StackRadar

CVE-2026-63072

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,513
of 17,805 indexed, latest versions
Container images
3,801
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,513 of 17,805 indexed charts deploy, on 3,801 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more2,326
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,455
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+4 more1.0.2n-1ubuntu5.13+esm620
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-620
OSV records
ALPINE-CVE-2026-63072DEBIAN-CVE-2026-63072UBUNTU-CVE-2026-63072AZL-97947ECHO-aa38-89d5-f024
Also known as
USN-8678-1, USN-8678-2

Charts affected

3,513 by stars
ChartLatestAffected imagesRadar Score
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

10,295
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
openssl@1.1.1f-1ubuntu2.8
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

10,865
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
openssl@1.1.1-1ubuntu2.1~18.04.23
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

11,977
gitvotegitvoteVerified publisher1.5.03 of 6See more

gitvote gitvote 1.5.0

3 of the 6 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
openssl@3.5.1-1
3.5.7-1~deb13u2
ghcr.io/cncf/gitvote/dbmigrator:v1.5.0f1e7efe440da
openssl@3.5.4-r0
3.5.8-r0
ghcr.io/cncf/gitvote/server:v1.5.026167f01c898
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

5,683
aegraviteeioVerified publisher3.0.21 of 1See more

ae graviteeio 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
graviteeio/ae-engine:3.0.24140932887e0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,374
giteagroundhog2k0.16.31 of 1See more

gitea groundhog2k 0.16.3

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
gitea/gitea:1.27.387a67ee09d3a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

543
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
openssl@3.0.18-1~deb12u2
no fix listed

Open the chart page →

4,251
haproxyhaproxytechVerified publisher1.30.21 of 1See more

haproxy haproxytech 1.30.2

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
haproxytech/haproxy-alpine:3.4.41fe3f201ebb5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

584
hcloud-cloud-controller-managerhcloud1.37.01 of 1See more

hcloud-cloud-controller-manager hcloud 1.37.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
hetznercloud/hcloud-cloud-controller-manager:v1.37.0c139e7220dbc
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

262
headscaleheadscaleVerified publisher1.0.193 of 3See more

headscale headscale 1.0.19

3 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
alpine/k8s:1.36.244ef4942e171
openssl@3.5.5-r0
3.5.8-r0
ghcr.io/juanfont/headscale:0.29.30e7f1c6e4ce6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/juanfont/headscale:0.29.3-debug842cd94b754b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,492
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,099
redishelmforgeVerified publisher3.0.01 of 1See more

redis helmforge 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,006
simple-krr-dashboardhelm-simple-krr-dashboardVerified publisher1.6.22 of 3See more

simple-krr-dashboard helm-simple-krr-dashboard 1.6.2

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.2ec8f734b0a10
openssl@3.5.5-r0
3.5.8-r0
robustadev/krr:v1.30.0b8d782e568c7
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,279
helm-watchdog-pod-deletehelm-watchdog-pod-delete0.3.01 of 1See more

helm-watchdog-pod-delete helm-watchdog-pod-delete 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
alpine/kubectl:1.34.18413f8890d19
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,154
typesensehmphuVerified publisher0.1.61 of 1See more

typesense hmphu 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
typesense/typesense:0.23.03accb727cbe2
openssl@1.0.2g-1ubuntu4.19
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

3,896
home-assistanthome-assistantVerified publisher0.5.102 of 3See more

home-assistant home-assistant 0.5.10

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.1fef0de769dcd
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,360
infrahub-enterpriseinfrahub-enterpriseVerified publisher4.19.24 of 5See more

infrahub-enterprise infrahub-enterprise 4.19.2

4 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
openssl@3.0.15-1~deb12u1
no fix listed
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
openssl@3.0.17-1~deb12u1
no fix listed
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
openssl@3.0.17-1~deb12u2
no fix listed
library/neo4j:2026.05.0-enterprise2caf944aa4a5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

10,752
coreinstill-aiOfficialVerified publisher0.1.757 of 15See more

core instill-ai 0.1.75

7 of the 15 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
instill/artifact-backend:b28766ac4a393e601ed
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
instill/console:0.68.54cd70e2df5c6
openssl@3.5.1-r0
3.5.8-r0
instill/mgmt-backend:d0933d4ebe12f77a3f9
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
instill/model-backend:611f0f2e980125e5ba5
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
library/postgres:15-alpinefe0737ba566a
openssl@3.5.7-r0
3.5.8-r0
library/redis:8.4-alpine3.2212da49daa000
openssl@3.5.7-r0
3.5.8-r0
temporalio/admin-tools:1.28cfde8170c92f
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

31,479
dayz-dedicated-serverjespernohrVerified publisher0.1.21 of 3See more

dayz-dedicated-server jespernohr 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15

Open the chart page →

4,552
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

4,592
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

4,694
wireguardk8s-home-lab-repo1.6.01 of 1See more

wireguard k8s-home-lab-repo 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
openssl@1.1.1f-1ubuntu2.19
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

7,554
k8s-object-syncerk8s-object-syncer0.1.191 of 1See more

k8s-object-syncer k8s-object-syncer 0.1.19

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
rustrial/k8s-object-syncer:0.1.19aca1614eee2f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
webdavk8s-webdavVerified publisher0.0.71 of 1See more

webdav k8s-webdav 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/httpd:2.4979c38c2228d
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,736
dynamodbkeyporttech0.1.271 of 2See more

dynamodb keyporttech 0.1.27

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
aaronshaf/dynamodb-admin:latestac41724cd997
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,308
klancesklances0.1.41 of 1See more

klances klances 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,761
kraken-cikraken-ciVerified publisher1.7.361 of 10See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/redis:6143f7bfc2358
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

7,359
kubearmorkubearmor1.7.42 of 4See more

kubearmor kubearmor 1.7.4

2 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
kubearmor/kubearmor:stablea08141311045
openssl@3.5.7-r0
3.5.8-r0
kubearmor/kubearmor-init:stable236ade6e67b1
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,385
kubebadgeskubebadges0.1.31 of 2See more

kubebadges kubebadges 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
shieldsio/shields:nextfa194b446e42
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,801
radondb-mysqlkubesphere-testVerified publisher1.0.11 of 3See more

radondb-mysql kubesphere-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

7,405
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.02 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

2 of the 6 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5
dongjiang1989/lxcfs-webhook:latestc1f19557bdcb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

58,923
kwokkwokOfficialVerified publisher0.3.01 of 1See more

kwok kwok 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
registry.k8s.io/kwok/kwok:v0.8.06d25aa8fbdfe
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

716
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm18

Open the chart page →

15,533
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

7,967
lxcfs-on-kuberneteslxcfs-on-kubernetes0.2.72 of 2See more

lxcfs-on-kubernetes lxcfs-on-kubernetes 0.2.7

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/cndoit18/lxcfs-agent:latest9853bb613cd0
openssl@3.5.0-r0
3.5.8-r0
ghcr.io/cndoit18/lxcfs-manager:latest6bb61ded2625
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

2,105
sonarrm0nsterrr-sonarrVerified publisher2.2.31 of 1See more

sonarr m0nsterrr-sonarr 2.2.3

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/home-operations/sonarr:4.0.201f19eb5e0f42
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

214
mariadbmariadbVerified publisher0.4.01 of 1See more

mariadb mariadb 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/mariadb:10.11ce66c7be32a0
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29

Open the chart page →

2,478
marmotmarmotOfficialVerified publisher1.5.11 of 2See more

marmot marmot 1.5.1

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/marmotdata/marmot:0.10.0bd2a49f86486
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

333
kubecostmesosphere-stable0.37.52 of 9See more

kubecost mesosphere-stable 0.37.5

2 of the 9 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.30.5744f84cf7493
openssl@3.0.14-1~deb12u2
no fix listed
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.29

Open the chart page →

17,893
openobservemshade-openobserve0.1.101 of 1See more

openobserve mshade-openobserve 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
public.ecr.aws/zinclabs/openobserve:v0.8.127f8de509169
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

1,333
nacknatsVerified publisher0.35.01 of 1See more

nack nats 0.35.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
natsio/jetstream-controller:0.24.058862daca582
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

227
nebraskanebraska3.0.02 of 2See more

nebraska nebraska 3.0.0

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.5.042a8200d3597
openssl@3.0.16-1~deb12u1
no fix listed
ghcr.io/flatcar/nebraska:4.0.05c9e99ff7167
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

4,264
netbird-api-exporternetbird-api-exporterVerified publisher0.2.161 of 1See more

netbird-api-exporter netbird-api-exporter 0.2.16

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/matanbaruch/netbird-api-exporter:0.2.154bd3e83bfbc4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
mariadbnicholaswildeVerified publisher1.0.61 of 1See more

mariadb nicholaswilde 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/mariadb:version-110.4.21mariabionic7a94d7e89f52
openssl@1.1.1-1ubuntu2.1~18.04.10
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

9,669
gateway-apinicklasfrahm-gateway-apiVerified publisher0.2.01 of 1See more

gateway-api nicklasfrahm-gateway-api 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
alpine/kubectl:1.33.32c59a3f0726c
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,260
observalobservalVerified publisher1.13.15 of 8See more

observal observal 1.13.1

5 of the 8 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.3810861a2e2d0
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/redis:7-alpineff02b58f971e
openssl@3.3.7-r0
3.3.7-r1
ghcr.io/observal/observal-api:1.13.1153b8b893232
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/observal/observal-web:1.13.1738acf65cba7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

6,202
oesopsmxVerified publisher4.0.324 of 25See more

oes opsmx 4.0.32

4 of the 25 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/opa:opa-sidecar-v1.03dcbf3caa454
openssl@3.5.4-r0
3.5.8-r0
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.15
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
openssl@1.0.2g-1ubuntu4.15
1.0.2g-1ubuntu4.20+esm18
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

108,729
pacmanpacmanVerified publisher2.0.21 of 2See more

pacman pacman 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/shuguet/pacman:latesta0ec71732c3c
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

641
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
jbtronics/part-db1:latest5db71f6db59d
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

3,470
redispascaliskeVerified publisher2.1.01 of 1See more

redis pascaliske 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/redis:8.0.3be0a135f1955
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

1,898

Container images carrying it

3,801 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/dynamic-config-rs/dynamic-config-webhook:v0.3.0f00f02c53f66
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
1
ghcr.io/dysnix/docker-tiny:0.0.16b8e02430649
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
openssl@1.1.1-1ubuntu2.1~18.04.13
1.1.1-1ubuntu2.1~18.04.23+esm10
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm5
1
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29
1
ghcr.io/egos-tech/smtp:1.2.2b5451793ad91
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/elastiflow/mermin:v0.4.1205053c8a3e2
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/element-hq/matrix-authentication-service:0.14.0834ea54370f0
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
openssl@3.0.13-1~deb12u1
no fix listed
1
ghcr.io/elk-zone/elk:main046dfdb8550c
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/elk-zone/elk:v1.0.1236faedcb68a
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/ellite/wallos:2.46.09ce55520e7bd
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/eminaktas/oom-tracer:v0.1.0c90ca8389c87
openssl@3.5.1-r0
3.5.8-r0
1
ghcr.io/emissary-ingress/emissary:4.1.04a981156abee
openssl@3.0.20-1~deb12u1
no fix listed
1
ghcr.io/ente/server:0472c929b6070e61fecaf2013d47efce2dcda462f646b68a1b8d
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/erikmagkekse/btrfs-nfs-csi:0.12.0cb29d9b801a5
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/erlkoenig91/prompt-db-frontend:1.0.7121dc29eb14d
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/eslupmi/impulse:v3.7.03ded1b7ebca0
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/esomore/bitcoin-prometheus-exporter:masterded173632986
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/esphome/esphome:latest000c5ee5ee96
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/ethpandaops/benchmarkoor:latest5470b2ec3161
openssl@3.3.6-r0
3.3.7-r1
1
ghcr.io/ethpandaops/benchmarkoor-ui:latestd090bb2060d9
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/ethpandaops/dispatchoor-api:latesta0b272f6682a
openssl@3.3.6-r0
3.3.7-r1
1
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/ethpandaops/syncoor-web:master60d7c38d6062
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/eximeebpms/eximeebpms-bpm-platform:run-1.4.00f4a5c0eea07
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/fallenbagel/jellyseerr:2.5.22a611369ad1d
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
openssl@3.0.11-1~deb12u2
no fix listed
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
openssl@1.1.1f-1ubuntu2.12
1.1.1f-1ubuntu2.24+esm5
1
ghcr.io/ferriskey/ferriskey-api:0.8.07b479fc31340
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/ferriskey/ferriskey-webapp:0.8.081d62c161732
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/firecrawl/firecrawl:2.11.35987ebe1dc85b0
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/flanksource/facet:0.1.7237237038be15
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
openssl@3.0.17-1~deb12u3
no fix listed
1
ghcr.io/flannel-io/flannel:v0.28.9708a2c9c1cfb
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/flannel-io/flannel-cni-plugin:v1.9.1-flannel39fccdf677e6e
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
openssl@3.0.17-1~deb12u2
no fix listed
1
ghcr.io/flatcar/nebraska:4.0.05c9e99ff7167
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/fluent/fluentd-aggregator-docker-image:2.1.0ad25916eebbb
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/fluxcd/flagger:1.45.015b372d35012
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/fluxcd/flagger-loadtester:0.39.06a8546993cb5
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/fluxcd/helm-controller:v1.2.062eaa9c9a929
openssl@3.3.3-r0
3.3.7-r1
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.