3.3.1.0	90b7fa1dc018	openssl@3.5.5-1ubuntu3	3.5.5-1ubuntu3.2	1
apache/tika :2.9.0.0	92d055a84e9e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.25	1
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	openssl@3.5.1-1	3.5.6-1~deb13u2	1
appwrite/appwrite :1.9.0	1aaa70127114	openssl@3.5.5-r0	3.5.7-r0	1
aquasec/kube-bench :v0.15.0	7a8fa32dce21	openssl@3.5.5-r0	3.5.7-r0	1
aquasec/trivy :0.69.3	bcc376de8d77	openssl@3.5.5-r0	3.5.7-r0	1
archivebox/archivebox :0.7.4	1a5a37331091	openssl@3.0.20-1~deb12u1	no fix listed	1
aristidetm/basic-notebook :3.6.5	469dbc951224	openssl@3.0.13-1~deb12u1	no fix listed	1
arthurjguerra18/revwallet :v0.7.12	f540af20b307	openssl@3.0.13-1~deb12u1	no fix listed	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	openssl@3.0.11-1~deb12u2	no fix listed	1
arunvelsriram/utils :latest	655ad18fd8d6	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
assistiot/identity-manager_db :latest	0d3e6d35f168	openssl@3.0.11-1~deb12u2	no fix listed	1
assistiot/location_processing :latest	e9bae124095f	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25	1
assistiot/open_api_backend :1.1.2	30812ba93555	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	openssl@3.0.11-1~deb12u2	no fix listed	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	openssl@3.0.11-1~deb12u2	no fix listed	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	openssl@3.0.9-1	no fix listed	1
athou/commafeed :6.2.0-postgresql	5e388351df1a	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25	1
atlassian/jira-software :8.14.0	37bc46cbec1a	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	openssl@3.0.13-1~deb12u1	no fix listed	1
avinash263/pyredis263 :latest	aa2b8727f1a6	openssl@3.0.9-1	no fix listed	1
avzini/web-app :latest	f40b30210ed0	openssl@3.0.11-1~deb12u2	no fix listed	1
awesometechnologies/synapse-admin :0.11.4	a1c1f4662875	openssl@3.5.5-r0	3.5.7-r0	1