StackRadar

CVE-2026-54874

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,279
of 17,792 indexed, latest versions
Container images
3,526
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-54874 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,279 of 17,792 indexed charts deploy, on 3,526 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more2,313
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,190
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm615
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-54874DEBIAN-CVE-2026-54874UBUNTU-CVE-2026-54874AZL-97953ECHO-66d7-e273-5f0f
Also known as
USN-8678-1, USN-8678-2

Charts affected

3,279 by stars
ChartLatestAffected imagesRadar Score
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

7,763
kubeservice-scheduler-pluskubservice-chartsVerified publisher0.2.11 of 2See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
dongjiang1989/node-metrics:latest3f1f266190bb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,803
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

2,686
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

12,495
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

114,131
ohifkylesferrazzaVerified publisher0.1.01 of 2See more

ohif kylesferrazza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
jodogne/orthanc-plugins:latest6ff510aa29c2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,552
file-mirrorkyokugirl0.1.31 of 3See more

file-mirror kyokugirl 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
instrumentisto/rsync-ssh:alpine6cbad37c2fbd
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

961
bulwark-maill4gVerified publisher0.2.21 of 1See more

bulwark-mail l4g 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/bulwarkmail/webmail:1.6.0f0a266506fcf
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

800
chibisafel4gVerified publisher0.1.13 of 3See more

chibisafe l4g 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
chibisafe/chibisafe:latest836467a50792
openssl@3.5.0-r0
3.5.8-r0
chibisafe/chibisafe-server:latest3da4fcbc1a18
openssl@3.5.1-r0
3.5.8-r0
library/caddy:2-alpine5f5c8640aae0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,669
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

3,559
api-docslabs64io-helm-chartsVerified publisher0.7.21 of 1See more

api-docs labs64io-helm-charts 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:v5.32.143d9316996884
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

371
api-gatewaylabs64io-helm-chartsVerified publisher0.12.01 of 1See more

api-gateway labs64io-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
labs64/traefik-authproxy:0.0.3dfc6086dfbce
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,036
auditflowlabs64io-helm-chartsVerified publisher0.12.13 of 3See more

auditflow labs64io-helm-charts 0.12.1

3 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
labs64/auditflowdigest-pinnedc7b26d3ca11c
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
labs64/auditflow-sinkdigest-pinnedbc4b7684b612
openssl@3.5.7-r0
3.5.8-r0
labs64/auditflow-transformerdigest-pinned0af0ab7a50ee
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,505
checkoutlabs64io-helm-chartsVerified publisher0.8.01 of 3See more

checkout labs64io-helm-charts 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,667
payment-gatewaylabs64io-helm-chartsVerified publisher0.8.02 of 2See more

payment-gateway labs64io-helm-charts 0.8.0

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
labs64/payment-gateway:0.0.10c66feefca17
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
library/postgres:184ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,755
lakilakiOfficialVerified publisher1.11.02 of 2See more

laki laki 1.11.0

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/laki-n/laki:v1.6.0599a10c453a3
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/laki-n/laki-ui:v1.6.0e51253617271
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

403
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
openssl@3.0.18-1~deb12u1
no fix listed

Open the chart page →

4,048
glancelbenicio-communityVerified publisher0.1.31 of 1See more

glance lbenicio-community 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
glanceapp/glance:latest9dfb09470b20
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

153
bitwarden-crd-operatorlerentisVerified publisher0.18.01 of 1See more

bitwarden-crd-operator lerentis 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

2,008
lgtm-stacklgtm-stackVerified publisher0.1.32 of 8See more

lgtm-stack lgtm-stack 0.1.3

2 of the 8 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.10f4434c92b3e
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
grafana/grafana:13.1.0121a7a9ece6d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,679
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

35,432
halitesql0.1.51 of 2See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/litesql/ha:latest4029479b8ea7
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,135
litlyxlitlyx0.2.04 of 5See more

litlyx litlyx 0.2.0

4 of the 5 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
litlyx/litlyx-consumer:latest02225e77d316
openssl@3.5.4-r0
3.5.8-r0
litlyx/litlyx-dashboard:lateste64ff2d52385
openssl@3.5.4-r0
3.5.8-r0
litlyx/litlyx-producer:latest10407f36613f
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

7,934
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.14ccf9c2b5e3f2
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

6,776
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
openssl@3.0.18-1~deb12u1
no fix listed

Open the chart page →

7,240
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

2,781
home-assistantloeken-at-homeVerified publisher2026.5.11 of 1See more

home-assistant loeken-at-home 2026.5.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
loeken/home-assistant:2026.5.14ce6abc553b3
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

3,016
lumenvoxlumenvox7.1.03 of 11See more

lumenvox lumenvox 7.1.0

3 of the 11 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
lumenvox/admin-portal:7.112310cf52f79
openssl@3.5.6-r0
3.5.8-r0
lumenvox/deployment-portal:7.19d83efc340cf
openssl@3.5.7-r0
3.5.8-r0
lumenvox/file-store:7.138aa8711c9ef
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

4,352
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-assure-identity:2.0.0147854a3c916
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-audit:2.0.079428add7f38
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-binary-storage:2.0.053decadc102d
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-deployment:2.0.0ea8110886d38
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-management-api:2.0.0b9a23345eabd
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-voice-verifier:2.0.014170ad34903
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

71,369
dnsbl-exporterluzillaVerified publisher0.5.01 of 2See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,149
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

6,515
prometheus-pve-exporterm0nsterrr-prometheus-pve-exporterVerified publisher2.7.01 of 1See more

prometheus-pve-exporter m0nsterrr-prometheus-pve-exporter 2.7.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.10.04867684c0a93
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

349
prowlarrm0nsterrr-prowlarrVerified publisher3.8.41 of 1See more

prowlarr m0nsterrr-prowlarr 3.8.4

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/home-operations/prowlarr:2.6.4a5b803126826
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
radarrm0nsterrr-radarrVerified publisher3.6.41 of 1See more

radarr m0nsterrr-radarr 3.6.4

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/home-operations/radarr:6.4.4dc66c010c5d9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

225
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

5,773
redismagefleet-redis0.1.01 of 1See more

redis magefleet-redis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/redis:7.274566c6910d1
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,079
magentomagento3.2.33 of 12See more

magento magento 3.2.3

3 of the 12 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm5
library/rabbitmq:4.1.0-management935b3f84c1e4
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
library/redis:7.274566c6910d1
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

13,685
mcp-orchestratormagertronVerified publisher3.8.311 of 7See more

mcp-orchestrator magertron 3.8.31

1 of the 7 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:17-alpine18cfe3ef5e68
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,707
plane-enterprisemakeplaneOfficialVerified publisher3.7.21 of 13See more

plane-enterprise makeplane 3.7.2

1 of the 13 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
valkey/valkey:7.2.11-alpine10328d00120d
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

4,973
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

3,026
mattermost-enterprise-editionmattermostVerified publisher2.6.1041 of 3See more

mattermost-enterprise-edition mattermost 2.6.104

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
mattermost/mattermost-enterprise-edition:11.11.0f0643c47b55b
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

926
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

19,206
mcpmcp-chartsVerified publisher0.0.235 of 7See more

mcp mcp-charts 0.0.23

5 of the 7 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
glarad/mc-service-registry:latest7b02b9e7f1ef
openssl@3.5.7-r0
3.5.8-r0
glarad/mcp-management-portal-clr:0.6.8807e453354a7
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
ghcr.io/maritimeconnectivity/identityregistry:latest5009fd419742
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

7,053
jellyfinmedia-servarrVerified publisher0.16.02 of 2See more

jellyfin media-servarr 0.16.0

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,788
lidarrmedia-servarrVerified publisher1.8.11 of 2See more

lidarr media-servarr 1.8.1

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
prowlarrmedia-servarrVerified publisher0.28.01 of 2See more

prowlarr media-servarr 0.28.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
radarrmedia-servarrVerified publisher1.10.01 of 2See more

radarr media-servarr 1.10.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
sonarrmedia-servarrVerified publisher0.16.01 of 2See more

sonarr media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
transmissionmedia-servarrVerified publisher0.17.01 of 2See more

transmission media-servarr 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
medusamedusaVerified publisher1.3.81 of 1See more

medusa medusa 1.3.8

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
linuxserver/medusa:v1.0.26-ls2884477fb1ce3ca
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

978

Container images carrying it

3,526 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29
1
timescale/timescaledb-ha:pg16d7db8f1085a3
openssl@3.0.2-0ubuntu1.29
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
openssl@3.0.2-0ubuntu1.2
3.0.2-0ubuntu1.29
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
nodejs@7.10.1-2nodesource1~xenial1
openssl@1.0.2g-1ubuntu4.10
no fix listed
1.0.2g-1ubuntu4.20+esm18
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
1
tinyops/kwp:1.2.0e009ee400d78
openssl@3.5.7-r0
3.5.8-r0
1
tinyops/pw:1.15.4efdc97ede5c4
openssl@3.5.7-r0
3.5.8-r0
1
tinyops/shortly:1.6.0483915cb2d21
openssl@3.5.7-r0
3.5.8-r0
1
tock/bot_admin:25.10.7df3e38c77a38
openssl@3.5.5-r0
3.5.8-r0
1
tock/bot_api:25.10.7dd5d5c70e333
openssl@3.5.5-r0
3.5.8-r0
1
tock/build_worker:25.10.7080cb6b08d5b
openssl@3.5.5-r0
3.5.8-r0
1
tock/duckling:25.10.7ac1f3f1a1e9c
openssl@3.5.5-r0
3.5.8-r0
1
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
tock/kotlin_compiler:25.10.7c9c0fb40089a
openssl@3.5.5-r0
3.5.8-r0
1
tock/nlp_api:25.10.7c04ffe67b977
openssl@3.5.5-r0
3.5.8-r0
1
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
1
tombursch/kitchenowl-web:v0.7.8517f808eee66
openssl@3.5.6-r0
3.5.8-r0
1
tomsquest/docker-radicale:3.6.1.0a594c624c5a6
openssl@3.5.5-r0
3.5.8-r0
1
tpdock/freeradius:2.2.93da600c95a49
openssl@1.0.2g-1ubuntu4.9
1.0.2g-1ubuntu4.20+esm18
1
trackerforce/switcher-api:latest28ee0c4e0b88
openssl@3.5.7-r0
3.5.8-r0
1
trackerforce/switcher-management:latest13a604f205da
openssl@3.5.7-r0
3.5.8-r0
1
trackerforce/switcher-resolver-node:latest67e2c261f7b4
openssl@3.5.7-r0
3.5.8-r0
1
trackerforce/switcher-slack-app:latest39ddc489edbf
openssl@3.5.7-r0
3.5.8-r0
1
traefik/traefikee:v2.12.10acc7fcca5f1c
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
treeverse/lakefs:1.86.0fb7a0d90f77e
openssl@3.5.7-r0
3.5.8-r0
1
treskon/portrait:DEV-latest88e813f22347
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
treskon/portrait-pythonruntime:DEV-latest694c098bcb52
openssl@3.5.7-r0
3.5.8-r0
1
treskon/portrait-ui:DEV-lateste7970783bc8d
openssl@3.5.7-r0
3.5.8-r0
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
openssl@3.0.15-1~deb12u1
no fix listed
1
trinodb/trino:405ee80ab5eeab2
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29
1
trueosiris/vrising:latest9356f98ad561
openssl@3.0.2-0ubuntu1.23
3.0.2-0ubuntu1.29
1
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
twentycrm/twenty:v2.22.0e7d9948bf284
openssl@3.5.7-r0
3.5.8-r0
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.29
1
tykio/portal:v1.18.092509e00e618
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
tykling/dns_exporter:1.2.3cd6d650c01c1
openssl@3.5.6-r0
3.5.8-r0
1
typesense/typesense:0.25.1035ccfbc3fd8
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29
1
typesense/typesense:0.23.03accb727cbe2
openssl@1.0.2g-1ubuntu4.19
1.0.2g-1ubuntu4.20+esm18
1
typesense/typesense:30.191604dc128e2
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.29
1
typesense/typesense:28.0.rc35dea1b62b7b6e
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29
1
ubuntu/bind9:9.16-20.04_beta5ee73f44e5d0
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5
1
ubuntu/squid:5.2-22.04_beta723891b5bc74
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.29
1
udhos/apiping:1.5.041ab9bae6f3b
openssl@3.5.4-r0
3.5.8-r0
1
udhos/eks-auto-pod-id-assoc:0.6.0196ef68af380
openssl@3.5.6-r0
3.5.8-r0
1
udhos/gateboard:1.12.53acc0e7599bf
openssl@3.5.4-r0
3.5.8-r0
1
udhos/gateboard-discovery:1.9.55567c9363c4c
openssl@3.5.4-r0
3.5.8-r0
1
udhos/k8s-mutating-admission-webhook:1.15.1e588db500edf
openssl@3.5.6-r0
3.5.8-r0
1
udhos/kubecache:0.14.1f44ef986df49
openssl@3.5.7-r0
3.5.8-r0
1
udhos/redis-enforce-expire:1.0.0615b6a7d742e
openssl@3.5.5-r0
3.5.8-r0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.