CVE-2026-63073

Critical

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026

Severity: Critical; worst across findings
CVSS: 9.8; base score, highest
EPSS: 0.009; 59th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,758; of 17,803 indexed, latest versions
Container images: 1,647; deployed by those charts
Fix available: 3 of 4; affected packages

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,758 of 17,803 indexed charts deploy, on 1,647 images.

Affected package	Affected versions	Fixed in	Images
opensslapk	3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more	3.5.8-r0	1,176
openssldeb	3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more	3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2	437
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 more	no fix listed	11
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl3	3.3.7-6	23

OSV records: ALPINE-CVE-2026-63073 DEBIAN-CVE-2026-63073 UBUNTU-CVE-2026-63073 AZL-97950
Also known as: USN-8678-1

Charts affected

1,758 by stars

Chart

Latest

Affected images

Radar Score

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container image	Digest	Package	Fixed in
library/wordpress :latest	5a93c470ae82	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

5,737

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	openssl@3.5.6-1~deb13u1	3.5.7-1~deb13u2

Open the chart page →

1,330

prometheus-monitoring-stackyotron-helm-charts

1.2.0

1 of 3 See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container image	Digest	Package	Fixed in
grafana/grafana :latest	f772d434e8fa	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

936

endlessh-gozekker6

0.4.0

1 of 1 See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container image	Digest	Package	Fixed in
ghcr.io/shizunge/endlessh-go :2026.0730.0	8826dad32623	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2

Open the chart page →

490

homerzekker6

8.35.0

1 of 1 See more

homer zekker6 8.35.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container image	Digest	Package	Fixed in
b4bz/homer :v26.08.3	febc8967c9f7	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

149

language-toolzekker6

1.12.1

2 of 2 See more

language-tool zekker6 1.12.1

2 of the 2 container images this version deploys carry CVE-2026-63073.

Container image	Digest	Package	Fixed in
erikvl87/languagetool :6.7-dockerupdate-3	e1ea6a975388	openssl@3.5.5-r0	3.5.8-r0
library/alpine :3	28bd5fe8b56d	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

1,569

zipkinzipkin

0.5.0

1 of 1 See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-slim :3.6.0	a69e1057df36	openssl@3.5.5-r0	3.5.8-r0

Open the chart page →

1,160

zoo-project-druzoo-project

0.10.4

3 of 6 See more

zoo-project-dru zoo-project 0.10.4

3 of the 6 container images this version deploys carry CVE-2026-63073.

Container image	Digest	Package	Fixed in
curlimages/curl :8.21.0	7c12af72ceb3	openssl@3.5.7-r0	3.5.8-r0
library/postgres :18.4-alpine3.24	9a8afca54e78	openssl@3.5.7-r0	3.5.8-r0
library/rabbitmq :4.3.2-alpine	835cbc6fabce	openssl@3.5.7-r0	3.5.8-r0

Open the chart page →

7,949

Container images carrying it

1,647 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-63073.