StackRadar

CVE-2026-63072

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,470
of 17,803 indexed, latest versions
Container images
3,788
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,470 of 17,803 indexed charts deploy, on 3,788 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more2,308
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,457
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm615
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63072DEBIAN-CVE-2026-63072UBUNTU-CVE-2026-63072AZL-97947ECHO-aa38-89d5-f024
Also known as
USN-8678-1, USN-8678-2

Charts affected

3,470 by stars
ChartLatestAffected imagesRadar Score
gitops-promotergitops-promoterOfficialVerified publisher0.19.01 of 2See more

gitops-promoter gitops-promoter 0.19.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/gitops-promoter:v0.40.1daf2e7650d61
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,941
glpiglpi-conteiner0.1.03 of 3See more

glpi glpi-conteiner 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
library/phpmyadmin:latest3a8a8d6b5289
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
vdiogov/glpi-conteiner:latest6945f84f0058
openssl@3.0.13-1~deb12u1
no fix listed

Open the chart page →

12,444
grafana-mcpgrafana-communityVerified publisher0.24.01 of 1See more

grafana-mcp grafana-community 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
grafana/mcp-grafana:1.5.107c6614a8f8b
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,120
haproxy-ingresshaproxy-ingressVerified publisher0.16.11 of 1See more

haproxy-ingress haproxy-ingress 0.16.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.16fd744191ef6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

794
dolibarrhelmforgeVerified publisher1.2.181 of 3See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
dolibarr/dolibarr:24.0.069ec52e3b7ef
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

4,223
karakeephelmforgeVerified publisher1.2.93 of 3See more

karakeep helmforge 1.2.9

3 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
getmeili/meilisearch:v1.53.0a59e984fd90b
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
ghcr.io/karakeep-app/karakeep:0.33.2b069e4307dec
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

9,589
openhabhelmforgeVerified publisher1.2.01 of 1See more

openhab helmforge 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
openhab/openhab:5.2.1bfd4a60e90da
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,708
postgresqlhelmforgeVerified publisher2.0.51 of 1See more

postgresql helmforge 2.0.5

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,686
umamihelmforgeVerified publisher2.3.32 of 3See more

umami helmforge 2.3.3

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/umami-software/umami:3.3.1fa32d116cf20
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,087
openctihelm-openctiVerified publisher3.0.103 of 8See more

opencti helm-opencti 3.0.10

3 of the 8 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
bitnamilegacy/rabbitmq:4.1.2-debian-12-r1fac502149c40
openssl@3.0.16-1~deb12u1
no fix listed
opencti/platform:7.260914.074f1242e6fa4
openssl@3.5.7-r0
3.5.8-r0
rustfs/rustfs:1.0.0-beta.1241fe89380f41
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,432
hertzbeathertzbeatOfficialVerified publisher1.8.13 of 4See more

hertzbeat hertzbeat 1.8.1

3 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
apache/hertzbeat-collector:1.8.0a2bab1be574c
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
library/postgres:159b1d34adbce1
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

14,318
infrahubinfrahubVerified publisher4.33.24 of 5See more

infrahub infrahub 4.33.2

4 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
openssl@3.0.15-1~deb12u1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
openssl@3.0.17-1~deb12u1
no fix listed
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
openssl@3.0.17-1~deb12u2
no fix listed
library/neo4j:2026.05.06c162e2432f8
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

10,635
plexk8s-home-lab-repo7.3.11 of 1See more

plex k8s-home-lab-repo 7.3.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15

Open the chart page →

1,742
mosquittok8sonlabVerified publisher2.7.31 of 1See more

mosquitto k8sonlab 2.7.3

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:2.1.2-alpine6f8d8a947c50
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

187
kamu-api-serverkamuVerified publisher0.89.01 of 1See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

6,377
kerberneteskerbernetesVerified publisher1.1.111 of 1See more

kerbernetes kerbernetes 1.1.11

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/froz42/kerbernetes:v1.1.6d5c074be8366
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
klusterviewklusterviewVerified publisher0.1.01 of 4See more

klusterview klusterview 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,840
kubeflowkubeflow1.6.24 of 45See more

kubeflow kubeflow 1.6.2

4 of the 45 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
openssl@1.1.1-1ubuntu2.1~18.04.9
1.1.1-1ubuntu2.1~18.04.23+esm10
istio/proxyv2:1.14.1df69c1a7af7c
openssl@1.1.1f-1ubuntu2.13
1.1.1f-1ubuntu2.24+esm5
library/python:3.7eedf63967cdb
openssl@3.0.9-1
no fix listed
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
openssl@1.0.2g-1ubuntu4.20
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

157,323
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
opensearchproject/logstash-oss-with-opensearch-output-plugin:8.9.043b0cdaf26ed
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

10,603
testkubekubeshop2.13.25 of 5See more

testkube kubeshop 2.13.2

5 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
kubeshop/bitnami-mongodb:8.3.8d48b172d99d8
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
kubeshop/testkube-api-server:2.13.244166c28422f
openssl@3.5.7-r0
3.5.8-r0
kubeshop/testkube-minio:2025.10d8e1af6aca99
openssl@3.0.20-1~deb12u2
no fix listed
library/nats:2.14.5-alpined4ac35882ac6
openssl@3.5.7-r0
3.5.8-r0
natsio/nats-server-config-reloader:0.24.0d758a82a9c20
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,318
sbomscannerkubewardenVerified publisher0.12.12 of 5See more

sbomscanner kubewarden 0.12.1

2 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/nats:2.14.6-alpinead7a43eb7e33
openssl@3.5.7-r0
3.5.8-r0
natsio/nats-server-config-reloader:0.23.064cb6c858e79
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,034
venti-stackkuossOfficialVerified publisher0.5.02 of 9See more

venti-stack kuoss 0.5.0

2 of the 9 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
openssl@3.5.4-r0
3.5.8-r0
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

3,857
librechatlibrechat1.8.101 of 3See more

librechat librechat 1.8.10

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat:v0.7.78c68abbe1cff
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

2,811
librechatlibrechat-openshiftVerified publisher1.9.02 of 3See more

librechat librechat-openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

5,898
local-ailocalai3.4.21 of 1See more

local-ai localai 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/go-skynet/local-ai:latestd78cd113b2bc
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

4,134
radarrloeken-at-homeVerified publisher5.27.0-nightly1 of 1See more

radarr loeken-at-home 5.27.0-nightly

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
loeken/radarr:5.27.0-nightlya24409d3846d
openssl@3.3.4-r0
3.3.7-r1

Open the chart page →

732
stannatsVerified publisher0.13.01 of 2See more

stan nats 0.13.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:latestc623b608e148
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
headplanenbcloudVerified publisher0.1.23 of 4See more

headplane nbcloud 0.1.2

3 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:latestcd354d5b2556
openssl@3.0.16-1~deb12u1
no fix listed
headscale/headscale:0.25.1a7a8ae9616bb
openssl@3.0.15-1~deb12u1
no fix listed
ghcr.io/tale/headplane:0.5.50dbc52cffc19
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

8,194
node-local-dnsnode-local-dns2.4.01 of 1See more

node-local-dns node-local-dns 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
registry.k8s.io/dns/k8s-dns-node-cache:1.23.081a13703d6b8
openssl@3.0.11-1~deb12u1
no fix listed

Open the chart page →

2,670
open5gsopen5gsVerified publisher2.3.41 of 5See more

open5gs open5gs 2.3.4

1 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
gradiant/open5gs-dbctl:0.10.3332031245fce
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

9,332
ubuntuopen-charts1.2.11 of 1See more

ubuntu open-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/ubuntu:22.042edbbc5dc405
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29

Open the chart page →

1,589
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.29

Open the chart page →

8,794
prometheus-smartctl-exporterprometheus-communityVerified publisher0.17.11 of 1See more

prometheus-smartctl-exporter prometheus-community 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/prometheuscommunity/smartctl-exporter:v0.14.0cfe22c36d7d2
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

1,209
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

10,634
scm-managerscm-manager3.12.11 of 1See more

scm-manager scm-manager 3.12.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
scmmanager/scm-manager:3.12.1bfb766050f34
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

650
manyfoldself-hosters-by-nightVerified publisher0.7.41 of 1See more

manyfold self-hosters-by-night 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/manyfold3d/manyfold-solo:0.147.2ed5a792b0e8d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

481
popeyeself-hosters-by-nightVerified publisher0.6.11 of 1See more

popeye self-hosters-by-night 0.6.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
derailed/popeye:v0.22.18e68e22c7663
openssl@3.3.2-r4
3.3.7-r1

Open the chart page →

1,341
fulciosigstoreVerified publisher2.11.11 of 6See more

fulcio sigstore 2.11.1

1 of the 6 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
curlimages/curl:8.17.0935d9100e9ba
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

3,526
sops-secrets-operatorsops-secrets-operatorVerified publisher0.28.11 of 1See more

sops-secrets-operator sops-secrets-operator 0.28.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

849
spark-kubernetes-operatorspark-kubernetes-operatorOfficialVerified publisher1.8.01 of 1See more

spark-kubernetes-operator spark-kubernetes-operator 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
apache/spark-kubernetes-operator:1.0.0349da72f95c2
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
steampipe-powerpipe-kubernetessteampipe-powerpipe-kubernetesVerified publisher0.13.12 of 2See more

steampipe-powerpipe-kubernetes steampipe-powerpipe-kubernetes 0.13.1

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
openssl@3.0.20-1~deb12u2
no fix listed
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--steampipe:latestc0c8d53df9f3
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

5,638
topolvmtopolvmVerified publisher17.2.01 of 1See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29

Open the chart page →

2,405
uffizzi-appuffizzi-app1.3.01 of 14See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
uffizzi/controller:latest0344805f267b
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

19,467
unboundunbound-helmchartVerified publisher0.2.21 of 1See more

unbound unbound-helmchart 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/pixelfederation/unbound:1.24.2_0fce820a03964
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,490
vault-operatorvault-operatorVerified publisher1.24.01 of 1See more

vault-operator vault-operator 1.24.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/bank-vaults/vault-operator:v1.24.06f622c5fb8a9
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

542
vault-secrets-webhookvault-secrets-webhookVerified publisher1.23.11 of 1See more

vault-secrets-webhook vault-secrets-webhook 1.23.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/bank-vaults/vault-secrets-webhook:v1.23.198baf045a1c9
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

528
athens-proxyvolker-raschekVerified publisher2.0.31 of 1See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
gomods/athens:v0.17.10f61d1e62359
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

2,045
reposilitevolker-raschekVerified publisher1.0.01 of 1See more

reposilite volker-raschek 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.5.264128c2d7a6ba
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

3,019
wg-easywg-easyVerified publisher0.1.61 of 1See more

wg-easy wg-easy 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:150e7bc9d34e86
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

736
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
openssl@1.0.2g-1ubuntu4.8
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

13,590

Container images carrying it

3,788 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
stackstorm/st2actionrunner:3.888235ba70cad
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5
1
stackstorm/st2api:3.86f56d239d280
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5
1
stackstorm/st2auth:3.833ecfda16608
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5
1
stackstorm/st2notifier:3.8f190a6212195
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5
1
stackstorm/st2rulesengine:3.8259503496ff9
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5
1
stackstorm/st2scheduler:3.8b1de2055c362
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5
1
stackstorm/st2stream:3.81c8904a3bf67
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5
1
stackstorm/st2timersengine:3.81bf35bfaf00c
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5
1
stackstorm/st2web:3.809989a26c8b7
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5
1
stackstorm/st2workflowengine:3.819fdfffdbba8
openssl@1.1.1f-1ubuntu2.20
1.1.1f-1ubuntu2.24+esm5
1
stalwartlabs/stalwart:v0.16.1425001929f36a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
stalwartlabs/stalwart:v0.15.5dcf575db2d53
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
stashapp/stash:latest24dbd7607174
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm5
1
stashapp/stash:v0.31.1df744af5a0c9
openssl@3.5.5-r0
3.5.8-r0
1
stashapp/stash-box:latesta534c8afdf39
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
1
staslevchenko/kent:0.4.0e1b5de030254
openssl@3.5.7-r0
3.5.8-r0
1
statcan/ckan:2.93921305425b8
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
1
steamcmd/steamcmd:latest5028a25268e7
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
stnsmith/fossflow:lateste448ab346cb3
openssl@3.5.7-r0
3.5.8-r0
1
strangebee/thehive:5.8.0-1a7f7b05fba24
openssl@3.0.20-1~deb12u2
no fix listed
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
1
streamnative/function-mesh:v0.28.077939c8aa269
openssl@3.3.7-r0
3.3.7-r1
1
structurizr/onpremises:2025.11.094b5ffb5119c8
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
1
substratusai/verba:v0.4.0-baseURL261695be635eb
openssl@3.0.11-1~deb12u2
no fix listed
1
supabase/edge-runtime:v1.74.02781daf92394
openssl@3.0.19-1~deb12u2
no fix listed
1
supabase/edge-runtime:v1.59.0eff9c554d649
openssl@3.0.14-1~deb12u2
no fix listed
1
supabase/gotrue:v2.189.0385184459f57
openssl@3.5.6-r0
3.5.8-r0
1
supabase/postgres:17.6.1.136f371b5f3f2ac
openssl@3.5.6-r0
3.5.8-r0
1
supabase/postgres-meta:v0.96.6a84cc713585e
openssl@3.0.19-1~deb12u2
no fix listed
1
supabase/postgres-meta:v0.84.2d0a96973e9f1
openssl@3.0.14-1~deb12u2
no fix listed
1
supabase/realtime:v2.102.3aa1c92c0cf32
openssl@3.0.20-1~deb12u1
no fix listed
1
supabase/realtime:v2.33.8d207e6e23ad3
openssl@3.0.14-1~deb12u2
no fix listed
1
supabase/realtime:latestd3aa0c86c7b3
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
supabase/storage-api:v1.60.4c8eb9858eafe
openssl@3.5.6-r0
3.5.8-r0
1
supabase/storage-api:latestf6c42a04163d
openssl@3.5.7-r0
3.5.8-r0
1
supabase/studio:20241021-9f9b08326d8070c55e9
openssl@3.0.14-1~deb12u2
no fix listed
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
openssl@3.0.20-1~deb12u2
no fix listed
1
supabase/studio:latest94a2a9d2906e
openssl@3.0.20-1~deb12u2
no fix listed
1
superseriousbusiness/gotosocial:0.22.10078ca451dda
openssl@3.3.7-r0
3.3.7-r1
1
svcosti/cidrapp:latest8428d87bc5d0
openssl@3.3.3-r0
3.3.7-r1
1
svtechnmaa/svtech_debuger:v1.0.3a934ffd63d25
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
1
svtechnmaa/svtech_grafana:v1.2.21d71314424aa
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm5
1
svtechnmaa/svtech_maxscale:v1.0.3410a25b51f9f
openssl@3.0.2-0ubuntu1.13
3.0.2-0ubuntu1.29
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
openssl@3.0.11-1~deb12u2
no fix listed
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm5
1
swaggerapi/swagger-ui:v5.32.143d9316996884
openssl@3.5.7-r0
3.5.8-r0
1
swaggerapi/swagger-ui:latest9ae209e3791e
openssl@3.5.7-r0
3.5.8-r0
1
swimmwatch/cloakbrowser-mcp:1.13.0d48c705a58c8
openssl@3.0.20-1~deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.