CVE-2026-54874

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,282; of 17,790 indexed, latest versions
Container images: 3,536; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-54874 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,282 of 17,790 indexed charts deploy, on 3,536 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more	1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more	2,323
opensslapk	3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more	3.5.8-r0	1,190
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm6	15
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl3	3.3.7-6	23

OSV records: ALPINE-CVE-2026-54874 DEBIAN-CVE-2026-54874 UBUNTU-CVE-2026-54874 AZL-97953 ECHO-66d7-e273-5f0f
Also known as: USN-8678-1, USN-8678-2

Charts affected

3,282 by stars

Chart

Latest

Affected images

Radar Score

argo-cdargo

10.9.1

2 of 3 See more

argo-cd argo 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
ecr-public.aws.com/docker/library/redis :8.6.4-alpine	2cc044fc5a07	openssl@3.5.7-r0	3.5.8-r0
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	openssl@3.5.5-r0	3.5.8-r0

Open the chart page →

3,003

ingress-nginxingress-nginx

4.15.1

1 of 2 See more

ingress-nginx ingress-nginx 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
registry.k8s.io/ingress-nginx/controller :v1.15.1	594ceea76b01	openssl@3.5.5-r0	3.5.8-r0

Open the chart page →

1,548

traefiktraefik

41.5.0

1 of 1 See more

traefik traefik 41.5.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
library/traefik :v3.7.13	f86a2cab1b5c	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

153

vaulthashicorp

0.34.1

2 of 2 See more

vault hashicorp 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
hashicorp/vault :2.0.4	5be49781ecf7	openssl@3.5.7-r0	3.5.8-r0
hashicorp/vault-k8s :1.7.6	55e27b080c9b	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

549

airflowapache-airflow

1.22.0

1 of 4 See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
library/redis :7.2-bookworm	74566c6910d1	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

3,218

velerovmware-tanzu

12.1.0

1 of 1 See more

velero vmware-tanzu 12.1.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
velero/velero :v1.18.1	11459094b1b2	openssl@3.0.2-0ubuntu1.23	3.0.2-0ubuntu1.29

Open the chart page →

1,347

metallbmetallb

0.16.1

2 of 4 See more

metallb metallb 0.16.1

2 of the 4 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
quay.io/frrouting/frr :10.4.3	8745af1f9bbb	openssl@3.5.5-r0	3.5.8-r0
quay.io/metallb/frr-k8s :v0.0.25	1cb06fb2d553	openssl@3.5.6-r0	3.5.8-r0

Open the chart page →

2,149

giteagitea

12.7.0

3 of 4 See more

gitea gitea 12.7.0

3 of the 4 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
bitnamilegacy/pgpool :4.6.3-debian-12-r0	d3bf3910f148	openssl@3.0.17-1~deb12u2	no fix listed
bitnamilegacy/postgresql-repmgr :17.6.0-debian-12-r2	f12387ec882b	openssl@3.0.17-1~deb12u2	no fix listed
bitnamilegacy/valkey-cluster :8.1.3-debian-12-r3	32869e769b7e	openssl@3.0.17-1~deb12u1	no fix listed

Open the chart page →

8,874

sonarqubesonarqube

10.0.0+521

1 of 3 See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
library/sonarqube :10.0.0-community	ef9723cf4fe4	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.29

Open the chart page →

6,623

pgadmin4runix

1.66.0

1 of 1 See more

pgadmin4 runix 1.66.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :9.17	2f4ce946ddf8	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

398

artifact-hubartifact-hub

1.23.0

6 of 7 See more

artifact-hub artifact-hub 1.23.0

6 of the 7 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
aquasec/trivy :0.69.3	bcc376de8d77	openssl@3.5.5-r0	3.5.8-r0
artifacthub/db-migrator :v1.23.0	28c13565ac5c	openssl@3.5.7-r0	3.5.8-r0
artifacthub/hub :v1.23.0	7d3a91c539dc	openssl@3.5.7-r0	3.5.8-r0
artifacthub/postgres :latest	4fd34fa635cc	openssl@3.5.1-1	3.5.7-1~deb13u2
artifacthub/scanner :v1.23.0	2d8365601f0e	openssl@3.5.7-r0	3.5.8-r0
artifacthub/tracker :v1.23.0	5368d21a6e5c	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

10,840

piholemojo2600

2.38.0

1 of 1 See more

pihole mojo2600 2.38.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
pihole/pihole :2026.07.2	f7d1be836e3b	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

571

n8ncommunity-charts

1.24.40

1 of 1 See more

n8n community-charts 1.24.40

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
n8nio/n8n :2.38.4	5d9f0cc5672b	openssl@3.5.7-r1	3.5.8-r0

Open the chart page →

772

argo-cdargo-cd-oci

10.9.1

2 of 3 See more

argo-cd argo-cd-oci 10.9.1

2 of the 3 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
ecr-public.aws.com/docker/library/redis :8.6.4-alpine	2cc044fc5a07	openssl@3.5.7-r0	3.5.8-r0
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	openssl@3.5.5-r0	3.5.8-r0

Open the chart page →

3,003

jaegerjaegertracing

4.13.1

1 of 1 See more

jaeger jaegertracing 4.13.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.20.0	46a886260e04	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

302

jupyterhubjupyterhub

4.4.2

3 of 7 See more

jupyterhub jupyterhub 4.4.2

3 of the 7 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
quay.io/jupyterhub/configurable-http-proxy :5.2.0	522738d5285e	openssl@3.5.5-r0	3.5.8-r0
quay.io/jupyterhub/k8s-hub :4.4.2	108fbb01c3fe	openssl@3.0.20-1~deb12u2	no fix listed
quay.io/jupyterhub/k8s-singleuser-sample :4.4.2	65e1b09fc8c9	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

7,937

mimir-distributedgrafana

6.2.0

2 of 6 See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
apache/kafka-native :4.1.0	9a9d16e60894	openssl@3.5.1-r0	3.5.8-r0
nginxinc/nginx-unprivileged :1.29-alpine	0c79d56aee56	openssl@3.5.6-r0	3.5.8-r0

Open the chart page →

4,548

natsnats

2.14.6

3 of 3 See more

nats nats 2.14.6

3 of the 3 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
library/nats :2.14.6-alpine	ad7a43eb7e33	openssl@3.5.7-r0	3.5.8-r0
natsio/nats-box :0.19.7	ffce8bd10338	openssl@3.5.6-r0	3.5.8-r0
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	openssl@3.5.5-r0	3.5.8-r0

Open the chart page →

2,315

argocd-image-updaterargo

1.3.1

1 of 1 See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/argocd-image-updater :v1.3.0	cb009167015c	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

725

metabasepmint93

2.27.6

1 of 1 See more

metabase pmint93 2.27.6

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
metabase/metabase :v0.61.1.x	9491ed11c901	openssl@3.5.6-r0	3.5.8-r0

Open the chart page →

1,640

headlampheadlamp

0.45.0

1 of 1 See more

headlamp headlamp 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
ghcr.io/headlamp-k8s/headlamp :v0.45.0	db3f0e0fc58d	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

238

n8nopen-8gears

2.1.1

1 of 1 See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
n8nio/n8n :2.36.8	cfe2704ff858	openssl@3.5.7-r1	3.5.8-r0

Open the chart page →

1,039

dexdex

0.24.1

1 of 1 See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.44.0	5d0656fce7d4	openssl@3.5.1-r0	3.5.8-r0

Open the chart page →

1,773

uptime-kumauptime-kuma

4.2.0

1 of 1 See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.5.0	a8610b3b4c38	openssl@3.0.20-1~deb12u1	no fix listed

Open the chart page →

30,217

airflowairflow-helm

8.9.0

1 of 4 See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
apache/airflow :2.8.4-python3.9	64e58748b6b9	openssl@3.0.11-1~deb12u2	no fix listed

Open the chart page →

11,394

falcofalcosecurity

9.1.0

1 of 3 See more

falco falcosecurity 9.1.0

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
falcosecurity/falco-driver-loader :0.44.1	7df783d5269a	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

5,398

kubeviewkubeview

2.2.1

1 of 1 See more

kubeview kubeview 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
ghcr.io/benc-uk/kubeview :latest	45b64d7c7016	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

149

kongkong

3.4.1

1 of 2 See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
library/kong :3.9	2a8cf3b110cd	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15

Open the chart page →

1,186

redis-hadandydev-charts

4.39.0

1 of 1 See more

redis-ha dandydev-charts 4.39.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
public.ecr.aws/docker/library/redis :8.8.0-alpine	9d317178ecea	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

168

victoria-metrics-k8s-stackvictoriametrics

0.92.1

2 of 7 See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
grafana/grafana :13.1.1	7cb8c64c4d57	openssl@3.5.7-r0	3.5.8-r0
quay.io/kiwigrid/k8s-sidecar :2.8.1	abb55b2165c6	openssl@3.5.6-r0	3.5.8-r0

Open the chart page →

1,910

kuredkured

6.1.0

1 of 1 See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
ghcr.io/kubereboot/kured :1.23.0	8dfd3c2e8893	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

231

openebsopenebs

4.6.1

5 of 35 See more

openebs openebs 4.6.1

5 of the 35 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
grafana/alloy :v1.8.1	7790f6f7fbd8	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.15
openebs/alpine-bash :4.6.0	366d6c5f18c3	openssl@3.5.7-r0	3.5.8-r0
openebs/alpine-sh :4.6.0	640c187dccda	openssl@3.5.7-r0	3.5.8-r0
openebs/lvm-driver :1.10.1	41f73aba7f31	openssl@3.5.1-r0	3.5.8-r0
openebs/provisioner-localpv :4.6.0	99f5116f5cb8	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

24,128

rediscloudpirates-redis

0.35.0

1 of 1 See more

redis cloudpirates-redis 0.35.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
library/redis :8.10.1	298e5b3bc566	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

978

jiraatlassian-data-center

2.0.15

1 of 2 See more

jira atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
library/alpine :latest	28bd5fe8b56d	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

1,567

vectorvector

0.58.0

1 of 1 See more

vector vector 0.58.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
timberio/vector :0.58.0-distroless-libc	6c93dfe2554c	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

349

apisixapisix

2.17.0

1 of 3 See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
apache/apisix :3.18.0-ubuntu	9ee5df1611f9	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15

Open the chart page →

3,118

zabbixzabbix-community

7.1.0

5 of 5 See more

zabbix zabbix-community 7.1.0

5 of the 5 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
library/postgres :16	f1c3376c26f2	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
zabbix/zabbix-agent2 :ubuntu-7.0.23	7322a94c5d7a	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.15
zabbix/zabbix-server-pgsql :ubuntu-7.0.23	7e8c8e059533	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.15
zabbix/zabbix-web-nginx-pgsql :ubuntu-7.0.23	7d4d58086515	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.15
zabbix/zabbix-web-service :ubuntu-7.0.23	915b3183e054	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.15

Open the chart page →

13,880

keycloakcloudpirates-keycloak

0.21.37

2 of 3 See more

keycloak cloudpirates-keycloak 0.21.37

2 of the 3 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
library/postgres :18.0	073e7c8b84e2	openssl@3.5.1-1	3.5.7-1~deb13u2
library/postgres :18.6	4ef4dbc939d6	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

4,428

fluentdfluent

0.6.0

1 of 1 See more

fluentd fluent 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
fluent/fluentd-kubernetes-daemonset :v1.19.3-debian-elasticsearch7-1.1	de9cf5f1127a	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

1,022

graylogkong-z

3.0.33

1 of 5 See more

graylog kong-z 3.0.33

1 of the 5 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
library/alpine :latest	28bd5fe8b56d	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

2,701

netdatanetdata

3.7.173

1 of 1 See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
netdata/netdata :v2.11.0	c45c71eb23ff	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

3,131

connectonepassword-connect

2.4.1

2 of 2 See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
1password/connect-api :1.8.2	e915c0c84397	openssl@3.5.4-1~deb13u2	3.5.7-1~deb13u2
1password/connect-sync :1.8.2	6297ca6136c0	openssl@3.5.4-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

2,584

opencostopencost

2.5.31

1 of 2 See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost :1.121.2	de2784434527	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

273

openfaasopenfaas

15.0.13

2 of 6 See more

openfaas openfaas 15.0.13

2 of the 6 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
ghcr.io/openfaas/faas-netes :0.18.17	6cfe35401d25	openssl@3.5.6-r0	3.5.8-r0
ghcr.io/openfaas/gateway :0.27.14	ee0eaecc490c	openssl@3.5.1-r0	3.5.8-r0

Open the chart page →

3,558

maildocker-postfix

5.1.0

1 of 1 See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
boky/postfix :5.1.0	aafc77238423	openssl@3.5.4-1~deb13u1	3.5.7-1~deb13u2

Open the chart page →

5,399

flux2fluxcd-community

2.19.0

7 of 7 See more

flux2 fluxcd-community 2.19.0

7 of the 7 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
ghcr.io/fluxcd/flux-cli :v2.9.1	020edbaee890	openssl@3.5.7-r0	3.5.8-r0
ghcr.io/fluxcd/helm-controller :v1.6.2	e17ab0e5885d	openssl@3.5.7-r0	3.5.8-r0
ghcr.io/fluxcd/image-automation-controller :v1.2.2	6b0b16ab2115	openssl@3.5.7-r0	3.5.8-r0
ghcr.io/fluxcd/image-reflector-controller :v1.2.2	27e6bad1dac5	openssl@3.5.7-r0	3.5.8-r0
ghcr.io/fluxcd/kustomize-controller :v1.9.2	3aecec8bafdb	openssl@3.5.7-r0	3.5.8-r0
ghcr.io/fluxcd/notification-controller :v1.9.2	9ce503e7bcb8	openssl@3.5.7-r0	3.5.8-r0
ghcr.io/fluxcd/source-controller :v1.9.2	2b8d06650a1b	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

3,006

vaultwardengissilabs

1.4.2

1 of 1 See more

vaultwarden gissilabs 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
vaultwarden/server :1.37.2	094b5689ed81	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

1,766

keydbenapter

0.48.0

1 of 1 See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
eqalpha/keydb :x86_64_v6.3.2	fd9351ce27a7	openssl@1.1.1-1ubuntu2.1~18.04.21	1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

5,560

postgrescloudpirates-postgres

0.20.5

1 of 1 See more

postgres cloudpirates-postgres 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
library/postgres :18.6	4ef4dbc939d6	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

1,649

gatekeepergatekeeper

3.23.1

1 of 3 See more

gatekeeper gatekeeper 3.23.1

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container image	Digest	Package	Fixed in
curlimages/curl :8.20.0	b3f1fb2a51d9	openssl@3.5.6-r0	3.5.8-r0

Open the chart page →

503

Container images carrying it

3,536 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
speckle/speckle-webhook-service :2.20.6-branch.testing1.154030-9b09114	cf1d99bad89a	openssl@3.0.11-1~deb12u2	no fix listed	1
speckle/speckle-webhook-service :2.25.10-branch.testing6.645-b125c1e	dd9db6cbe9bb	openssl@3.0.13-1~deb12u1	no fix listed	1
spy86/rabbitmq-stomp :latest	ea649101b9fb	openssl@1.1.1f-1ubuntu2.17	1.1.1f-1ubuntu2.24+esm5	1
sslhep/servicex_app :v1.8.5	1d12f943cec5	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	1
sslhep/servicex_code_gen_atlas_xaod :v1.8.5	e7aff7f97b89	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	1
sslhep/servicex_code_gen_func_adl_uproot :v1.8.5	b01b8ee966ed	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	1
sslhep/servicex_code_gen_python :v1.8.5	0e4175a4e1eb	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	1
sslhep/servicex_code_gen_raw_uproot :v1.8.5	671980005c57	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	1
sslhep/servicex_code_gen_topcp :v1.8.5	596db2abdd09	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	1
sslhep/servicex-did-finder-atlasopenmagic :v1.8.5	54aaf1721d03	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	1
sslhep/servicex-did-finder-cernopendata :v1.8.5	2cb88ceab5bb	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	1
sslhep/servicex-did-finder-xrootd :v1.8.5	c284442b44e3	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	1
stackstorm/st2actionrunner :3.8	88235ba70cad	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm5	1
stackstorm/st2api :3.8	6f56d239d280	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm5	1
stackstorm/st2auth :3.8	33ecfda16608	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm5	1
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm5	1
stackstorm/st2notifier :3.8	f190a6212195	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm5	1
stackstorm/st2rulesengine :3.8	259503496ff9	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm5	1
stackstorm/st2scheduler :3.8	b1de2055c362	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm5	1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm5	1
stackstorm/st2stream :3.8	1c8904a3bf67	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm5	1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm5	1
stackstorm/st2web :3.8	09989a26c8b7	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm5	1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm5	1
stalwartlabs/stalwart :v0.16.14	25001929f36a	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	1
stalwartlabs/stalwart :v0.15.5	dcf575db2d53	openssl@3.5.4-1~deb13u2	3.5.7-1~deb13u2	1
stashapp/stash :latest	24dbd7607174	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm5	1
stashapp/stash :v0.31.1	df744af5a0c9	openssl@3.5.5-r0	3.5.8-r0	1
stashapp/stash-box :latest	a534c8afdf39	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.15	1
staslevchenko/kent :0.4.0	e1b5de030254	openssl@3.5.7-r0	3.5.8-r0	1
statcan/ckan :2.9	3921305425b8	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm5	1
steamcmd/steamcmd :latest	5028a25268e7	openssl@3.5.5-1ubuntu3.3	3.5.5-1ubuntu3.4	1
stnsmith/fossflow :latest	e448ab346cb3	openssl@3.5.7-r0	3.5.8-r0	1
strangebee/thehive :5.8.0-1	a7f7b05fba24	openssl@3.0.20-1~deb12u2	no fix listed	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm5	1
structurizr/onpremises :2025.11.09	4b5ffb5119c8	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.15	1
substratusai/verba :v0.4.0-baseURL2	61695be635eb	openssl@3.0.11-1~deb12u2	no fix listed	1
supabase/edge-runtime :v1.74.0	2781daf92394	openssl@3.0.19-1~deb12u2	no fix listed	1
supabase/edge-runtime :v1.59.0	eff9c554d649	openssl@3.0.14-1~deb12u2	no fix listed	1
supabase/gotrue :v2.189.0	385184459f57	openssl@3.5.6-r0	3.5.8-r0	1
supabase/postgres :17.6.1.136	f371b5f3f2ac	openssl@3.5.6-r0	3.5.8-r0	1
supabase/postgres-meta :v0.96.6	a84cc713585e	openssl@3.0.19-1~deb12u2	no fix listed	1
supabase/postgres-meta :v0.84.2	d0a96973e9f1	openssl@3.0.14-1~deb12u2	no fix listed	1
supabase/realtime :v2.102.3	aa1c92c0cf32	openssl@3.0.20-1~deb12u1	no fix listed	1
supabase/realtime :v2.33.8	d207e6e23ad3	openssl@3.0.14-1~deb12u2	no fix listed	1
supabase/realtime :latest	d3aa0c86c7b3	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	1
supabase/storage-api :v1.60.4	c8eb9858eafe	openssl@3.5.6-r0	3.5.8-r0	1
supabase/storage-api :latest	f6c42a04163d	openssl@3.5.7-r0	3.5.8-r0	1
supabase/studio :20241021-9f9b083	26d8070c55e9	openssl@3.0.14-1~deb12u2	no fix listed	1
supabase/studio :2026.08.03-sha-022b374	606aca9fdaa7	openssl@3.0.20-1~deb12u2	no fix listed	1