StackRadar

CVE-2026-63072

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.007
51st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,320
of 17,832 indexed, latest versions
Container images
3,734
deployed by those charts
Fix available
4 of 5
affected packages

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,320 of 17,832 indexed charts deploy, on 3,734 images.

Affected packageAffected versionsFixed inImages
openssldeb1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more2,331
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,390
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+13 moreno fix listed22
openssl1.0deb1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.7+5 more1.0.2n-1ubuntu5.13+esm620
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-613
OSV records
ALPINE-CVE-2026-63072DEBIAN-CVE-2026-63072UBUNTU-CVE-2026-63072AZL-97947ECHO-aa38-89d5-f024
Also known as
USN-8678-1, USN-8678-2

Charts affected

3,320 by stars
ChartLatestAffected imagesRadar Score
argocd-image-updaterwener1.3.11 of 1See more

argocd-image-updater wener 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

733
athens-proxywener0.5.21 of 2See more

athens-proxy wener 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

5,010
emissary-ingresswener8.12.21 of 2See more

emissary-ingress wener 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

74,489
giteawener12.7.03 of 4See more

gitea wener 12.7.0

3 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
openssl@3.0.17-1~deb12u2
no fix listed
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
openssl@3.0.17-1~deb12u2
no fix listed
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
openssl@3.0.17-1~deb12u1
no fix listed

Open the chart page →

9,071
ingress-nginxwener4.15.11 of 2See more

ingress-nginx wener 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,544
juicefs-csi-driverwener0.33.02 of 5See more

juicefs-csi-driver wener 0.33.0

2 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.33.05e5edb62a010
openssl@3.5.7-r0
3.5.8-r0
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

9,116
longhornwener1.2.31 of 2See more

longhorn wener 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

15,538
mesherywener1.0.701 of 1See more

meshery wener 1.0.70

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest44b64ee128fb
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,522
natswener2.15.02 of 3See more

nats wener 2.15.0

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
natsio/nats-box:0.19.7ffce8bd10338
openssl@3.5.6-r0
3.5.8-r0
natsio/nats-server-config-reloader:0.23.064cb6c858e79
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

2,151
openebswener3.10.02 of 3See more

openebs wener 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29
openebs/node-disk-operator:2.1.06afe2123c457
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29

Open the chart page →

10,693
prometheus-nats-exporterwener2.23.21 of 1See more

prometheus-nats-exporter wener 2.23.2

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.20.2c623b608e148
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
vaultwener0.34.12 of 2See more

vault wener 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
openssl@3.5.7-r0
3.5.8-r0
hashicorp/vault-k8s:1.7.655e27b080c9b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

552
vectorwener0.58.01 of 1See more

vector wener 0.58.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
timberio/vector:0.58.0-distroless-libc6c93dfe2554c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

374
victoria-metrics-k8s-stackwener0.93.02 of 7See more

victoria-metrics-k8s-stack wener 0.93.0

2 of the 7 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,955
wikiwener2.2.01 of 2See more

wiki wener 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

3,845
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
apache/apisix:3.18.0-ubuntu9ee5df1611f9
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

3,238
apisix-ingress-controllerwenerme1.4.01 of 2See more

apisix-ingress-controller wenerme 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,748
argocd-image-updaterwenerme1.3.11 of 1See more

argocd-image-updater wenerme 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

733
athens-proxywenerme0.5.21 of 2See more

athens-proxy wenerme 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
jaegertracing/all-in-one:latestab6f1a1f0fb4
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

5,010
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
openssl@1.1.1-1ubuntu2.1~18.04.6
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

74,489
giteawenerme12.7.03 of 4See more

gitea wenerme 12.7.0

3 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
openssl@3.0.17-1~deb12u2
no fix listed
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
openssl@3.0.17-1~deb12u2
no fix listed
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
openssl@3.0.17-1~deb12u1
no fix listed

Open the chart page →

9,071
juicefs-csi-driverwenerme0.33.02 of 5See more

juicefs-csi-driver wenerme 0.33.0

2 of the 5 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.33.05e5edb62a010
openssl@3.5.7-r0
3.5.8-r0
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

9,116
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
openssl@1.1.1f-1ubuntu2.10
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

15,538
mesherywenerme1.0.701 of 1See more

meshery wenerme 1.0.70

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
meshery/meshery:stable-latest44b64ee128fb
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,522
openebswenerme3.10.02 of 3See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29
openebs/node-disk-operator:2.1.06afe2123c457
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29

Open the chart page →

10,693
prometheus-nats-exporterwenerme2.23.21 of 1See more

prometheus-nats-exporter wenerme 2.23.2

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
natsio/prometheus-nats-exporter:0.20.2c623b608e148
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
reflectorwenerme10.0.651 of 1See more

reflector wenerme 10.0.65

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
emberstack/kubernetes-reflector:10.0.6551dbd5880929
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

752
vaultwenerme0.34.12 of 2See more

vault wenerme 0.34.1

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
hashicorp/vault:2.0.45be49781ecf7
openssl@3.5.7-r0
3.5.8-r0
hashicorp/vault-k8s:1.7.655e27b080c9b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

552
vectorwenerme0.58.01 of 1See more

vector wenerme 0.58.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
timberio/vector:0.58.0-distroless-libc6c93dfe2554c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

374
victoria-metrics-k8s-stackwenerme0.93.02 of 7See more

victoria-metrics-k8s-stack wenerme 0.93.0

2 of the 7 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,955
wexa-studiowexa-studio1.2.04 of 15See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.7.45f2a56b95266
openssl@3.0.11-1~deb12u2
no fix listed
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.8-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.8-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

13,083
whereaboutswhereaboutsVerified publisher0.3.01 of 1See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

619
wikiwikijs3.0.02 of 2See more

wiki wikijs 3.0.0

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
requarks/wiki:268f0d1848261
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

5,563
jaegerwikimedia3.1.21 of 4See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.29

Open the chart page →

9,406
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15

Open the chart page →

2,315
keycloakwiremindVerified publisher25.3.12 of 2See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
openssl@3.0.17-1~deb12u2
no fix listed
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
openssl@3.0.18-1~deb12u1
no fix listed

Open the chart page →

7,836
kibanawiremindVerified publisher8.5.231 of 2See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/kibana:8.18.004c0fc150f3a
openssl@1.1.1f-1ubuntu2.24
1.1.1f-1ubuntu2.24+esm5

Open the chart page →

6,437
marge-botwiremindVerified publisher1.4.41 of 1See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.14.0dcffb926e563
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

5,626
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,646
ovh-exporterwiremindVerified publisher1.2.01 of 1See more

ovh-exporter wiremind 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/wiremind/ovh-exporter:v2.3.1609f955bd977
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

209
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
openssl@3.3.2-r4
3.3.7-r1

Open the chart page →

1,435
rabbitmqwiremindVerified publisher16.0.171 of 1See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
openssl@3.0.18-1~deb12u1
no fix listed

Open the chart page →

2,546
rediswiremindVerified publisher23.0.61 of 1See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
openssl@3.0.18-1~deb12u1
no fix listed

Open the chart page →

2,189
registrywiremindVerified publisher0.1.11 of 1See more

registry wiremind 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/distribution/distribution:3.0.04ba3adf47f5c
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

1,358
silence-operatorwiremindVerified publisher0.0.81 of 1See more

silence-operator wiremind 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
giantswarm/silence-operator:0.13.0a6cac55aa2d4
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

936
wordpress-alpinewordpress-alpine1.5.183 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

3 of the 6 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
library/memcached:1.6.45dc561d52bb8a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,182
wordpresswordpress-ng1.0.91 of 2See more

wordpress wordpress-ng 1.0.9

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
cloudtooling/wordpress:7.1.1db89d95f1d14
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

4,003
playwright-synthetic-monitoringwork-adventure1.0.11 of 1See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
nodejs@20.15.0-1nodesource1
openssl@3.0.2-0ubuntu1.16
no fix listed
3.0.2-0ubuntu1.29

Open the chart page →

14,331
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

11,692
am-pattern-1wso22.6.0-72 of 6See more

am-pattern-1 wso2 2.6.0-7

2 of the 6 container images this version deploys carry CVE-2026-63072.

Container imageDigestPackageFixed in
wso2/wso2am:2.6.0fbe0f4059b74
openssl@1.1.1f-1ubuntu2
1.1.1f-1ubuntu2.24+esm5
wso2/wso2am-analytics-worker:2.6.005fa15b3d927
openssl@1.1.0g-2ubuntu4.3
1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

31,779

Container images carrying it

3,734 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

No deployed image carries CVE-2026-63072.

syft 1.42.1 · advisories as of 23 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.