CVE-2026-63074

Medium

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.9; base score, highest
EPSS: 0.005; 41st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,852; of 17,792 indexed, latest versions
Container images: 3,090; deployed by those charts
Fix available: 3 of 4; affected packages

CVE-2026-63074 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,852 of 17,792 indexed charts deploy, on 3,090 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+60 more	3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2	1,866
opensslapk	3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more	3.5.8-r0	1,190
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 more	no fix listed	11
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl3	3.3.7-6	23

OSV records: ALPINE-CVE-2026-63074 DEBIAN-CVE-2026-63074 UBUNTU-CVE-2026-63074 AZL-97944 ECHO-8298-2fc4-74d4
Also known as: USN-8678-1

Charts affected

2,852 by stars

Chart

Latest

Affected images

Radar Score

zipkinzipkin

0.5.0

1 of 1 See more

zipkin zipkin 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-63074.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-slim :3.6.0	a69e1057df36	openssl@3.5.5-r0	3.5.8-r0

Open the chart page →

1,160

zoo-project-druzoo-project

0.10.4

4 of 6 See more

zoo-project-dru zoo-project 0.10.4

4 of the 6 container images this version deploys carry CVE-2026-63074.

Container image	Digest	Package	Fixed in
curlimages/curl :8.21.0	7c12af72ceb3	openssl@3.5.7-r0	3.5.8-r0
library/postgres :18.4-alpine3.24	9a8afca54e78	openssl@3.5.7-r0	3.5.8-r0
library/rabbitmq :4.3.2-alpine	835cbc6fabce	openssl@3.5.7-r0	3.5.8-r0
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	3.0.2-0ubuntu1.29

Open the chart page →

7,936

Container images carrying it

3,090 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/node :24.21.0-alpine	be80f76cf40e	openssl@3.5.7-r0	3.5.8-r0	2
library/phpmyadmin :5.2.1	6e75aa8f767c	openssl@3.0.15-1~deb12u1	no fix listed	2
library/postgres :17-bookworm	051f7b7b3abd	openssl@3.0.20-1~deb12u2	no fix listed	2
library/postgres :16.1	09f23e02d766	openssl@3.0.11-1~deb12u2	no fix listed	2
library/postgres :18.1	1090bc3a8ccf	openssl@3.5.4-1~deb13u2	3.5.7-1~deb13u2	2
library/postgres :16.2	4aea012537ed	openssl@3.0.11-1~deb12u2	no fix listed	2
library/postgres :18.0	6f3e42ad37de	openssl@3.5.1-1+deb13u1	3.5.7-1~deb13u2	2
library/postgres :16.4	e62fbf9d3e2b	openssl@3.0.15-1~deb12u1	no fix listed	2
library/postgres :13-alpine	fb9065b6e3e2	openssl@3.5.4-r0	3.5.8-r0	2
library/python :3.7	eedf63967cdb	openssl@3.0.9-1	no fix listed	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.15	2
library/rabbitmq :3.12.1-management	f020c06da226	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.29	2
library/redis :8.6.6-alpine	75934ddb37bf	openssl@3.5.7-r0	3.5.8-r0	2
library/redis :7.2.3	a7cee7c8178f	openssl@3.0.11-1~deb12u2	no fix listed	2
library/redis :8.2.2	f0957bcaa75f	openssl@3.0.17-1~deb12u3	no fix listed	2
library/redmine :6.1.3-trixie	f474a901faec	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
library/telegraf :1.40-alpine	e2f55b0afaa3	openssl@3.5.7-r0	3.5.8-r0	2
library/traefik :v3.7.1	6b9cbca6fac4	openssl@3.5.6-r0	3.5.8-r0	2
library/traefik :v3.7.13	f86a2cab1b5c	openssl@3.5.7-r0	3.5.8-r0	2
library/wordpress :6.8.3-apache :6.8-apache	30bff39330d1	openssl@3.5.4-1~deb13u1	3.5.7-1~deb13u2	2
library/zookeeper :3.9.5	f258365d4882	openssl@3.0.2-0ubuntu1.26	3.0.2-0ubuntu1.29	2
linuxserver/ddclient :4.0.0	6468911d00b1	openssl@3.5.7-r0	3.5.8-r0	2
listmonk/listmonk :latest :v6.2.0	f535d59e1499	openssl@3.5.7-r0	3.5.8-r0	2
locustio/locust :2.32.2	a0d4b88e42c1	openssl@3.0.14-1~deb12u2	no fix listed	2
louislam/uptime-kuma :2.3.2	9aeb4e51d038	openssl@3.0.19-1~deb12u2	no fix listed	2
louislam/uptime-kuma :2.5.0	a8610b3b4c38	openssl@3.0.20-1~deb12u1	no fix listed	2
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	openssl@3.0.17-1~deb12u2	no fix listed	2
meshery/meshery :stable-latest	44b64ee128fb	openssl@3.0.20-1~deb12u2	no fix listed	2
mesosphere/kubectl :v1.35.0-alpine	ea01a9387771	openssl@3.5.4-r0	3.5.8-r0	2
metabase/metabase :v0.61.1.x	9491ed11c901	openssl@3.5.6-r0	3.5.8-r0	2
mikefarah/yq :4 :latest	cfc4eee65859	openssl@3.5.7-r0	3.5.8-r0	2
moby/buildkit :v0.32.2-rootless	504731e577c2	openssl@3.5.7-r0	3.5.8-r0	2
mojaloop/reporting-events-processor-svc :v3.5.1	1e0d24d28512	openssl@3.5.1-r0	3.5.8-r0	2
mojaloop/security-role-perm-operator-svc :v3.0.2	12af60892c75	openssl@3.5.4-r0	3.5.8-r0	2
moreillon/group-manager-front :v3.3.1	c9f85db3baa5	openssl@3.0.13-1~deb12u1	no fix listed	2
moreillon/user-manager :v5.0.2	e1c9bfab5c16	openssl@3.0.11-1~deb12u2	no fix listed	2
moreillon/user-manager-front :v5.0.3	b067dbbbb6af	openssl@3.0.11-1~deb12u2	no fix listed	2
n8nio/n8n :2.36.7	14c4285bc303	openssl@3.5.7-r1	3.5.8-r0	2
natsio/nats-server-config-reloader :0.21.1	10ff229eaf52	openssl@3.5.4-r0	3.5.8-r0	2
netapp/trident-protect-utils :v2.0.0	cd0c18d8f9ec	openssl@3.5.6-r0	3.5.8-r0	2
nutanix/nai-jobs :v2.8.0	9c373718e1b1	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
obolnetwork/charon :v1.10.0	278c7e2897b6	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u2	2
opea/embedding-tei :1.0	5c9639de61c1	openssl@3.0.14-1~deb12u2	no fix listed	2
opea/reranking-tei :1.0	e48613afb191	openssl@3.0.14-1~deb12u2	no fix listed	2
opea/retriever-redis :1.0	eb746b263705	openssl@3.0.14-1~deb12u2	no fix listed	2
opencloudeu/web-extensions :unzip-1.0.0	1691ad6612a3	openssl@3.0.15-1~deb12u1	no fix listed	2
opencloudeu/web-extensions :draw-io-1.0.0	27cb9b952f0d	openssl@3.0.15-1~deb12u1	no fix listed	2
opencloudeu/web-extensions :external-sites-1.0.0	5b176baa3694	openssl@3.0.15-1~deb12u1	no fix listed	2
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	openssl@3.0.15-1~deb12u1	no fix listed	2
opencloudeu/web-extensions :progress-bars-1.0.0	82f888a34440	openssl@3.0.15-1~deb12u1	no fix listed	2