StackRadar

CVE-2026-63072

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,470
of 17,803 indexed, latest versions
Container images
3,788
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,470 of 17,803 indexed charts deploy, on 3,788 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more2,308
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,457
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more1.0.2n-1ubuntu5.13+esm615
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63072DEBIAN-CVE-2026-63072UBUNTU-CVE-2026-63072AZL-97947ECHO-aa38-89d5-f024
Also known as
USN-8678-1, USN-8678-2

Charts affected

3,470 by stars
ChartLatestAffected imagesRadar Score
argo-cdargoOfficialVerified publisher10.9.22 of 3See more

argo-cd argo 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ecr-public.aws.com/docker/library/redis:8.6.4-alpine2cc044fc5a07
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/dexidp/dex:v2.45.18499afd690c4
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

3,032
ingress-nginxingress-nginx4.15.11 of 2See more

ingress-nginx ingress-nginx 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,541
traefiktraefikOfficialVerified publisher41.6.01 of 1See more

traefik traefik 41.6.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/traefik:v3.7.13f86a2cab1b5c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

171
vaulthashicorpVerified publisher0.34.12 of 2See more

vault hashicorp 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
openssl@3.5.7-r0
3.5.8-r0
hashicorp/vault-k8s:1.7.655e27b080c9b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

552
airflowapache-airflowOfficialVerified publisher1.22.01 of 4See more

airflow apache-airflow 1.22.0

1 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/redis:7.2-bookworm74566c6910d1
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

3,244
velerovmware-tanzu12.2.01 of 1See more

velero vmware-tanzu 12.2.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
velero/velero:v1.18.237396519f399
openssl@3.0.2-0ubuntu1.25
3.0.2-0ubuntu1.29

Open the chart page →

1,091
metallbmetallbVerified publisher0.16.12 of 4See more

metallb metallb 0.16.1

2 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/frrouting/frr:10.4.38745af1f9bbb
openssl@3.5.5-r0
3.5.8-r0
quay.io/metallb/frr-k8s:v0.0.251cb06fb2d553
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

2,173
giteagiteaOfficialVerified publisher12.7.03 of 4See more

gitea gitea 12.7.0

3 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
openssl@3.0.17-1~deb12u2
no fix listed
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
openssl@3.0.17-1~deb12u2
no fix listed
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
openssl@3.0.17-1~deb12u1
no fix listed

Open the chart page →

8,972
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29

Open the chart page →

6,674
pgadmin4runixVerified publisher1.66.01 of 1See more

pgadmin4 runix 1.66.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.172f4ce946ddf8
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

398
artifact-hubartifact-hubVerified publisher1.23.06 of 7See more

artifact-hub artifact-hub 1.23.0

6 of the 7 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
aquasec/trivy:0.69.3bcc376de8d77
openssl@3.5.5-r0
3.5.8-r0
artifacthub/db-migrator:v1.23.028c13565ac5c
openssl@3.5.7-r0
3.5.8-r0
artifacthub/hub:v1.23.07d3a91c539dc
openssl@3.5.7-r0
3.5.8-r0
artifacthub/postgres:latest4fd34fa635cc
openssl@3.5.1-1
3.5.7-1~deb13u2
artifacthub/scanner:v1.23.02d8365601f0e
openssl@3.5.7-r0
3.5.8-r0
artifacthub/tracker:v1.23.05368d21a6e5c
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

11,020
piholemojo2600Verified publisher2.38.01 of 1See more

pihole mojo2600 2.38.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
pihole/pihole:2026.07.2f7d1be836e3b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

571
n8ncommunity-chartsVerified publisher1.24.401 of 1See more

n8n community-charts 1.24.40

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
n8nio/n8n:2.38.45d9f0cc5672b
openssl@3.5.7-r1
3.5.8-r0

Open the chart page →

784
argo-cdargo-cd-oci10.9.22 of 3See more

argo-cd argo-cd-oci 10.9.2

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ecr-public.aws.com/docker/library/redis:8.6.4-alpine2cc044fc5a07
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/dexidp/dex:v2.45.18499afd690c4
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

3,032
jaegerjaegertracingOfficialVerified publisher4.13.11 of 1See more

jaeger jaegertracing 4.13.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.20.046a886260e04
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

320
jupyterhubjupyterhubOfficialVerified publisher4.4.23 of 7See more

jupyterhub jupyterhub 4.4.2

3 of the 7 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
openssl@3.5.5-r0
3.5.8-r0
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
openssl@3.0.20-1~deb12u2
no fix listed
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

8,295
mimir-distributedgrafana6.2.02 of 6See more

mimir-distributed grafana 6.2.0

2 of the 6 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
apache/kafka-native:4.1.09a9d16e60894
openssl@3.5.1-r0
3.5.8-r0
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

4,696
natsnatsVerified publisher2.14.63 of 3See more

nats nats 2.14.6

3 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/nats:2.14.6-alpinead7a43eb7e33
openssl@3.5.7-r0
3.5.8-r0
natsio/nats-box:0.19.7ffce8bd10338
openssl@3.5.6-r0
3.5.8-r0
natsio/nats-server-config-reloader:0.23.064cb6c858e79
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

2,308
argocd-image-updaterargoOfficialVerified publisher1.3.11 of 1See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

733
metabasepmint932.27.61 of 1See more

metabase pmint93 2.27.6

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,639
headlampheadlampOfficialVerified publisher0.45.01 of 1See more

headlamp headlamp 0.45.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.45.0db3f0e0fc58d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

248
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
openssl@3.5.7-r1
3.5.8-r0

Open the chart page →

1,050
dexdexVerified publisher0.24.11 of 1See more

dex dex 0.24.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/dexidp/dex:v2.44.05d0656fce7d4
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,775
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
openssl@3.0.20-1~deb12u1
no fix listed

Open the chart page →

30,645
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

11,436
kubeviewkubeviewVerified publisher2.2.11 of 1See more

kubeview kubeview 2.2.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/benc-uk/kubeview:latest45b64d7c7016
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
falcofalcosecurity9.1.01 of 3See more

falco falcosecurity 9.1.0

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
falcosecurity/falco-driver-loader:0.44.17df783d5269a
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

5,523
kongkongOfficialVerified publisher3.4.11 of 2See more

kong kong 3.4.1

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/kong:3.92a8cf3b110cd
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

1,210
chartmuseumchartmuseumVerified publisher3.10.41 of 1See more

chartmuseum chartmuseum 3.10.4

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/helm/chartmuseum:v0.16.3c81f105c3682
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

1,513
redis-hadandydev-chartsVerified publisher4.39.01 of 1See more

redis-ha dandydev-charts 4.39.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
public.ecr.aws/docker/library/redis:8.8.0-alpine9d317178ecea
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

168
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.92.12 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,953
kuredkuredOfficialVerified publisher6.1.01 of 1See more

kured kured 6.1.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/kubereboot/kured:1.23.08dfd3c2e8893
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

231
openebsopenebsOfficialVerified publisher4.6.16 of 35See more

openebs openebs 4.6.1

6 of the 35 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
openssl@3.3.3-r0
3.3.7-r1
openebs/alpine-bash:4.6.0366d6c5f18c3
openssl@3.5.7-r0
3.5.8-r0
openebs/alpine-sh:4.6.0640c187dccda
openssl@3.5.7-r0
3.5.8-r0
openebs/lvm-driver:1.10.141f73aba7f31
openssl@3.5.1-r0
3.5.8-r0
openebs/provisioner-localpv:4.6.099f5116f5cb8
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

24,469
open-webuiopen-webui16.5.01 of 4See more

open-webui open-webui 16.5.0

1 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/redis:7.4.2-alpine3.2102419de7eddf
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

1,433
rediscloudpirates-redisVerified publisher0.35.01 of 1See more

redis cloudpirates-redis 0.35.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,004
jiraatlassian-data-centerVerified publisher2.0.151 of 2See more

jira atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,631
vectorvectorVerified publisher0.58.01 of 1See more

vector vector 0.58.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
timberio/vector:0.58.0-distroless-libc6c93dfe2554c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

362
apisixapisix2.17.01 of 3See more

apisix apisix 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
apache/apisix:3.18.0-ubuntu9ee5df1611f9
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

3,166
zabbixzabbix-communityVerified publisher7.1.05 of 5See more

zabbix zabbix-community 7.1.0

5 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
zabbix/zabbix-server-pgsql:ubuntu-7.0.237e8c8e059533
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15

Open the chart page →

13,987
keycloakcloudpirates-keycloakVerified publisher0.21.372 of 3See more

keycloak cloudpirates-keycloak 0.21.37

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/postgres:18.0073e7c8b84e2
openssl@3.5.1-1
3.5.7-1~deb13u2
library/postgres:18.64ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,503
fluentdfluent0.6.01 of 1See more

fluentd fluent 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1.19.3-debian-elasticsearch7-1.1de9cf5f1127a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,048
graylogkong-zVerified publisher3.0.331 of 5See more

graylog kong-z 3.0.33

1 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,723
connectonepassword-connect2.4.12 of 2See more

connect onepassword-connect 2.4.1

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
1password/connect-api:1.8.2e915c0c84397
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1password/connect-sync:1.8.26297ca6136c0
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,610
opencostopencostOfficialVerified publisher2.5.311 of 2See more

opencost opencost 2.5.31

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost:1.121.2de2784434527
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

275
openfaasopenfaas15.0.132 of 6See more

openfaas openfaas 15.0.13

2 of the 6 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/openfaas/faas-netes:0.18.176cfe35401d25
openssl@3.5.6-r0
3.5.8-r0
ghcr.io/openfaas/gateway:0.27.14ee0eaecc490c
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

3,578
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

5,667
flux2fluxcd-community2.19.07 of 7See more

flux2 fluxcd-community 2.19.0

7 of the 7 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/fluxcd/image-automation-controller:v1.2.26b0b16ab2115
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/fluxcd/image-reflector-controller:v1.2.227e6bad1dac5
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/fluxcd/kustomize-controller:v1.9.23aecec8bafdb
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/fluxcd/notification-controller:v1.9.29ce503e7bcb8
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/fluxcd/source-controller:v1.9.22b8d06650a1b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,059
vaultwardengissilabs1.4.21 of 1See more

vaultwarden gissilabs 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,785
keydbenapter0.48.01 of 1See more

keydb enapter 0.48.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
eqalpha/keydb:x86_64_v6.3.2fd9351ce27a7
openssl@1.1.1-1ubuntu2.1~18.04.21
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

5,570
postgrescloudpirates-postgresVerified publisher0.20.51 of 1See more

postgres cloudpirates-postgres 0.20.5

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/postgres:18.64ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,686

Container images carrying it

3,788 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/kikplate/kikplate-api:main2fbce0601a3c
openssl@3.3.7-r0
3.3.7-r1
1
ghcr.io/kikplate/kikplate-web:main34bbb61e8e42
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/klicktipp/csa-exporter:0.3.12c69513f9d85
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/klicktipp/snds-exporter:v0.2.4a23b389cb3c5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/kluster-manager/cluster-proxy:v0.10.1a7fce69e171c
openssl@3.3.7-r0
3.3.7-r1
1
ghcr.io/kluster-manager/fluxcd-addon:v0.0.103475404bef5c
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/klustrefs/klustre-csi-plugin:0.1.1bcf42ccda0f9
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/kokuwaio/pingdom-exporter:v0.5.73e52df096943
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.1~18.04.23+esm10
1
ghcr.io/kozea/radicale:3.7.600a3d8e1f04b
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/kubedb/kubedb-autoscaler:v0.25.0df6b11907d33
openssl@3.0.11-1~deb12u2
no fix listed
1
ghcr.io/kubedb/kubedb-courier:v0.6.02f88856584a8
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/kubedb/kubedb-gitops:v0.14.0c743f8d7a199
openssl@3.0.20-1~deb12u2
no fix listed
1
ghcr.io/kubedb/migrator-operator:v0.5.098ffb48f5b60
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5
1
ghcr.io/kubelauncher/cassandrab66aba320083
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
ghcr.io/kubelauncher/etcd8ab954711fb9
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
ghcr.io/kubelauncher/kafka43e1085cd0a8
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
ghcr.io/kubelauncher/keycloakafe3bd73d7cf
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
ghcr.io/kubelauncher/kubectl7280594a2f18
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
ghcr.io/kubelauncher/mariadbe25056a6ec52
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
ghcr.io/kubelauncher/mongodb9bc37ed78a8b
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
ghcr.io/kubelauncher/mysqle9609bd50416
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
ghcr.io/kubelauncher/openldap8978aa002bc0
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
1
ghcr.io/kubelauncher/postgresql1a27e11e5925
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
ghcr.io/kubelauncher/rabbitmqff5a36a457f1
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
1
ghcr.io/kubelauncher/redisbcd8e9a6224f
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
ghcr.io/kubereboot/kured:1.23.08dfd3c2e8893
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/kubeservice-stack/customlimitrange-manager:v1.3.0d3ed97d142d4
openssl@3.3.3-r0
3.3.7-r1
1
ghcr.io/kubestellar/console:v0.3.41457cfc94b4da
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/kubevault/vault-operator:v0.24.00087cb49616f
openssl@3.0.19-1~deb12u2
no fix listed
1
ghcr.io/kubevoip/kubevoip:v0.6.841c603a93642
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
openssl@3.0.15-1~deb12u1
no fix listed
1
ghcr.io/kuoss/lethe:v0.3.3ebdf55fd5705
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/kuoss/venti:v0.3.38ee3e70d77f1
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
openssl@1.1.1f-1ubuntu2.4
1.1.1f-1ubuntu2.24+esm5
1
ghcr.io/laki-n/laki:v1.6.0599a10c453a3
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/laki-n/laki-ui:v1.6.0e51253617271
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/lambdaclass/ethrex:latest0c7896f060d6
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
openssl@3.0.9-1
no fix listed
1
ghcr.io/lerentis/bitwarden-crd-operator:0.17.00a608c6ead85
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/lexfrei/keepalived:2.3.480742bed36c2
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.15
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.