StackRadar

CVE-2026-54874

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,263
of 17,803 indexed, latest versions
Container images
3,507
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-54874 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,263 of 17,803 indexed charts deploy, on 3,507 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more2,308
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,176
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm615
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-54874DEBIAN-CVE-2026-54874UBUNTU-CVE-2026-54874AZL-97953ECHO-66d7-e273-5f0f
Also known as
USN-8678-1, USN-8678-2

Charts affected

3,263 by stars
ChartLatestAffected imagesRadar Score
countlyhelmforgeVerified publisher1.2.62 of 3See more

countly helmforge 1.2.6

2 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm5
library/mongo:8.3.85211c51171f5
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

69,307
dawarichhelmforgeVerified publisher1.0.12 of 4See more

dawarich helmforge 1.0.1

2 of the 4 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
postgis/postgis:18-3.67e00e8c3539f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

10,542
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

30,389
druidhelmforgeVerified publisher1.3.62 of 4See more

druid helmforge 1.3.6

2 of the 4 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/zookeeper:3.9.5f258365d4882
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29

Open the chart page →

8,730
drupalhelmforgeVerified publisher1.2.131 of 2See more

drupal helmforge 1.2.13

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/drupal:11.4.6-php8.5-apache-bookworm28f7931ecbcb
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

3,921
entehelmforgeVerified publisher1.0.23 of 4See more

ente helmforge 1.0.2

3 of the 4 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/ente/server:0472c929b6070e61fecaf2013d47efce2dcda462f646b68a1b8d
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,321
fastmcp-serverhelmforgeVerified publisher1.7.41 of 1See more

fastmcp-server helmforge 1.7.4

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,359
giteahelmforgeVerified publisher1.1.201 of 1See more

gitea helmforge 1.1.20

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
gitea/gitea:1.27.3-rootless1c17ecaead42
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

543
github-mcp-serverhelmforgeVerified publisher1.0.31 of 1See more

github-mcp-server helmforge 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/github/github-mcp-server:v1.9.0881b53d6f75f
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

413
glancehelmforgeVerified publisher1.0.01 of 1See more

glance helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
glanceapp/glance:v0.8.69dfb09470b20
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

153
hoppscotchhelmforgeVerified publisher1.1.111 of 2See more

hoppscotch helmforge 1.1.11

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,142
immichhelmforgeVerified publisher1.2.84 of 5See more

immich helmforge 1.2.8

4 of the 5 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
openssl@3.0.20-1~deb12u2
no fix listed
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

11,268
jupyterhubhelmforgeVerified publisher1.0.63 of 3See more

jupyterhub helmforge 1.0.6

3 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
openssl@3.5.7-r0
3.5.8-r0
jupyterhub/configurable-http-proxy:5.3.069a7170eeeda
openssl@3.5.7-r0
3.5.8-r0
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
openssl@3.0.19-1~deb12u2
no fix listed

Open the chart page →

5,541
komgahelmforgeVerified publisher1.4.151 of 1See more

komga helmforge 1.4.15

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

29,969
listmonkhelmforgeVerified publisher1.1.143 of 3See more

listmonk helmforge 1.1.14

3 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:17-alpine18cfe3ef5e68
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
listmonk/listmonk:v6.2.0f535d59e1499
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,900
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

3,508
medikeephelmforgeVerified publisher2.0.12 of 3See more

medikeep helmforge 2.0.1

2 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/afairgiant/medikeep:v0.70.04c28334f3c79
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

5,497
memcachedhelmforgeVerified publisher1.0.81 of 1See more

memcached helmforge 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/memcached:1.6.4575c93cc91e76
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,100
memoshelmforgeVerified publisher2.0.01 of 2See more

memos helmforge 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/node:24.21.0-alpine3.23159fe6464903
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

944
metabasehelmforgeVerified publisher1.2.291 of 3See more

metabase helmforge 1.2.29

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,713
middlewarehelmforgeVerified publisher1.2.63 of 4See more

middleware helmforge 1.2.6

3 of the 4 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
middlewareeng/middleware:0.3.1747d880812f1
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

9,861
moodlehelmforgeVerified publisher1.1.02 of 2See more

moodle helmforge 1.1.0

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

6,363
mosquittohelmforgeVerified publisher1.5.01 of 1See more

mosquitto helmforge 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:2.0.22212f89e1eaeb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
netboxhelmforgeVerified publisher2.0.13 of 4See more

netbox helmforge 2.0.1

3 of the 4 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

4,439
nextcloudhelmforgeVerified publisher1.0.02 of 3See more

nextcloud helmforge 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

7,302
ntfyhelmforgeVerified publisher1.2.21 of 1See more

ntfy helmforge 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
binwiederhier/ntfy:v2.28.06ef4b819f722
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
opencloudhelmforgeVerified publisher1.0.01 of 1See more

opencloud helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
opencloudeu/opencloud:7.2.46d992ccc5f1c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

678
opencuthelmforgeVerified publisher1.1.93 of 5See more

opencut helmforge 1.1.9

3 of the 5 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
helmforge/opencut:v0.3.0bf11156e0ab5
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,837
openreel-videohelmforgeVerified publisher1.0.31 of 1See more

openreel-video helmforge 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
helmforge/openreel-video:v0.5.07ba0d47b943f
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,081
paprahelmforgeVerified publisher1.0.01 of 1See more

papra helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,601
phpmyadminhelmforgeVerified publisher2.0.11 of 1See more

phpmyadmin helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
openssl@3.5.1-1
3.5.7-1~deb13u2

Open the chart page →

4,867
pimcorehelmforgeVerified publisher2.0.13 of 6See more

pimcore helmforge 2.0.1

3 of the 6 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
dunglas/mercure:v0.24.2916834e49961
openssl@3.5.6-r0
3.5.8-r0
library/mariadb:12.3.3dd9b303aed4f
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
library/rabbitmq:4.3.5-alpine3486d98205df
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,238
pocket-idhelmforgeVerified publisher1.0.02 of 2See more

pocket-id helmforge 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/node:24.21.0-alpine3.23159fe6464903
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/pocket-id/pocket-id:v2.14.001540977dcf4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

465
rabbitmqhelmforgeVerified publisher1.7.11 of 1See more

rabbitmq helmforge 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/rabbitmq:4.3.5-alpine3486d98205df
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
reactive-resumehelmforgeVerified publisher1.0.02 of 4See more

reactive-resume helmforge 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/node:24.21.0-alpinebe80f76cf40e
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,136
ryothelmforgeVerified publisher1.0.02 of 2See more

ryot helmforge 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

6,138
siyuanhelmforgeVerified publisher1.0.01 of 1See more

siyuan helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
b3log/siyuan:v3.8.36ab17ed3ca40
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

175
strapihelmforgeVerified publisher2.3.141 of 3See more

strapi helmforge 2.3.14

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,133
strava-statisticshelmforgeVerified publisher1.1.161 of 2See more

strava-statistics helmforge 1.1.16

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
robiningelbrecht/strava-statistics:v5.0.040842cdfd616
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

863
supersethelmforgeVerified publisher1.3.64 of 5See more

superset helmforge 1.3.6

4 of the 5 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
openssl@3.0.20-1~deb12u2
no fix listed
helmforge/kubectl:1.35.3c3f97e954c47
openssl@3.5.5-r0
3.5.8-r0
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,870
text-embeddings-inferencehelmforgeVerified publisher1.0.01 of 2See more

text-embeddings-inference helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
openssl@3.0.18-1~deb12u2
no fix listed

Open the chart page →

2,597
tomcathelmforgeVerified publisher1.0.61 of 2See more

tomcat helmforge 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/tomcat:11.0.25-jdk17-temurin-noble9e1d2afa6898
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

1,306
twentyhelmforgeVerified publisher1.0.13 of 5See more

twenty helmforge 1.0.1

3 of the 5 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/node:24.21.0-alpinebe80f76cf40e
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,717
wallabaghelmforgeVerified publisher1.3.61 of 3See more

wallabag helmforge 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,821
zookeeperhelmforgeVerified publisher1.0.21 of 1See more

zookeeper helmforge 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5f258365d4882
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29

Open the chart page →

3,158
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

12,717
jellyfinhelm-l3st86Verified publisher0.1.81 of 1See more

jellyfin helm-l3st86 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
jellyfin/jellyfin:latestaefb67e6a7ff
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

2,658
openaevhelm-openbasVerified publisher2.0.54 of 7See more

openaev helm-openbas 2.0.5

4 of the 7 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
openssl@3.0.17-1~deb12u2
no fix listed
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
openssl@3.0.16-1~deb12u1
no fix listed
openaev/platform:3.260904.00a12ce8b3db9
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
rustfs/rustfs:1.0.0-beta.1241fe89380f41
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

7,607
openbashelm-openbasVerified publisher1.8.144 of 7See more

openbas helm-openbas 1.8.14

4 of the 7 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
openssl@3.0.17-1~deb12u2
no fix listed
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
openssl@3.0.16-1~deb12u1
no fix listed
openbas/caldera-server:5.1.0a277796d9724
openssl@3.0.15-1~deb12u1
no fix listed
openbas/platform:2.0.5d986d80b0a75
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.15

Open the chart page →

25,395
release-cleanerhelm-release-cleanerVerified publisher1.0.01 of 1See more

release-cleaner helm-release-cleaner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-54874.

Container imageDigestPackageFixed in
alpine/helm:4.1.0905a068da431
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

2,020

Container images carrying it

3,507 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
1
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
1
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
1
ghcr.io/open-telemetry/demo:3.0.0-shipping02602e60edbf
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/open-telemetry/demo:3.0.0-kafka0601750a3ca4
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
openssl@3.0.2-0ubuntu1.25
3.0.2-0ubuntu1.29
1
ghcr.io/open-telemetry/demo:3.0.0-telemetry-docs3519858704e7
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:3.0.0-cart3f89a444250a
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
openssl@3.0.13-1~deb12u1
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-opamp-server62cfae32adb1
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:3.0.0-recommendation6510027907f9
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:3.0.0-mcp654f860148ba
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/open-telemetry/demo:3.0.0-chatbot66ba53497f1f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/open-telemetry/demo:3.0.0-quote6bc8f7f6809e
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
openssl@3.0.14-1~deb12u2
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
openssl@3.0.14-1~deb12u2
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
openssl@3.0.14-1~deb12u2
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:3.0.0-frontend9505e349e140
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29
1
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
openssl@3.0.11-1~deb12u2
no fix listed
1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15
1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
openssl@3.0.14-1~deb12u2
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-load-generatorcd12cb42fb15
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:3.0.0-paymentd498c7434d22
openssl@3.0.18-1~deb12u2
no fix listed
1
ghcr.io/open-telemetry/demo:3.0.0-emaild674d4081ca4
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/open-telemetry/demo:3.0.0-agentdf5ee05e23e3
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
1
ghcr.io/open-telemetry/demo:3.0.0-currencyf82a7805e7ba
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/openunison/openunison-k8s-react:1.0.2afb3e9282952
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29
1
ghcr.io/open-webui/open-terminal:0.13.0-slimdec44673c865
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/open-webui/terminals:latest5d2fd44366a4
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/open-webui/terminals-operator:latest6287ce8be502
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm5
1
ghcr.io/pabloromeo/clusterplex_orchestrator:1.4.160fe80de2d22c
openssl@3.0.17-1~deb12u3
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
openssl@3.0.14-1~deb12u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
openssl@3.0.11-1~deb12u2
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/papra-hq/papra:26.6.2-rootlessa281cb44176d
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29
1
ghcr.io/paradigmxyz/reth:v2.2.0505fca5e87d6
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15
1
ghcr.io/paradigmxyz/reth:latest68e76b32ad9a
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
1
ghcr.io/parca-dev/parca:v0.24.23776500fde82
openssl@3.5.1-r0
3.5.8-r0
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.