StackRadar

CVE-2026-63074

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,855
of 17,790 indexed, latest versions
Container images
3,100
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63074 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,855 of 17,790 indexed charts deploy, on 3,100 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+60 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u21,876
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,190
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63074DEBIAN-CVE-2026-63074UBUNTU-CVE-2026-63074AZL-97944ECHO-8298-2fc4-74d4
Also known as
USN-8678-1

Charts affected

2,855 by stars
ChartLatestAffected imagesRadar Score
firecrawlobeoneVerified publisher3.0.44 of 5See more

firecrawl obeone 3.0.4

4 of the 5 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-management-alpine606d8c0d6b3c
openssl@3.5.4-r0
3.5.8-r0
ghcr.io/firecrawl/firecrawl:2.11.340529f38bab2c3
openssl@3.0.20-1~deb12u2
no fix listed
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

10,060
libretranslateobeoneVerified publisher1.0.71 of 1See more

libretranslate obeone 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
libretranslate/libretranslate:v1.9.61de2d7056bb8
openssl@3.0.18-1~deb12u2
no fix listed

Open the chart page →

2,008
mktxpobeoneVerified publisher1.1.102 of 2See more

mktxp obeone 1.1.10

2 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/akpw/mktxp:latest2b3ccb1c2bd9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

332
ollamaobeoneVerified publisher0.3.11 of 2See more

ollama obeone 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/obeone/ollama-exporter:latestf43af285c6e0
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,093
olvid-botobeoneVerified publisher0.3.31 of 1See more

olvid-bot obeone 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
olvid/bot-daemon:2.0.1e0e6b165d879
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15

Open the chart page →

2,093
ocellusaiocellusaiVerified publisher0.1.121 of 2See more

ocellusai ocellusai 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,184
lensoci-ai-incubations0.1.144 of 16See more

lens oci-ai-incubations 0.1.14

4 of the 16 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
openssl@3.5.0-r0
3.5.8-r0
grafana/grafana:12.1.1a1701c218024
openssl@3.5.1-r0
3.5.8-r0
library/postgres:134689940c6838
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
openssl@3.5.2-r0
3.5.8-r0

Open the chart page →

17,134
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

2,353
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

2,583
octant-uioctant-ui0.0.1-testing1 of 1See more

octant-ui octant-ui 0.0.1-testing

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,110
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,321
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15

Open the chart page →

2,631
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

5,360
cmsmsoleds-helm-chartsVerified publisher0.1.61 of 1See more

cmsms oleds-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

2,861
db-backupoleds-helm-chartsVerified publisher0.1.01 of 1See more

db-backup oleds-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
oled01/db-backup:0.1.06302fd2b5333
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29

Open the chart page →

8,133
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29

Open the chart page →

9,062
mailpitoli-the-devVerified publisher1.0.11 of 1See more

mailpit oli-the-dev 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
axllent/mailpit:v1.31.0c96991d9bef7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,226
oafpassone-acre-fundVerified publisher0.1.32 of 2See more

oafpass one-acre-fund 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
jhaals/yopass:14.9.0934e4f2c016f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/memcached:1.6-alpinec29847751abb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

587
cron-jobonechart-slVerified publisher0.73.71 of 1See more

cron-job onechart-sl 0.73.7

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/debian:stable-slim04634311a8d5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

978
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

6,096
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,649
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest473fdffe4e67
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

6,392
oom-traceroom-tracerVerified publisher0.1.01 of 1See more

oom-tracer oom-tracer 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/eminaktas/oom-tracer:v0.1.0c90ca8389c87
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,124
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
openssl@3.0.9-1
no fix listed

Open the chart page →

9,747
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

5,699
jobopen-charts2.0.01 of 1See more

job open-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

738
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
nodejs@8.9.4-1nodesource1
no fix listed

Open the chart page →

88,653
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
nodejs@8.9.4-1nodesource1
no fix listed

Open the chart page →

38,902
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

11,051
opencost-lensopencost-lens1.0.01 of 2See more

opencost-lens opencost-lens 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-ui:1.118.0571f87e528ea
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,110
kafka-connectoropenfaas0.7.151 of 1See more

kafka-connector openfaas 0.7.15

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/kafka-connector:0.7.160e58eac0e2f7
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,164
pro-builderopenfaas0.6.132 of 2See more

pro-builder openfaas 0.6.13

2 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
moby/buildkit:v0.32.2-rootless504731e577c2
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/openfaasltd/pro-builder:0.6.06c17297f9098
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

2,745
queue-workeropenfaas0.2.341 of 1See more

queue-worker openfaas 0.2.34

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/openfaasltd/jetstream-queue-worker:0.5.10e9245a0bca88
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

572
dokuopenlit0.1.41 of 3See more

doku openlit 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:latestfa394da808cc
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29

Open the chart page →

1,737
openlit-controlleropenlit0.10.01 of 1See more

openlit-controller openlit 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-controller:0.10.0165efd4469ea
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,377
openlit-operatoropenlit0.2.21 of 1See more

openlit-operator openlit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/openlit/openlit-operator:0.0.2457bb5ada68b
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

858
openobserveopenobserve0.92.24 of 6See more

openobserve openobserve 0.92.2

4 of the 6 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/nats:2.14.2-alpine952d157e28d5
openssl@3.5.7-r0
3.5.8-r0
natsio/nats-box:0.19.7ffce8bd10338
openssl@3.5.6-r0
3.5.8-r0
natsio/nats-server-config-reloader:0.23.064cb6c858e79
openssl@3.5.5-r0
3.5.8-r0
natsio/prometheus-nats-exporter:0.20.14fbf6dacb847
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

3,166
openpanelopenpanel0.9.01 of 6See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.29

Open the chart page →

3,465
llm-stackopenproject-helm-chartsVerified publisher1.1.01 of 2See more

llm-stack openproject-helm-charts 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
apache/apisix:3.16.0-ubuntu5e47692cac00
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15

Open the chart page →

1,992
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
library/mariadb:11.4611a2fcc5fa7
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

7,866
kubedb-certifiedopenshift2026.7.107 of 8See more

kubedb-certified openshift 2026.7.10

7 of the 8 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/appscode/petset:v0.1.093fa0daf603c
openssl@3.5.6-r0
3.5.8-r0
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/kubedb/kubedb-autoscaler:v0.51.05d1182ac21f0
openssl@3.0.20-1~deb12u2
no fix listed
ghcr.io/kubedb/kubedb-crd-manager:v0.21.09506a6cb98d1
openssl@3.0.20-1~deb12u2
no fix listed
ghcr.io/kubedb/kubedb-ops-manager:v0.53.06d4c9fe66e4f
openssl@3.0.20-1~deb12u2
no fix listed
ghcr.io/kubedb/kubedb-provisioner:v0.66.0824d6d78d451
openssl@3.0.20-1~deb12u2
no fix listed
ghcr.io/kubedb/kubedb-webhook-server:v0.42.0f7dcade6523b
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

4,145
kubestash-certifiedopenshift2026.7.101 of 2See more

kubestash-certified openshift 2026.7.10

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/kubestash/kubestash:v0.29.043e01ed32486
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,098
mattermost-team-editionopenshift6.6.831 of 4See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

4,113
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
openssl@3.5.7-r1
3.5.8-r0

Open the chart page →

1,039
voyager-gatewayopenshift2026.1.151 of 2See more

voyager-gateway openshift 2026.1.15

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/voyagermesh/crd-manager:v0.1.013fd0cccafe8
openssl@3.0.18-1~deb12u1
no fix listed

Open the chart page →

2,645
sohaopensohaVerified publisher0.1.91 of 2See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,781
terminalsopen-webui0.7.02 of 2See more

terminals open-webui 0.7.0

2 of the 2 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
ghcr.io/open-webui/terminals:latest5d2fd44366a4
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-webui/terminals-operator:latest6287ce8be502
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,046
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed

Open the chart page →

36,252
kubernetes-syncopslevelVerified publisher0.8.01 of 1See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container imageDigestPackageFixed in
public.ecr.aws/opslevel/kubectl-opslevel:v2024.9.571697b5ff713
openssl@3.0.14-1~deb12u2
no fix listed

Open the chart page →

1,739

Container images carrying it

3,100 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
3
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
3
quay.io/devtron/dashboard:0d8f6cf4-60e17132-931-39393aa61fffb8ae8
openssl@3.5.7-r0
3.5.8-r0
3
quay.io/devtron/dashboard:c7b89667-690-39290c63823af3835
openssl@3.5.7-r0
3.5.8-r0
3
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
3
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
3
quay.io/devtron/k8s-utils:807ca3c2-488-14005f296c2ec5db7
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29
3
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
3
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
3
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
openssl@3.0.17-1~deb12u3
no fix listed
3
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
openssl@3.5.5-r0
3.5.8-r0
3
alazidis/kube-netlag:1.1.00e8c84152201
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
2
alpine/git:latest4f9488b7295b
openssl@3.5.7-r0
3.5.8-r0
2
alpine/k8s:1.32.12048f8d9c8cc7
openssl@3.5.5-r0
3.5.8-r0
2
alpine/kubectl:1.35.49ccd82364762
openssl@3.5.6-r0
3.5.8-r0
2
alpine/kubectl:1.35.2ec8f734b0a10
openssl@3.5.5-r0
3.5.8-r0
2
apache/apisix:3.18.0-ubuntu9ee5df1611f9
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
2
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
openssl@3.0.20-1~deb12u2
no fix listed
2
apache/kafka:4.3.177e3df905404
openssl@3.5.7-r0
3.5.8-r0
2
apache/nifi-registry:1.26.07cdfd8deec92
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
2
apache/rocketmq:5.4.0319cd8a81ed1
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
openssl@3.0.13-0ubuntu3
3.0.13-0ubuntu3.15
2
apecloud/apecloud-mcp:0.1.094041b080510
openssl@3.5.0-r0
3.5.8-r0
2
aquasec/trivy:0.74.062b1e65e8869
openssl@3.5.7-r0
3.5.8-r0
2
axllent/mailpit:v1.31.0c96991d9bef7
openssl@3.5.7-r0
3.5.8-r0
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
openssl@3.0.17-1~deb12u2
no fix listed
2
bitnamilegacy/mariadb:11.4.5-debian-12-r933ce23601fc9
openssl@3.0.15-1~deb12u1
no fix listed
2
bitnamilegacy/pgpool:4.6.3-debian-12-r0d3bf3910f148
openssl@3.0.17-1~deb12u2
no fix listed
2
bitnamilegacy/postgresql:16.4.0-debian-12-r1494bc968141e7
openssl@3.0.14-1~deb12u2
no fix listed
2
bitnamilegacy/postgresql-repmgr:17.6.0-debian-12-r2f12387ec882b
openssl@3.0.17-1~deb12u2
no fix listed
2
bitnamilegacy/redis:latest5927ff3702df
openssl@3.0.16-1~deb12u1
no fix listed
2
bitnamilegacy/valkey-cluster:8.1.3-debian-12-r332869e769b7e
openssl@3.0.17-1~deb12u1
no fix listed
2
cfssl/cfssl:latest:v1.6.5c9018c2ddf0b
openssl@3.0.11-1~deb12u2
no fix listed
2
chromedp/headless-shell:148.0.7778.97313ed7255ae1
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
2
clamav/clamav:1.4.3_base629a3050df6a
openssl@3.5.5-r0
3.5.8-r0
2
clickhouse/clickhouse-server:25.7-alpine258d43821508
openssl@3.5.4-r0
3.5.8-r0
2
cloudflare/cloudflared:2026.6.16d91c121b803
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
cribl/cribl:4.19.2044f9a5fac9a
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
2
curlimages/curl:8.15.04026b29997dc
openssl@3.5.1-r0
3.5.8-r0
2
curlimages/curl:8.20.0b3f1fb2a51d9
openssl@3.5.6-r0
3.5.8-r0
2
datagrok/grok_connect:latestf5876d3aebb8
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29
2
dunglas/mercure:v0:v0.24.2916834e49961
openssl@3.5.6-r0
3.5.8-r0
2
emberstack/kubernetes-reflector:10.0.6551dbd5880929
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
2
fireflyiii/core:version-6.5.9fe4ecec4c2ba
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
2
fireflyiii/data-importer:version-2.2.3ab52bf932546
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
2
gisaia/arlas-wui:28.0.3b83b3e067173
openssl@3.5.7-r0
3.5.8-r0
2
gisaia/arlas-wui-builder:28.0.1a35977a5bb7d
openssl@3.5.7-r0
3.5.8-r0
2
gisaia/arlas-wui-hub:28.0.21a3cc43d822f
openssl@3.5.6-r0
3.5.8-r0
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
openssl@3.0.9-1
no fix listed
2
gotenberg/gotenberg:8.36.087c16b9f3642
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.