StackRadar

CVE-2026-63074

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,867
of 17,787 indexed, latest versions
Container images
3,109
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63074 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,867 of 17,787 indexed charts deploy, on 3,109 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+60 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u21,880
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,195
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63074DEBIAN-CVE-2026-63074UBUNTU-CVE-2026-63074AZL-97944ECHO-8298-2fc4-74d4
Also known as
USN-8678-1

Charts affected

2,867 by stars
ChartLatestAffected imagesRadar Score
librechatopenshift1.9.02 of 3See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

5,833
opentelemetry-demoopentelemetry-helmVerified publisher0.41.124 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

24 of the 34 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
openssl@3.5.7-r0
3.5.8-r0
jaegertracing/jaeger:2.19.0ede4864215be
openssl@3.5.6-r0
3.5.8-r0
library/postgres:18.4a02db8cac496
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-telemetry/demo:3.0.0-shipping02602e60edbf
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-telemetry/demo:3.0.0-kafka0601750a3ca4
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
openssl@3.0.2-0ubuntu1.25
3.0.2-0ubuntu1.29
ghcr.io/open-telemetry/demo:3.0.0-telemetry-docs3519858704e7
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-cart3f89a444250a
openssl@3.5.6-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-opamp-server62cfae32adb1
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-recommendation6510027907f9
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-mcp654f860148ba
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-telemetry/demo:3.0.0-chatbot66ba53497f1f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-telemetry/demo:3.0.0-quote6bc8f7f6809e
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
openssl@3.5.4-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-frontend9505e349e140
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-telemetry/demo:3.0.0-load-generatorcd12cb42fb15
openssl@3.5.6-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-paymentd498c7434d22
openssl@3.0.18-1~deb12u2
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-emaild674d4081ca4
openssl@3.5.6-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-agentdf5ee05e23e3
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
ghcr.io/open-telemetry/demo:3.0.0-currencyf82a7805e7ba
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/valkey-io/valkey:9.0.4-alpine3.23107b203169a2
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

22,678
openvaultopenvaultVerified publisher0.8.12 of 2See more

openvault openvault 0.8.1

2 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
openssl@3.5.0-r0
3.5.8-r0
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

6,899
opikopikOfficialVerified publisher2.2.615 of 13See more

opik opik 2.2.61

5 of the 13 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.0862d86046bbc
openssl@3.5.5-r0
3.5.8-r0
library/zookeeper:3.9.4dfa9ba46d14b
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.29
redis/redis-stack-server:7.2.0-v10e44b2b49d059
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
ghcr.io/comet-ml/opik/opik-frontend:2.2.6182af3818731e
openssl@3.5.6-r0
3.5.8-r0
ghcr.io/comet-ml/opik/opik-python-backend:2.2.61df70104803cb
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

14,422
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
openssl@3.0.2-0ubuntu1.25
3.0.2-0ubuntu1.29
shaowenchen/ops-server:latest315444f703f4
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29

Open the chart page →

9,049
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,279
ouriosouriosVerified publisher0.4.81 of 1See more

ourios ourios 0.4.8

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/jensholdgaard/ourios:latest3d87d932391d
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

339
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,694
prowlarrpanzer1119Verified publisher0.4.181 of 2See more

prowlarr panzer1119 0.4.18

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
linuxserver/prowlarr:2.4.0.5397-ls149a46d0ce0a823
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,001
radarrpanzer1119Verified publisher0.2.21 of 1See more

radarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/radarr:6.0.4.10291-ls2896c0948b42c14
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

950
sonarrpanzer1119Verified publisher0.2.21 of 1See more

sonarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

947
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
bitnamilegacy/postgresqldigest-pinned926356130b77
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

8,510
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

6,890
patchworkpatchworkVerified publisher0.8.61 of 2See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/patchwork:mainc01e018bced4
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

2,084
pbuf-registrypbuf-registry0.4.11 of 2See more

pbuf-registry pbuf-registry 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/pbufio/registry:v0.4.177a36c035b4b
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,941
fahclientpcktdmp2.6.01 of 2See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,732
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

7,075
periscopeperiscopeVerified publisher1.1.61 of 1See more

periscope periscope 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
openssl@3.0.20-1~deb12u1
no fix listed

Open the chart page →

806
piholepihole-helmVerified publisher1.6.01 of 1See more

pihole pihole-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
pihole/pihole:2026.07.2f7d1be836e3b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

571
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.29

Open the chart page →

7,616
matomopockostVerified publisher1.3.02 of 3See more

matomo pockost 1.3.0

2 of the 3 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,102
portraitportraitVerified publisher0.2.134 of 8See more

portrait portrait 0.2.13

4 of the 8 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
treskon/portrait:DEV-latest88e813f22347
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
treskon/portrait-pythonruntime:DEV-latest694c098bcb52
openssl@3.5.7-r0
3.5.8-r0
treskon/portrait-ui:DEV-lateste7970783bc8d
openssl@3.5.7-r0
3.5.8-r0
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

31,949
postgresqlpostgresqlVerified publisher0.3.172 of 2See more

postgresql postgresql 0.3.17

2 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/postgres:18.6-alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0
pgautoupgrade/pgautoupgrade:18-alpine48b448825656
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,268
postgresqlpostgresql-helm0.1.21 of 1See more

postgresql postgresql-helm 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,638
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,139
readarrpree-helm-chartsVerified publisher1.17.11 of 1See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.18.28058f7551205fbd
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

1,099
preparrpreparr0.19.72 of 6See more

preparr preparr 0.19.7

2 of the 6 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/postgres:18-alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/robbeverhelst/preparr:latest9acc172942f3
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,126
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/mariadb:11.7.2fcc7fcd7114a
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

5,483
dockerhub-exporterpromhippieVerified publisher2.15.11 of 1See more

dockerhub-exporter promhippie 2.15.1

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
quay.io/promhippie/dockerhub-exporter:2.15.1e432ef421257
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
hcloud-exporterpromhippieVerified publisher4.27.11 of 1See more

hcloud-exporter promhippie 4.27.1

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
quay.io/promhippie/hcloud-exporter:3.27.2c0110b2a3896
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
prowlerprowler-appVerified publisher0.0.93 of 5See more

prowler prowler-app 0.0.9

3 of the 5 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/neo4j:2026.02.25ab4ab0358cf
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
prowlercloud/prowler-api:5.31.14f252d579be2
openssl@3.0.20-1~deb12u2
no fix listed
prowlercloud/prowler-ui:5.31.179ee83c8e702
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

8,203
proxy-ipsecproxy-ipsec1.0.141 of 1See more

proxy-ipsec proxy-ipsec 1.0.14

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
caligari/proxy-ipsec:latest9d537a9c883d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

290
psa-restricted-patcherpsa-restricted-patcherVerified publisher0.10.11 of 1See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,402
pwpwVerified publisher1.6.43 of 3See more

pw pw 1.6.4

3 of the 3 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/nginx:1.31.4-alpine-slim1870de6d59aa
openssl@3.5.7-r0
3.5.8-r0
library/redis:8.6.6-alpine75934ddb37bf
openssl@3.5.7-r0
3.5.8-r0
tinyops/pw:1.15.4efdc97ede5c4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

466
pzserverpzserver0.1.171 of 2See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
lis314/project-zomboid-docker:latestaa2089c37920
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

3,022
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15

Open the chart page →

24,038
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29

Open the chart page →

6,835
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

2,809
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29

Open the chart page →

7,466
redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher1.0.21 of 1See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
promzeus/redis-sentinel-gateway:v182f6d56e280b
openssl@3.0.14-1~deb12u2
no fix listed

Open the chart page →

2,665
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,252
kminionredpanda-dataOfficialVerified publisher0.15.21 of 1See more

kminion redpanda-data 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
redpandadata/kminion:v2.3.0c05fa976428e
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

923
reportportalreportportal-ioOfficialVerified publisher26.8.128 of 15See more

reportportal reportportal-io 26.8.12

8 of the 15 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
openssl@3.0.16-1~deb12u1
no fix listed
library/postgres:18.4a02db8cac496
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/rabbitmq:4.3.4-managementeb5295d08332
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
reportportal/k8s-wait-for:latest06cdf299b397
openssl@3.5.7-r0
3.5.8-r0
reportportal/migrations:5.15.4464468240d7b
openssl@3.5.7-r1
3.5.8-r0
reportportal/service-auto-analyzer:5.15.5c449b93629a5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
reportportal/service-index:5.15.1b1860ed33071
openssl@3.5.7-r1
3.5.8-r0
reportportal/service-ui:5.15.5aea8747cb639
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

11,943
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

6,640
resurfaceresurfaceioVerified publisher3.9.02 of 3See more

resurface resurfaceio 3.9.0

2 of the 3 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
jitesoft/kubectl:latest9996dd28914f
openssl@3.5.7-r0
3.5.8-r0
resurfaceio/resurface:3.7.84d5cda2f64109
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29

Open the chart page →

7,487
atuinrm3lVerified publisher0.11.02 of 3See more

atuin rm3l 0.11.0

2 of the 3 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
openssl@3.0.11-1~deb12u2
no fix listed
ghcr.io/atuinsh/atuin:18.12.0e953fa9e36ef
openssl@3.0.18-1~deb12u2
no fix listed

Open the chart page →

6,548
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
openssl@3.0.13-1~deb12u1
no fix listed

Open the chart page →

9,885
kimai2robjuz5.0.141 of 2See more

kimai2 robjuz 5.0.14

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
kimai/kimai2:2.67.03084f1e5ecdc
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

4,508
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
openssl@3.0.19-1~deb12u2
no fix listed

Open the chart page →

5,508
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

7,767

Container images carrying it

3,109 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
openssl@3.0.13-1~deb12u1
no fix listed
1
bitnamilegacy/nginx:1.27.1934d1acd5ca8
openssl@3.0.14-1~deb12u2
no fix listed
1
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
openssl@3.0.11-1~deb12u2
no fix listed
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
openssl@3.0.14-1~deb12u2
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
openssl@3.0.14-1~deb12u2
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
openssl@3.0.11-1~deb12u2
no fix listed
1
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
openssl@3.0.17-1~deb12u1
no fix listed
1
bitnamilegacy/pgbouncer:1.23.192356da09704
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/postgres-exporter:0.17.1-debian-12-r20cca9d93a617
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
openssl@3.0.14-1~deb12u2
no fix listed
1
bitnamilegacy/postgresql:16.4.0-debian-12-r1102e2f47a405e
openssl@3.0.14-1~deb12u2
no fix listed
1
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
openssl@3.0.11-1~deb12u2
no fix listed
1
bitnamilegacy/postgresql:16.4.03ba6e6f11388
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
openssl@3.0.16-1~deb12u1
no fix listed
1
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
openssl@3.0.16-1~deb12u1
no fix listed
1
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
openssl@3.0.11-1~deb12u2
no fix listed
1
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
openssl@3.0.11-1~deb12u2
no fix listed
1
bitnamilegacy/postgresql:17.2.0-debian-12-r5cf63048c9209
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
openssl@3.0.14-1~deb12u2
no fix listed
1
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
openssl@3.0.11-1~deb12u2
no fix listed
1
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/postgresql:16.3.0-debian-12-r15fdc6979dbc53
openssl@3.0.11-1~deb12u2
no fix listed
1
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
openssl@3.0.14-1~deb12u2
no fix listed
1
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
openssl@3.0.16-1~deb12u1
no fix listed
1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
openssl@3.0.13-1~deb12u1
no fix listed
1
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
openssl@3.0.16-1~deb12u1
no fix listed
1
bitnamilegacy/redis:7.2.5-debian-12-r05261cae9e407
openssl@3.0.11-1~deb12u2
no fix listed
1
bitnamilegacy/redis:7.4.2-debian-12-r66a5b1d0b5942
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
openssl@3.0.11-1~deb12u2
no fix listed
1
bitnamilegacy/redis:7.2.4-debian-12-r139c6fecd24bf3
openssl@3.0.11-1~deb12u2
no fix listed
1
bitnamilegacy/redis:8.0.2-debian-12-r4cdc2efa9c306
openssl@3.0.16-1~deb12u1
no fix listed
1
bitnamilegacy/redis-cluster:7.4.3-debian-12-r0a53d023fdfaf
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/redis-exporter:1.69.0-debian-12-r1a006df1fd47e
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/redis-sentinel:8.2.1-debian-12-r00ca3ea1d2f82
openssl@3.0.17-1~deb12u2
no fix listed
1
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnamilegacy/valkey:latest0384ca2eec63
openssl@3.0.16-1~deb12u1
no fix listed
1
bitnamilegacy/valkey:8.1.3-debian-12-r34f0191fba7d3
openssl@3.0.17-1~deb12u1
no fix listed
1
bitnamilegacy/valkey:8.1.3-debian-12-r1a185655855b3
openssl@3.0.16-1~deb12u1
no fix listed
1
bitnami/mariadb:11.7.216a7dae804fb
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnami/memcached:1.6.38dd8f2cba9a5b
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnami/mongodb:8.0.8b3bd5b6be9a0
openssl@3.0.15-1~deb12u1
no fix listed
1
bitnami/redis:7.4.24e65bf641805
openssl@3.0.15-1~deb12u1
no fix listed
1
blackducksoftware/bdba-fluentd:2026.6.3c14bbbf45536
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
blackducksoftware/bdba-frontend:2026.6.3b10eaea94fd3
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
blackducksoftware/blackduck-alert:8.4.090cca32de2cc
openssl@3.5.6-r0
3.5.8-r0
1
blackducksoftware/blackduck-alert-db:8.4.06310fac39d53
openssl@3.5.6-r0
3.5.8-r0
1
blackducksoftware/blackduck-alert-rabbitmq:8.4.08f422b18d171
openssl@3.5.6-r0
3.5.8-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.