CVE-2026-63075
HighAdvisory
Published 25 Aug 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.005
- 40th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,777
- of 17,790 indexed, latest versions
- Container images
- 1,671
- deployed by those charts
- Fix available
- 3 of 4
- affected packages
CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6
Carried by container images the latest versions of 1,777 of 17,790 indexed charts deploy, on 1,671 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensslapk | 3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more | 3.5.8-r0 | 1,190 |
| openssldeb | 3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more | 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2 | 447 |
| nodejsdeb | 4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 more | no fix listed | 11 |
| opensslrpm | 3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl3 | 3.3.7-6 | 23 |
- OSV records
- ALPINE-CVE-2026-63075DEBIAN-CVE-2026-63075UBUNTU-CVE-2026-63075AZL-97938
- Also known as
- USN-8678-1
Charts affected
1,777 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| answerhelmforgeVerified publisher | 1.5.2 | 1 of 1See more | 557 |
| apachehelmforgeVerified publisher | 1.0.6 | 1 of 1See more | 1,703 |
| appwritehelmforgeVerified publisher | 2.0.0 | 1 of 5See more | 4,689 |
| automatischhelmforgeVerified publisher | 1.3.7 | 2 of 4See more | 5,816 |
| bentopdfhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 149 |
| booklorehelmforgeVerified publisher | 2.0.1 | 1 of 3See more | 2,329 |
| bytestashhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 739 |
| castopodhelmforgeVerified publisher | 1.2.7 | 1 of 3See more | 9,485 |
| certimatehelmforgeVerified publisher | 1.0.7 | 1 of 1See more | 222 |
| chiefonboardinghelmforgeVerified publisher | 1.1.15 | 2 of 3See more | 7,086 |
| ckanhelmforgeVerified publisher | 1.3.8 | 2 of 6See more | 10,027 |
| dawarichhelmforgeVerified publisher | 1.0.1 | 2 of 4See more | 10,442 |
| discount-bandithelmforgeVerified publisher | 2.0.8 | 1 of 3See more | 29,930 |
| druidhelmforgeVerified publisher | 1.3.6 | 1 of 4See more | 8,623 |
| entehelmforgeVerified publisher | 1.0.2 | 3 of 4See more | 4,254 |
| fastmcp-serverhelmforgeVerified publisher | 1.7.4 | 1 of 1See more | 3,304 |
| giteahelmforgeVerified publisher | 1.1.20 | 1 of 1See more | 543 |
| glancehelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 153 |
| hoppscotchhelmforgeVerified publisher | 1.1.11 | 1 of 2See more | 2,076 |
| immichhelmforgeVerified publisher | 1.2.8 | 2 of 5See more | 11,122 |
| jupyterhubhelmforgeVerified publisher | 1.0.6 | 2 of 3See more | 5,361 |
| komgahelmforgeVerified publisher | 1.4.15 | 1 of 1See more | 2,288 |
| listmonkhelmforgeVerified publisher | 1.1.14 | 3 of 3See more | 2,863 |
| mcp-serverhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 3,453 |
| medikeephelmforgeVerified publisher | 2.0.1 | 1 of 3See more | 5,430 |
| memcachedhelmforgeVerified publisher | 1.0.8 | 1 of 1See more | 1,074 |
| memoshelmforgeVerified publisher | 2.0.0 | 1 of 2See more | 799 |
| metabasehelmforgeVerified publisher | 1.2.29 | 1 of 3See more | 1,676 |
| middlewarehelmforgeVerified publisher | 1.2.6 | 2 of 4See more | 9,771 |
| moodlehelmforgeVerified publisher | 1.1.0 | 1 of 2See more | 6,206 |
| mosquittohelmforgeVerified publisher | 1.5.0 | 1 of 1See more | 149 |
| netboxhelmforgeVerified publisher | 2.0.1 | 3 of 4See more | 4,347 |
| nextcloudhelmforgeVerified publisher | 1.0.0 | 2 of 3See more | 7,211 |
| ntfyhelmforgeVerified publisher | 1.2.2 | 1 of 1See more | 165 |
| opencloudhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 670 |
| opencuthelmforgeVerified publisher | 1.1.9 | 3 of 5See more | 3,772 |
| openreel-videohelmforgeVerified publisher | 1.0.3 | 1 of 1See more | 1,086 |
| paprahelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 2,560 |
| phpmyadminhelmforgeVerified publisher | 2.0.1 | 1 of 1See more | 4,819 |
| pimcorehelmforgeVerified publisher | 2.0.1 | 2 of 6See more | 3,212 |
| pocket-idhelmforgeVerified publisher | 1.0.0 | 2 of 2See more | 462 |
| rabbitmqhelmforgeVerified publisher | 1.7.1 | 1 of 1See more | 149 |
| reactive-resumehelmforgeVerified publisher | 1.0.0 | 2 of 4See more | 3,071 |
| ryothelmforgeVerified publisher | 1.0.0 | 1 of 2See more | 6,068 |
| siyuanhelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 168 |
| strapihelmforgeVerified publisher | 2.3.14 | 1 of 3See more | 2,084 |
| strava-statisticshelmforgeVerified publisher | 1.1.16 | 1 of 2See more | 853 |
| supersethelmforgeVerified publisher | 1.3.6 | 3 of 5See more | 5,784 |
| twentyhelmforgeVerified publisher | 1.0.1 | 3 of 5See more | 3,649 |
| wallabaghelmforgeVerified publisher | 1.3.6 | 1 of 3See more | 2,784 |
Container images carrying it
1,671 by charts deploying them
A fixed version is listed for 3 of the 4 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| rustfs/ | 8e467b32af3f | openssl | 3.5.8-r0 | 1 |
| rustrial/ | aca1614eee2f | openssl | 3.5.8-r0 | 1 |
| saidsef/ | 67025e3a163e | openssl | 3.5.8-r0 | 1 |
| scaleway/ | 9acc53a69962 | openssl | 3.5.8-r0 | 1 |
| scholtz2/ | 3a3b3d3277d2 | openssl | 3.5.5-1ubuntu3.4 | 1 |
| scholtz2/ | 6770214bc881 | openssl | 3.5.5-1ubuntu3.4 | 1 |
| scmmanager/ | bfb766050f34 | openssl | 3.5.8-r0 | 1 |
| seatsurfing/ | 9952e80048b0 | openssl | 3.5.7-1~deb13u2 | 1 |
| securecodebox/ | afcefbd56d61 | openssl | 3.5.8-r0 | 1 |
| senthilrch/ | bf336912a191 | openssl | 3.5.8-r0 | 1 |
| senthilrch/ | 836a8bbe7cfb | openssl | 3.5.8-r0 | 1 |
| seoulorigin/ | 92cbaad0c540 | openssl | 3.5.7-1~deb13u2 | 1 |
| seyiogunniran/ | 3a0ed39e5830 | openssl | 3.5.8-r0 | 1 |
| shieldsio/ | fa194b446e42 | openssl | 3.5.8-r0 | 1 |
| shlinkio/ | dc8bf3565a25 | openssl | 3.5.8-r0 | 1 |
| shwcloud/ | a97479a54df4 | openssl | 3.5.7-1~deb13u2 | 1 |
| shyamkrishna21/ | af2785f5bb71 | openssl | 3.5.8-r0 | 1 |
| siakhooi/ | f1f4b5b1b870 | openssl | 3.5.8-r0 | 1 |
| sigma2as/ | d899e81ee3eb | openssl | 3.5.8-r0 | 1 |
| signalen/ | 1ab79cb7fe21 | openssl | 3.5.8-r0 | 1 |
| siscc/ | 432e55811520 | openssl | 3.5.8-r0 | 1 |
| siscc/ | 6cf1145566f0 | openssl | 3.5.8-r0 | 1 |
| sissbruecker/ | 0c0a9a04c7eb | openssl | 3.5.7-1~deb13u2 | 1 |
| softwaremill/ | 845b5e8f8056 | openssl | 3.5.5-1ubuntu3.4 | 1 |
| sokushinbutsu/ | 0bbd90448671 | openssl | 3.5.8-r0 | 1 |
| solidinvoice/ | ae7c0e155cb5 | openssl | 3.5.8-r0 | 1 |
| sonroyaalmerol/ | 3f60f3abe990 | openssl | 3.5.7-1~deb13u2 | 1 |
| sslhep/ | 1d12f943cec5 | openssl | 3.5.7-1~deb13u2 | 1 |
| sslhep/ | e7aff7f97b89 | openssl | 3.5.7-1~deb13u2 | 1 |
| sslhep/ | b01b8ee966ed | openssl | 3.5.7-1~deb13u2 | 1 |
| sslhep/ | 0e4175a4e1eb | openssl | 3.5.7-1~deb13u2 | 1 |
| sslhep/ | 671980005c57 | openssl | 3.5.7-1~deb13u2 | 1 |
| sslhep/ | 596db2abdd09 | openssl | 3.5.7-1~deb13u2 | 1 |
| sslhep/ | 54aaf1721d03 | openssl | 3.5.7-1~deb13u2 | 1 |
| sslhep/ | 2cb88ceab5bb | openssl | 3.5.7-1~deb13u2 | 1 |
| sslhep/ | c284442b44e3 | openssl | 3.5.7-1~deb13u2 | 1 |
| stalwartlabs/ | 25001929f36a | openssl | 3.5.7-1~deb13u2 | 1 |
| stalwartlabs/ | dcf575db2d53 | openssl | 3.5.7-1~deb13u2 | 1 |
| stashapp/ | df744af5a0c9 | openssl | 3.5.8-r0 | 1 |
| staslevchenko/ | e1b5de030254 | openssl | 3.5.8-r0 | 1 |
| steamcmd/ | 5028a25268e7 | openssl | 3.5.5-1ubuntu3.4 | 1 |
| stnsmith/ | e448ab346cb3 | openssl | 3.5.8-r0 | 1 |
| supabase/ | 385184459f57 | openssl | 3.5.8-r0 | 1 |
| supabase/ | f371b5f3f2ac | openssl | 3.5.8-r0 | 1 |
| supabase/ | d3aa0c86c7b3 | openssl | 3.5.7-1~deb13u2 | 1 |
| supabase/ | c8eb9858eafe | openssl | 3.5.8-r0 | 1 |
| supabase/ | f6c42a04163d | openssl | 3.5.8-r0 | 1 |
| swaggerapi/ | 9ae209e3791e | openssl | 3.5.8-r0 | 1 |
| syepes/ | 00af1691570e | openssl | 3.5.8-r0 | 1 |
| syncthing/ | 7c60eb0ec887 | openssl | 3.5.8-r0 | 1 |