StackRadar

CVE-2026-63075

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,767
of 17,797 indexed, latest versions
Container images
1,648
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,767 of 17,797 indexed charts deploy, on 1,648 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,173
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2441
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63075DEBIAN-CVE-2026-63075UBUNTU-CVE-2026-63075AZL-97938
Also known as
USN-8678-1

Charts affected

1,767 by stars
ChartLatestAffected imagesRadar Score
dispatchoor-uigeneral-helm-chartsVerified publisher0.1.01 of 1See more

dispatchoor-ui general-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/dispatchoor-web:latest18e30413dac2
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,334
panda-pulsegeneral-helm-chartsVerified publisher1.0.61 of 1See more

panda-pulse general-helm-charts 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ethpandaops/panda-pulse:latestad6fc3b3e6b8
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

622
redisgengxiankun-charts0.2.01 of 1See more

redis gengxiankun-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

985
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
cloudflare/cloudflared:latest51c9cefcb456
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

9,097
glassflow-etlglassflowVerified publisher0.5.217 of 16See more

glassflow-etl glassflow 0.5.21

7 of the 16 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
alpine/curl:latestb9c839d47281
openssl@3.5.7-r0
3.5.8-r0
library/nats:2.12.3-alpine88fe8e0e09d6
openssl@3.5.4-r0
3.5.8-r0
library/postgres:17-alpine18cfe3ef5e68
openssl@3.5.7-r0
3.5.8-r0
natsio/nats-box:0.19.28031d190c7ee
openssl@3.5.4-r0
3.5.8-r0
natsio/nats-server-config-reloader:0.21.110ff229eaf52
openssl@3.5.4-r0
3.5.8-r0
ghcr.io/glassflow/glassflow-etl-fe:v3.2.05eaad43bd6c5
openssl@3.5.6-r0
3.5.8-r0
ghcr.io/glassflow/glassflow-notifier:v1.0.3d1b0ce10b513
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

12,125
postgresqlglassflowVerified publisher0.1.91 of 1See more

postgresql glassflow 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:17-alpine18cfe3ef5e68
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

494
glauthglauthVerified publisher0.3.171 of 2See more

glauth glauth 0.3.17

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
nouchka/sqlite3:latestd183308f201c
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,648
glpiglpi-chart0.1.11 of 3See more

glpi glpi-chart 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/phpmyadmin:latest3a8a8d6b5289
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

12,399
gnp-stackgnp-stack0.0.54 of 14See more

gnp-stack gnp-stack 0.0.5

4 of the 14 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
grafana/grafana:12.2.135c41e0fd029
openssl@3.5.4-r0
3.5.8-r0
rancher/local-path-provisioner:v0.0.329289da488b07
openssl@3.5.1-r0
3.5.8-r0
ghcr.io/openconfig/gnmic:0.45.0d422a9ebd4a2
openssl@3.5.5-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:1.30.10835d79d8fbae
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

7,689
googly-logingoogly-login0.1.01 of 2See more

googly-login googly-login 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,667
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

22,665
kube-prometheus-stackgpg-dev84.0.02 of 6See more

kube-prometheus-stack gpg-dev 84.0.0

2 of the 6 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
grafana/grafana:13.0.10f86bada30d6
openssl@3.5.5-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.6.0a6c101156d42
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

4,302
openclawgpg-dev1.5.361 of 2See more

openclaw gpg-dev 1.5.36

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,665
traefikgpg-dev39.0.81 of 1See more

traefik gpg-dev 39.0.8

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/traefik:v3.6.1334d5089d0b41
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,280
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

4,681
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

8,281
synthetic-monitoring-agentgrafana-communityVerified publisher1.19.01 of 1See more

synthetic-monitoring-agent grafana-community 1.19.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
grafana/synthetic-monitoring-agent:v0.65.0fe3e095283f0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

213
grafana-dashboard-convertergrafana-dashboard-converterVerified publisher0.3.101 of 1See more

grafana-dashboard-converter grafana-dashboard-converter 0.3.10

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
kenchrcum/grafana-dashboard-converter:0.3.105310497aea3f
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

909
cc-spring-appgridgainVerified publisher1.0.61 of 1See more

cc-spring-app gridgain 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
gridgain/cloud-connector:2025.5.15ab838d7d3cb
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,692
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
gridgain/gridgain9:9.1.1895018390077b
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

3,229
gtmgtmVerified publisher1.0.21 of 1See more

gtm gtm 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
gcr.io/cloud-tagging-10302018/gtm-cloud-image:stable688d35c6c544
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

495
rag-apihajowielandVerified publisher1.0.01 of 1See more

rag-api hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,723
octoboxhalkeye0.1.11 of 1See more

octobox halkeye 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
octoboxio/octobox:latestd909041c46eb
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

3,254
hatchet-apihatchetOfficialVerified publisher0.19.01 of 4See more

hatchet-api hatchet 0.19.0

1 of the 4 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,707
hatchet-hahatchetOfficialVerified publisher0.19.01 of 8See more

hatchet-ha hatchet 0.19.0

1 of the 8 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

7,447
hatchet-stackhatchetOfficialVerified publisher0.19.01 of 8See more

hatchet-stack hatchet 0.19.0

1 of the 8 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

7,447
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.7-alpine258d43821508
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

6,758
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
quay.io/jupyterhub/configurable-http-proxy:5.2.0522738d5285e
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

5,696
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
nodejs@16.19.1-deb-1nodesource1
no fix listed

Open the chart page →

10,730
my_web1helm-chart-by-piyush0.1.01 of 1See more

my_web1 helm-chart-by-piyush 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,715
streamsheetshelm-chartsVerified publisher0.2.31 of 8See more

streamsheets helm-charts 0.2.3

1 of the 8 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:26f8d8a947c50
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

90,014
monitoring-stackhelm-charts-alexis-carbillet0.1.01 of 11See more

monitoring-stack helm-charts-alexis-carbillet 0.1.0

1 of the 11 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

10,649
mywebhelmchartwebapp0.0.51 of 1See more

myweb helmchartwebapp 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/httpd:latest979c38c2228d
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,715
helm-controllerhelm-controllerVerified publisher0.1.41 of 1See more

helm-controller helm-controller 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
rancher/helm-controller:v0.17.4946ae0d13229
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

231
crucixhelm-crucix0.2.01 of 1See more

crucix helm-crucix 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/calesthio/crucix:latest67c5244b6acf
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

780
helmfile-gitops-agenthelmfile-gitops-agentVerified publisher1.1.963 of 3See more

helmfile-gitops-agent helmfile-gitops-agent 1.1.96

3 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
alpine/git:v2.54.06f3b5029566d
openssl@3.5.7-r0
3.5.8-r0
fluxcd/flux-cli:v2.9.5704d55295355
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/helmfile/helmfile:v1.7.4f20e612d5a98
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,613
adguard-homehelmforgeVerified publisher1.5.21 of 2See more

adguard-home helmforge 1.5.2

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.79aba9e3bf0613
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

175
affinehelmforgeVerified publisher1.0.01 of 3See more

affine helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,115
alfiohelmforgeVerified publisher1.2.121 of 3See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,132
answerhelmforgeVerified publisher1.5.21 of 1See more

answer helmforge 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
apache/answer:2.0.2a0d71b0e30a5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

557
apachehelmforgeVerified publisher1.0.61 of 1See more

apache helmforge 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/httpd:2.4.68979c38c2228d
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,715
appwritehelmforgeVerified publisher2.0.01 of 5See more

appwrite helmforge 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,717
automatischhelmforgeVerified publisher1.3.72 of 4See more

automatisch helmforge 1.3.7

2 of the 4 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,843
bentopdfhelmforgeVerified publisher1.0.01 of 1See more

bentopdf helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/alam00000/bentopdf:2.8.86ef493c8e3bd
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
booklorehelmforgeVerified publisher2.0.11 of 3See more

booklore helmforge 2.0.1

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/booklore-app/booklore:v2.3.1d3d3af34bc2c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,343
bytestashhelmforgeVerified publisher1.0.01 of 1See more

bytestash helmforge 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/jordan-dalby/bytestash:1.5.12eb4f736b8cd4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

740
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

9,524
certimatehelmforgeVerified publisher1.0.71 of 1See more

certimate helmforge 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
certimate/certimate:v0.4.326e481dd3d2cf
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

222
chiefonboardinghelmforgeVerified publisher1.1.152 of 3See more

chiefonboarding helmforge 1.1.15

2 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

7,209
ckanhelmforgeVerified publisher1.3.82 of 6See more

ckan helmforge 1.3.8

2 of the 6 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

10,064

Container images carrying it

1,648 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-63075.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.