CVE-2026-45445

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.006; 47th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,770; of 17,787 indexed, latest versions
Container images: 1,990; deployed by those charts
Fix available: 3 of 4; affected packages

CVE-2026-45445 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 1,770 of 17,787 indexed charts deploy, on 1,990 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+49 more	3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.0.20-1~deb12u2, 3.5.3-1ubuntu3.4+2 more	1,345
opensslapk	3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more	3.5.7-r0, 3.6.3-r0	640
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3	3.3.7-3	5

OSV records: ALPINE-CVE-2026-45445 CGA-4p89-mwph-mpph CGA-jg28-qhp6-7wvw DEBIAN-CVE-2026-45445 UBUNTU-CVE-2026-45445 AZL-90087
Also known as: CGA-mm24-7gvp-4q23, CGA-prqm-8wcj-84xp, USN-8414-1

Charts affected

1,770 by stars

Chart

Latest

Affected images

Radar Score

wexa-studiowexa-studio

1.2.0

4 of 15 See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	openssl@3.5.0-r0	3.5.7-r0
temporalio/server :1.29.1	c1e3326b2ce1	openssl@3.5.0-r0	3.5.7-r0
temporalio/ui :2.44.0	0b36e00aad30	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

14,618

whereaboutswhereabouts

0.3.0

1 of 1 See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
ghcr.io/k8snetworkplumbingwg/whereabouts :v0.9.4	f279fd7dc112	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

618

wikiwikijs

3.0.0

1 of 2 See more

5,472

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25

Open the chart page →

9,296

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11

Open the chart page →

2,229

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

7,643

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

5,548

metabasewiremind

2.27.5-wiremind0

1 of 1 See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.61.1.x	9491ed11c901	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,640

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

2,383

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

2,063

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1 openssl@3.0.2-0ubuntu1.16	no fix listed 3.0.2-0ubuntu1.25

Open the chart page →

14,172

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

11,592

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

7,685

xkopsxkops

0.1.0

3 of 5 See more

xkops xkops 0.1.0

3 of the 5 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
hamzaarshad10/querypodpy :1.7	154f38e8668e	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2
murtazashah46/helmfile :latest	4d11726cf803	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

13,197

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.11

Open the chart page →

2,136

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	openssl@3.5.6-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

1,293

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

2,674

language-toolzekker6

1.12.1

1 of 2 See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,571

zipkinzipkin

0.5.0

1 of 1 See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-slim :3.6.0	a69e1057df36	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,159

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-45445.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	no fix listed

Open the chart page →

7,916

Container images carrying it

1,990 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
grafana/grafana :12.3.3	9e1e77ade304	openssl@3.5.5-r0	3.5.7-r0	2
grafana/grafana :12.4.1	e932bd6ed0e0	openssl@3.5.5-r0	3.5.7-r0	2
helmforge/kubectl :1.35.3	c3f97e954c47	openssl@3.5.5-r0	3.5.7-r0	2
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	openssl@3.0.9-1	3.0.20-1~deb12u2	2
ilum/marquez :0.54.0	6e1d709d41f8	openssl@3.0.18-1~deb12u2	3.0.20-1~deb12u2	2
ilum/ui :6.7.3	998937726679	openssl@3.5.5-r0	3.5.7-r0	2
istio/proxyv2 :1.18.0	757d28c24100	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.25	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	2
jenkins/jenkins :2.541.3-jdk21	c4098086090c	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2	2
kiwigrid/k8s-sidecar :1.30.9	8c06e1ba643a	openssl@3.5.1-r0	3.5.7-r0	2
kurento/kurento-media-server :latest	03c0d34d0828	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	2
library/cassandra :4.1.3	7cbcec0086ac	openssl@3.0.2-0ubuntu1.13	3.0.2-0ubuntu1.25	2
library/elasticsearch :8.19.12	89729a95066a	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	2
library/influxdb :2.7	b8d940ca9376	openssl@3.0.19-1~deb12u2	3.0.20-1~deb12u2	2
library/mariadb :10.8.3	0abf60f81588	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.25	2
library/mariadb :10.10	334b315c10e5	openssl@3.0.2-0ubuntu1.13	3.0.2-0ubuntu1.25	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11	2
library/mariadb :10.6	92e50059ea0a	openssl@3.0.2-0ubuntu1.26	no fix listed	2
library/mariadb :11.3.2	e101f9db3191	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25	2
library/mongo :8.0.20	098862b1339f	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11	2
library/mongo :7.0-jammy :7-jammy	406a4fdca9fc	openssl@3.0.2-0ubuntu1.26	no fix listed	2
library/mongo :7	b096b4cb9269	openssl@3.0.2-0ubuntu1.29	no fix listed	2
library/mongo :7.0	b6421fd6d1c5	openssl@3.0.2-0ubuntu1.26	no fix listed	2
library/nginx :latest	6e23479198b9	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	2
library/nginx :1.27.0	98f8ec75657d	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	2
library/nginx :1.29.4	9dd288848f44	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2	2
library/phpmyadmin :5.2.1	6e75aa8f767c	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	2
library/postgres :16.1	09f23e02d766	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	2
library/postgres :18.1	1090bc3a8ccf	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2	2
library/postgres :16.2	4aea012537ed	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	2
library/postgres :18.0	6f3e42ad37de	openssl@3.5.1-1+deb13u1	3.5.6-1~deb13u2	2
library/postgres :16.4	e62fbf9d3e2b	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	2
library/postgres :13-alpine	fb9065b6e3e2	openssl@3.5.4-r0	3.5.7-r0	2
library/python :3.7	eedf63967cdb	openssl@3.0.9-1	3.0.20-1~deb12u2	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	2
library/rabbitmq :3.12.1-management	f020c06da226	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.25	2
library/redis :7.2.3	a7cee7c8178f	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	2
library/redis :8.2.2	f0957bcaa75f	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	2
library/traefik :v3.7.1	6b9cbca6fac4	openssl@3.5.6-r0	3.5.7-r0	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2	2
library/zookeeper :3.9.5	f258365d4882	openssl@3.0.2-0ubuntu1.26	no fix listed	2
locustio/locust :2.32.2	a0d4b88e42c1	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	2
louislam/uptime-kuma :2.5.4	917318f9d7be	openssl@3.0.20-1~deb12u1	3.0.20-1~deb12u2	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	openssl@3.0.19-1~deb12u2	3.0.20-1~deb12u2	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	openssl@3.0.20-1~deb12u1	3.0.20-1~deb12u2	2
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2	2
mesosphere/kubectl :v1.35.0-alpine	ea01a9387771	openssl@3.5.4-r0	3.5.7-r0	2
metabase/metabase :v0.61.1.x	9491ed11c901	openssl@3.5.6-r0	3.5.7-r0	2
mojaloop/reporting-events-processor-svc :v3.5.1	1e0d24d28512	openssl@3.5.1-r0	3.5.7-r0	2