CVE-2026-42770

Low

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.005; 42nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,998; of 17,813 indexed, latest versions
Container images: 2,250; deployed by those charts
Fix available: 3 of 4; affected packages

CVE-2026-42770 affecting package openssl for versions less than 3.3.7-4

Carried by container images the latest versions of 1,998 of 17,813 indexed charts deploy, on 2,250 images.

Affected package	Affected versions	Fixed in	Images
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3	3.3.7-4	5
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+49 more	3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.0.20-1~deb12u2, 3.5.3-1ubuntu3.4+2 more	1,339
opensslapk	3.2.0-r0, 3.3.1-r3, 3.3.1-r4, 3.3.2-r0+21 more	3.3.7-r1, 3.5.7-r0, 3.6.3-r0	906
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5

OSV records: ALPINE-CVE-2026-42770 CGA-48p6-q29j-wfgr DEBIAN-CVE-2026-42770 UBUNTU-CVE-2026-42770 AZL-92843
Also known as: CGA-76q6-x77g-f8w6, CGA-8f4j-7345-7rgx, CGA-m98w-7xrq-cqw4, USN-8414-1

Charts affected

1,998 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

2,250 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/docker :27-dind	aa3df78ecf32	openssl@3.3.3-r0	3.3.7-r1	1
library/flink :1.14.6-scala_2.12	2461f02672b3	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.25	1
library/ghost :6.39.0-alpine	77196da4b0df	openssl@3.5.6-r0	3.5.7-r0	1
library/ghost :6.22.0-alpine3.23	ac533a6988ee	openssl@3.5.5-r0	3.5.7-r0	1
library/haproxy :3.1-alpine	475863a372c9	openssl@3.5.6-r0	3.5.7-r0	1
library/haproxy :3.1-bookworm	49a0a0d6f0b8	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2	1
library/haproxy :2.9.6	fc5748ff7c72	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
library/httpd :2.4.63	1ae8051591a5	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
library/influxdb :1.12.3-meta	8812029260b5	openssl@3.0.18-1~deb12u2	3.0.20-1~deb12u2	1
library/influxdb :1.12.3-data	b0f9fc41ed79	openssl@3.0.18-1~deb12u2	3.0.20-1~deb12u2	1
library/mariadb :10.11.2	1c33370a599c	openssl@3.0.2-0ubuntu1.9	3.0.2-0ubuntu1.25	1
library/mariadb :12.0.2	5b6a1eac15b8	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11	1
library/mariadb :12.2.2	b1cb255a9939	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
library/mariadb :10.10.2	bfc25a68e113	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25	1
library/mariadb :10.9.4	fbb8456ebdb1	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25	1
library/mariadb :11.7.2	fcc7fcd7114a	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
library/matomo :5.1.2-apache	2415789e1602	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
library/memcached :1.6.42	26983a43c918	openssl@3.5.6-1~deb13u1	3.5.6-1~deb13u2	1
library/memcached :1.6.41-alpine	65c80b311a96	openssl@3.5.6-r0	3.5.7-r0	1
library/memcached :1.6.39-alpine3.22	7b45203a99eb	openssl@3.5.4-r0	3.5.7-r0	1
library/memcached :1.6.40	9ae868852d0b	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2	1
library/memcached :1.6.40	cc523a19da58	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2	1
library/memcached :1.6.38-alpine	e93269864a7d	openssl@3.5.1-r0	3.5.7-r0	1
library/mongo :7.0.14	0032d2ca20db	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25	1
library/mongo :7.0-jammy :7-jammy	406a4fdca9fc	openssl@3.0.2-0ubuntu1.26	no fix listed	1
library/mongo :6.0.12	646902910d6a	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25	1
library/mongo :7.0-jammy	84c4a18b60a0	openssl@3.0.2-0ubuntu1.29	no fix listed	1
library/mongo :7.0.28-jammy	88785f6f665a	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.25	1
library/mongo :7.0.12	ae1cf99fa7bf	openssl@3.0.2-0ubuntu1.17	3.0.2-0ubuntu1.25	1
library/mongo :7.0	b6421fd6d1c5	openssl@3.0.2-0ubuntu1.26	no fix listed	1
library/mongo :8.0.11	dca8d11fe467	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
library/mysql :8.0-debian	9382e4f6f7f0	openssl@3.0.19-1~deb12u2	3.0.20-1~deb12u2	1
library/nats :2.12.2-alpine	2d5fce3229ae	openssl@3.5.4-r0	3.5.7-r0	1
library/nats :2.11.9-alpine	777787bbb4c7	openssl@3.5.1-r0	3.5.7-r0	1
library/nats :2.12.3-alpine	88fe8e0e09d6	openssl@3.5.4-r0	3.5.7-r0	1
library/neo4j :2026.02.2	5ab4ab0358cf	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2	1
library/nextcloud :31.0.6-apache	588609d76b21	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
library/nextcloud :31.0.10-apache	b7faa1653c39	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2	1
library/nginx :1.27.4	09369da6b103	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
library/nginx :1.29	1881968aff6f	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	1
library/nginx :1.31.0-alpine	2f07d83bf561	openssl@3.5.6-r0	3.5.7-r0	1
library/nginx :1.30.0-alpine3.23-slim	2fb5d772cea6	openssl@3.5.6-r0	3.5.7-r0	1
library/nginx :1.29.8-alpine	5616878291a2	openssl@3.5.6-r0	3.5.7-r0	1
library/nginx :1.27-alpine	65645c7bb6a0	openssl@3.3.3-r0	3.3.7-r1	1
library/nginx :1.27	6784fb0834aa	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
library/nginx :1.25.1	67f9a4f10d14	openssl@3.0.9-1	3.0.20-1~deb12u2	1
library/nginx :1.25.4	9ff236ed47fe	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
library/nginx :1.28-alpine	a8b39bd9cf0f	openssl@3.5.5-r0	3.5.7-r0	1
library/nginx :1.29.3-alpine	b3c656d55d7a	openssl@3.5.4-r0	3.5.7-r0	1
library/nginx :1.27.3	fb197595ebe7	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1