StackRadar

CVE-2026-63073

Critical

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.8
base score, highest
EPSS
0.009
59th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,766
of 17,790 indexed, latest versions
Container images
1,643
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63073 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,766 of 17,790 indexed charts deploy, on 1,643 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,169
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2440
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63073DEBIAN-CVE-2026-63073UBUNTU-CVE-2026-63073AZL-97950
Also known as
USN-8678-1

Charts affected

1,766 by stars
ChartLatestAffected imagesRadar Score
victoria-metrics-k8s-stackwenerme0.92.12 of 7See more

victoria-metrics-k8s-stack wenerme 0.92.1

2 of the 7 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
grafana/grafana:13.1.17cb8c64c4d57
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,890
wexa-studiowexa-studio1.2.04 of 15See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:15-alpinefe0737ba566a
openssl@3.5.7-r0
3.5.8-r0
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
openssl@3.5.0-r0
3.5.8-r0
temporalio/server:1.29.1c1e3326b2ce1
openssl@3.5.0-r0
3.5.8-r0
temporalio/ui:2.44.00b36e00aad30
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

14,618
whereaboutswhereaboutsVerified publisher0.3.01 of 1See more

whereabouts whereabouts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/whereabouts:v0.9.4f279fd7dc112
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

618
wikiwikijs3.0.02 of 2See more

wiki wikijs 3.0.0

2 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
requarks/wiki:268f0d1848261
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

5,472
metabasewiremindVerified publisher2.27.5-wiremind01 of 1See more

metabase wiremind 2.27.5-wiremind0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
metabase/metabase:v0.61.1.x9491ed11c901
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,640
ovh-exporterwiremindVerified publisher1.2.01 of 1See more

ovh-exporter wiremind 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/wiremind/ovh-exporter:v2.3.1609f955bd977
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

209
wordpress-alpinewordpress-alpine1.5.182 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

2 of the 6 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/memcached:1.6.45dc561d52bb8a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/shesselink81/nginx-alpine:7.1.0.09783481cad2a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,032
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,635
wicekxxczakiVerified publisher0.1.2551See more

wicek xxczaki 0.1.255

1 container image this version deploys carries CVE-2026-63073.

Container imageDigestPackageFixed in
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

—
helm-demoyahoon-helm-demoVerified publisher1.0.01 of 1See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/yahoon/helm-demo:1.0.02930290a758c
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

1,293
prometheus-monitoring-stackyotron-helm-charts1.2.01 of 3See more

prometheus-monitoring-stack yotron-helm-charts 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

879
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

467
homerzekker6Verified publisher8.35.01 of 1See more

homer zekker6 8.35.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
b4bz/homer:v26.08.3febc8967c9f7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
language-toolzekker6Verified publisher1.12.12 of 2See more

language-tool zekker6 1.12.1

2 of the 2 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
erikvl87/languagetool:6.7-dockerupdate-3e1ea6a975388
openssl@3.5.5-r0
3.5.8-r0
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,571
zipkinzipkinVerified publisher0.5.01 of 1See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,159
zoo-project-druzoo-projectOfficialVerified publisher0.10.43 of 6See more

zoo-project-dru zoo-project 0.10.4

3 of the 6 container images this version deploys carry CVE-2026-63073.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
openssl@3.5.7-r0
3.5.8-r0
library/postgres:18.4-alpine3.249a8afca54e78
openssl@3.5.7-r0
3.5.8-r0
library/rabbitmq:4.3.2-alpine835cbc6fabce
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

7,916

Container images carrying it

1,643 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
metabase/metabase:v0.61.1.x9491ed11c901
openssl@3.5.6-r0
3.5.8-r0
2
mikefarah/yq:4:latestcfc4eee65859
openssl@3.5.7-r0
3.5.8-r0
2
moby/buildkit:v0.32.2-rootless504731e577c2
openssl@3.5.7-r0
3.5.8-r0
2
mojaloop/reporting-events-processor-svc:v3.5.11e0d24d28512
openssl@3.5.1-r0
3.5.8-r0
2
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
openssl@3.5.4-r0
3.5.8-r0
2
n8nio/n8n:2.36.714c4285bc303
openssl@3.5.7-r1
3.5.8-r0
2
natsio/nats-server-config-reloader:0.21.110ff229eaf52
openssl@3.5.4-r0
3.5.8-r0
2
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
openssl@3.5.6-r0
3.5.8-r0
2
nutanix/nai-jobs:v2.8.09c373718e1b1
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
obolnetwork/charon:v1.10.0278c7e2897b6
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
2
opencsghq/postgres:15.19b98600564e07
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
openebs/alpine-bash:4.6.0366d6c5f18c3
openssl@3.5.7-r0
3.5.8-r0
2
openebs/alpine-sh:4.6.0640c187dccda
openssl@3.5.7-r0
3.5.8-r0
2
openebs/provisioner-localpv:4.6.099f5116f5cb8
openssl@3.5.7-r0
3.5.8-r0
2
pgautoupgrade/pgautoupgrade:18-alpine48b448825656
openssl@3.5.7-r0
3.5.8-r0
2
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
polyaxon/polyaxon-agent:2.16.4eca6952b20e6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
polyaxon/polyaxon-cli:2.16.4024ff3fa775e
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
rancher/local-path-provisioner:v0.0.3534ff0847cc47
openssl@3.5.5-r0
3.5.8-r0
2
requarks/wiki:2:latest68f0d1848261
openssl@3.5.6-r0
3.5.8-r0
2
safeglobal/safe-config-service:latest09a5e495c219
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
safeglobal/safe-transaction-service:latest80db836cc5d5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
sikalabs/hello-world-server:latest5f49bf889a64
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
openssl@3.5.7-r0
3.5.8-r0
2
swaggerapi/swagger-ui:v5.32.143d9316996884
openssl@3.5.7-r0
3.5.8-r0
2
syncthing/syncthing:2.1.1775c4aac4862
openssl@3.5.6-r0
3.5.8-r0
2
taigaio/taiga-back:latest4beed8f62c9f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
taigaio/taiga-protected:latestfd4568a97a59
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
2
timberio/vector:0.51.1-alpine2d16ae87ec39
openssl@3.5.4-r0
3.5.8-r0
2
timescale/timescaledb:latest-pg156343bdc87ca1
openssl@3.5.7-r0
3.5.8-r0
2
valkey/valkey:7.2.11-alpine10328d00120d
openssl@3.5.5-r0
3.5.8-r0
2
valkey/valkey:9.0.1546304417fea
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
2
valkey/valkey:8.1.481db6d39e1bb
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2
2
valkey/valkey:9.1.08e8d64b405ce
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
valkey/valkey:9.1.0-alpine3.23c9b77919daeb
openssl@3.5.7-r0
3.5.8-r0
2
gcr.io/cloud-tagging-10302018/gtm-cloud-image:stable688d35c6c544
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
ghcr.io/alam00000/bentopdf:2.8.86ef493c8e3bd
openssl@3.5.7-r0
3.5.8-r0
2
ghcr.io/appscode/fargocd:v0.0.31f5c791fc54d
openssl@3.5.7-r0
3.5.8-r0
2
ghcr.io/appscode/license-proxyserver:v0.1.1e192ad567e0b
openssl@3.5.5-r0
3.5.8-r0
2
ghcr.io/appscode/maxmind-geoip:city-mmdb-latesta3236324c4e2
openssl@3.5.6-r0
3.5.8-r0
2
ghcr.io/appscode/service-provider:v0.0.2f6e481386d70
openssl@3.5.4-r0
3.5.8-r0
2
ghcr.io/astriaorg/astria-geth:latest4249e403225a
openssl@3.5.0-r0
3.5.8-r0
2
ghcr.io/bakito/sealed-secrets-web:v3.3.2cb4d892c61c3
openssl@3.5.7-r0
3.5.8-r0
2
ghcr.io/bank-vaults/vault-operator:v1.24.06f622c5fb8a9
openssl@3.5.6-r0
3.5.8-r0
2
ghcr.io/chroma-core/chroma:1.5.91e0b73a187a2
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
2
ghcr.io/cinnyapp/cinny:v4.12.6a7805a8a60ff
openssl@3.5.7-r0
3.5.8-r0
2
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
openssl@3.5.0-r0
3.5.8-r0
2
ghcr.io/cross-seed/cross-seed:6.13.381afafdd96a5
openssl@3.5.1-r0
3.5.8-r0
2
ghcr.io/fluxcd/flux-cli:v2.9.1020edbaee890
openssl@3.5.7-r0
3.5.8-r0
2
ghcr.io/fluxcd/helm-controller:v1.6.2e17ab0e5885d
openssl@3.5.7-r0
3.5.8-r0
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.