StackRadar

CVE-2026-63075

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,758
of 17,803 indexed, latest versions
Container images
1,647
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,758 of 17,803 indexed charts deploy, on 1,647 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,176
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2437
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63075DEBIAN-CVE-2026-63075UBUNTU-CVE-2026-63075AZL-97938
Also known as
USN-8678-1

Charts affected

1,758 by stars
ChartLatestAffected imagesRadar Score
autopilotkrateo1.0.01 of 2See more

autopilot krateo 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,686
sweeperkrateo0.2.11 of 2See more

sweeper krateo 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
alpine/kubectl:1.36.01ee9df6316d4
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,505
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

9,856
world-dbkronkltdVerified publisher0.1.01 of 1See more

world-db kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghusta/postgres-world-db:latest879d0919fdcc
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,721
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

3,452
apecloud-mcpkubeblocksVerified publisher0.1.01 of 1See more

apecloud-mcp kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
apecloud/apecloud-mcp:0.1.094041b080510
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

1,108
apelcoud-mcpkubeblocksVerified publisher0.1.01 of 1See more

apelcoud-mcp kubeblocks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
apecloud/apecloud-mcp:0.1.094041b080510
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

1,108
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
openssl@3.5.1-1
3.5.7-1~deb13u2

Open the chart page →

8,559
spiderpoolkubeblocksVerified publisher1.2.01 of 4See more

spiderpool kubeblocks 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/spidernet-io/spiderpool/spiderpool-plugins:19f19457ae7cec86457b0411543a3cf21dd9f95a8edc39be1e22
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

8,498
traefikkubeblocksVerified publisher41.4.01 of 1See more

traefik kubeblocks 41.4.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/traefik:v3.7.129c2a54d87f76
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

267
kube-bootkube-bootVerified publisher1.2.21 of 1See more

kube-boot kube-boot 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/eclipse-temurin:2185f00967bcc6
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

1,310
kubecachekubecacheVerified publisher0.14.11 of 1See more

kubecache kubecache 0.14.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
udhos/kubecache:0.14.1f44ef986df49
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

404
kafka-operatorkubedoopVerified publisher0.4.01 of 1See more

kafka-operator kubedoop 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
quay.io/zncdatadev/kafka-operator:0.4.00a0b4c39c1ba
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

464
kube-fledgedkube-fledged0.11.02 of 2See more

kube-fledged kube-fledged 0.11.0

2 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
senthilrch/kubefledged-controller:v0.11.0bf336912a191
openssl@3.5.7-r0
3.5.8-r0
senthilrch/kubefledged-webhook-server:v0.11.0836a8bbe7cfb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

438
kubegems-edgekubegems1.24.101 of 1See more

kubegems-edge kubegems 1.24.10

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
kubegems/kubegems:v1.24.10a730bcf9322a
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

3,397
volcanokubegems1.12.13 of 3See more

volcano kubegems 1.12.1

3 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
volcanosh/vc-controller-manager:v1.12.13815883c32f6
openssl@3.5.0-r0
3.5.8-r0
volcanosh/vc-scheduler:v1.12.1b24ea8af2d16
openssl@3.5.0-r0
3.5.8-r0
volcanosh/vc-webhook-manager:v1.12.1f8b50088a732
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

5,045
sonarqubekubegemsapp1.3.11 of 2See more

sonarqube kubegemsapp 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
kube-pod-alertskube-pod-alertsVerified publisher0.1.81 of 1See more

kube-pod-alerts kube-pod-alerts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,676
adguard-homekubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

adguard-home kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
adguard/adguardhome:v0.107.767157eb1dc3b2
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

725
bentopdfkubernetes-homelab-helm-chartsVerified publisher0.1.31 of 1See more

bentopdf kubernetes-homelab-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/alam00000/bentopdf-simple:2.8.42bae644d2735
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

351
cloudflaredkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

cloudflared kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,477
firefly-iiikubernetes-homelab-helm-chartsVerified publisher0.1.33 of 3See more

firefly-iii kubernetes-homelab-helm-charts 0.1.3

3 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
curlimages/curl:8.21.07c12af72ceb3
openssl@3.5.7-r0
3.5.8-r0
fireflyiii/core:version-6.6.6ae69fdd95cde
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/postgres:16-alpinecf78e76683b9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,586
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/ghost:6.39.0-alpine77196da4b0df
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

2,769
homepagekubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

homepage kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/gethomepage/homepage:v1.13.1d8d784e50901
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,381
pocket-idkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pocket-id kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/pocket-id/pocket-id:v2.7.045bdeaf3fcd6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,531
portfolio-trackerkubernetes-homelab-helm-chartsVerified publisher0.1.02 of 3See more

portfolio-tracker kubernetes-homelab-helm-charts 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/harish2k01/portfolio-tracker:0.1.056efa3085895
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,511
pve-exporterkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pve-exporter kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

997
qbittorrent-exporterkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

qbittorrent-exporter kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/martabal/qbittorrent-exporter:v2.0.1ddf2bff9b357
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

439
scrutinykubernetes-homelab-helm-chartsVerified publisher0.2.21 of 3See more

scrutiny kubernetes-homelab-helm-charts 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,588
seerrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

seerr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.2.0c4cbd5121236
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

2,564
syncthingkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

syncthing kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
syncthing/syncthing:2.1.07c60eb0ec887
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,304
tor-proxykubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

tor-proxy kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
peterdavehello/tor-socks-proxy:latest0cc12d36d312
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,474
umamikubernetes-homelab-helm-chartsVerified publisher0.1.02 of 3See more

umami kubernetes-homelab-helm-charts 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:17-alpine18cfe3ef5e68
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/umami-software/umami:3.1.0e3f80c0625aa
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

2,593
vaultwardenkubernetes-homelab-helm-chartsVerified publisher0.1.11 of 1See more

vaultwarden kubernetes-homelab-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1ebdfe70701c6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,076
testkube-runnerkubeshop2.13.21 of 1See more

testkube-runner kubeshop 2.13.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
kubeshop/testkube-api-server:2.13.244166c28422f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

372
easegresskubesphere-stable1.0.01 of 1See more

easegress kubesphere-stable 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
megaease/easegress:latestfad1c7452958
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,328
online-boutiquekubesphere-testVerified publisher0.1.01 of 11See more

online-boutique kubesphere-test 0.1.0

1 of the 11 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/redis:alpinebecdda6c7f4b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

26,080
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/kubestellar/console:v0.3.41457cfc94b4da
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

4,614
forkliftkubevirt-forkliftVerified publisher0.3.01 of 2See more

forklift kubevirt-forklift 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
openresty/openresty:1.31.1.1-1-alpine-fatacd832254d9c
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,461
kubevoipkubevoipOfficialVerified publisher0.6.81 of 1See more

kubevoip kubevoip 0.6.8

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/kubevoip/kubevoip:v0.6.841c603a93642
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,123
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/wordpress:php8.1-apachef73396626d2f
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

8,816
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2

Open the chart page →

20,515
kitarguskvalitetsitVerified publisher0.0.0-2026-03-09-091234-10013c41 of 1See more

kitargus kvalitetsit 0.0.0-2026-03-09-091234-10013c4

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
kvalitetsit/kitargus:2026-03-09-091234-10013c4c5cde2d9371c
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

961
oauth2-proxy-injectorkvalitetsitVerified publisher1.5.01 of 1See more

oauth2-proxy-injector kvalitetsit 1.5.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
kvalitetsit/oauth2-proxy-injector:1.5.00c906908d632
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

301
landing-pagelanding-pageVerified publisher0.1.01 of 1See more

landing-page landing-page 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
felipecs8/landing-page:v1db6d44e325a1
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,122
helm-pilotlbenicio-communityVerified publisher0.2.41 of 1See more

helm-pilot lbenicio-community 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
lbenicio/helm-pilot:0.2.54594a2632510
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

713
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

3,571
listmonklbenicio-communityVerified publisher0.1.01 of 1See more

listmonk lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
listmonk/listmonk:latestf535d59e1499
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

720
speedtestlbenicio-communityVerified publisher0.1.01 of 1See more

speedtest lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/d0ugal/internet-perf-exporter:v0.2.91f5c9a96fe52a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

307
stremiolbenicio-communityVerified publisher0.1.11 of 2See more

stremio lbenicio-community 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
lbenicio/stremio-web:latest732f9003de33
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

2,599

Container images carrying it

1,647 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-63075.

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.