StackRadar

CVE-2026-63075

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,767
of 17,797 indexed, latest versions
Container images
1,648
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,767 of 17,797 indexed charts deploy, on 1,648 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,173
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2441
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63075DEBIAN-CVE-2026-63075UBUNTU-CVE-2026-63075AZL-97938
Also known as
USN-8678-1

Charts affected

1,767 by stars
ChartLatestAffected imagesRadar Score
graphserviceaerospike-helmVerified publisher3.3.01 of 1See more

graphservice aerospike-helm 3.3.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
aerospike/aerospike-graph-service:3.3.0f35739b97a46
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

454
ahnlich-dbahnlich-dbVerified publisher0.1.11 of 1See more

ahnlich-db ahnlich-db 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/deven96/ahnlich-db:latest45d8b5aab491
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,609
airbyte-keycloakairbyteVerified publisher0.1.21 of 2See more

airbyte-keycloak airbyte 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,667
airbyteairbyte-v2Verified publisher2.3.01 of 10See more

airbyte airbyte-v2 2.3.0

1 of the 10 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
airbyte/db:2.3.000cc017f0393
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

11,785
akeyless-csi-providerakeyless-services-helmVerified publisher1.0.41 of 1See more

akeyless-csi-provider akeyless-services-helm 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
akeyless/akeyless-csi-provider:lateste48bddc5dd72
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

314
akeyless-gatewayakeyless-services-helmVerified publisher3.5.61See more

akeyless-gateway akeyless-services-helm 3.5.6

1 container image this version deploys carries CVE-2026-63075.

Container imageDigestPackageFixed in
library/redis:8.6.6-alpine75934ddb37bf
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

—
akeyless-secrets-injectionakeyless-services-helmVerified publisher2.3.01 of 1See more

akeyless-secrets-injection akeyless-services-helm 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
akeyless/k8s-webhook-server:0.39.0996cd9afb3b4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

394
aktoakto0.2.01 of 7See more

akto akto 0.2.0

1 of the 7 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

13,737
akto-ai-guardrails-v2akto0.3.04 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

4 of the 6 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
aktosecurity/akto-agent-guard-worker:1.1.4666eaffd5362
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4

Open the chart page →

9,591
akto-central-setupakto1.1.101 of 5See more

akto-central-setup akto 1.1.10

1 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

5,194
akto-hybrid-redactakto1.44.71See more

akto-hybrid-redact akto 1.44.7

1 container image this version deploys carries CVE-2026-63075.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

—
akto-k8s-agentakto0.1.21 of 1See more

akto-k8s-agent akto 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
aktosecurity/mirror-api-logging:k8s_agentc1313b1ff2ed
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

269
akto-k8s-ebpfakto0.1.31 of 1See more

akto-k8s-ebpf akto 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
aktosecurity/mirror-api-logging:k8s_ebpffcf8be10bead
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

838
akto-k8s-ebpf-openshiftakto0.1.11 of 1See more

akto-k8s-ebpf-openshift akto 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/mirror-api-logging:k8s_ebpf_core_impd94ce715f051
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,279
akto-mini-runtimeakto0.7.221 of 3See more

akto-mini-runtime akto 0.7.22

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/redis:latestV8.6.2832d7785830f
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,845
akto-mini-testingakto1.45.72 of 5See more

akto-mini-testing akto 1.45.7

2 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-api-security-mini-testing:1.72.6_local43316f900242
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
public.ecr.aws/aktosecurity/akto-puppeteer-replay:1.49.4_latestf1c5763d565e
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

6,600
akto-mini-testing-kafkaakto1.42.11 of 5See more

akto-mini-testing-kafka akto 1.42.1

1 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:latest3aa7b960bf32
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

6,406
akto-regional-setupakto1.3.13 of 9See more

akto-regional-setup akto 1.3.1

3 of the 9 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
public.ecr.aws/aktosecurity/akto-threat-detection:1.16.2a47eb6cc17ea
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

7,918
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

4,891
homepagealareira1.0.11 of 1See more

homepage alareira 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:latest753eeb0cc22a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

354
cross-seedalekcVerified publisher7.19.01 of 1See more

cross-seed alekc 7.19.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/cross-seed/cross-seed:6.13.7a1fed512261f
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,379
esphomealekcVerified publisher2.9.01 of 1See more

esphome alekc 2.9.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
esphome/esphome:2026.9.09959730a04c7
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,196
excalidashalekcVerified publisher1.4.02 of 2See more

excalidash alekc 1.4.0

2 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
zimengxiong/excalidash-backend:0.6.0cbdab75f31b2
openssl@3.5.7-r0
3.5.8-r0
zimengxiong/excalidash-frontend:0.6.04ec5b20c0303
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

907
gostalekcVerified publisher0.3.01 of 1See more

gost alekc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
gogost/gost:3.3.0f7a958c45192
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

209
mosquittoalekcVerified publisher0.3.01 of 1See more

mosquitto alekc 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:2.0.22212f89e1eaeb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
sambaalekcVerified publisher1.1.01 of 1See more

samba alekc 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/alekc/samba-docker:v1.1.0cc9a028d9c43
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,135
vault-operatoralekcVerified publisher1.26.11 of 1See more

vault-operator alekc 1.26.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/bank-vaults/vault-operator:v1.24.06f622c5fb8a9
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

542
zigbee2mqttalekcVerified publisher1.0.11 of 2See more

zigbee2mqtt alekc 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
koenkk/zigbee2mqtt:2.14.1fef0de769dcd
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

183
lidarralexmorbo-lidarrVerified publisher0.1.21 of 1See more

lidarr alexmorbo-lidarr 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/home-operations/lidarr:3.1.2.4902dab0e07502a3
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,871
quialexmorbo-quiVerified publisher0.1.01 of 1See more

qui alexmorbo-qui 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/autobrr/qui:v1.14.110b7945d4f09
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,617
tubearchivistalexmorbo-tubearchivistVerified publisher0.1.01 of 2See more

tubearchivist alexmorbo-tubearchivist 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
valkey/valkey:9.0.1546304417fea
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

1,681
redis-haalexvanderberkelVerified publisher4.37.01 of 1See more

redis-ha alexvanderberkel 4.37.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/redis:8.10.1-alpinebecdda6c7f4b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

168
alluredeckalluredeckVerified publisher0.24.02 of 2See more

alluredeck alluredeck 0.24.0

2 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/mkutlak/alluredeck-api:0.41.0fa429df90c68
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/mkutlak/alluredeck-ui:0.41.0c19509b1b336
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,278
stalwartandibraeuVerified publisher1.0.21 of 1See more

stalwart andibraeu 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.16.1425001929f36a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,609
buildkit-serviceandrcunsVerified publisher1.8.01 of 1See more

buildkit-service andrcuns 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
moby/buildkit:v0.31.0a095b3d11ce1
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,290
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,603
ansible-playbook-operatoransible-playbook-operatorVerified publisher0.1.71 of 1See more

ansible-playbook-operator ansible-playbook-operator 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,335
antigenic-docuseal-helm-chartantigenic-docuseal-helm-chartVerified publisher0.2.01 of 1See more

antigenic-docuseal-helm-chart antigenic-docuseal-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
docuseal/docuseal:2.4.17493fd7f6728
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

2,764
antigenic-stalwart-helm-chartantigenic-stalwart-helm-chartVerified publisher1.0.51 of 2See more

antigenic-stalwart-helm-chart antigenic-stalwart-helm-chart 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
stalwartlabs/stalwart:v0.15.5dcf575db2d53
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,462
monitoringantmediaVerified publisher1.0.01 of 6See more

monitoring antmedia 1.0.0

1 of the 6 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,461
antrea-uiantreaVerified publisher0.8.01 of 2See more

antrea-ui antrea 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
antrea/antrea-ui-frontend:v0.8.0ee9686bcefb8
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,275
elasticsearch-clusteranvibo1.0.01 of 2See more

elasticsearch-cluster anvibo 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
devenvanza-labsVerified publisher0.1.21 of 3See more

devenv anza-labs 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
tailscale/tailscale:stable8c42c4574ab0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

208
glauthanza-labsVerified publisher1.0.11 of 1See more

glauth anza-labs 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/glauth/glauth:v2.5.209c782ca5984
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,309
apipingapiping1.5.01 of 1See more

apiping apiping 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
udhos/apiping:1.5.041ab9bae6f3b
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,139
ace-installerappscodeVerified publisher2026.9.111 of 2See more

ace-installer appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/registry:3.1.11be55279f18a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,301
ace-installer-certifiedappscodeVerified publisher2026.9.111 of 2See more

ace-installer-certified appscode 2026.9.11

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/registry:3.1.11be55279f18a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,301
acerproxyappscodeVerified publisher2026.9.111 of 1See more

acerproxy appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/appscode/acerproxy:v0.2.021de3771fdd5
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,323
aceshifterappscodeVerified publisher2026.9.111 of 1See more

aceshifter appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/appscode/aceshifter:v0.0.3e5f5c254a55a
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,038
aws-credential-managerappscodeVerified publisher2026.4.161 of 1See more

aws-credential-manager appscode 2026.4.16

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/appscode/aws-credential-manager:v0.1.00511bbe501c3
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

612

Container images carrying it

1,648 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-63075.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.