StackRadar

CVE-2026-63073

Critical

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,744
of 17,803 indexed, latest versions
Container images
1,633
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,744 of 17,803 indexed charts deploy, on 1,633 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,163
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2436
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63073DEBIAN-CVE-2026-63073UBUNTU-CVE-2026-63073AZL-97950
Also known as
USN-8678-1

Charts affected

1,744 by stars
ChartLatestAffected imagesRadar Score
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

10,657
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

4,553
audiobookshelfrubxkubeVerified publisher0.1.31 of 1See more

audiobookshelf rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/advplyr/audiobookshelf:2.36.0180acad33d69
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,724
cloudflare-tunnelrubxkubeVerified publisher0.3.31 of 1See more

cloudflare-tunnel rubxkube 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.6.16d91c121b803
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

625
gitearubxkubeVerified publisher1.2.31 of 1See more

gitea rubxkube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
gitea/gitea:1.27.134e3f6b75f5c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

599
glancerubxkubeVerified publisher0.1.11 of 1See more

glance rubxkube 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
glanceapp/glance:v0.8.532ab73d80f2b
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

764
jackettrubxkubeVerified publisher1.4.11 of 1See more

jackett rubxkube 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
linuxserver/jackett:0.24.2066f1f23e0c9845
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

498
jellyfinrubxkubeVerified publisher1.3.11 of 1See more

jellyfin rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

2,639
komgarubxkubeVerified publisher0.1.31 of 1See more

komga rubxkube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
gotson/komga:1.26.36c2a967bbe9a
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

2,305
linkdingrubxkubeVerified publisher1.2.41 of 1See more

linkding rubxkube 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.47.0e35cb50e0581
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,059
simple-coffeerubxkubeVerified publisher0.1.01 of 1See more

simple-coffee rubxkube 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
qjoly/kubernetes-coffee-image:simpleec94d3bdc035
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,554
smokepingrubxkubeVerified publisher1.2.11 of 1See more

smokeping rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
linuxserver/smokeping:2.9.02f4488c9afcd
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

915
spindlerubxkubeVerified publisher0.1.21 of 2See more

spindle rubxkube 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/qjoly/spindle:v1.16.1-alphaaab0c99d313f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,166
tranquil-pdsrubxkubeVerified publisher0.2.01 of 2See more

tranquil-pds rubxkube 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:18-alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

635
vaultwardenrubxkubeVerified publisher1.2.41 of 1See more

vaultwarden rubxkube 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,766
your-spotifyrubxkubeVerified publisher1.0.12 of 3See more

your-spotify rubxkube 1.0.1

2 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
yooooomi/your_spotify_client:1.20.0e4da90a0634c
openssl@3.5.6-r0
3.5.8-r0
yooooomi/your_spotify_server:1.20.0624ea009f2ef
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

5,107
rybbitrybbit-helm1.3.03 of 7See more

rybbit rybbit-helm 1.3.0

3 of the 7 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
openssl@3.5.5-r0
3.5.8-r0
ghcr.io/rybbit-io/rybbit-backend:lateste0d1b397e33c
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/rybbit-io/rybbit-client:latest9a3bbb2e837a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,858
nadekobotryuunosukeds30.1.21 of 2See more

nadekobot ryuunosukeds3 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

8,789
transmissionryuunosukeds31.6.21 of 2See more

transmission ryuunosukeds3 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2

Open the chart page →

9,738
s3-browsers3-browser0.4.11 of 1See more

s3-browser s3-browser 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
registry.gitlab.com/evolves-fr/s3-browser:0.4.1c350c941fe7b
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

578
safe-config-servicesafe-global0.1.01 of 3See more

safe-config-service safe-global 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,612
safe-stacksafe-global0.1.02 of 9See more

safe-stack safe-global 0.1.0

2 of the 9 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
safeglobal/safe-config-service:latest09a5e495c219
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
safeglobal/safe-transaction-service:latest80db836cc5d5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

19,714
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
safeglobal/safe-transaction-service:latest80db836cc5d5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

16,736
piholesantisbon0.2.01 of 1See more

pihole santisbon 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
pihole/pihole:latestf7d1be836e3b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

571
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

12,769
grafanasb-helm-charts0.4.01 of 1See more

grafana sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
grafana/grafana:12.2.22ebef928d7e5
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,809
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,591
memcachedsb-helm-charts0.4.01 of 1See more

memcached sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/memcached:1.6.39-alpine3.227b45203a99eb
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

683
nextcloudsb-helm-charts0.4.02 of 2See more

nextcloud sb-helm-charts 0.4.0

2 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
library/postgres:16-alpinecf78e76683b9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

9,863
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,415
ed-deploymentscaleway-charts0.1.01 of 1See more

ed-deployment scaleway-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
nginxdemos/hello:plain-text751bf8933179
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,294
scaleway-secrets-store-csiscaleway-charts0.1.11 of 1See more

scaleway-secrets-store-csi scaleway-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
scaleway/scaleway-secrets-store-csi:v0.1.19acc53a69962
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

243
postgresscalified-postgresVerified publisher18.4.01 of 1See more

postgres scalified-postgres 18.4.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,702
sonarqubescalified-sonarqubeVerified publisher26.9.01 of 2See more

sonarqube scalified-sonarqube 26.9.0

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

494
factorioschichtelVerified publisher0.1.11 of 1See more

factorio schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
openssl@3.5.1-1
3.5.7-1~deb13u2

Open the chart page →

2,995
mosquittoschichtelVerified publisher0.3.41 of 1See more

mosquitto schichtel 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:2.0.22212f89e1eaeb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
nvme-exporterschichtelVerified publisher0.1.61 of 1See more

nvme-exporter schichtel 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/b-it-projects-gmbh/nvme_exporter:lateste70307b193c6
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

1,071
pev2schichtelVerified publisher0.3.01 of 1See more

pev2 schichtel 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
dalibo/explain.dalibo.com:2.20.12a0b749c2f7f
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,179
s3-backupschichtelVerified publisher0.10.01 of 1See more

s3-backup schichtel 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/pschichtel/s3-backup:0.7.017666811f6a7
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,384
teamspeak3schichtelVerified publisher1.0.21 of 1See more

teamspeak3 schichtel 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/teamspeak:3.13.74d3fa1c0db9a
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

774
vaultwardenschichtelVerified publisher0.9.21 of 1See more

vaultwarden schichtel 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,766
wordpressschichtelVerified publisher0.10.102 of 2See more

wordpress schichtel 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/wordpress:6.9.4-fpmad4a8bae2eb4
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

8,316
zncschichtelVerified publisher0.3.11 of 1See more

znc schichtel 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/znc:1.10.1c731c6a9b8b6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

750
cinnyappschoenwald1.0.111 of 1See more

cinnyapp schoenwald 1.0.11

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/cinnyapp/cinny:v4.12.6a7805a8a60ff
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

800
elk-frontendschoenwald0.2.221 of 1See more

elk-frontend schoenwald 0.2.22

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/elk-zone/elk:v1.0.1236faedcb68a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

389
etherpadschoenwald0.3.01 of 1See more

etherpad schoenwald 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
etherpad/etherpad:2.7.2b723fe5f2594
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

2,130
minifluxschoenwald0.1.61 of 1See more

miniflux schoenwald 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
miniflux/miniflux:2.3.349d7b6098761
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

234
synapse-adminschoenwald1.0.11 of 1See more

synapse-admin schoenwald 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,798
ddclientschoolguys-helmcharts0.2.11 of 1See more

ddclient schoolguys-helmcharts 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
linuxserver/ddclient:4.0.06468911d00b1
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

360
eclipse-mqttschoolguys-helmcharts0.1.21 of 1See more

eclipse-mqtt schoolguys-helmcharts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:2.0.22212f89e1eaeb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149

Container images carrying it

1,633 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-63073.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.