StackRadar

CVE-2026-63072

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
50th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,257
of 17,792 indexed, latest versions
Container images
3,480
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,257 of 17,792 indexed charts deploy, on 3,480 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more2,286
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,171
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm615
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63072DEBIAN-CVE-2026-63072UBUNTU-CVE-2026-63072AZL-97947ECHO-aa38-89d5-f024
Also known as
USN-8678-1, USN-8678-2

Charts affected

3,257 by stars
ChartLatestAffected imagesRadar Score
zeroclawzeroclawVerified publisher0.2.11 of 2See more

zeroclaw zeroclaw 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/zeroclaw-labs/zeroclaw:v0.1.7497893753e16
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

794
aapbaapbVerified publisher0.1.31 of 1See more

aapb aapb 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/dream-aapb:main288a4774aa90
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,044
adguardhomeadguardhome0.1.271 of 1See more

adguardhome adguardhome 0.1.27

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.79aba9e3bf0613
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

175
paperless-ngxadnoctemVerified publisher0.4.22 of 5See more

paperless-ngx adnoctem 0.4.2

2 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29
gotenberg/gotenberg:8.36.087c16b9f3642
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

19,828
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

13,671
aerospike-graphaerospike-helmOfficialVerified publisher3.7.01 of 1See more

aerospike-graph aerospike-helm 3.7.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.1781ba5213efd
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

322
agentareaagentareaVerified publisher0.0.189 of 16See more

agentarea agentarea 0.0.18

9 of the 16 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latest9e15e16fa758
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
agentarea/agentarea-frontend:latest2098a9d7b1fe
openssl@3.5.7-r0
3.5.8-r0
agentarea/agentarea-mcp-runner:latestd3c209a5d531
openssl@3.0.20-1~deb12u2
no fix listed
agentarea/agentarea-worker:latest1e5cb68ee77a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/postgres:16-alpinecf78e76683b9
openssl@3.5.7-r0
3.5.8-r0
library/postgres:alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0
rustfs/rustfs:latest41fe89380f41
openssl@3.5.7-r0
3.5.8-r0
temporalio/auto-setup:1.29.15b3502a3b685
openssl@3.5.0-r0
3.5.8-r0
valkey/valkey:9.0.1546304417fea
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

15,049
akeyless-api-gatewayakeyless-services-helmVerified publisher1.62.241See more

akeyless-api-gateway akeyless-services-helm 1.62.24

1 container image this version deploys carries CVE-2026-63072.

Container imageDigestPackageFixed in
akeyless/base:latest759e4289fae8
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15

Open the chart page →

—
icat-k8salba-helm-chartsVerified publisher1.1.02 of 4See more

icat-k8s alba-helm-charts 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
curlimages/curl:8.18.0d94d07ba9e7d
openssl@3.5.4-r0
3.5.8-r0
payara/server-full:7.2026.2-jdk2531f1253f0cf8
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.29

Open the chart page →

3,746
adguard-homealekcVerified publisher3.2.01 of 2See more

adguard-home alekc 3.2.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.79aba9e3bf0613
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

175
ddclientalekcVerified publisher1.1.01 of 1See more

ddclient alekc 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
linuxserver/ddclient:4.0.06468911d00b1
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

360
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

2,626
alertmanager-receiver-azdoalertmanager-receiver-azdoVerified publisher1.0.1081 of 1See more

alertmanager-receiver-azdo alertmanager-receiver-azdo 1.0.108

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/ivanjosipovic/alertmanager-receiver-azdo/alertmanager-receiver-azdo:1.0.108731943808ee7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.02 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

12,092
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
openssl@1.1.1-1ubuntu2.1~18.04.19
openssl1.0@1.0.2n-1ubuntu5.10
1.1.1-1ubuntu2.1~18.04.23+esm10
1.0.2n-1ubuntu5.13+esm6

Open the chart page →

12,081
mariadbalphani-helm-chartsVerified publisher10.10.31 of 1See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/mariadb:10.10.2bfc25a68e113
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29

Open the chart page →

8,387
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,971
upcloud-csiankra-chartsVerified publisher0.4.02 of 8See more

upcloud-csi ankra-charts 0.4.0

2 of the 8 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
openssl@3.5.1-r0
3.5.8-r0
ghcr.io/upcloudltd/upcloud-csidigest-pinned5af91c663788
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

14,969
alazanteonVerified publisher0.12.01 of 1See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ddosify/alaz:v0.12.0ea602056d9ce
openssl@3.0.13-1~deb12u1
no fix listed

Open the chart page →

3,395
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
openssl@3.0.11-1~deb12u2
no fix listed
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

22,304
antreaantreaVerified publisher2.7.02 of 2See more

antrea antrea 2.7.0

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
antrea/antrea-controller-ubuntu:v2.7.0f1373d39217c
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15

Open the chart page →

3,539
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29

Open the chart page →

7,794
kubedb-provisionerappscodeVerified publisher0.66.01 of 1See more

kubedb-provisioner appscode 0.66.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

523
scannerappscodeVerified publisher2026.1.152 of 3See more

scanner appscode 2026.1.15

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
openssl@3.5.4-r0
3.5.8-r0
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

5,315
virtual-secrets-serverappscodeVerified publisher2026.8.141 of 1See more

virtual-secrets-server appscode 2026.8.14

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/appscode/virtual-secrets-server:v0.4.0efa03f4c9551
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

288
argocd-backup-s3argocd-backup-s3Verified publisher0.9.51 of 1See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

5,249
arvancloud-webhookarvancloud-webhookVerified publisher1.0.01 of 1See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

2,327
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

17,951
dltbrokerassist-iot-distributed-broker0.2.03 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:latesta70b6ba64a08
openssl@3.0.2-0ubuntu1.25
3.0.2-0ubuntu1.29
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.20+esm18
hyperledger/fabric-couchdb:0.4.15f6c724592abf
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

77,883
dltloggingassist-iot-logging-auditing0.2.03 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
hyperledger/fabric-ca:latesta70b6ba64a08
openssl@3.0.2-0ubuntu1.25
3.0.2-0ubuntu1.29
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
openssl@1.0.2g-1ubuntu4.13
1.0.2g-1ubuntu4.20+esm18
hyperledger/fabric-couchdb:0.4.15f6c724592abf
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

77,863
astradnsastradnsVerified publisher0.2.91 of 2See more

astradns astradns 0.2.9

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
openssl@3.0.18-1~deb12u2
no fix listed

Open the chart page →

2,649
cso-proxyav1o-chartsVerified publisher0.1.31 of 1See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/djcass44/cso-proxy:cccf49fdb360d44125ad
openssl@1.1.1-1ubuntu2.1~18.04.14
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

4,308
kube-image-webhookav1o-chartsVerified publisher0.1.31 of 1See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
registry.gitlab.com/autokubeops/kube-image-webhook:v0.2.0fcf464708a21
openssl@1.1.1-1ubuntu2.1~18.04.17
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

3,731
kinesisaws-kinesis-local0.8.01 of 1See more

kinesis aws-kinesis-local 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
saidsef/aws-kinesis-local:v2026.0667025e3a163e
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

360
azuredisk-csi-driverazuredisk-csi-driverVerified publisher1.34.57 of 8See more

azuredisk-csi-driver azuredisk-csi-driver 1.34.5

7 of the 8 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.34.552b33e858369
openssl@3.3.7-4.azl3
3.3.7-6
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-attacher:v4.12.016987358befc
openssl@3.3.7-4.azl3
3.3.7-6
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.17.0b767078c36e0
openssl@3.3.7-4.azl3
3.3.7-6
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner:v6.3.09915a2058ad6
openssl@3.3.7-4.azl3
3.3.7-6
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer:v2.2.04bfe19fe8919
openssl@3.3.7-4.azl3
3.3.7-6
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-snapshotter:v8.6.0557008207ca4
openssl@3.3.7-4.azl3
3.3.7-6
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.19.0bd19535678a8
openssl@3.3.7-4.azl3
3.3.7-6

Open the chart page →

844
vault-unsealbabykart-helm-chartsVerified publisher1.0.51 of 1See more

vault-unseal babykart-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/lrstanley/vault-unseal:1.0.1dd873930b6df
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

205
seerrbdclark-helm-chartsVerified publisher0.1.51 of 1See more

seerr bdclark-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,991
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

13,219
aramid-indexerbiatec-repoVerified publisher3.9.04 of 5See more

aramid-indexer biatec-repo 3.9.0

4 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4

Open the chart page →

13,544
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29

Open the chart page →

7,246
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.15

Open the chart page →

5,117
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29

Open the chart page →

7,246
self-hostbitwarden2.4.111 of 11See more

self-host bitwarden 2.4.1

11 of the 11 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/bitwarden/admin:2026.8.2eb950aea1b34
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/api:2026.8.28b3774af74b4
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/attachments:2026.8.2754553d14aa0
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/events:2026.8.2eb836d99a14e
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/icons:2026.8.2183d536d0186
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/identity:2026.8.2738553de549c
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/mssqlmigratorutility:2026.8.2f54cd2e446f7
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/notifications:2026.8.2f280dda4fbee
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/sso:2026.8.2727314be4cb1
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/web:2026.8.1dd1df8408daf
openssl@3.5.7-r0
3.5.8-r0
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15

Open the chart page →

5,269
plexbrandan-schmitz-helm-chartsVerified publisher1.5.11 of 1See more

plex brandan-schmitz-helm-charts 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
linuxserver/plex:1.43.22785a6ad64d3
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15

Open the chart page →

1,163
syncthingbrandan-schmitz-helm-chartsVerified publisher2.1.01 of 1See more

syncthing brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.1775c4aac4862
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,230
brightdata-exporterbrightdata-chartsVerified publisher0.2.171 of 1See more

brightdata-exporter brightdata-charts 0.2.17

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/danielgines/brightdata-exporter:0.2.176920d17cf6ff
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,306
btrfs-nfs-csibtrfs-nfs-csi0.4.01 of 7See more

btrfs-nfs-csi btrfs-nfs-csi 0.4.0

1 of the 7 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/erikmagkekse/btrfs-nfs-csi:0.12.0cb29d9b801a5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,226
buildkite-agent-metricsbuildkite-agent-metrics0.1.01 of 1See more

buildkite-agent-metrics buildkite-agent-metrics 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,541
easyhaproxybyjgVerified publisher2.0.41 of 1See more

easyhaproxy byjg 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
byjg/easy-haproxy:6.1.1230fdb7b00ae
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

933
static-httpserverbyjgVerified publisher0.2.01 of 1See more

static-httpserver byjg 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
byjg/static-httpserver:latest562cc8b9c40b
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

677

Container images carrying it

3,480 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
oxynozeta/s3-proxy:5.1.121115040e224
openssl@3.5.7-r0
3.5.8-r0
1
pangeo/base-notebook:2024.01.155fbe688a4f80
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.29
1
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
payara/server-full:7.2026.2-jdk2531f1253f0cf8
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.29
1
penpotapp/backend:2.2.147853d9bb9dd
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29
1
penpotapp/exporter:2.2.15c835ffd87ab
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29
1
peterdavehello/tor-socks-proxy:latest0cc12d36d312
openssl@3.5.6-r0
3.5.8-r0
1
pgvector/pgvector:pg17cf134a767f47
openssl@3.0.20-1~deb12u2
no fix listed
1
phan2410/dummy-service:0.0.89c6ed6de26ca
openssl@3.0.15-1~deb12u1
no fix listed
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
openssl@3.0.15-1~deb12u1
no fix listed
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.29
1
photoprism/photoprism:220629-jammy2954334adbda
openssl@3.0.2-0ubuntu1.5
3.0.2-0ubuntu1.29
1
photoprism/photoprism:260601650c6ad5a651
openssl@3.5.5-1ubuntu3
3.5.5-1ubuntu3.4
1
photoprism/photoprism:260728958642220223
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4
1
photoprism/photoprism:240711-cefc6fd632ca74
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.15
1
phpdockerio/readability-js-server:1.8.0ea8354b42600
openssl@3.5.4-r0
3.5.8-r0
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
openssl@3.5.1-1
3.5.7-1~deb13u2
1
pk910/powfaucet:v2-stable3dcae6a62896
openssl@3.0.16-1~deb12u1
no fix listed
1
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
1
platform9community/admin-server:latestde3fa9b70df1
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
1
platform9community/api-gateway:latest40a4970de568
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
1
platform9community/customers-service:latest2089811e5cc6
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
1
platform9community/vets-service:latestd1165c94dfb3
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
1
platform9community/visits-service:latest8d11b50368c6
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
1
platzio/backend:v0.6.5d5e5972f344b
openssl@3.5.1-r0
3.5.8-r0
1
platzio/frontend:v0.6.073083749b46a
openssl@3.5.1-r0
3.5.8-r0
1
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
1
plexinc/pms-docker:1.43.3.10896-cb3ebc72d83a425ae9e13
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
1
plexinc/pms-docker:1.19.5.3112-b23ab3896b598abb134ad
openssl@1.0.2g-1ubuntu4.16
1.0.2g-1ubuntu4.20+esm18
1
pmoscode/excalidraw:v0.18.08ee61554699c
openssl@3.5.4-r0
3.5.8-r0
1
pococze/python-hello-elos:2.0.07a1aab425e51
openssl@3.0.14-1~deb12u2
no fix listed
1
polyaxon/polyaxon-api:2.16.42b55c3265a90
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
polyaxon/polyaxon-streams:2.16.4c186bd9834c0
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
pomerium/verify:latestd1602f8c96a3
openssl@3.0.20-1~deb12u2
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
powerdns/pdns-recursor-54:5.4.533aadc74a8d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
pozetroninc/keydb:v6.0.1653ae64f29da8
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm10
1
praravind1801/helmimages:3.0.0f29d637b9ce1
openssl@3.0.11-1~deb12u2
no fix listed
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
openssl@3.0.13-1~deb12u1
no fix listed
1
pretix/standalone:2026.7.05df3b7aa852e
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
privatebin/nginx-fpm-alpine:2.0.613290e2f04bf
openssl@3.5.7-r0
3.5.8-r0
1
probely/farcaster-onprem-agent:v3741b34e8166f
openssl@3.0.20-1~deb12u2
no fix listed
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
openssl@3.5.1-1
3.5.7-1~deb13u2
1
project2team4/react:latest3ff031a08887
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm5
1
projectsveltos/dashboard:v1.15.01380c9314dd4
openssl@3.5.7-r0
3.5.8-r0
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.15
1
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
openssl@3.5.5-r0
3.5.8-r0
1
promzeus/redis-sentinel-gateway:v182f6d56e280b
openssl@3.0.14-1~deb12u2
no fix listed
1
providus/undefined:lateste0b9f03bcd98
openssl@3.5.5-r0
3.5.8-r0
1
prowlercloud/prowler-api:5.31.14f252d579be2
openssl@3.0.20-1~deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.