StackRadar

CVE-2026-63075

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,784
of 17,787 indexed, latest versions
Container images
1,676
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,784 of 17,787 indexed charts deploy, on 1,676 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,195
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2447
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63075DEBIAN-CVE-2026-63075UBUNTU-CVE-2026-63075AZL-97938
Also known as
USN-8678-1

Charts affected

1,784 by stars
ChartLatestAffected imagesRadar Score
aerospike-graphaerospike-helmOfficialVerified publisher3.7.01 of 1See more

aerospike-graph aerospike-helm 3.7.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.1781ba5213efd
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

322
agentareaagentareaVerified publisher0.0.188 of 16See more

agentarea agentarea 0.0.18

8 of the 16 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latest9e15e16fa758
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
agentarea/agentarea-frontend:latest2098a9d7b1fe
openssl@3.5.7-r0
3.5.8-r0
agentarea/agentarea-worker:latest1e5cb68ee77a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/postgres:16-alpinecf78e76683b9
openssl@3.5.7-r0
3.5.8-r0
library/postgres:alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0
rustfs/rustfs:latest41fe89380f41
openssl@3.5.7-r0
3.5.8-r0
temporalio/auto-setup:1.29.15b3502a3b685
openssl@3.5.0-r0
3.5.8-r0
valkey/valkey:9.0.1546304417fea
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

14,960
icat-k8salba-helm-chartsVerified publisher1.1.01 of 4See more

icat-k8s alba-helm-charts 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
curlimages/curl:8.18.0d94d07ba9e7d
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

3,744
adguard-homealekcVerified publisher3.2.01 of 2See more

adguard-home alekc 3.2.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.79aba9e3bf0613
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

175
ddclientalekcVerified publisher1.1.01 of 1See more

ddclient alekc 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
linuxserver/ddclient:4.0.06468911d00b1
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

360
jellyfinalekcVerified publisher0.9.01 of 1See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.11aefb67e6a7ff
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

2,615
alertmanager-receiver-azdoalertmanager-receiver-azdoVerified publisher1.0.1081 of 1See more

alertmanager-receiver-azdo alertmanager-receiver-azdo 1.0.108

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/ivanjosipovic/alertmanager-receiver-azdo/alertmanager-receiver-azdo:1.0.108731943808ee7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.02 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

11,936
hermes-agentankra-chartsVerified publisher0.3.11 of 1See more

hermes-agent ankra-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,918
upcloud-csiankra-chartsVerified publisher0.4.02 of 8See more

upcloud-csi ankra-charts 0.4.0

2 of the 8 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
openssl@3.5.1-r0
3.5.8-r0
ghcr.io/upcloudltd/upcloud-csidigest-pinned5af91c663788
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

14,920
scannerappscodeVerified publisher2026.1.152 of 3See more

scanner appscode 2026.1.15

2 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/appscode/scanner:v0.0.2116907aae5de1
openssl@3.5.4-r0
3.5.8-r0
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

5,301
virtual-secrets-serverappscodeVerified publisher2026.8.141 of 1See more

virtual-secrets-server appscode 2026.8.14

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/appscode/virtual-secrets-server:v0.4.0efa03f4c9551
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

281
arvancloud-webhookarvancloud-webhookVerified publisher1.0.01 of 1See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer:v1.0.00b97452674a3
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

2,309
kinesisaws-kinesis-local0.8.01 of 1See more

kinesis aws-kinesis-local 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
saidsef/aws-kinesis-local:v2026.0667025e3a163e
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

360
azuredisk-csi-driverazuredisk-csi-driverVerified publisher1.34.57 of 8See more

azuredisk-csi-driver azuredisk-csi-driver 1.34.5

7 of the 8 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/azuredisk-csi:v1.34.552b33e858369
openssl@3.3.7-4.azl3
3.3.7-6
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-attacher:v4.12.016987358befc
openssl@3.3.7-4.azl3
3.3.7-6
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-node-driver-registrar:v2.17.0b767078c36e0
openssl@3.3.7-4.azl3
3.3.7-6
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner:v6.3.09915a2058ad6
openssl@3.3.7-4.azl3
3.3.7-6
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer:v2.2.04bfe19fe8919
openssl@3.3.7-4.azl3
3.3.7-6
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-snapshotter:v8.6.0557008207ca4
openssl@3.3.7-4.azl3
3.3.7-6
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe:v2.19.0bd19535678a8
openssl@3.3.7-4.azl3
3.3.7-6

Open the chart page →

799
vault-unsealbabykart-helm-chartsVerified publisher1.0.51 of 1See more

vault-unseal babykart-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/lrstanley/vault-unseal:1.0.1dd873930b6df
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

205
seerrbdclark-helm-chartsVerified publisher0.1.51 of 1See more

seerr bdclark-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,991
aramid-indexerbiatec-repoVerified publisher3.9.03 of 5See more

aramid-indexer biatec-repo 3.9.0

3 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4

Open the chart page →

13,513
self-hostbitwarden2.4.010 of 11See more

self-host bitwarden 2.4.0

10 of the 11 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/bitwarden/admin:2026.8.0f4b200d494fc
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/api:2026.8.0aea7015c3425
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/attachments:2026.8.02f14366f523f
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/events:2026.8.022f53832288c
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/icons:2026.8.0c845924625be
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/identity:2026.8.030ac03202f31
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/mssqlmigratorutility:2026.8.061f0b02473d7
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/notifications:2026.8.0e2c2df18c4af
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/sso:2026.8.07d63c35eb286
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/bitwarden/web:2026.8.00767b242240d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,238
syncthingbrandan-schmitz-helm-chartsVerified publisher2.1.01 of 1See more

syncthing brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.1775c4aac4862
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,230
brightdata-exporterbrightdata-chartsVerified publisher0.2.171 of 1See more

brightdata-exporter brightdata-charts 0.2.17

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/danielgines/brightdata-exporter:0.2.176920d17cf6ff
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,282
btrfs-nfs-csibtrfs-nfs-csi0.4.01 of 7See more

btrfs-nfs-csi btrfs-nfs-csi 0.4.0

1 of the 7 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/erikmagkekse/btrfs-nfs-csi:0.12.0cb29d9b801a5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,184
buildkite-agent-metricsbuildkite-agent-metrics0.1.01 of 1See more

buildkite-agent-metrics buildkite-agent-metrics 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
public.ecr.aws/buildkite/agent-metrics:v5.11.016e7f5c7161e
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,534
easyhaproxybyjgVerified publisher2.0.41 of 1See more

easyhaproxy byjg 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
byjg/easy-haproxy:6.1.1230fdb7b00ae
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

933
static-httpserverbyjgVerified publisher0.2.01 of 1See more

static-httpserver byjg 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
byjg/static-httpserver:latest562cc8b9c40b
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

677
pgvectorcagriekinVerified publisher2.1.01 of 3See more

pgvector cagriekin 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,028
carbone-eecarboneOfficialVerified publisher1.0.61 of 1See more

carbone-ee carbone 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
carbone/carbone-ee:full-5.11.0518172cbad49
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,631
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

15,995
home-assistant-matter-servercharts-derwitt-devVerified publisher4.2.11 of 2See more

home-assistant-matter-server charts-derwitt-dev 4.2.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,373
shlink-webchristianhuthVerified publisher1.13.11 of 1See more

shlink-web christianhuth 1.13.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
shlinkio/shlink-web-client:4.8.1dc8bf3565a25
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

371
chromadbchromadb-helmVerified publisher0.2.21 of 1See more

chromadb chromadb-helm 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/chroma-core/chroma:1.5.3cfd193653bd6
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,444
clamav-restclamav-restVerified publisher1.0.72 of 2See more

clamav-rest clamav-rest 1.0.7

2 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
clamav/clamavdigest-pinnedd06c1d6a451d
openssl@3.5.7-r0
3.5.8-r0
rtlabsio/clamav-rest:1.0.7be3e45ab4edd
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

473
clamav-restclamav-rest-apiVerified publisher0.1.01 of 1See more

clamav-rest clamav-rest-api 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ajilaag/clamav-rest:latestad689c7b75b1
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

515
claude-code-hubclaude-code-hub0.1.01 of 4See more

claude-code-hub claude-code-hub 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:18-alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,184
cloudflared-ingress-operatorcloudflared-ingress-operatorVerified publisher0.3.21 of 1See more

cloudflared-ingress-operator cloudflared-ingress-operator 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/livepeer/cloudflared-ingress-operator:latestc179cdcaa050
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

1,736
kafkacloudpirates-kafkaVerified publisher0.1.61 of 1See more

kafka cloudpirates-kafka 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
apache/kafka:4.3.177e3df905404
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

550
grafanacloudposse0.2.61 of 1See more

grafana cloudposse 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

721
openstack-manila-csicloud-provider-openstack2.36.31 of 5See more

openstack-manila-csi cloud-provider-openstack 2.36.3

1 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

3,749
cloudttycloudtty0.8.91 of 2See more

cloudtty cloudtty 0.8.9

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/cloudtty/cloudshell:v0.8.900984ba0f0eb
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

3,958
clustereye-stackclustereyeVerified publisher0.1.11 of 5See more

clustereye-stack clustereye 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:17-alpine18cfe3ef5e68
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,896
dawarichcogitriVerified publisher2.8.41 of 3See more

dawarich cogitri 2.8.4

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
public.ecr.aws/docker/library/redis:8.8.0-alpine9d317178ecea
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,650
conan-serverconan-serverVerified publisher0.3.21 of 1See more

conan-server conan-server 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
aimmac23/conan-server:2.30.064eac08a69b9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

11,236
dagrondagron-workflowVerified publisher0.9.21 of 3See more

dagron dagron-workflow 0.9.2

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,172
dcachedcache0.1.01 of 4See more

dcache dcache 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
kroniak/ssh-client:latest3aef87e1a00b
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

487
mealiedeimosfr-charts1.0.151 of 1See more

mealie deimosfr-charts 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

4,042
kubedashdevopstalesOfficialVerified publisher4.0.03 of 8See more

kubedash devopstales 4.0.0

3 of the 8 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:18.3a9abf4275f9e
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
library/redis:8.6.2009cc37796fb
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
oliver006/redis_exporter:v1.82.0-alpineda9e89ee4e75
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

9,239
dial-coredialOfficialVerified publisher6.0.01 of 2See more

dial-core dial 6.0.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
valkey/valkey:9.0.2930b41430fb7
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,533
matomodigitalist-open-cloud-matomo12.0.201 of 3See more

matomo digitalist-open-cloud-matomo 12.0.20

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
digitalist/matomo:5.12.0bc4aeeaea769
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,539
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
directus/directus:12.0.29c8470ea465c
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

7,518

Container images carrying it

1,676 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
nodered/node-red:5.0.410f40d0a83e7
openssl@3.5.7-r0
3.5.8-r0
1
nodered/node-red:4.1.2216e7403aab9
openssl@3.5.4-r0
3.5.8-r0
1
nodered/node-red:4.1.10-minimald73ae167cb9b
openssl@3.5.6-r0
3.5.8-r0
1
noooste/garage-ui:v0.12.10b68a9237da6
openssl@3.5.5-r0
3.5.8-r0
1
nouchka/sqlite3:latestd183308f201c
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
novosga/novosga:latest34b9acbe6e51
openssl@3.5.6-r0
3.5.8-r0
1
oada/auth:4.0.0c0d077e79ef4
openssl@3.5.1-r0
3.5.8-r0
1
oada/http-handler:4.0.0d87efe8ba4b0
openssl@3.5.1-r0
3.5.8-r0
1
oada/rev-graph-update:4.0.0ebc8343f05ff
openssl@3.5.1-r0
3.5.8-r0
1
oada/shares:4.0.0c6ffb4e8ed63
openssl@3.5.1-r0
3.5.8-r0
1
oada/startup:4.0.0fc09495e2f3c
openssl@3.5.1-r0
3.5.8-r0
1
oada/sync-handler:4.0.0b7a2cfc137cf
openssl@3.5.1-r0
3.5.8-r0
1
oada/users:4.0.0b6c562fa5b1b
openssl@3.5.1-r0
3.5.8-r0
1
oada/webhooks:4.0.06590c60de347
openssl@3.5.1-r0
3.5.8-r0
1
oada/well-known:4.0.07943fde43b19
openssl@3.5.1-r0
3.5.8-r0
1
oada/write-handler:4.0.08464c7f48aae
openssl@3.5.1-r0
3.5.8-r0
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
openssl@3.5.5-r0
3.5.8-r0
1
octoboxio/octobox:latestd909041c46eb
openssl@3.5.4-r0
3.5.8-r0
1
oliver006/redis_exporter:v1.82.0-alpineda9e89ee4e75
openssl@3.5.5-r0
3.5.8-r0
1
omecproject/onos-progran:1.0.05715e5648aa0
nodejs@8.9.4-1nodesource1
no fix listed
1
ondrejsika/counter:latestd95eaeee2172
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
onyxdotapp/onyx-backend:latest473fdffe4e67
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
1
opencloudeu/opencloud:7.2.46d992ccc5f1c
openssl@3.5.7-r0
3.5.8-r0
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
opencsghq/label-studio:v2.4.0b4e849fcf94a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
opencsghq/postgres:15.1842578c9d3ebd
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
opencti/platform:7.260910.0186fc757c3eb
openssl@3.5.7-r0
3.5.8-r0
1
openebs/lvm-driver:1.10.141f73aba7f31
openssl@3.5.1-r0
3.5.8-r0
1
openhab/openhab:5.2.1bfd4a60e90da
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
opennode/waldur-homeport:8.1.2a8b5b4777027
openssl@3.5.7-r0
3.5.8-r0
1
opennode/waldur-mastermind:8.1.24c82b15d9042
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
openpolicyagent/kube-mgmt:11.0.123a8b1bacbcd8
openssl@3.5.7-r0
3.5.8-r0
1
openresty/openresty:1.31.1.1-1-alpine-fatacd832254d9c
openssl@3.5.6-r0
3.5.8-r0
1
openthread/otbr:latestf307f59f6432
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
nodejs@8.10.0~dfsg-2ubuntu0.4
no fix listed
1
openzipkin/zipkin-slim:3.6.0a69e1057df36
openssl@3.5.5-r0
3.5.8-r0
1
owncloud/ocis:8.0.1b38fd8fdd58f
openssl@3.5.5-r0
3.5.8-r0
1
oxynozeta/s3-proxy:5.1.121115040e224
openssl@3.5.7-r0
3.5.8-r0
1
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
peterdavehello/tor-socks-proxy:latest0cc12d36d312
openssl@3.5.6-r0
3.5.8-r0
1
photoprism/photoprism:260601650c6ad5a651
openssl@3.5.5-1ubuntu3
3.5.5-1ubuntu3.4
1
photoprism/photoprism:260728958642220223
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4
1
phpdockerio/readability-js-server:1.8.0ea8354b42600
openssl@3.5.4-r0
3.5.8-r0
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
openssl@3.5.1-1
3.5.7-1~deb13u2
1
platzio/backend:v0.6.5d5e5972f344b
openssl@3.5.1-r0
3.5.8-r0
1
platzio/frontend:v0.6.073083749b46a
openssl@3.5.1-r0
3.5.8-r0
1
pmoscode/excalidraw:v0.18.08ee61554699c
openssl@3.5.4-r0
3.5.8-r0
1
polyaxon/polyaxon-api:2.16.42b55c3265a90
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
polyaxon/polyaxon-streams:2.16.4c186bd9834c0
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.