CVE-2026-45445

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 47th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,767; of 17,790 indexed, latest versions
Container images: 1,987; deployed by those charts
Fix available: 3 of 4; affected packages

CVE-2026-45445 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 1,767 of 17,790 indexed charts deploy, on 1,987 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+49 more	3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.0.20-1~deb12u2, 3.5.3-1ubuntu3.4+2 more	1,345
opensslapk	3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more	3.5.7-r0, 3.6.3-r0	637
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3	3.3.7-3	5

OSV records: ALPINE-CVE-2026-45445 CGA-4p89-mwph-mpph CGA-jg28-qhp6-7wvw DEBIAN-CVE-2026-45445 UBUNTU-CVE-2026-45445 AZL-90087
Also known as: CGA-mm24-7gvp-4q23, CGA-prqm-8wcj-84xp, USN-8414-1

Charts affected

1,767 by stars

Chart

Latest

Affected images

Radar Score

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25

Open the chart page →

9,320

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11

Open the chart page →

2,235

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

7,664

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

5,559

metabasewiremind

2.27.5-wiremind0

1 of 1 See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.61.1.x	9491ed11c901	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,640

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

2,496

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

2,136

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1 openssl@3.0.2-0ubuntu1.16	no fix listed 3.0.2-0ubuntu1.25

Open the chart page →

14,173

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

11,603

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

7,697

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
hamzaarshad10/querypodpy :1.7	154f38e8668e	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
murtazashah46/helmfile :latest	4d11726cf803	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

13,783

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.11

Open the chart page →

2,142

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	openssl@3.5.6-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

1,304

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

2,684

language-toolzekker6

1.12.1

1 of 2 See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,571

zipkinzipkin

0.5.0

1 of 1 See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-slim :3.6.0	a69e1057df36	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,159

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,929

Container images carrying it

1,987 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
falcosecurity/falcosidekick :2.32.0	1976da721518	openssl@3.5.1-r0	3.5.7-r0	1
fallenbagel/jellyseerr :latest	4538137bc5af	openssl@3.5.1-r0	3.5.7-r0	1
felipecs8/app-db-connection-test :v1	29e06c9c6385	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
felipecs8/landing-page :v1	db6d44e325a1	openssl@3.5.1-r0	3.5.7-r0	1
ffutop/ddc-ph-kafka-egress :latest	319d94c8481a	openssl@3.5.4-r0	3.5.7-r0	1
ffutop/ddc-ph-kafka-ingress :latest	15832d4f19be	openssl@3.5.4-r0	3.5.7-r0	1
ffutop/ddc-transport-udp-receive :latest	651ca530d787	openssl@3.5.4-r0	3.5.7-r0	1
ffutop/ddc-transport-udp-send :latest	4222eb5ee847	openssl@3.5.4-r0	3.5.7-r0	1
filiparag/hetzner_ddns :1.0.1	5a9cbae7997c	openssl@3.5.4-r0	3.5.7-r0	1
firefart/requesttracker :5.0.4	0d6249906d8c	openssl@3.0.11-1~deb12u1	3.0.20-1~deb12u2	1
fiware/biz-ecosystem-logic-proxy :11.20.3	d551a13e8278	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
flanksource/apm-hub :v0.0.47	1dacc3195bf9	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25	1
flanksource/batch-runner :v1.0.44	689687a7cf95	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
flashcatcloud/categraf :latest	42e6ab16472e	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11	1
flashcatcloud/nightingale :8.5.1	421acb36181b	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2	1
fluent/fluent-bit :4.0.4	ca08b7d2df5b	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
fluent/fluent-bit :4.0-debug	e76397ef3983	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	1
fnzv/dump1090 :latest	b3079b95c336	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25	1
folioci/edge-connexion :latest	b4863d135524	openssl@3.5.6-r0	3.5.7-r0	1
folioci/mod-authtoken :latest	995a25a33133	openssl@3.5.5-r0	3.5.7-r0	1
folioci/mod-copycat :latest	1513fad2b799	openssl@3.5.6-r0	3.5.7-r0	1
folioci/mod-courses :latest	68ca414f5596	openssl@3.5.5-r0	3.5.7-r0	1
folioci/mod-ebsconet :latest	3ae8cb99daa3	openssl@3.5.6-r0	3.5.7-r0	1
folioci/mod-eusage-reports :latest	15de67587091	openssl@3.5.6-r0	3.5.7-r0	1
folioci/mod-login :latest	88de493f86db	openssl@3.5.6-r0	3.5.7-r0	1
folioci/mod-login-saml :latest	5f3358ccaa0f	openssl@3.5.6-r0	3.5.7-r0	1
folioci/mod-ncip :latest	8ed83674352b	openssl@3.5.6-r0	3.5.7-r0	1
folioci/mod-permissions :latest	5363e98c6299	openssl@3.5.6-r0	3.5.7-r0	1
folioci/mod-pubsub :latest	0a4fa4ad5d72	openssl@3.5.6-r0	3.5.7-r0	1
folioci/mod-search :latest	44d7ee9acdf6	openssl@3.5.1-r0	3.5.7-r0	1
folioci/mod-user-import :latest	1807734472bd	openssl@3.5.6-r0	3.5.7-r0	1
folioci/mod-users-bl :latest	4e2d96c9340d	openssl@3.5.6-r0	3.5.7-r0	1
folioci/mod-z3950 :latest	2493041ce880	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	1
fosrl/newt :1.10.4	ccd2b0e9a049	openssl@3.5.5-r0	3.5.7-r0	1
fosrl/pangolin :1.13.0	c32ad797ab96	openssl@3.5.4-r0	3.5.7-r0	1
freedom98/flask :k3.0	d7ce1533f297	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
freeradius/freeradius-server :3.2.8	af6fd34a5b78	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25	1
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
galexrt/extended-ceph-exporter :v1.8.0	5373078a3a08	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2	1
gchq/accumulo :2.0.1	c460bb587d6d	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.11	1
gdrocha/togglr-backend :1.0.0	d5ae64e83d4c	openssl@3.5.4-r0	3.5.7-r0	1
gdrocha/togglr-frontend :1.0.0	ffbc1571c234	openssl@3.5.4-r0	3.5.7-r0	1
geonode/geoserver :2.28.4-latest	81b1d431b7e9	openssl@3.0.2-0ubuntu1.23	3.0.2-0ubuntu1.25	1
geonode/geoserver_data :2.28.4-latest	435cbc5f3f05	openssl@3.5.6-r0	3.5.7-r0	1
geopython/pycsw :3.0.0-beta2	84662ea6b78b	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	1
gethue/hue :latest	7d5c1b9f8a79	nodejs@24.13.1-1nodesource1 openssl@3.0.2-0ubuntu1.19	no fix listed 3.0.2-0ubuntu1.25	1
getmeili/meilisearch :v1.30.0	f3ecbc8c5bfb	openssl@3.5.4-r0	3.5.7-r0	1
getsentry/relay :24.10.0	ba7bf9163219	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
ghostfolio/ghostfolio :3.7.0	e3c6ab53e49b	openssl@3.0.20-1~deb12u1	3.0.20-1~deb12u2	1
gitea/act_runner :nightly	7940221bcfc9	openssl@3.5.6-r0	3.5.7-r0	1