StackRadar

CVE-2026-54874

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,269
of 17,805 indexed, latest versions
Container images
3,470
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-54874 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,269 of 17,805 indexed charts deploy, on 3,470 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more2,292
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,158
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm615
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-620
OSV records
ALPINE-CVE-2026-54874DEBIAN-CVE-2026-54874UBUNTU-CVE-2026-54874AZL-97953ECHO-66d7-e273-5f0f
Also known as
USN-8678-1, USN-8678-2

Charts affected

3,269 by stars
ChartLatestAffected imagesRadar Score
Wordpresswordpress-mariadb1.0.22 of 2See more

Wordpress wordpress-mariadb 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/mariadb:ltsdd9b303aed4f
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
library/wordpress:latest5a93c470ae82
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,737
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
openssl@3.0.2-0ubuntu1.16
no fix listed
3.0.2-0ubuntu1.29

Open the chart page →

14,226
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

11,643
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

7,672
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
openssl@3.0.14-1~deb12u2
no fix listed
hamzaarshad10/querypodpy:1.7154f38e8668e
openssl@3.0.14-1~deb12u2
no fix listed
library/mongo:latest5211c51171f5
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
murtazashah46/helmfile:latest4d11726cf803
openssl@3.0.14-1~deb12u2
no fix listed

Open the chart page →

13,875
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.15

Open the chart page →

2,156
nightingalexxl-job-adminVerified publisher0.2.111See more

nightingale xxl-job-admin 0.2.11

1 container image this version deploys carries CVE-2026-54874.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15

Open the chart page →

—
pgcatxxl-job-adminVerified publisher0.3.31See more

pgcat xxl-job-admin 0.3.3

1 container image this version deploys carries CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/postgresml/pgcat:v1.2.0627761f6dcbc
openssl@3.0.13-1~deb12u1
no fix listed

Open the chart page →

—
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

1,330
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

936
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

2,710
zahori-schedulerzahoriVerified publisher1.0.11 of 1See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
zahoriaut/zahori-scheduler:1.0.047d0979b1184
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

2,477
changedetection-iozekker6Verified publisher1.102.01See more

changedetection-io zekker6 1.102.0

1 container image this version deploys carries CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.7096dae27b5d6
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

—
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

490
homerzekker6Verified publisher8.35.01 of 1See more

homer zekker6 8.35.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
b4bz/homer:v26.08.3febc8967c9f7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
language-toolzekker6Verified publisher1.12.12 of 2See more

language-tool zekker6 1.12.1

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.8-r0
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,569
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,160
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm10
yandex/clickhouse-server:21.3.204eccfffb01d7
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

9,280
zoo-project-druzoo-projectOfficialVerified publisher0.10.44 of 6See more

zoo-project-dru zoo-project 0.10.4

4 of the 6 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.4-alpine3.249a8afca54e78
openssl@3.5.7-r0
3.5.8-r0
library/rabbitmq:4.3.2-alpine835cbc6fabce
openssl@3.5.7-r0
3.5.8-r0
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29

Open the chart page →

7,949

Container images carrying it

3,470 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
shieldsio/shields:nextfa194b446e42
openssl@3.5.7-r0
3.5.8-r0
1
shlinkio/shlink-web-client:4.8.1dc8bf3565a25
openssl@3.5.7-r0
3.5.8-r0
1
shwcloud/seawise-backup:v1.7.1a97479a54df4
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
shyamkrishna21/cloudvault:latestaf2785f5bb71
openssl@3.5.5-r0
3.5.8-r0
1
siakhooi/query:1.0.0f1f4b5b1b870
openssl@3.5.6-r0
3.5.8-r0
1
sigma2as/rstudio-proxy:20260818-1df6a44d899e81ee3eb
openssl@3.5.7-r0
3.5.8-r0
1
signalen/backend:2.50.14760256000738
openssl@3.0.20-1~deb12u2
no fix listed
1
signalen/frontend:2.27.81ab79cb7fe21
openssl@3.5.7-r0
3.5.8-r0
1
signoz/signoz-otel-collector:v0.144.1034ecb436b687
openssl@3.0.20-1~deb12u2
no fix listed
1
sigp/lighthouse:v7.0.12cae720e9a35
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29
1
sigp/lighthouse:v7.1.0870934e38931
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29
1
sigp/lighthouse:v2.1.2ad501f02cfef
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
1
sigp/siren:v3.0.42c219b04758e
openssl@3.0.16-1~deb12u1
no fix listed
1
sigscale/cse:latest67d0c886516b
openssl@3.0.20-1~deb12u2
no fix listed
1
sigscale/ocs:latest3c1bdc9732e2
openssl@3.0.20-1~deb12u2
no fix listed
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
openssl@3.0.13-1~deb12u1
no fix listed
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
openssl@3.0.13-1~deb12u1
no fix listed
1
sirrend/helmup-notifications-service:0.1.3997866417011
openssl@3.0.13-1~deb12u1
no fix listed
1
siscc/dotstatsuite-core-auth-management:masterf0a9f41b7c1d
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
1
siscc/dotstatsuite-dbup:master432e55811520
openssl@3.5.7-r0
3.5.8-r0
1
siscc/sdmxri-nsi-maapi:master6cf1145566f0
openssl@3.5.7-r0
3.5.8-r0
1
sismics/docs:v1.10f4b0ef019cf1
openssl@1.1.0g-2ubuntu4.1
1.1.1-1ubuntu2.1~18.04.23+esm10
1
sissbruecker/linkding:1.35.00c5dddf0b37c
openssl@3.0.14-1~deb12u2
no fix listed
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
openssl@3.0.16-1~deb12u1
no fix listed
1
sissbruecker/linkding:1.47.0e35cb50e0581
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
slagattollas/weatherservice-practica:latest68e7f56393fc
openssl@1.1.1-1ubuntu2.1~18.04.8
1.1.1-1ubuntu2.1~18.04.23+esm10
1
snipe/snipe-it:v8.3.1141ebf2386fe
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
1
snipe/snipe-it:v6.0.1455fb7636a98c
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm5
1
socialmediamacroscope/autophrase:0.1.570fb11d4f531
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm5
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
openssl@1.1.1-1ubuntu2.1~18.04.22
1.1.1-1ubuntu2.1~18.04.23+esm10
1
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
openssl@3.0.9-1
no fix listed
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
openssl@1.1.1-1ubuntu2.1~18.04.22
1.1.1-1ubuntu2.1~18.04.23+esm10
1
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
openssl@3.0.9-1
no fix listed
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
openssl@3.0.9-1
no fix listed
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
openssl@3.0.9-1
no fix listed
1
softwaremill/bootzooka:latest845b5e8f8056
openssl@3.5.5-1ubuntu3
3.5.5-1ubuntu3.4
1
sokushinbutsu/devnopes:latest0bbd90448671
openssl@3.5.6-r0
3.5.8-r0
1
solarwinds/solarwinds-otel-collector:0.152.3-k8s3c1110e8bdfb
openssl@3.0.20-1~deb12u2
no fix listed
1
soldevelo/kafka:4.0.0-debian-12-r0cfdc08c2f577
openssl@3.0.20-1~deb12u2
no fix listed
1
soldevelo/pgpool:4.6.3-debian-12-r0044d16a65129
openssl@3.0.19-1~deb12u2
no fix listed
1
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
openssl@3.0.20-1~deb12u2
no fix listed
1
solidinvoice/solidinvoice:3.0.1ae7c0e155cb5
openssl@3.5.7-r0
3.5.8-r0
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24+esm5
1
somnathmore/custom-nginx:v2bdfc06cad4ec
openssl@3.0.11-1~deb12u2
no fix listed
1
sondresjo/bobby-api:latestfe534731909a
openssl@3.0.16-1~deb12u1
no fix listed
1
sondresjo/garge-operator:v1.9.416cb6643dae6
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
openssl@3.0.11-1~deb12u2
no fix listed
1
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
openssl@3.0.11-1~deb12u2
no fix listed
1
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
openssl@3.0.11-1~deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.