StackRadar

CVE-2026-54874

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,268
of 17,787 indexed, latest versions
Container images
3,501
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-54874 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,268 of 17,787 indexed charts deploy, on 3,501 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more2,302
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,176
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm615
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-54874DEBIAN-CVE-2026-54874UBUNTU-CVE-2026-54874AZL-97953ECHO-66d7-e273-5f0f
Also known as
USN-8678-1, USN-8678-2

Charts affected

3,268 by stars
ChartLatestAffected imagesRadar Score
tailscalekubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

tailscale kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
tailscale/tailscale:v1.96.5dbeff02d2337
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,037
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

4,095
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

7,710
kubeservice-scheduler-pluskubservice-chartsVerified publisher0.2.11 of 2See more

kubeservice-scheduler-plus kubservice-charts 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
dongjiang1989/node-metrics:latest3f1f266190bb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,801
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

2,662
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

12,422
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

113,791
ohifkylesferrazzaVerified publisher0.1.01 of 2See more

ohif kylesferrazza 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
jodogne/orthanc-plugins:latest6ff510aa29c2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,512
file-mirrorkyokugirl0.1.31 of 3See more

file-mirror kyokugirl 0.1.3

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
instrumentisto/rsync-ssh:alpine6cbad37c2fbd
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

961
bulwark-maill4gVerified publisher0.2.21 of 1See more

bulwark-mail l4g 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/bulwarkmail/webmail:1.6.0f0a266506fcf
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

800
chibisafel4gVerified publisher0.1.13 of 3See more

chibisafe l4g 0.1.1

3 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
chibisafe/chibisafe:latest836467a50792
openssl@3.5.0-r0
3.5.8-r0
chibisafe/chibisafe-server:latest3da4fcbc1a18
openssl@3.5.1-r0
3.5.8-r0
library/caddy:2-alpine5f5c8640aae0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,654
overpass-apil4gVerified publisher0.1.21 of 1See more

overpass-api l4g 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
wiktorn/overpass-api:latest9bb5f4a9b54c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

3,544
api-docslabs64io-helm-chartsVerified publisher0.7.21 of 1See more

api-docs labs64io-helm-charts 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
swaggerapi/swagger-ui:v5.32.143d9316996884
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

370
api-gatewaylabs64io-helm-chartsVerified publisher0.12.01 of 1See more

api-gateway labs64io-helm-charts 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
labs64/traefik-authproxy:0.0.3dfc6086dfbce
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,006
auditflowlabs64io-helm-chartsVerified publisher0.12.13 of 3See more

auditflow labs64io-helm-charts 0.12.1

3 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
labs64/auditflowdigest-pinnedc7b26d3ca11c
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
labs64/auditflow-sinkdigest-pinnedbc4b7684b612
openssl@3.5.7-r0
3.5.8-r0
labs64/auditflow-transformerdigest-pinned0af0ab7a50ee
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,446
checkoutlabs64io-helm-chartsVerified publisher0.8.01 of 3See more

checkout labs64io-helm-charts 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,626
payment-gatewaylabs64io-helm-chartsVerified publisher0.8.02 of 2See more

payment-gateway labs64io-helm-charts 0.8.0

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
labs64/payment-gateway:0.0.10c66feefca17
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
library/postgres:184ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,657
lakilakiOfficialVerified publisher1.11.02 of 2See more

laki laki 1.11.0

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/laki-n/laki:v1.6.0599a10c453a3
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/laki-n/laki-ui:v1.6.0e51253617271
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

394
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
openssl@3.0.18-1~deb12u1
no fix listed

Open the chart page →

3,980
glancelbenicio-communityVerified publisher0.1.31 of 1See more

glance lbenicio-community 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
glanceapp/glance:latest9dfb09470b20
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

153
lgtm-stacklgtm-stackVerified publisher0.1.32 of 8See more

lgtm-stack lgtm-stack 0.1.3

2 of the 8 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.10f4434c92b3e
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
grafana/grafana:13.1.0121a7a9ece6d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,576
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

35,050
halitesql0.1.51 of 2See more

ha litesql 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/litesql/ha:latest4029479b8ea7
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,099
litlyxlitlyx0.2.04 of 5See more

litlyx litlyx 0.2.0

4 of the 5 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
litlyx/litlyx-consumer:latest02225e77d316
openssl@3.5.4-r0
3.5.8-r0
litlyx/litlyx-dashboard:lateste64ff2d52385
openssl@3.5.4-r0
3.5.8-r0
litlyx/litlyx-producer:latest10407f36613f
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

7,874
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.14ccf9c2b5e3f2
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

6,761
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
openssl@3.0.18-1~deb12u1
no fix listed

Open the chart page →

7,201
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

2,757
lumenvoxlumenvox7.1.03 of 11See more

lumenvox lumenvox 7.1.0

3 of the 11 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
lumenvox/admin-portal:7.112310cf52f79
openssl@3.5.6-r0
3.5.8-r0
lumenvox/deployment-portal:7.19d83efc340cf
openssl@3.5.7-r0
3.5.8-r0
lumenvox/file-store:7.138aa8711c9ef
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

4,283
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-assure-identity:2.0.0147854a3c916
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-audit:2.0.079428add7f38
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-binary-storage:2.0.053decadc102d
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-deployment:2.0.0ea8110886d38
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-management-api:2.0.0b9a23345eabd
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
lumenvox/cloud-voice-verifier:2.0.014170ad34903
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

70,741
dnsbl-exporterluzillaVerified publisher0.5.01 of 2See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/luzilla/unbound:v0.12.04fd8da9dc13c
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,146
flaresolverrm0nsterrr-flaresolverrVerified publisher2.4.11 of 1See more

flaresolverr m0nsterrr-flaresolverr 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

6,136
prometheus-pve-exporterm0nsterrr-prometheus-pve-exporterVerified publisher2.7.01 of 1See more

prometheus-pve-exporter m0nsterrr-prometheus-pve-exporter 2.7.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.10.04867684c0a93
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

348
prowlarrm0nsterrr-prowlarrVerified publisher3.8.41 of 1See more

prowlarr m0nsterrr-prowlarr 3.8.4

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/home-operations/prowlarr:2.6.4a5b803126826
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
radarrm0nsterrr-radarrVerified publisher3.6.31 of 1See more

radarr m0nsterrr-radarr 3.6.3

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/home-operations/radarr:6.4.30ebb4ae26ee9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

480
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

5,734
redismagefleet-redis0.1.01 of 1See more

redis magefleet-redis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/redis:7.274566c6910d1
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,049
magentomagento3.2.33 of 12See more

magento magento 3.2.3

3 of the 12 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm5
library/rabbitmq:4.1.0-management935b3f84c1e4
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
library/redis:7.274566c6910d1
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

13,479
mcp-orchestratormagertronVerified publisher3.8.231See more

mcp-orchestrator magertron 3.8.23

1 container image this version deploys carries CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:17-alpine18cfe3ef5e68
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

plane-enterprisemakeplaneOfficialVerified publisher3.7.21See more

plane-enterprise makeplane 3.7.2

1 container image this version deploys carries CVE-2026-54874.

Container imageDigestPackageFixed in
valkey/valkey:7.2.11-alpine10328d00120d
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

2,975
mattermost-enterprise-editionmattermostVerified publisher2.6.1031 of 3See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
mattermost/mattermost-enterprise-edition:11.10.18501080cdfe0
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

3,600
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

19,187
mcpmcp-chartsVerified publisher0.0.235 of 7See more

mcp mcp-charts 0.0.23

5 of the 7 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
glarad/mc-service-registry:latest7b02b9e7f1ef
openssl@3.5.7-r0
3.5.8-r0
glarad/mcp-management-portal-clr:0.6.8807e453354a7
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/gla-rad/mc-mms-edgerouter:latest3620d5680775
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
ghcr.io/gla-rad/mc-mms-router:latest032e977d9adf
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
ghcr.io/maritimeconnectivity/identityregistry:latest5009fd419742
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

6,929
jellyfinmedia-servarrVerified publisher0.16.02 of 2See more

jellyfin media-servarr 0.16.0

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,753
lidarrmedia-servarrVerified publisher1.8.11 of 2See more

lidarr media-servarr 1.8.1

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
prowlarrmedia-servarrVerified publisher0.28.01 of 2See more

prowlarr media-servarr 0.28.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
radarrmedia-servarrVerified publisher1.10.01 of 2See more

radarr media-servarr 1.10.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
sonarrmedia-servarrVerified publisher0.16.01 of 2See more

sonarr media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
transmissionmedia-servarrVerified publisher0.17.01 of 2See more

transmission media-servarr 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
medusamedusaVerified publisher1.3.81 of 1See more

medusa medusa 1.3.8

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
linuxserver/medusa:v1.0.26-ls2884477fb1ce3ca
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

977

Container images carrying it

3,501 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ilum/ui:6.7.3998937726679
openssl@3.5.5-r0
3.5.8-r0
2
interlayhq/interbtc:latesta66d0e35e70f
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5
2
interlayhq/interbtc-clients:vault-masterc3e311de67da
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
2
istio/examples-bookinfo-reviews-v1:1.15.040e8aba77c1b
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm18
2
istio/examples-bookinfo-reviews-v1:1.14.0ee156b8aefd6
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm18
2
istio/examples-bookinfo-reviews-v2:1.15.0e86d247b7ac2
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm18
2
istio/examples-bookinfo-reviews-v2:1.14.0eab80bcd2132
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm18
2
istio/examples-bookinfo-reviews-v3:1.14.01e37fca43550
openssl@1.0.2g-1ubuntu4.14
1.0.2g-1ubuntu4.20+esm18
2
istio/examples-bookinfo-reviews-v3:1.15.0e454cab754cf
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm18
2
istio/kubectl:1.5.10dbb7726d1bf0
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm10
2
istio/proxyv2:1.18.0757d28c24100
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29
2
istio/proxyv2:1.10.3a78b7a165744
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
2
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
openssl@3.0.11-1~deb12u2
no fix listed
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
2
jhaals/yopass:14.9.0934e4f2c016f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
jupyterhub/configurable-http-proxy:5.3.0:latest69a7170eeeda
openssl@3.5.7-r0
3.5.8-r0
2
kiwigrid/k8s-sidecar:1.30.98c06e1ba643a
openssl@3.5.1-r0
3.5.8-r0
2
kurento/kurento-media-server:latest03c0d34d0828
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.15
2
kutt/kutt:latest:v3.2.6fa3d24a89b04
openssl@3.5.7-r0
3.5.8-r0
2
langgenius/dify-sandbox:0.2.009b7e8705673
openssl@3.0.11-1~deb12u2
no fix listed
2
library/alpine:3.23fd791d74b689
openssl@3.5.7-r0
3.5.8-r0
2
library/bash:5:latesta19c811ee9e9
openssl@3.5.7-r0
3.5.8-r0
2
library/buildpack-deps:curl04907bdd423b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
library/caddy:2.11.4-alpine:2-alpine5f5c8640aae0
openssl@3.5.7-r0
3.5.8-r0
2
library/caddy:latestdf7f1c2fb114
openssl@3.5.7-r0
3.5.8-r0
2
library/cassandra:3.11.65aa8400b4b3b
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm10
2
library/cassandra:4.1.37cbcec0086ac
openssl@3.0.2-0ubuntu1.13
3.0.2-0ubuntu1.29
2
library/debian:stable-slim04634311a8d5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
library/eclipse-mosquitto:2:2.1.2-alpine6f8d8a947c50
openssl@3.5.7-r0
3.5.8-r0
2
library/elasticsearch:7.17.35e6ac15bf6a5
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm5
2
library/elasticsearch:8.19.1289729a95066a
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
2
library/influxdb:2.7b8d940ca9376
openssl@3.0.19-1~deb12u2
no fix listed
2
library/mariadb:10.8.30abf60f81588
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.29
2
library/mariadb:10.10334b315c10e5
openssl@3.0.2-0ubuntu1.13
3.0.2-0ubuntu1.29
2
library/mariadb:12.0.2:12.0-noble607835cd628b
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.15
2
library/mariadb:11.4611a2fcc5fa7
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
2
library/mariadb:10.692e50059ea0a
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29
2
library/mariadb:11.3.2e101f9db3191
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
2
library/mongo:8.0.20098862b1339f
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15
2
library/mongo:7.0-jammy:7-jammy406a4fdca9fc
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29
2
library/mongo:5.041108d183e97
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5
2
library/mongo:4.2.358b25d51baa1
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm10
2
library/mongo:7b096b4cb9269
openssl@3.0.2-0ubuntu1.29
no fix listed
2
library/mongo:7.0b6421fd6d1c5
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29
2
library/nginx:latest6e23479198b9
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
2
library/nginx:1.27.098f8ec75657d
openssl@3.0.13-1~deb12u1
no fix listed
2
library/nginx:1.29.49dd288848f44
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
2
library/node:24.21.0-alpine3.23159fe6464903
openssl@3.5.7-r0
3.5.8-r0
2
library/node:24.21.0-alpinebe80f76cf40e
openssl@3.5.7-r0
3.5.8-r0
2
library/phpmyadmin:5.2.16e75aa8f767c
openssl@3.0.15-1~deb12u1
no fix listed
2

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.