StackRadar

CVE-2026-63075

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,767
of 17,797 indexed, latest versions
Container images
1,648
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,767 of 17,797 indexed charts deploy, on 1,648 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,173
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2441
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63075DEBIAN-CVE-2026-63075UBUNTU-CVE-2026-63075AZL-97938
Also known as
USN-8678-1

Charts affected

1,767 by stars
ChartLatestAffected imagesRadar Score
sentry-k8ssentry-k8sVerified publisher1.4.14 of 11See more

sentry-k8s sentry-k8s 1.4.1

4 of the 11 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/nginx:1.31.0-alpine2f07d83bf561
openssl@3.5.6-r0
3.5.8-r0
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/getsentry/relay:26.7.2cd29b88c1d72
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/getsentry/snuba:26.7.210f8d164109b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

16,646
seq-input-gelfseq-input-gelfVerified publisher0.3.11 of 2See more

seq-input-gelf seq-input-gelf 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,563
querysiakhooiVerified publisher1.0.01 of 1See more

query siakhooi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
siakhooi/query:1.0.0f1f4b5b1b870
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,790
scaffoldsigstoreVerified publisher0.6.1151 of 15See more

scaffold sigstore 0.6.115

1 of the 15 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
curlimages/curldigest-pinned:8.17.0935d9100e9ba
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

7,688
skippersinextraVerified publisher0.8.131 of 1See more

skipper sinextra 0.8.13

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/zalando/skipper:v0.27.883a357a2a4bef
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

162
wg-easyslybase-wg-easyVerified publisher1.2.01 of 1See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:15.4.00e7bc9d34e86
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

727
snappasssnappassVerified publisher0.4.32 of 3See more

snappass snappass 0.4.3

2 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
lmacka/snappass:2.1.293f5c048b7d4
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
valkey/valkey:8.1.61f84517eca8e
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

3,054
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
openssl@3.5.1-1
3.5.7-1~deb13u2

Open the chart page →

14,569
redis-shardedsoftonic0.5.01 of 2See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,337
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

7,319
ocean-metric-exporterspot1.1.11 of 1See more

ocean-metric-exporter spot 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
gcr.io/spotinst-artifacts/spot-ocean-metric-exporter:1.0.5ae57b62291aa
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,486
stackradar-scannerstackradarVerified publisher0.3.01 of 1See more

stackradar-scanner stackradar 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,219
silverbulletstone0.10.01 of 1See more

silverbullet stone 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/silverbulletmd/silverbullet:2.10.027b5724cc367
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

422
supabasesupabse0.8.04 of 11See more

supabase supabse 0.8.0

4 of the 11 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:17-alpine18cfe3ef5e68
openssl@3.5.7-r0
3.5.8-r0
supabase/gotrue:v2.189.0385184459f57
openssl@3.5.6-r0
3.5.8-r0
supabase/postgres:17.6.1.136f371b5f3f2ac
openssl@3.5.6-r0
3.5.8-r0
supabase/storage-api:v1.60.4c8eb9858eafe
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

18,327
switcher-apiswitcherapiOfficialVerified publisher1.3.53 of 3See more

switcher-api switcherapi 1.3.5

3 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
trackerforce/switcher-api:latest28ee0c4e0b88
openssl@3.5.7-r0
3.5.8-r0
trackerforce/switcher-management:latest13a604f205da
openssl@3.5.7-r0
3.5.8-r0
trackerforce/switcher-resolver-node:latest67e2c261f7b4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

627
switcher-slack-appswitcherapiOfficialVerified publisher1.1.51 of 1See more

switcher-slack-app switcherapi 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
trackerforce/switcher-slack-app:latest39ddc489edbf
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

192
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,276
headscaleszpadel-chartsVerified publisher0.30.21 of 3See more

headscale szpadel-charts 0.30.2

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:0.29.18453e47ea6bf
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,894
tenuretenureVerified publisher1.0.61 of 2See more

tenure tenure 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
tenureai/tenure:v1.0.285f5b222df9a5
openssl@3.5.6-1~deb13u2+dhi0
3.5.7-1~deb13u2

Open the chart page →

2,566
tocktock0.6.37 of 9See more

tock tock 0.6.3

7 of the 9 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
tock/bot_admin:25.10.7df3e38c77a38
openssl@3.5.5-r0
3.5.8-r0
tock/bot_api:25.10.7dd5d5c70e333
openssl@3.5.5-r0
3.5.8-r0
tock/build_worker:25.10.7080cb6b08d5b
openssl@3.5.5-r0
3.5.8-r0
tock/duckling:25.10.7ac1f3f1a1e9c
openssl@3.5.5-r0
3.5.8-r0
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
tock/kotlin_compiler:25.10.7c9c0fb40089a
openssl@3.5.5-r0
3.5.8-r0
tock/nlp_api:25.10.7c04ffe67b977
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

13,025
traefikeetraefikOfficialVerified publisher4.2.101 of 2See more

traefikee traefik 4.2.10

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
traefik/traefikee:v2.12.10acc7fcca5f1c
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

551
typemilltypemill-helm-chart2.2.02 of 2See more

typemill typemill-helm-chart 2.2.0

2 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned4e9dff179519
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
kixote/typemilldigest-pinned628f79a08cc7
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,526
universaluniversal4.0.11 of 1See more

universal universal 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
providus/undefined:lateste0b9f03bcd98
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

487
taigaunxwaresVerified publisher2026.3.82 of 6See more

taiga unxwares 2026.3.8

2 of the 6 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
taigaio/taiga-protected:latestfd4568a97a59
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

9,209
varnish-ingress-controllervarnish-ingress-controllerVerified publisher0.5.01 of 1See more

varnish-ingress-controller varnish-ingress-controller 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
mariusm/vingress:0.5.0b3db186c3d72
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,294
vite-react-app-helm-chartsvite-react-app-helm-charts1.0.01 of 1See more

vite-react-app-helm-charts vite-react-app-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/marcuwynu23/vite-app-sample:latest21247f2b97c4
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,081
wachdwachdVerified publisher0.4.371 of 1See more

wachd wachd 0.4.37

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/wachd/wachd:0.4.1805b05c56da94
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,271
waldurwaldur-chartsVerified publisher8.1.23 of 3See more

waldur waldur-charts 8.1.2

3 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
opennode/waldur-homeport:8.1.2a8b5b4777027
openssl@3.5.7-r0
3.5.8-r0
opennode/waldur-mastermind:8.1.24c82b15d9042
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,017
ingress-nginxwenerme4.15.11 of 2See more

ingress-nginx wenerme 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,541
natswenerme2.14.63 of 3See more

nats wenerme 2.14.6

3 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/nats:2.14.6-alpinead7a43eb7e33
openssl@3.5.7-r0
3.5.8-r0
natsio/nats-box:0.19.7ffce8bd10338
openssl@3.5.6-r0
3.5.8-r0
natsio/nats-server-config-reloader:0.23.064cb6c858e79
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

2,308
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
requarks/wiki:latest68f0d1848261
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

3,830
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

7,793
wordpress-helmwordpress-helm0.2.93 of 4See more

wordpress-helm wordpress-helm 0.2.9

3 of the 4 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
library/memcached:alpinec29847751abb
openssl@3.5.7-r0
3.5.8-r0
library/varnish:alpinea84e1d4adb58
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

8,330
workflows-aggregatorworkflows-aggregatorVerified publisher0.16.91 of 1See more

workflows-aggregator workflows-aggregator 0.16.9

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-aggregator:0.16.9b7984253b128
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

1,406
wraftwraft0.1.122 of 9See more

wraft wraft 0.1.12

2 of the 9 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:14-alpine727876d27466
openssl@3.5.7-r0
3.5.8-r0
quay.io/wraft/wraft-frontend:latestf1bbbd5e9bb9
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

10,165
discord-botxxczakiVerified publisher0.27.121 of 2See more

discord-bot xxczaki 0.27.12

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
xxczaki/discord-bot:cdb7263ecd2f932052d05d952d04b3fa0c8559b42edf7342dd5a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

477
aeneabotygdrassilOfficialVerified publisher0.2.01 of 2See more

aeneabot ygdrassil 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
elautoestopista/aeneabot:4.2.1125ba620d528
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,694
yugawareyugabyteVerified publisher2026.1.11 of 3See more

yugaware yugabyte 2026.1.1

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:14.22eba8ddbdd837
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,658
fusekizazukoVerified publisher0.2.31 of 1See more

fuseki zazuko 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/zazuko/fuseki-geosparql:v5.2.06fbd8983f750
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
zcash-stackzcashVerified publisher0.4.51 of 2See more

zcash-stack zcash 0.4.5

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
electriccoinco/lightwalletd:v0.5.42ae3a551e111
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,934
plausible-analyticszekker6Verified publisher1.4.01 of 2See more

plausible-analytics zekker6 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,172
mikochizer0tonin1.11.01 of 1See more

mikochi zer0tonin 1.11.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
zer0tonin/mikochi:1.11.009872bae1554
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4

Open the chart page →

1,005
velero-notificationszokeber-velero-notificationsVerified publisher0.1.101 of 2See more

velero-notifications zokeber-velero-notifications 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/zokeber/velero-notifications:0.0.176d84f6c4ce20
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

728
backendzymtraceOfficialVerified publisher26.9.21 of 6See more

backend zymtrace 26.9.2

1 of the 6 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/zystem-io/zymtrace-pub-ui:26.9.29a32b89c0c19
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

9,149
aaqaaqVerified publisher0.3.01 of 1See more

aaq aaq 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
quay.io/kubevirt/aaq-operator:v1.7.0d28a2daa5b15
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,016
opencode-serveraardbol-opencode-serverVerified publisher1.5.01 of 1See more

opencode-server aardbol-opencode-server 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/aardbol/opencode-server:v1.18.23-alpine7930061993f7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

717
glanceadnoctemVerified publisher0.1.01 of 1See more

glance adnoctem 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
glanceapp/glance:v0.8.69dfb09470b20
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

153
gobackupadnoctemVerified publisher0.4.01 of 1See more

gobackup adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
huacnlee/gobackup:v3.1.1560be93229a5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,836
linkstackadnoctemVerified publisher0.4.01 of 1See more

linkstack adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
linkstackorg/linkstack:latest1c8b05399ee4
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

2,094
ntfyadnoctemVerified publisher0.4.01 of 1See more

ntfy adnoctem 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
binwiederhier/ntfy:v2.28.06ef4b819f722
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165

Container images carrying it

1,648 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-63075.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.