StackRadar

CVE-2026-54874

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,269
of 17,797 indexed, latest versions
Container images
3,506
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-54874 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,269 of 17,797 indexed charts deploy, on 3,506 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more2,310
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,173
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm615
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-54874DEBIAN-CVE-2026-54874UBUNTU-CVE-2026-54874AZL-97953ECHO-66d7-e273-5f0f
Also known as
USN-8678-1, USN-8678-2

Charts affected

3,269 by stars
ChartLatestAffected imagesRadar Score
kubeflowkubeflow1.6.24 of 45See more

kubeflow kubeflow 1.6.2

4 of the 45 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
istio/proxyv2:1.14.1df69c1a7af7c
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24+esm5
library/python:3.7eedf63967cdb
openssl@3.0.9-1
no fix listed
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

97,283
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

10,583
testkubekubeshop2.13.25 of 5See more

testkube kubeshop 2.13.2

5 of the 5 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
kubeshop/bitnami-mongodb:8.3.8d48b172d99d8
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
kubeshop/testkube-api-server:2.13.244166c28422f
openssl@3.5.7-r0
3.5.8-r0
kubeshop/testkube-minio:2025.10d8e1af6aca99
openssl@3.0.20-1~deb12u2
no fix listed
library/nats:2.14.5-alpined4ac35882ac6
openssl@3.5.7-r0
3.5.8-r0
natsio/nats-server-config-reloader:0.24.0d758a82a9c20
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,178
sbomscannerkubewardenVerified publisher0.12.12 of 5See more

sbomscanner kubewarden 0.12.1

2 of the 5 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/nats:2.14.6-alpinead7a43eb7e33
openssl@3.5.7-r0
3.5.8-r0
natsio/nats-server-config-reloader:0.23.064cb6c858e79
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,012
venti-stackkuossOfficialVerified publisher0.5.02 of 9See more

venti-stack kuoss 0.5.0

2 of the 9 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
openssl@3.5.4-r0
3.5.8-r0
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

3,830
librechatlibrechat-openshiftVerified publisher1.9.02 of 3See more

librechat librechat-openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

5,875
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

4,109
stannatsVerified publisher0.13.01 of 2See more

stan nats 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:latestc623b608e148
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
headplanenbcloudVerified publisher0.1.22 of 4See more

headplane nbcloud 0.1.2

2 of the 4 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
openssl@3.0.16-1~deb12u1
no fix listed
headscale/headscale:0.25.1a7a8ae9616bb
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

8,024
node-local-dnsnode-local-dns2.4.01 of 1See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
openssl@3.0.11-1~deb12u1
no fix listed

Open the chart page →

2,626
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
gradiant/open5gs-dbctl:0.10.3332031245fce
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

9,326
ubuntuopen-charts1.2.11 of 1See more

ubuntu open-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/ubuntu:22.042edbbc5dc405
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29

Open the chart page →

1,585
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.29

Open the chart page →

8,788
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

10,609
scm-managerscm-manager3.12.11 of 1See more

scm-manager scm-manager 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
scmmanager/scm-manager:3.12.1bfb766050f34
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

650
manyfoldself-hosters-by-nightVerified publisher0.7.41 of 1See more

manyfold self-hosters-by-night 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold-solo:0.147.2ed5a792b0e8d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

481
fulciosigstoreVerified publisher2.11.11 of 6See more

fulcio sigstore 2.11.1

1 of the 6 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
curlimages/curl:8.17.0935d9100e9ba
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

3,518
sops-secrets-operatorsops-secrets-operatorVerified publisher0.28.11 of 1See more

sops-secrets-operator sops-secrets-operator 0.28.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

842
spark-kubernetes-operatorspark-kubernetes-operatorOfficialVerified publisher1.8.01 of 1See more

spark-kubernetes-operator spark-kubernetes-operator 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
apache/spark-kubernetes-operator:1.0.0349da72f95c2
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher0.13.12 of 2See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
openssl@3.0.20-1~deb12u2
no fix listed
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

5,538
topolvmtopolvmVerified publisher17.2.01 of 1See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29

Open the chart page →

2,393
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

19,431
unboundunbound-helmchartVerified publisher0.2.21 of 1See more

unbound unbound-helmchart 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,490
vault-operatorvault-operatorVerified publisher1.24.01 of 1See more

vault-operator vault-operator 1.24.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/bank-vaults/vault-operator:v1.24.06f622c5fb8a9
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

542
vault-secrets-webhookvault-secrets-webhookVerified publisher1.23.11 of 1See more

vault-secrets-webhook vault-secrets-webhook 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/bank-vaults/vault-secrets-webhook:v1.23.198baf045a1c9
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

526
athens-proxyvolker-raschekVerified publisher2.0.31 of 1See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
gomods/athens:v0.17.10f61d1e62359
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

2,042
reposilitevolker-raschekVerified publisher1.0.01 of 1See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.5.264128c2d7a6ba
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

3,011
wg-easywg-easyVerified publisher0.1.61 of 1See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:150e7bc9d34e86
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

727
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
openssl@1.0.2g-1ubuntu4.8
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

13,587
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

9,764
zenmlzenml0.96.41 of 1See more

zenml zenml 0.96.4

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
zenmldocker/zenml-server:0.96.409027a6312ee
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,301
eshoponabpabp-charts1.0.03 of 15See more

eshoponabp abp-charts 1.0.0

3 of the 15 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/mongo:4.2699d652ed674
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm10
library/rabbitmq:management-alpineac1201d1dc22
openssl@3.5.7-r0
3.5.8-r0
library/redis:alpinebecdda6c7f4b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

19,818
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.29

Open the chart page →

8,264
limesurveyarea-42Verified publisher0.3.951 of 2See more

limesurvey area-42 0.3.95

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

4,802
athens-proxyathens-chartsOfficialVerified publisher0.17.11 of 1See more

athens-proxy athens-charts 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
gomods/athens:v0.18.197cc113b34b0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,299
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
openssl@1.0.2g-1ubuntu4.8
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

11,025
bookstackbookstack-mgVerified publisher0.3.11 of 2See more

bookstack bookstack-mg 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
linuxserver/bookstack:26.05.202605282ebf97852661
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,892
backup-zenbzen0.1.41 of 1See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
rezachalak/bzen-mongo:1.0.034f694325191
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

8,081
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

10,945
version-checkercert-managerVerified publisher0.11.01 of 1See more

version-checker cert-manager 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
quay.io/jetstack/version-checker:v0.11.0eae9a374d22f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

257
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

5,277
collabora-codechrisingenhaag2.6.01 of 1See more

collabora-code chrisingenhaag 2.6.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
collabora/code:23.05.10.1.105299b452f7f
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

4,201
dns-exporterchristianhuthVerified publisher2.6.11 of 1See more

dns-exporter christianhuth 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
tykling/dns_exporter:1.2.3cd6d650c01c1
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

459
lighthousechronicleVerified publisher0.0.81 of 1See more

lighthouse chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.1.0870934e38931
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29

Open the chart page →

1,970
ghostcloudpirates-ghostVerified publisher0.20.221 of 3See more

ghost cloudpirates-ghost 0.20.22

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/mariadb:12.0.25b6a1eac15b8
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.15

Open the chart page →

7,297
cloudprobercloudproberOfficialVerified publisher1.14.251 of 1See more

cloudprober cloudprober 1.14.25

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/cloudprober/cloudprober:v0.14.540c6d960ae4f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

219
dumpscriptcloudscriptVerified publisher1.8.31 of 1See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

2,128
clowardenclowarden0.2.33 of 4See more

clowarden clowarden 0.2.3

3 of the 4 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
openssl@3.5.1-1
3.5.7-1~deb13u2
ghcr.io/cncf/clowarden/dbmigrator:v0.2.3c022fd42de45
openssl@3.5.4-r0
3.5.8-r0
ghcr.io/cncf/clowarden/server:v0.2.3f9379427b917
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

5,651
convertigoconvertigoOfficialVerified publisher8.4.34 of 5See more

convertigo convertigo 8.4.3

4 of the 5 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
openssl@3.0.15-1~deb12u1
no fix listed
library/convertigo:8.4.3ae605bfcda05
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
library/couchdb:3.4.22817ad50b5c5
openssl@3.0.15-1~deb12u1
no fix listed
timescale/timescaledb:latest-pg16289d55704b1b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

17,632
cosmocosmo-platformOfficialVerified publisher0.20.05 of 10See more

cosmo cosmo-platform 0.20.0

5 of the 10 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
openssl@3.0.13-1~deb12u1
no fix listed
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
openssl@3.0.17-1~deb12u2
no fix listed
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
openssl@3.0.11-1~deb12u2
no fix listed
ghcr.io/wundergraph/cosmo/graphqlmetrics:0.33.0efb69ec3330c
openssl@3.0.15-1~deb12u1
no fix listed
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

29,096

Container images carrying it

3,506 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/mattn/picoclaw:latest517556c8b144
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
openssl@3.0.17-1~deb12u3
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
openssl@3.5.1-1
3.5.7-1~deb13u2
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
openssl@3.0.11-1~deb12u2
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
openssl@3.5.1-1
3.5.7-1~deb13u2
1
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15
1
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.15
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.15
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.15
1
ghcr.io/metacontroller/metacontroller:v4.17.2d7a55ebc70b4
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/metio/tik:2026.8.2618070677f9ee7821d7
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/michaelhaigh/pacman:latestb0931b1f085d
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/microboxlabs/miot-dashboard-server:latest19b910920ab1
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/microboxlabs/miot-docs:latest0307d2fd9f5c
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/microboxlabs/miot-docs:lateste09d92c61f43
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/microboxlabs/miot-harness:0.1.0d548e9ae4b84
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
1
ghcr.io/middleware-labs/mw-kube-agent-config-updater:1.21.0d4edc3f244f4
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/middleware-labs/mw-lang-aggregator:0.1.0ae6e13970ec2
openssl@3.5.1-r0
3.5.8-r0
1
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/mkutlak/alluredeck-ui:0.41.0c19509b1b336
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
openssl@3.0.11-1~deb12u2
no fix listed
1
ghcr.io/mollyim/mollysocket:1.7.1c675622546a4
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/mondu-ai/gar-credential-provider:latest25090d37afa9
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/monicahq/monica-next:main8be69156acbb
openssl@3.5.1-1
3.5.7-1~deb13u2
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
openssl@3.0.18-1~deb12u1
no fix listed
1
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
openssl@3.0.18-1~deb12u2
no fix listed
1
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.15
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
openssl@3.0.13-1~deb12u1
no fix listed
1
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/niklas-letz/cert-manager-webhook-solidserver:1.0.2f19a306ce759
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/nimbolus/terraform-backend:0.2.2bf876252fbe1
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
1
ghcr.io/nmshd/backbone-admin-ui:7.2.169c9f075d2d9
openssl@3.5.6-1~deb13u2+dhi1
3.5.7-1~deb13u2
1
ghcr.io/nmshd/backbone-consumer-api:7.2.1b8f0ce01d057
openssl@3.5.6-1~deb13u2+dhi1
3.5.7-1~deb13u2
1
ghcr.io/nmshd/backbone-database-migrator:7.2.12c0c5e022714
openssl@3.5.6-1~deb13u2+dhi1
3.5.7-1~deb13u2
1
ghcr.io/nmshd/backbone-event-handler:7.2.1f4d6a2006530
openssl@3.5.6-1~deb13u2+dhi1
3.5.7-1~deb13u2
1
ghcr.io/nmshd/backbone-housekeeper:7.2.11c1dfe35447f
openssl@3.5.6-1~deb13u2+dhi1
3.5.7-1~deb13u2
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.