StackRadar

CVE-2026-63073

Critical

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,759
of 17,792 indexed, latest versions
Container images
1,642
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,759 of 17,792 indexed charts deploy, on 1,642 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,171
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2437
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63073DEBIAN-CVE-2026-63073UBUNTU-CVE-2026-63073AZL-97950
Also known as
USN-8678-1

Charts affected

1,759 by stars
ChartLatestAffected imagesRadar Score
ms-licenses-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-licenses-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-licenses-worker:latest2c302fb759dc
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-locations-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-locations-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-locations-grpc:latest26855ebf033b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-locations-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-locations-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-locations-rest:latestb8d4447931f4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-microsoftgraph-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-microsoftgraph-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-microsoftgraph-rest:latestc314db2706e5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

248
ms-microsoftgraph-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-microsoftgraph-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-microsoftgraph-worker:latestc3568b61d762
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

248
ms-modules-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-modules-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-modules-rest:latest091de71a83df
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-notification-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-notification-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-notification-grpc:latestc7525541cb5f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

356
ms-payments-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-grpc:latest88ea9bbcb04c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-payments-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-rest:latest6a3591b82a40
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-payments-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-payments-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-payments-worker:latest50171f042666
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-rbac-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-rbac-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-rbac-grpc:latest85bee1edfe2a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-rbac-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-rbac-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-rbac-rest:latesta156d021775d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-roles-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-roles-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-roles-rest:latestc364711341a0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-services-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-services-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-services-grpc:latest1462eb1101db
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-services-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-services-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-services-rest:lateste0f8ef13842f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-tenants-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-grpc:latesta33d3361e60c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-tenants-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-rest:latest5762fc421070
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-tenants-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-tenants-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-tenants-worker:latestf476a3084860
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-users-grpccodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-grpc codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-users-grpc:latest2cff841dd824
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-users-restcodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-rest codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-users-rest:lateste9c7ab8d91ef
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
ms-users-workercodedesignplus-chartsVerified publisher0.0.241 of 1See more

ms-users-worker codedesignplus-charts 0.0.24

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
codedesignplus/ms-users-worker:latest94094b21a2c5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

236
codehubcodehubVerified publisher6.2.181 of 5See more

codehub codehub 6.2.18

1 of the 5 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

13,312
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,142
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,142
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,142
cohdicohdi0.2.21 of 3See more

cohdi cohdi 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,797
loki-stackcommon-chartsVerified publisher1.0.34 of 12See more

loki-stack common-charts 1.0.3

4 of the 12 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
openssl@3.5.7-r0
3.5.8-r0
library/memcached:1.6.39-alpinec8503d4491ed
openssl@3.5.4-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.10.021b9fe7bb29d
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

5,409
opencloudcommunity-opencloud3.0.01 of 11See more

opencloud community-opencloud 3.0.0

1 of the 11 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
apache/tika:latest-full80072bb73dd3
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

3,840
conjur-k8s-csi-providerconjure0.2.51 of 1See more

conjur-k8s-csi-provider conjure 0.2.5

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
cyberark/conjur-k8s-csi-provider:latest737a967088d9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

295
cert-manager-webhook-bluecatcontainerooVerified publisher1.0.21 of 1See more

cert-manager-webhook-bluecat containeroo 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/containeroo/cert-manager-webhook-bluecat:latest96f82d5840d4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

441
ConvertServiceWeb-Helm-Buildconvertserviceweb-helm-build0.1.11 of 7See more

ConvertServiceWeb-Helm-Build convertserviceweb-helm-build 0.1.1

1 of the 7 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

10,157
cors-proxycors-proxyVerified publisher1.2.01 of 1See more

cors-proxy cors-proxy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/hiteshnayak305/cors-proxy:1.2.0e6ff0a131556
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,600
cosanetcosanet1.0.01 of 1See more

cosanet cosanet 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/cosanet/cosanet:1.0.098cb5d9fa215
openssl@3.5.1-1
3.5.7-1~deb13u2

Open the chart page →

2,220
job-databasecreate-databases0.1.361 of 1See more

job-database create-databases 0.1.36

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
csghubcsghubVerified publisher2.5.03See more

csghub csghub 2.5.0

3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
openssl@3.5.6-r0
3.5.8-r0
library/memcached:1.6.38-alpinee93269864a7d
openssl@3.5.1-r0
3.5.8-r0
opencsghq/postgres:15.19b98600564e07
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

—
csgshipcsghubVerified publisher0.4.62 of 10See more

csgship csghub 0.4.6

2 of the 10 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
casbin/casdoor:3.62.17729da148c61
openssl@3.5.6-r0
3.5.8-r0
opencsghq/postgres:15.19b98600564e07
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

11,544
dataflowcsghubVerified publisher2.5.01 of 7See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
opencsghq/postgres:15.19b98600564e07
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

6,732
csi-driver-ipfscsi-driver-ipfs0.2.01 of 6See more

csi-driver-ipfs csi-driver-ipfs 0.2.0

1 of the 6 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/ptrvsrg/csi-driver-ipfs:latest97d2d9ccd7a5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,675
cspconsolecspconsole1.3.111 of 5See more

cspconsole cspconsole 1.3.11

1 of the 5 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/nginx:1.28-alpinea8b39bd9cf0f
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

12,394
cloudflaredcyberjakeVerified publisher0.3.201 of 1See more

cloudflared cyberjake 0.3.20

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.6.16d91c121b803
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

618
dakeradakera-helmVerified publisher0.11.1072 of 3See more

dakera dakera-helm 0.11.107

2 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/dakera-ai/dakera:0.11.101af610992a416
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/dakera-ai/dakera-dashboard:0.3.292e059589f7f7
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

3,983
damap-chartdamapVerified publisher0.3.02 of 5See more

damap-chart damap 0.3.0

2 of the 5 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/damap-org/damap-frontend:5.0.1609f48af4efc
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

14,322
kuberay-dashboarddanchevVerified publisher0.0.51 of 1See more

kuberay-dashboard danchev 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
quay.io/kuberay/dashboard:v1.7.07e43d4b4fd9f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

552
nvidia-gpu-exporterdanchevVerified publisher1.0.31 of 1See more

nvidia-gpu-exporter danchev 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/utkuozdemir/nvidia_gpu_exporter:1.5.0d75967a4dd72
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4

Open the chart page →

1,228
dapr-agentsdapr-agents-devVerified publisher0.1.56 of 31See more

dapr-agents dapr-agents-dev 0.1.5

6 of the 31 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
openssl@3.5.5-r0
3.5.8-r0
kiwigrid/k8s-sidecar:1.30.98c06e1ba643a
openssl@3.5.1-r0
3.5.8-r0
library/memcached:1.6.39-alpinec8503d4491ed
openssl@3.5.4-r0
3.5.8-r0
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
openssl@3.5.6-r0
3.5.8-r0
redis/redisinsight:latestb5e19ee240ab
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

22,355
dara-chartsdara-charts0.1.01 of 2See more

dara-charts dara-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,598
dns-mesh-controllerdashdns2.0.81 of 2See more

dns-mesh-controller dashdns 2.0.8

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
emirozbir/dashdns-admission-webhook:v2.0.56801ba2a3fc3
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,103
dash-opsdash-ops0.0.41 of 1See more

dash-ops dash-ops 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
dashops/dash-ops:latest23537693ff05
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

507
metabasedasmeta0.1.01 of 1See more

metabase dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
metabase/metabase:v0.63.1.124f150effd484
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

805
monitoring-stackdata354-helmVerified publisher1.4.21 of 4See more

monitoring-stack data354-helm 1.4.2

1 of the 4 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,220

Container images carrying it

1,642 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-63073.

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.