StackRadar

CVE-2026-63073

Critical

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,736
of 17,803 indexed, latest versions
Container images
1,626
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,736 of 17,803 indexed charts deploy, on 1,626 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,159
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2433
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63073DEBIAN-CVE-2026-63073UBUNTU-CVE-2026-63073AZL-97950
Also known as
USN-8678-1

Charts affected

1,736 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

1,626 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/absmach/magistrala/ui-backend:latest4adf360dbf1e
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/advplyr/audiobookshelf:2.32.1a52dc5db694a
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/akpw/mktxp:latest2b3ccb1c2bd9
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/akpw/mktxp:1.2.17bd6f22f7db0a
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/akpw/mktxp:1.2.20f894f2457670
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/alam00000/bentopdf-simple:2.8.5268f3e4a1aee
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/alam00000/bentopdf-simple:2.8.42bae644d2735
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/alekc/samba-docker:v1.1.0cc9a028d9c43
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
1
ghcr.io/appscode/ace:v0.2.0b8e03da90e70
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/appscode/acerproxy:v0.2.021de3771fdd5
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/appscode/aceshifter:v0.0.3e5f5c254a55a
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/appscode/aws-credential-manager:v0.1.00511bbe501c3
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/appscode/azure-credential-manager:v0.1.0f5c797f7fbe7
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/appscode/catalog-manager:v0.13.0fc336c5b9655
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/cattleset:v0.0.145554a03e448
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/cert-manager-webhook-ace:v0.0.2dc6b5fdcec06
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/appscode/cluster-presets:v0.0.128fbdd2479645
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/cluster-ui:2.4.0f527d10769ac
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/external-dns-operator:v0.4.05605f97e636d
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/falco-ui-server:v0.0.66ec488d89b56
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/appscode/gcp-credential-manager:v0.1.0b58345fe8209
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
1
ghcr.io/appscode/inbox-agent:v0.0.66b99ee9feece
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/appscode/offline-license-server:v0.0.76e4b66308d8f6
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/appscode/operator-shard-manager:v0.0.64a16c6ccecb8
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/outboxsyncer:v0.5.0150baab6115d
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/pgoutbox:v0.0.4a96e06ec5e9f
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/platform-ui:2.4.0668ee2682eaf
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/appscode/secrets-store-csi-driver-provider-virtual-secrets:v0.2.07afb394f9f97
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/sidekick:v0.0.16d8d2a3c22ee7
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/storage-metrics-server:v0.1.09cb4acb742a9
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/taskqueue:v0.0.36877c958a3c6
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/appscode/trickster:v2.0.0cdbbed831f28
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/appscode/virtual-secrets-server:v0.4.0efa03f4c9551
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/appscode/website:v2026.9.1170d9d1b78d39
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/arch-anes/homer-operator:0.3.404e3b7d1bfa6
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/ashvinbambhaniya/nexus-tasks-backend:2.0.0f80349eb018b
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/aureq/cert-manager-webhook-ovh:0.9.160339cf9a75ca
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/autobrr/qui:v1.14.110b7945d4f09
openssl@3.5.5-r0
3.5.8-r0
1
ghcr.io/bank-vaults/bank-vaults:v1.33.198b6ea2ed319
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/bank-vaults/vault-secrets-webhook:v1.23.198baf045a1c9
openssl@3.5.6-r0
3.5.8-r0
1
ghcr.io/benc-uk/kubeview:latest45b64d7c7016
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/bensoer/external-secrets-reloader:v0.1.38e31b5a81853
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
openssl@3.5.4-r0
3.5.8-r0
1
ghcr.io/biru-scop/tenzu-front:latest16759fa523f8
openssl@3.5.7-r0
3.5.8-r0
1
ghcr.io/bitmagnet-io/bitmagnet:v0.10b6373349a301
openssl@3.5.7-r0
3.5.8-r0
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.