CVE-2026-63072
HighAdvisory
Published 25 Aug 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.007
- 50th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 3,294
- of 17,787 indexed, latest versions
- Container images
- 3,545
- deployed by those charts
- Fix available
- 4 of 5
- affected packages
CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6
Carried by container images the latest versions of 3,294 of 17,787 indexed charts deploy, on 3,545 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| openssldeb | 1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more | 1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more | 2,327 |
| opensslapk | 3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more | 3.5.8-r0 | 1,195 |
| nodejsdeb | 4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more | no fix listed | 16 |
| openssl1.0deb | 1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more | 1.0.2n-1ubuntu5.13+esm6 | 15 |
| opensslrpm | 3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl3 | 3.3.7-6 | 23 |
- OSV records
- ALPINE-CVE-2026-63072DEBIAN-CVE-2026-63072UBUNTU-CVE-2026-63072AZL-97947ECHO-aa38-89d5-f024
- Also known as
- USN-8678-1, USN-8678-2
Charts affected
3,294 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| rustfscloudpirates-rustfsVerified publisher | 0.11.4 | 1 of 1See more | 886 |
| zookeepercloudpirates-zookeeperVerified publisher | 0.13.11 | 1 of 1See more | 2,963 |
| codefreshcodefresh-onpremOfficialVerified publisher | 2.12.13 | 6 of 42See more | 14,615 |
| contourcontour | 0.8.0 | 1 of 2See more | 1,521 |
| redisgroundhog2k | 2.4.7 | 1 of 1See more | 968 |
| wordpressgroundhog2k | 0.16.4 | 1 of 1See more | 3,716 |
| mysqlkubelauncherVerified publisher | 0.4.4 | 1 of 1See more | 977 |
| postgresqlkubelauncherVerified publisher | 0.4.3 | 1 of 1See more | 1,154 |
| servarrkubitodevVerified publisher | 1.5.2 | 1 of 10See more | 3,004 |
| lakefslakefsVerified publisher | 1.12.29 | 1 of 1See more | 396 |
| radarrpree-helm-chartsVerified publisher | 1.33.0 | 1 of 1See more | 225 |
| sonarrpree-helm-chartsVerified publisher | 1.24.0 | 1 of 1See more | 214 |
| questdbquestdb | 1.0.27 | 1 of 2See more | 153 |
| stackstorm-hastackstormVerified publisher | 1.1.0 | 12 of 17See more | 96,984 |
| supabasetokens-studioVerified publisher | 1.0.0 | 7 of 14See more | 23,263 |
| renterdartur9010Verified publisher | 1.4.4 | 1 of 2See more | 8,530 |
| cloudbeaveravistoVerified publisher | 1.1.7 | 1 of 1See more | 1,749 |
| budibasebudibase | 0.0.0-master | 5 of 7See more | 10,810 |
| csi-secrets-store-provider-azurecsi-secrets-store-provider-azureVerified publisher | 1.8.2 | 5 of 5See more | 2,235 |
| excalidrawexcalidrawVerified publisher | 0.18.0 | 1 of 1See more | 1,110 |
| bitcoindfold | 0.3.2 | 1 of 2See more | 3,493 |
| cubestoregadsme | 1.2.0 | 1 of 3See more | 3,037 |
| hivemq-operatorhivemqOfficialVerified publisher | 0.11.62 | 1 of 2See more | 7,896 |
| docker-registry-uijoxitVerified publisher | 1.1.4 | 1 of 1See more | 675 |
| cassandrakubelauncherVerified publisher | 0.1.27 | 1 of 1See more | 1,490 |
| etcdkubelauncherVerified publisher | 0.4.3 | 1 of 1See more | 806 |
| kafkakubelauncherVerified publisher | 0.1.26 | 1 of 1See more | 1,399 |
| keycloakkubelauncherVerified publisher | 0.4.4 | 1 of 1See more | 1,291 |
| kubectlkubelauncherVerified publisher | 0.2.11 | 1 of 1See more | 1,255 |
| mariadbkubelauncherVerified publisher | 0.5.7 | 1 of 1See more | 1,101 |
| mongodbkubelauncherVerified publisher | 0.4.5 | 1 of 1See more | 1,380 |
| openldapkubelauncherVerified publisher | 0.2.0 | 1 of 1See more | 1,279 |
| rabbitmqkubelauncherVerified publisher | 0.2.11 | 1 of 1See more | 1,118 |
| rediskubelauncherVerified publisher | 0.5.1 | 1 of 1See more | 809 |
| minecraft-proxyminecraft-server-chartsVerified publisher | 3.10.0 | 1 of 1See more | 3,128 |
| quickwitquickwit | 0.8.16 | 1 of 1See more | 3,492 |
| transmission-openvpnutkuozdemirVerified publisher | 2.5.0 | 1 of 1See more | 11,453 |
| zillazillaOfficialVerified publisher | 2.4.2 | 1 of 1See more | 1,737 |
| hedgedocadfinisVerified publisher | 0.6.1 | 1 of 2See more | 2,951 |
| caddyalekcVerified publisher | 0.9.0 | 1 of 1See more | 846 |
| zigbee2mqttandrenarchyVerified publisher | 9.44.0 | 1 of 1See more | 183 |
| sealed-secrets-webbakitoVerified publisher | 3.3.2 | 1 of 1See more | 149 |
| jellyfinbeluga-cloudVerified publisher | 2.3.0 | 1 of 1See more | 4,281 |
| camunda-bpm-platformcamunda-community-hub | 7.6.11 | 1 of 1See more | 1,154 |
| umamichristianhuthVerified publisher | 7.13.0 | 1 of 2See more | 2,368 |
| yopasscloudhippieVerified publisher | 9.15.9 | 1 of 1See more | 427 |
| connaisseurconnaisseurVerified publisher | 2.12.0 | 1 of 2See more | 3,024 |
| dependabot-gitlabdependabot-gitlabVerified publisher | 6.3.0 | 3 of 3See more | 4,604 |
| devtron-operatordevtron | 0.23.3 | 6 of 11See more | 31,447 |
| guacamoledmunozv04Verified publisher | 0.3.4 | 1 of 2See more | 3,645 |
Container images carrying it
3,545 by charts deploying them
A fixed version is listed for 4 of the 5 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| evcc/ | ddf2a25afce5 | openssl | 3.5.8-r0 | 1 |
| evoapicloud/ | 966625532d90 | openssl | 3.5.8-r0 | 1 |
| evoapicloud/ | cbfeb314afb9 | openssl | 3.5.8-r0 | 1 |
| f3ktech/ | 48e78987cf91 | openssl | no fix listed | 1 |
| factoriotools/ | f7909f7361d6 | openssl | 3.5.7-1~deb13u2 | 1 |
| falcosecurity/ | 932956d86c99 | openssl | no fix listed | 1 |
| falcosecurity/ | 7df783d5269a | openssl | no fix listed | 1 |
| falcosecurity/ | 1976da721518 | openssl | 3.5.8-r0 | 1 |
| fallenbagel/ | 4538137bc5af | openssl | 3.5.8-r0 | 1 |
| felipecs8/ | 29e06c9c6385 | openssl | no fix listed | 1 |
| felipecs8/ | db6d44e325a1 | openssl | 3.5.8-r0 | 1 |
| ffutop/ | 319d94c8481a | openssl | 3.5.8-r0 | 1 |
| ffutop/ | 15832d4f19be | openssl | 3.5.8-r0 | 1 |
| ffutop/ | 651ca530d787 | openssl | 3.5.8-r0 | 1 |
| ffutop/ | 4222eb5ee847 | openssl | 3.5.8-r0 | 1 |
| filebrowser/ | dbac07403040 | openssl | 3.5.8-r0 | 1 |
| filiparag/ | 5a9cbae7997c | openssl | 3.5.8-r0 | 1 |
| firefart/ | 0d6249906d8c | openssl | no fix listed | 1 |
| fireflyiii/ | ae69fdd95cde | openssl | 3.5.7-1~deb13u2 | 1 |
| fiware/ | 29456835bb2c | openssl | 1.1.1f-1ubuntu2.24+esm5 | 1 |
| fiware/ | d551a13e8278 | openssl | no fix listed | 1 |
| flanksource/ | 1dacc3195bf9 | openssl | 3.0.2-0ubuntu1.29 | 1 |
| flanksource/ | 689687a7cf95 | openssl | 3.0.13-0ubuntu3.15 | 1 |
| flashcatcloud/ | 42e6ab16472e | openssl | 3.0.13-0ubuntu3.15 | 1 |
| flashcatcloud/ | 421acb36181b | openssl | 3.5.7-1~deb13u2 | 1 |
| fluent/ | a52221a2a3eb | openssl | 3.5.7-1~deb13u2 | 1 |
| fluent/ | a941bdd5ca55 | openssl | 3.5.7-1~deb13u2 | 1 |
| fluent/ | ca08b7d2df5b | openssl | no fix listed | 1 |
| fluent/ | e76397ef3983 | openssl | no fix listed | 1 |
| fluent/ | de9cf5f1127a | openssl | 3.5.7-1~deb13u2 | 1 |
| fluent/ | fda93f768f98 | openssl | 3.5.7-1~deb13u2 | 1 |
| fluxcd/ | 704d55295355 | openssl | 3.5.8-r0 | 1 |
| flyway/ | 45b5d7cdc75a | openssl | 1.1.1f-1ubuntu2.24+esm5 | 1 |
| fnzv/ | b3079b95c336 | openssl | 3.0.2-0ubuntu1.29 | 1 |
| foggbh/ | 8b7a2e5ecf4e | openssl | 3.5.8-r0 | 1 |
| foldingathome/ | 5ef7742d1eb4 | openssl | 1.1.1-1ubuntu2.1~18.04.23+esm10 | 1 |
| folioci/ | c3cfa89eee2f | openssl | 3.5.8-r0 | 1 |
| folioci/ | b4863d135524 | openssl | 3.5.8-r0 | 1 |
| folioci/ | 48c9b1d180d4 | openssl | 3.5.8-r0 | 1 |
| folioci/ | c64e4d9dd3fc | openssl | 3.5.8-r0 | 1 |
| folioci/ | e760dbb81d1a | openssl | 3.5.8-r0 | 1 |
| folioci/ | eedfcbc29792 | openssl | 3.5.8-r0 | 1 |
| folioci/ | 1ef654ee9f23 | openssl | 3.5.8-r0 | 1 |
| folioci/ | 682b852e056d | openssl | 3.5.8-r0 | 1 |
| folioci/ | 15ef73b1abd0 | openssl | 3.5.8-r0 | 1 |
| folioci/ | 86106f20ef51 | openssl | 3.5.8-r0 | 1 |
| folioci/ | 995a25a33133 | openssl | 3.5.8-r0 | 1 |
| folioci/ | 22f65982efd7 | openssl | 3.5.8-r0 | 1 |
| folioci/ | 6bdddcafbc0f | openssl | 3.5.8-r0 | 1 |
| folioci/ | dd0cdc89670a | openssl | 3.5.8-r0 | 1 |