StackRadar

CVE-2026-42770

Low

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.005
42nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,998
of 17,813 indexed, latest versions
Container images
2,250
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-42770 affecting package openssl for versions less than 3.3.7-4

Carried by container images the latest versions of 1,998 of 17,813 indexed charts deploy, on 2,250 images.

Affected packageAffected versionsFixed inImages
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl33.3.7-45
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+49 more3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.0.20-1~deb12u2, 3.5.3-1ubuntu3.4+2 more1,339
opensslapk3.2.0-r0, 3.3.1-r3, 3.3.1-r4, 3.3.2-r0+21 more3.3.7-r1, 3.5.7-r0, 3.6.3-r0906
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
OSV records
ALPINE-CVE-2026-42770CGA-48p6-q29j-wfgrDEBIAN-CVE-2026-42770UBUNTU-CVE-2026-42770AZL-92843
Also known as
CGA-76q6-x77g-f8w6, CGA-8f4j-7345-7rgx, CGA-m98w-7xrq-cqw4, USN-8414-1

Charts affected

1,998 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

2,250 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
library/wordpress:php8.1-apachef73396626d2f
openssl@3.5.4-1~deb13u1
3.5.6-1~deb13u2
1
library/znc:1.10.1c731c6a9b8b6
openssl@3.5.6-r0
3.5.7-r0
1
library/zookeeper:3.8-temurin55d1e5b2e601
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.25
1
library/zookeeper:3.9.57d0f24ebb67b
openssl@3.0.2-0ubuntu1.29
no fix listed
1
library/zookeeper:3.9.4dfa9ba46d14b
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.25
1
libretranslate/libretranslate:v1.9.61de2d7056bb8
openssl@3.0.18-1~deb12u2
3.0.20-1~deb12u2
1
lifailon/openrouter-bot:latestea37e4b6b952
openssl@3.5.1-r0
3.5.7-r0
1
linkstackorg/linkstack:latest1c8b05399ee4
openssl@3.5.5-r0
3.5.7-r0
1
linode/linode-blockstorage-csi-driver:v1.1.409f3282bf53d
openssl@3.5.5-r0
3.5.7-r0
1
linuxserver/bookstack:26.05.202605282ebf97852661
openssl@3.5.6-r0
3.5.7-r0
1
linuxserver/calibre-web:0.6.24241009026e6f
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11
1
linuxserver/code-server:4.10.1a5e43a05ae79
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.25
1
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
openssl@3.3.3-r0
3.3.7-r1
1
linuxserver/foldingathome:7.6.219a997426d71e
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.11
1
linuxserver/jackett:0.24.20929bca08e2e6f1
openssl@3.5.6-r0
3.5.7-r0
1
linuxserver/jackett:0.24.2066f1f23e0c9845
openssl@3.5.6-r0
3.5.7-r0
1
linuxserver/overseerr:1.35.06108ed066d4a
openssl@3.5.5-r0
3.5.7-r0
1
linuxserver/prowlarr:2.4.0.5397-ls149a46d0ce0a823
openssl@3.5.6-r0
3.5.7-r0
1
lis314/project-zomboid-docker:latestaa2089c37920
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
lissy93/domain-locker:latestd3c95edc0a8b
openssl@3.5.6-r0
3.5.7-r0
1
lissy93/networking-toolbox:latest700862839553
openssl@3.5.5-r0
3.5.7-r0
1
listmonk/listmonk:v6.0.0bf3903d54a46
openssl@3.5.4-r0
3.5.7-r0
1
litellm/litellm-non_root:v1.82.3-stable09b217802ded
openssl@3.6.1-r3
3.6.3-r0
1
litlyx/litlyx-consumer:latest02225e77d316
openssl@3.5.4-r0
3.5.7-r0
1
litlyx/litlyx-dashboard:lateste64ff2d52385
openssl@3.5.4-r0
3.5.7-r0
1
litlyx/litlyx-producer:latest10407f36613f
openssl@3.5.4-r0
3.5.7-r0
1
livekit/ingress:v1.2.21ab01641b366
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.25
1
livekit/livekit-server:v1.9.03602a85840d5
openssl@3.5.0-r0
3.5.7-r0
1
lmacka/snappass:2.1.293f5c048b7d4
openssl@3.5.4-1~deb13u2
3.5.6-1~deb13u2
1
localstack/localstack:3.19d278167f2b7
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
1
locustio/locust:2.24.151d866285170
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
1
loeken/home-assistant:2026.5.14ce6abc553b3
openssl@3.5.6-r0
3.5.7-r0
1
loeken/jellyfin:10.11.87efbc24e47b0
openssl@3.5.6-r0
3.5.7-r0
1
loeken/radarr:5.27.0-nightlya24409d3846d
openssl@3.3.4-r0
3.3.7-r1
1
logiqai/flash:v3.10.265b996bc7bdc
openssl@3.0.14-1~deb12u2
3.0.20-1~deb12u2
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
openssl@3.0.18-1~deb12u2
3.0.20-1~deb12u2
1
louislam/uptime-kuma:2.0.24c364ef96aad
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2
1
louislam/uptime-kuma:2.4.091e963bfda56
openssl@3.0.20-1~deb12u1
3.0.20-1~deb12u2
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2
1
luligu/matterbridge:3.0.28f97884bebc2
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
lumenvox/admin-portal:7.112310cf52f79
openssl@3.5.6-r0
3.5.7-r0
1
lumenvox/file-store:7.138aa8711c9ef
openssl@3.5.6-r0
3.5.7-r0
1
maildev/maildev:2.2.1180ef51f65ee
openssl@3.3.2-r4
3.3.7-r1
1
makemake1337/blutgang:latest8a55174fc830
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
1
makersquad/harp-proxy:0.8.1a40dd258c527
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1
marcoimme/oidcmock:latestb6035c0721a8
openssl@3.5.4-1~deb13u2
3.5.6-1~deb13u2
1
margays/eir:v1.7.22883fdd06fd7
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2
1
martinhelmich/typo3:12.4c83a4f3fd7ae
openssl@3.0.18-1~deb12u2
3.0.20-1~deb12u2
1
mathnao/certs:2.1.3b900e6b64684
openssl@3.3.4-r0
3.3.7-r1
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
openssl@3.0.15-1~deb12u1
3.0.20-1~deb12u2
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.