StackRadar

CVE-2026-63073

Critical

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,744
of 17,803 indexed, latest versions
Container images
1,633
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,744 of 17,803 indexed charts deploy, on 1,633 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,163
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2436
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63073DEBIAN-CVE-2026-63073UBUNTU-CVE-2026-63073AZL-97950
Also known as
USN-8678-1

Charts affected

1,744 by stars
ChartLatestAffected imagesRadar Score
loki-stackpyalive-cdmswebappVerified publisher2.6.51 of 4See more

loki-stack pyalive-cdmswebapp 2.6.5

1 of the 4 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

6,556
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/redis:alpinebecdda6c7f4b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

14,624
qantas-apiqantas-helm0.1.01 of 3See more

qantas-api qantas-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,667
open-terminalqaoruVerified publisher0.2.41 of 1See more

open-terminal qaoru 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/open-webui/open-terminal:0.13.0-slimdec44673c865
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,056
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,408
couchdbquench-couchdbVerified publisher0.0.121 of 2See more

couchdb quench-couchdb 0.0.12

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

188
gohoarderraczylo-comVerified publisher0.1.1741 of 4See more

gohoarder raczylo-com 0.1.174

1 of the 4 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/lukaszraczylo/gohoarder-migrate:0.1.174ed6053b62bb2
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
headlampradar-baseVerified publisher1.0.01 of 1See more

headlamp radar-base 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/headlamp-k8s/headlamp:v0.43.05d03caa26df7
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

622
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
openssl@3.5.5-1ubuntu3
3.5.5-1ubuntu3.4

Open the chart page →

3,232
radar-hydraradar-baseVerified publisher0.3.41 of 2See more

radar-hydra radar-base 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
curlimages/curl:8.15.04026b29997dc
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

2,186
radar-self-enrolment-uiradar-baseVerified publisher0.4.21 of 1See more

radar-self-enrolment-ui radar-base 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-self-enrolment-ui:0.1.0b9a7cd3cc099
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,508
ratecapratecapVerified publisher0.1.22 of 3See more

ratecap ratecap 0.1.2

2 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/sairam0424/ratecap-core:latest2f6c7157fa8e
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/sairam0424/ratecap-sidecar:lateste7feca7ac7cc
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

298
mihomos-clusterre8ch-mihomos-clusterVerified publisher0.1.11 of 3See more

mihomos-cluster re8ch-mihomos-cluster 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
metacubex/mihomo:v1.19.29e1d7dadaa936
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

582
readability-js-serverreadability-js-server0.1.01 of 1See more

readability-js-server readability-js-server 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
phpdockerio/readability-js-server:1.8.0ea8354b42600
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,861
helm-redchefredchef0.1.01 of 3See more

helm-redchef redchef 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/redis:alpinebecdda6c7f4b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,792
etherpadredhat-cop0.0.81 of 1See more

etherpad redhat-cop 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
etherpad/etherpad:latest6020e7b57f4b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

896
redis-cartredis-chart0.1.01 of 1See more

redis-cart redis-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/redis:alpinebecdda6c7f4b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

168
redis-enforce-expireredis-enforce-expire1.0.01 of 1See more

redis-enforce-expire redis-enforce-expire 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
udhos/redis-enforce-expire:1.0.0615b6a7d742e
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,296
redisinsightredisinsightVerified publisher0.1.01 of 1See more

redisinsight redisinsight 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
redis/redisinsight:latestb5e19ee240ab
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,040
redminerestic-pvc-backupVerified publisher0.2.61 of 1See more

redmine restic-pvc-backup 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,284
restic-pvc-backuprestic-pvc-backupVerified publisher0.2.12 of 2See more

restic-pvc-backup restic-pvc-backup 0.2.1

2 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ngosang/restic-exporter:2.1.2a8f9cfa30162
openssl@3.5.7-r0
3.5.8-r0
restic/restic:0.19.1136600b6ff68
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

954
restinthemiddlerestinthemiddleVerified publisher2.0.31 of 1See more

restinthemiddle restinthemiddle 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
jdschulze/restinthemiddle:v2.3.13fde2dfbcacc2
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
delugeretsamedocVerified publisher26.9.01 of 1See more

deluge retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
linuxserver/deluge:2.2.09505c64720af
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

775
rhiorhio0.3.41 of 1See more

rhio rhio 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/hiro-microdatacenters-bv/rhio:0.3.4-3e6bec1ea7f4c4287646
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
rhio-operatorrhio0.3.41 of 1See more

rhio-operator rhio 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/hiro-microdatacenters-bv/rhio:0.3.4-3e6bec1ea7f4c4287646
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
elkrivals-spaceVerified publisher0.1.11 of 1See more

elk rivals-space 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/elk-zone/elk:main046dfdb8550c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

278
libretranslaterivals-spaceVerified publisher1.0.01 of 2See more

libretranslate rivals-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
harvester-cloud-providerrke2-charts0.2.15001 of 2See more

harvester-cloud-provider rke2-charts 0.2.1500

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
rancher/mirrored-kube-vip-kube-vip-iptables:v1.2.389c3f898ac5a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

452
memosrm3lVerified publisher0.1.11 of 1See more

memos rm3l 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
neosmemo/memos:0.24c6defc2dfb98
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

1,622
networking-toolboxrm3lVerified publisher0.1.01 of 1See more

networking-toolbox rm3l 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
lissy93/networking-toolbox:latest700862839553
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

824
wg-easyrm3lVerified publisher0.2.01 of 1See more

wg-easy rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

1,160
matrix-stackrock8sVerified publisher0.8.12 of 7See more

matrix-stack rock8s 0.8.1

2 of the 7 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/haproxy:3.1-alpine475863a372c9
openssl@3.5.6-r0
3.5.8-r0
library/postgres:17-alpine18cfe3ef5e68
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

9,328
reviewboardrock8sVerified publisher0.0.11 of 3See more

reviewboard rock8s 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/memcached:alpinec29847751abb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

6,202
monitoringrocketchat-server0.0.172 of 9See more

monitoring rocketchat-server 0.0.17

2 of the 9 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.98c06e1ba643a
openssl@3.5.1-r0
3.5.8-r0
nginxinc/nginx-unprivileged:1.29-alpine0c79d56aee56
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

6,887
jaegerromanow-helm-chartsVerified publisher1.7.31 of 1See more

jaeger romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
jaegertracing/jaeger:2.9.0e128b9adbb29
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,605
caddy-reverse-proxyromholdings0.10.11 of 1See more

caddy-reverse-proxy romholdings 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/caddy:latestdf7f1c2fb114
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

846
devtron-enterpriseromholdings48.0.01 of 28See more

devtron-enterprise romholdings 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
quay.io/devtron/dashboard:0d8f6cf4-60e17132-931-39393aa61fffb8ae8
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

68,765
devtron-operatorromholdings0.23.31 of 11See more

devtron-operator romholdings 0.23.3

1 of the 11 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
quay.io/devtron/dashboard:c7b89667-690-39290c63823af3835
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

33,219
rommromm-helm-chartVerified publisher1.5.51 of 3See more

romm romm-helm-chart 1.5.5

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
rommapp/romm:5.2.03512f2ca4557
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

3,426
acme-linoderotationalVerified publisher1.0.41 of 1See more

acme-linode rotational 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
rotationalio/linode-acme-webhook:1.0.0cc7bb030a20f
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,316
beaconrotationalVerified publisher0.2.01 of 1See more

beacon rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
rotationalio/beacon:0.2.0f8d8b694515a
openssl@3.5.6-1~deb13u2+dhi1
3.5.7-1~deb13u2

Open the chart page →

975
geopingrotationalVerified publisher1.3.21 of 1See more

geoping rotational 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
rotationalio/geoping:1.3.034bcb6fc3cb7
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,599
rotational-apirotationalVerified publisher1.3.11 of 1See more

rotational-api rotational 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
rotationalio/rotational-api:1.3.0f1a2d05d8fff
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,598
vanityrotationalVerified publisher1.2.21 of 1See more

vanity rotational 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
rotationalio/vanity:1.2.0d77350f69b45
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,228
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

6,978
vsl-rpcrss30.3.41 of 4See more

vsl-rpc rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
quay.io/curl/curl:8.16.0b17b13321678
openssl@3.5.2-r0
3.5.8-r0

Open the chart page →

4,615
vsl-sequencerrss30.3.41 of 4See more

vsl-sequencer rss3 0.3.4

1 of the 4 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
quay.io/curl/curl:8.16.0b17b13321678
openssl@3.5.2-r0
3.5.8-r0

Open the chart page →

4,615
adguard-homertomik-helm-chartsVerified publisher0.0.21 of 1See more

adguard-home rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.79aba9e3bf0613
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

175
donetickrtomik-helm-chartsVerified publisher1.1.01 of 1See more

donetick rtomik-helm-charts 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
donetick/donetick:v0.1.79a1cc21dd5a37
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

791
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

5,346

Container images carrying it

1,633 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-63073.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.