StackRadar

CVE-2026-63072

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,414
of 17,821 indexed, latest versions
Container images
3,782
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,414 of 17,821 indexed charts deploy, on 3,782 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+113 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more2,343
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,425
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm621
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-614
OSV records
ALPINE-CVE-2026-63072DEBIAN-CVE-2026-63072UBUNTU-CVE-2026-63072AZL-97947ECHO-aa38-89d5-f024
Also known as
USN-8678-1, USN-8678-2

Charts affected

3,414 by stars
ChartLatestAffected imagesRadar Score
speckle-preview-service-branch-testing6speckleVerified publisher2.23.14-branch.testing6.334655-b4e04ee1 of 1See more

speckle-preview-service-branch-testing6 speckle 2.23.14-branch.testing6.334655-b4e04ee

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.23.14-branch.testing6.334655-b4e04ee6dee853ba74a
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

6,039
speckle-server-branch-hotfix-2.19.1speckleVerified publisher2.19.2-branch.hotfix-2.19.1.124125-665e7e14 of 5See more

speckle-server-branch-hotfix-2.19.1 speckle 2.19.2-branch.hotfix-2.19.1.124125-665e7e1

4 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.19.2-branch.hotfix-2.19.1.124125-665e7e14f9241665ae3
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-monitor-deployment:2.19.2-branch.hotfix-2.19.1.124125-665e7e1b696ac5022ab
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-preview-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e1c102b087481a
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-webhook-service:2.19.2-branch.hotfix-2.19.1.124125-665e7e14828aee2277c
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

16,636
speckle-server-branch-hotfix-2.20.2speckleVerified publisher2.20.3-branch.hotfix-2.20.2.149555-37ea0cb4 of 5See more

speckle-server-branch-hotfix-2.20.2 speckle 2.20.3-branch.hotfix-2.20.2.149555-37ea0cb

4 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbfdc008effc7a
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-monitor-deployment:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb2faf1508c1d3
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-preview-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cbd3da0a84de98
openssl@3.0.13-1~deb12u1
no fix listed
speckle/speckle-webhook-service:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb107c63336ab5
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

16,669
speckle-server-branch-testingspeckleVerified publisher2.17.14-branch.testing.72707.921a5f83 of 5See more

speckle-server-branch-testing speckle 2.17.14-branch.testing.72707.921a5f8

3 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.17.14-branch.testing.72707.921a5f8ff1641ac3f1b
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-preview-service:2.17.14-branch.testing.72707.921a5f884fc39bca0c8
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-webhook-service:2.17.14-branch.testing.72707.921a5f899913052b72e
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

14,885
speckle-server-branch-testing1speckleVerified publisher2.20.6-branch.testing1.154030-9b091144 of 5See more

speckle-server-branch-testing1 speckle 2.20.6-branch.testing1.154030-9b09114

4 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.6-branch.testing1.154030-9b0911432fc940d9b4c
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-monitor-deployment:2.20.6-branch.testing1.154030-9b09114738c77eb6f97
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-preview-service:2.20.6-branch.testing1.154030-9b091148f3c1ea153ba
openssl@3.0.13-1~deb12u1
no fix listed
speckle/speckle-webhook-service:2.20.6-branch.testing1.154030-9b09114cf1d99bad89a
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

16,669
speckle-server-branch-testing2speckleVerified publisher2.18.11-branch.testing2.88634-335d4693 of 5See more

speckle-server-branch-testing2 speckle 2.18.11-branch.testing2.88634-335d469

3 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.11-branch.testing2.88634-335d469d6790a97ad47
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d4694bd113093583
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-webhook-service:2.18.11-branch.testing2.88634-335d469902b98ad5327
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

14,429
speckle-server-branch-testing3speckleVerified publisher2.18.12-branch.testing3.88744-f55b3413 of 5See more

speckle-server-branch-testing3 speckle 2.18.12-branch.testing3.88744-f55b341

3 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.18.12-branch.testing3.88744-f55b34181335b40696a
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-preview-service:2.18.12-branch.testing3.88744-f55b3414bd113093583
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-webhook-service:2.18.12-branch.testing3.88744-f55b341771f872cfa63
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

14,429
speckle-server-branch-testing4speckleVerified publisher2.20.2-branch.testing4.134160-9fad4b24 of 5See more

speckle-server-branch-testing4 speckle 2.20.2-branch.testing4.134160-9fad4b2

4 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.20.2-branch.testing4.134160-9fad4b210ad4ade8bf2
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-monitor-deployment:2.20.2-branch.testing4.134160-9fad4b23c8fbe855665
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-preview-service:2.20.2-branch.testing4.134160-9fad4b21f897ca906ea
openssl@3.0.13-1~deb12u1
no fix listed
speckle/speckle-webhook-service:2.20.2-branch.testing4.134160-9fad4b270f5167d1d4d
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

16,287
speckle-server-branch-testing5speckleVerified publisher2.21.3-branch.testing5.219631-2153bef5 of 5See more

speckle-server-branch-testing5 speckle 2.21.3-branch.testing5.219631-2153bef

5 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
speckle/speckle-frontend-2:2.21.3-branch.testing5.219631-2153befd4ca6ebf09b9
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-monitor-deployment:2.21.3-branch.testing5.219631-2153befcf72ad0f25fb
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-preview-service:2.21.3-branch.testing5.219631-2153bef52cad5e3293e
openssl@3.0.14-1~deb12u2
no fix listed
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-webhook-service:2.21.3-branch.testing5.219631-2153bef06ecc7a66a40
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

15,882
speckle-server-branch-testing6speckleVerified publisher2.25.10-branch.testing6.645-b125c1e4 of 4See more

speckle-server-branch-testing6 speckle 2.25.10-branch.testing6.645-b125c1e

4 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.25.10-branch.testing6.645-b125c1e2dbc553ed87c
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-preview-service:2.25.10-branch.testing6.645-b125c1e787adcb20a3a
openssl@3.0.17-1~deb12u2
no fix listed
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
openssl@3.0.16-1~deb12u1
no fix listed
speckle/speckle-webhook-service:2.25.10-branch.testing6.645-b125c1edd9db6cbe9bb
openssl@3.0.13-1~deb12u1
no fix listed

Open the chart page →

11,312
spoolmanspoolmanVerified publisher0.2.61 of 1See more

spoolman spoolman 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,772
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15

Open the chart page →

51,225
spotinst-ocean-network-clientspot1.0.01 of 1See more

spotinst-ocean-network-client spot 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

66,245
airflowsqream-chartsVerified publisher1.17.01 of 4See more

airflow sqream-charts 1.17.0

1 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/redis:7.2-bookworm0637954999d0
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,833
envoy-proxysqream-chartsVerified publisher0.6.01 of 2See more

envoy-proxy sqream-charts 0.6.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.1e596fda6a0ce
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29

Open the chart page →

2,333
sqs-to-snssqs-to-sns2.0.151 of 1See more

sqs-to-sns sqs-to-sns 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
udhos/sqs-to-sns:2.0.15cf7979da82e1
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

951
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,455
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/redis:alpinebecdda6c7f4b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,621
pagessrinipages1.0.02 of 3See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm5
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

20,287
servicexssl-hep1.8.511 of 16See more

servicex ssl-hep 1.8.5

11 of the 16 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ncsa/checks:main0b738bbc8d70
openssl@3.5.1-1
3.5.7-1~deb13u2
sslhep/servicex_app:v1.8.51d12f943cec5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

70,106
hazelcaststakaterVerified publisher1.0.21 of 1See more

hazelcast stakater 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
hazelcast/hazelcast:latestf086bf0ecb23
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,701
my-appstakefish0.1.01 of 3See more

my-app stakefish 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/redis:alpinebecdda6c7f4b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

280
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
openssl@3.0.9-1
no fix listed

Open the chart page →

20,487
erigonstakewise2.61.21 of 3See more

erigon stakewise 2.61.2

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
erigontech/erigon:v2.61.288706754b627
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

3,003
lighthouse-validatorstakewise7.0.11 of 2See more

lighthouse-validator stakewise 7.0.1

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
sigp/lighthouse:v7.0.12cae720e9a35
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29

Open the chart page →

2,043
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

2,100
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
sigp/lighthouse:v2.1.2ad501f02cfef
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

6,609
rethstakewise1.2.11 of 3See more

reth stakewise 1.2.1

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/paradigmxyz/reth:v1.3.121e5290e8b743
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29

Open the chart page →

2,039
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

7,067
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

3,249
verostakewise0.8.31 of 2See more

vero stakewise 0.8.3

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/serenita-org/vero:v0.8.3e5a7ec714acc
openssl@3.0.13-1~deb12u1
no fix listed

Open the chart page →

3,525
multus-cnistartechnicaVerified publisher0.1.41 of 1See more

multus-cni startechnica 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thickbc058c992eec
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,062
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2

Open the chart page →

4,363
unifistartechnicaVerified publisher0.1.31 of 2See more

unifi startechnica 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.1.664a3616625dda
openssl@1.1.1-1ubuntu2.1~18.04.17
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

14,629
dotstatsuitestatcan0.2.82 of 6See more

dotstatsuite statcan 0.2.8

2 of the 6 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
siscc/dotstatsuite-core-transfer:master46b7e3c888c4
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
siscc/dotstatsuite-dbup:master432e55811520
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,886
fdi-dotstatsuitestatcan0.3.53 of 3See more

fdi-dotstatsuite statcan 0.3.5

3 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
siscc/dotstatsuite-core-auth-management:masterf0a9f41b7c1d
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
siscc/dotstatsuite-core-transfer:master46b7e3c888c4
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
siscc/sdmxri-nsi-maapi:master6cf1145566f0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

582
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

6,070
fdi-dotstatsuite-sfs-solr-statefulstatcan1.0.21 of 2See more

fdi-dotstatsuite-sfs-solr-stateful statcan 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

922
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29

Open the chart page →

13,950
anna-nginxstatic-nginx1.31.111 of 2See more

anna-nginx static-nginx 1.31.11

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/shesselink81/anna-nginx:v1.31.1120c19fa8a918
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

531
hesselinkme-nginxstatic-nginx1.31.111 of 2See more

hesselinkme-nginx static-nginx 1.31.11

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/shesselink81/hesselinkme-nginx:v1.31.114f43beb13fc2
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

531
static-src-people-detector-appstatic-src-people-detector-chartVerified publisher1.5.51 of 6See more

static-src-people-detector-app static-src-people-detector-chart 1.5.5

1 of the 6 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/mongo:4.4.18d23ec07162ca
openssl@1.1.1f-1ubuntu2.16
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

13,673
pagesstephendillondell1.0.02 of 3See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
openssl@1.1.1f-1ubuntu2.1
1.1.1f-1ubuntu2.24+esm5
flyway/flyway:6.4.422d97ceb0c47
openssl@1.1.1-1ubuntu2.1~18.04.5
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

20,287
its-mytabsstone0.3.01 of 1See more

its-mytabs stone 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
louislam/its-mytabs:1.7.02e478d3170bd
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,533
strapistrapi-xmv0.1.21 of 1See more

strapi strapi-xmv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/strapi:latesta288b4571142
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

690
sn-platform-slimstreamnative1.11.441 of 6See more

sn-platform-slim streamnative 1.11.44

1 of the 6 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.1.20e6d7aa3ef32
openssl@1.1.1f-1ubuntu2.22
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

66,885
wonder-mesh-netstrrl-helm2026.629.02 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
headscale/headscale:0.27.1cd37b3001857
openssl@3.0.17-1~deb12u3
no fix listed
ghcr.io/strrl/wonder-mesh-net:v2026.629.0625b140372fd
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

5,202
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.15

Open the chart page →

12,815
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.15

Open the chart page →

12,815
stunner-prometheusstunner0.2.11 of 4See more

stunner-prometheus stunner 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,066

Container images carrying it

3,782 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/spotinst/spot-network-client:1.0.0-8-lb_endpoint-d0ec127efcecf98b912
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.1~18.04.23+esm10
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
openssl@1.1.1f-1ubuntu2.3
1.1.1f-1ubuntu2.24+esm5
1
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
openssl@3.0.11-1~deb12u2
no fix listed
1
public.ecr.aws/truefoundrycloud/timberio/vector:v0.50.05833723de9e4
openssl@3.5.4-r0
3.5.8-r0
1
public.ecr.aws/zinclabs/openobserve:v0.8.127f8de509169
openssl@3.0.11-1~deb12u2
no fix listed
1
quay.io/aerokube/jumphost:1.0.170fd7c00418d
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
1
quay.io/aerokube/keygen:1.0.1578934444f04
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
1
quay.io/argoproj/argocd:v3.5.10deb1a1c9176
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.29
1
quay.io/argoproj/argocd:v2.10.783c86003b781
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
1
quay.io/argoproj/argocd:v2.8.6acaf37352569
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.29
1
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
openssl@3.5.6-r0
3.5.8-r0
1
quay.io/argoprojlabs/gitops-promoter:v0.40.1daf2e7650d61
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
quay.io/cilium/cilium:v1.15.1351d6685dc6f
openssl@3.0.2-0ubuntu1.13
3.0.2-0ubuntu1.29
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
1
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
1
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
1
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
1
quay.io/cilium/hubble-ui:v0.13.3661d5de70501
openssl@3.5.2-r0
3.5.8-r0
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
openssl@3.0.15-1~deb12u1
no fix listed
1
quay.io/codefresh/dind:3.0.250885ab519dac
openssl@3.5.7-r0
3.5.8-r0
1
quay.io/codefresh/redis:7.4.3-debian-12-r0935f97598255
openssl@3.0.17-1~deb12u2
no fix listed
1
quay.io/cortexproject/cortex:v1.21.18577eb292a01
openssl@3.5.6-r0
3.5.8-r0
1
quay.io/datamattsson/truenas-csp:v3.2.09e58f2127d85
openssl@3.5.7-r0
3.5.8-r0
1
quay.io/deployhub/ms-nginx:svccat-v11.0.815-g717581d2d3400664e8
openssl@3.5.4-r0
3.5.8-r0
1
quay.io/deployhub/ms-ui:svccat-v11.0.815-g717581f5dedbc31e6f
openssl@3.5.4-r0
3.5.8-r0
1
quay.io/enix/topomatik:1.3.1d9f0bec83ef0
openssl@3.0.2-0ubuntu1.23
3.0.2-0ubuntu1.29
1
quay.io/enix/zfs-exporter:2.3.1223b053f1cbd0
openssl@3.5.6-r0
3.5.8-r0
1
quay.io/evryfs/docker-mcrouter:0.40.0-9a2d3a4c67b0f
openssl@1.1.1-1ubuntu2.1~18.04.20
1.1.1-1ubuntu2.1~18.04.23+esm10
1
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29
1
quay.io/fiware/vcverifier:6.21.251ed1e979094
openssl@3.5.7-r0
3.5.8-r0
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
quay.io/groundcover/tools:20260719b705e0cbe171
openssl@3.5.6-1~deb13u2+e1
3.5.7-1~deb13u2
1
quay.io/heubeck/examiner:1.14.61154472ff8c4
openssl@3.0.17-1~deb12u3
no fix listed
1
quay.io/invidious/invidious:latest6f5c81c1e29d
openssl@3.5.7-r0
3.5.8-r0
1
quay.io/isindir/sops-secrets-operator:0.21.27bba7083dfa0
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
quay.io/jetstack/version-checker:v0.11.0eae9a374d22f
openssl@3.5.7-r0
3.5.8-r0
1
quay.io/jupyterhub/configurable-http-proxy:5.1.0eb10d5bf045c
openssl@3.3.4-r0
3.3.7-r1
1
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
openssl@3.0.20-1~deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
openssl@3.0.19-1~deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
openssl@3.0.19-1~deb12u2
no fix listed
1
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
openssl@3.0.20-1~deb12u2
no fix listed
1
quay.io/kannika/kannika-console:0.18.0cc024a8ee909
openssl@3.0.20-1~deb12u2
no fix listed
1
quay.io/kiwigrid/k8s-sidecar:2.10.021b9fe7bb29d
openssl@3.5.7-r0
3.5.8-r0
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
openssl@3.3.3-r0
3.3.7-r1
1
quay.io/kiwigrid/k8s-sidecar:2.7.15bc0c5634d4a
openssl@3.5.5-r0
3.5.8-r0
1
quay.io/kiwigrid/k8s-sidecar:2.7.3694950d736c8
openssl@3.5.6-r0
3.5.8-r0
1

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.