CVE-2026-63072

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.007; 51st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 3,269; of 17,797 indexed, latest versions
Container images: 3,506; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-63072 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,269 of 17,797 indexed charts deploy, on 3,506 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+114 more	1.0.1f-1ubuntu2.27+esm16, 1.0.2g-1ubuntu4.20+esm18, 1.1.1-1ubuntu2.1~18.04.23+esm10, 1.1.1f-1ubuntu2.24+esm5+4 more	2,310
opensslapk	3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more	3.5.8-r0	1,173
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm6	15
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl3	3.3.7-6	23

OSV records: ALPINE-CVE-2026-63072 DEBIAN-CVE-2026-63072 UBUNTU-CVE-2026-63072 AZL-97947 ECHO-aa38-89d5-f024
Also known as: USN-8678-1, USN-8678-2

Charts affected

3,269 by stars

Chart

Latest

Affected images

Radar Score

wordpress-alpinewordpress-alpine

1.5.18

3 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

3 of the 6 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	628f228f0fd5	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.15
library/memcached :1.6.45	dc561d52bb8a	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2
ghcr.io/shesselink81/nginx-alpine :7.1.0.0	9783481cad2a	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

4,080

Wordpresswordpress-mariadb

1.0.2

2 of 2 See more

Wordpress wordpress-mariadb 1.0.2

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
library/mariadb :lts	dd9b303aed4f	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15
library/wordpress :latest	5a93c470ae82	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

5,713

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	nodejs@20.15.0-1nodesource1 openssl@3.0.2-0ubuntu1.16	no fix listed 3.0.2-0ubuntu1.29

Open the chart page →

14,218

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	no fix listed

Open the chart page →

11,622

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	no fix listed

Open the chart page →

7,714

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	openssl@3.0.14-1~deb12u2	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	openssl@3.0.14-1~deb12u2	no fix listed
library/mongo :latest	5211c51171f5	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15
murtazashah46/helmfile :latest	4d11726cf803	openssl@3.0.14-1~deb12u2	no fix listed

Open the chart page →

13,813

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.15

Open the chart page →

2,152

wicekxxczaki

0.1.258

1 See more

—

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	openssl@3.5.6-1~deb13u1	3.5.7-1~deb13u2

Open the chart page →

1,311

prometheus-monitoring-stackyotron-helm-charts

1.2.0

1 of 3 See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	f772d434e8fa	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

899

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	no fix listed

Open the chart page →

2,692

zahori-schedulerzahori

1.0.1

1 of 1 See more

zahori-scheduler zahori 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
zahoriaut/zahori-scheduler :1.0.0	47d0979b1184	openssl@1.1.1-1ubuntu2.1~18.04.23	1.1.1-1ubuntu2.1~18.04.23+esm10

Open the chart page →

2,474

changedetection-iozekker6

1.101.0

1 See more

changedetection-io zekker6 1.101.0

1 container image this version deploys carries CVE-2026-63072.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.6	eb4a9f718801	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

—

endlessh-gozekker6

0.4.0

1 of 1 See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
ghcr.io/shizunge/endlessh-go :2026.0730.0	8826dad32623	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

485

homerzekker6

8.35.0

1 of 1 See more

homer zekker6 8.35.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
b4bz/homer :v26.08.3	febc8967c9f7	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

149

language-toolzekker6

1.12.1

2 of 2 See more

language-tool zekker6 1.12.1

2 of the 2 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	openssl@3.5.5-r0	3.5.8-r0
library/alpine :3	28bd5fe8b56d	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

1,565

zipkinzipkin

0.5.0

1 of 1 See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-slim :3.6.0	a69e1057df36	openssl@3.5.5-r0	3.5.8-r0

Open the chart page →

1,160

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	openssl@1.1.1-1ubuntu2.1~18.04.14	1.1.1-1ubuntu2.1~18.04.23+esm10
yandex/clickhouse-server :21.3.20	4eccfffb01d7	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm5

Open the chart page →

9,272

zoo-project-druzoo-project

0.10.4

4 of 6 See more

zoo-project-dru zoo-project 0.10.4

4 of the 6 container images this version deploys carry CVE-2026-63072.

Container image	Digest	Package	Fixed in
curlimages/curl :8.21.0	7c12af72ceb3	openssl@3.5.7-r0	3.5.8-r0
library/postgres :18.4-alpine3.24	9a8afca54e78	openssl@3.5.7-r0	3.5.8-r0
library/rabbitmq :4.3.2-alpine	835cbc6fabce	openssl@3.5.7-r0	3.5.8-r0
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	3.0.2-0ubuntu1.29

Open the chart page →

7,936

Container images carrying it

3,506 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm5	79
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm10	79
library/postgres :18 :18.6 :18.6-trixie :latest	4ef4dbc939d6	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	69
library/alpine :3 :3.24.1 :latest	28bd5fe8b56d	openssl@3.5.7-r0	3.5.8-r0	60
library/redis :8.10.1 :latest	298e5b3bc566	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	40
library/postgres :16.15-alpine :16-alpine	cf78e76683b9	openssl@3.5.7-r0	3.5.8-r0	17
library/postgres :18.6-alpine :18-alpine :alpine	d3e1620b530c	openssl@3.5.7-r0	3.5.8-r0	17
library/redis :8.10.1-alpine :8-alpine :alpine	becdda6c7f4b	openssl@3.5.7-r0	3.5.8-r0	17
codeurjc/toposervice :v1.0 :v1.23	9fb4c11e6a49	openssl@1.1.1-1ubuntu2.1~18.04.21	1.1.1-1ubuntu2.1~18.04.23+esm10	13
library/postgres :17-alpine	18cfe3ef5e68	openssl@3.5.7-r0	3.5.8-r0	13
quay.io/kiwigrid/k8s-sidecar :2.5.0	a6b3f707f883	openssl@3.5.4-r0	3.5.8-r0	13
grafana/grafana :latest	f772d434e8fa	openssl@3.5.7-r0	3.5.8-r0	12
library/postgres :16	f1c3376c26f2	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	12
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	openssl@3.0.17-1~deb12u2	no fix listed	11
library/mariadb :12.3.3 :latest :lts	dd9b303aed4f	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	11
library/mongo :8 :8.3.8 :latest	5211c51171f5	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	11
library/postgres :15-alpine	fe0737ba566a	openssl@3.5.7-r0	3.5.8-r0	11
oomk8s/readiness-check :2.0.2	875814cc853d	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm18	11
ethpandaops/xatu :latest	74d4cf2c436c	openssl@3.0.20-1~deb12u2	no fix listed	10
library/mongo :5.0.6-focal	8e70544b6c76	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm5	10
library/postgres :17	67f41722b7a8	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	10
library/rabbitmq :3.9-management	8a279e9396a8	openssl@3.0.2-0ubuntu1.14	3.0.2-0ubuntu1.29	10
library/eclipse-mosquitto :2.0 :2.0.22	212f89e1eaeb	openssl@3.5.7-r0	3.5.8-r0	8
library/rabbitmq :3.13-management :3-management	e582c0bc7766	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.15	8
jellyfin/jellyfin :10.11 :10.11.11 :latest	aefb67e6a7ff	openssl@3.5.6-1~deb13u1	3.5.7-1~deb13u2	7
library/kong :3.6	a42d2b4503e7	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.29	7
library/phpmyadmin :5.2.3-apache :latest	3a8a8d6b5289	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	7
library/postgres :14	156f0b253fd6	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	7
ghcr.io/appscode/b3 :v2026.9.11	76d28575b71c	openssl@3.0.20-1~deb12u2	no fix listed	7
bitnamilegacy/postgresql :17.5.0 :latest	42a8200d3597	openssl@3.0.16-1~deb12u1	no fix listed	6
bitnamilegacy/rabbitmq :4.1.3 :4.1.3-debian-12-r1	9e635efba431	openssl@3.0.17-1~deb12u1	no fix listed	6
bitnamilegacy/redis :8.2.1-debian-12-r0	25bf63f3caf7	openssl@3.0.17-1~deb12u2	no fix listed	6
curlimages/curl :8.17.0	935d9100e9ba	openssl@3.5.4-r0	3.5.8-r0	6
library/httpd :2.4 :2.4.68 :latest	979c38c2228d	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	6
library/mariadb :10 :10.11	ce66c7be32a0	openssl@3.0.2-0ubuntu1.26	3.0.2-0ubuntu1.29	6
library/postgres :15	9b1d34adbce1	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	6
library/postgres :18.4	a02db8cac496	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	6
library/redis :6 :6.2	143f7bfc2358	openssl@3.0.20-1~deb12u2	no fix listed	6
library/ubuntu :latest	2260313b31c8	openssl@3.5.5-1ubuntu3.3	3.5.5-1ubuntu3.4	6
library/wordpress :7.1.0-apache :latest	5a93c470ae82	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	6
nginxinc/nginx-unprivileged :1.29-alpine	0c79d56aee56	openssl@3.5.6-r0	3.5.8-r0	6
oomk8s/readiness-check :2.0.0	7daa08b81954	openssl@1.0.2g-1ubuntu4.10	1.0.2g-1ubuntu4.20+esm18	6
quay.io/devtron/devtron-utils :dup-chart-repo-v1.1.0	95d6f0e05636	openssl@3.0.11-1~deb12u2	no fix listed	6
quay.io/devtron/postgres :14.9	1b594392f7cb	openssl@3.0.11-1~deb12u2	no fix listed	6
adguard/adguardhome :v0.107.79	aba9e3bf0613	openssl@3.5.7-r0	3.5.8-r0	5
alpine/kubectl :1.34.1	8413f8890d19	openssl@3.5.4-r0	3.5.8-r0	5
bitnamilegacy/kubectl :1.29.2	c74b703deed2	openssl@3.0.11-1~deb12u2	no fix listed	5
dpage/pgadmin4 :9.17 :latest	2f4ce946ddf8	openssl@3.5.7-r0	3.5.8-r0	5
flaresolverr/flaresolverr :latest :v3.5.0	139dfee1c6f8	openssl@3.0.20-1~deb12u1	no fix listed	5
koenkk/zigbee2mqtt :2.14.1	fef0de769dcd	openssl@3.5.7-r0	3.5.8-r0	5