StackRadar

CVE-2026-45446

Medium

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.004
38th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,006
of 17,821 indexed, latest versions
Container images
2,276
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-45446 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 2,006 of 17,821 indexed charts deploy, on 2,276 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+49 more3.0.2-0ubuntu1.25, 3.0.13-0ubuntu3.11, 3.0.20-1~deb12u2, 3.5.3-1ubuntu3.4+2 more1,354
opensslapk3.2.0-r0, 3.3.1-r3, 3.3.1-r4, 3.3.2-r0+21 more3.3.7-r1, 3.5.7-r0, 3.6.3-r0917
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 moreno fix listed5
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl33.3.7-35
OSV records
ALPINE-CVE-2026-45446CGA-2rpj-cw45-8qp6DEBIAN-CVE-2026-45446UBUNTU-CVE-2026-45446AZL-89937
Also known as
CGA-3w8f-h9w3-6g96, CGA-r8v3-h6jr-g5gg, CGA-r9g8-5hw6-wxwf, USN-8414-1

Charts affected

2,006 by stars
ChartLatestAffected imagesRadar Score
pgcatxxl-job-adminVerified publisher0.3.31 of 1See more

pgcat xxl-job-admin 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-45446.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
openssl@3.0.13-1~deb12u1
3.0.20-1~deb12u2

Open the chart page →

3,196
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-45446.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.6-1~deb13u2

Open the chart page →

1,338
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-45446.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2

Open the chart page →

2,718
language-toolzekker6Verified publisher1.12.11 of 2See more

language-tool zekker6 1.12.1

1 of the 2 container images this version deploys carry CVE-2026-45446.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

1,573
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-45446.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.7-r0

Open the chart page →

1,191
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-45446.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
no fix listed

Open the chart page →

7,966

Container images carrying it

2,276 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:1.115.1ed16e560c40e
openssl@3.5.2-r0
3.5.7-r0
1
nacos/nacos-server:v3.0.20e951a1d07bb
openssl@3.5.0-r0
3.5.7-r0
1
nacos/nacos-server:v3.0.130a39cb0c54d
openssl@3.3.3-r0
3.3.7-r1
1
nataliagranato/redis:v1.0.052bd9b79a8f2
openssl@3.3.1-r4
3.6.3-r0
1
natsio/nats-box:0.18.0abdc9f9f0120
openssl@3.5.0-r0
3.5.7-r0
1
natsio/nats-server-config-reloader:0.20.147094fcae2f4
openssl@3.5.4-r0
3.5.7-r0
1
natsio/nats-server-config-reloader:0.19.181edf32a3680
openssl@3.5.1-r0
3.5.7-r0
1
natsio/nats-server-config-reloader:0.16.1bf97e5e9b9d2
openssl@3.3.2-r4
3.3.7-r1
1
natsio/nats-surveyor:0.9.9104a3e938b23
openssl@3.5.5-r0
3.5.7-r0
1
natsio/prometheus-nats-exporter:0.18.002469dc907bc
openssl@3.5.4-r0
3.5.7-r0
1
natsio/prometheus-nats-exporter:0.20.14fbf6dacb847
openssl@3.5.6-r0
3.5.7-r0
1
natsio/prometheus-nats-exporter:0.16.054b0d7ff058e
openssl@3.3.2-r4
3.3.7-r1
1
ncsa/checks:main0b738bbc8d70
openssl@3.5.1-1
3.5.6-1~deb13u2
1
nelssec/qualys-agent-bootstrapper:v2.1.05e471f0cdeaa
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.25
1
neo4j/helm-charts-reverse-proxy:2026.08.1ea1b8444808d
openssl@3.3.6-r0
3.3.7-r1
1
neoskop/ixy:2.1.125152b474f54
openssl@3.5.5-r0
3.5.7-r0
1
neosmemo/memos:0.293e1253477066
openssl@3.3.7-r0
3.3.7-r1
1
neosmemo/memos:0.26.23eefcc231141
openssl@3.3.6-r0
3.3.7-r1
1
neosmemo/memos:0.24c6defc2dfb98
openssl@3.5.0-r0
3.5.7-r0
1
netapp/trident-protect-utils:v1.0.058b9fac358bd
openssl@3.5.1-r0
3.5.7-r0
1
netbirdio/management:0.45.10c9994b393ea
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11
1
netbirdio/management:0.60.252682e5f48f9
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.11
1
netbirdio/management:0.46.0b0adc4ad4ec6
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11
1
netbirdio/relay:0.45.1872e3add0e1e
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
1
netbirdio/relay:0.60.2a10762533793
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2
1
netbirdio/relay:0.46.0d32f82514a24
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
1
netbirdio/signal:0.45.146ce5a45538f
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
1
netbirdio/signal:0.60.267176bcbf6ab
openssl@3.0.17-1~deb12u3
3.0.20-1~deb12u2
1
netbirdio/signal:0.46.0e8f392611152
openssl@3.0.16-1~deb12u1
3.0.20-1~deb12u2
1
netboxcommunity/netbox:v3.2.83d652dca5351
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.25
1
nethermind/nethermind:1.14.615517708c3b6
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.25
1
nethermind/nethermind:1.31.893e57917371a
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11
1
nethermind/nethermind:1.31.9aeca3b55bda5
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.11
1
netrisai/bare-metal-dpu-agent:4.7.0.003c271efe749d0
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.11
1
netrisai/controller-web-service-frontend:4.6.0-0138c5074f55ae5
openssl@3.5.5-r0
3.5.7-r0
1
networkboot/dhcpd:lateste99bbfbd6fb2
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.25
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
openssl@3.5.5-1~deb13u2
3.5.6-1~deb13u2
1
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
openssl@3.5.1-1
3.5.6-1~deb13u2
1
nginxdemos/hello:plain-text751bf8933179
openssl@3.5.1-r0
3.5.7-r0
1
nginxdemos/hello:0.4b28d1e16c676
openssl@3.5.1-r0
3.5.7-r0
1
nginxinc/nginx-unprivileged:1.29.5-alpine-slim08c2bc93448b
openssl@3.5.6-r0
3.5.7-r0
1
nginxinc/nginx-unprivileged:1.27.4-alpine62a904036bfc
openssl@3.3.3-r0
3.3.7-r1
1
nginxinc/nginx-unprivileged:1.29.0-alpine3.2282dcf28da5a8
openssl@3.5.1-r0
3.5.7-r0
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
openssl@3.5.5-1~deb13u2
3.5.6-1~deb13u2
1
nginxinc/nginx-unprivileged:mainline-alpinee93571f3d083
openssl@3.5.5-r0
3.5.7-r0
1
nirmalnaveen/supermario:latest8541a39162f3
openssl@3.0.11-1~deb12u2
3.0.20-1~deb12u2
1
nlnetlabs/routinator:v0.15.2bc57d6e973c3
openssl@3.5.6-r0
3.5.7-r0
1
nocodb/nocodb:0.301.5d9516f0bf546
openssl@3.3.2-r4
3.3.7-r1
1
nodered/node-red:4.1.2216e7403aab9
openssl@3.5.4-r0
3.5.7-r0
1
nodered/node-red:4.1.10-minimald73ae167cb9b
openssl@3.5.6-r0
3.5.7-r0
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.