StackRadar

CVE-2026-63075

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,758
of 17,803 indexed, latest versions
Container images
1,647
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,758 of 17,803 indexed charts deploy, on 1,647 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,176
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2437
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63075DEBIAN-CVE-2026-63075UBUNTU-CVE-2026-63075AZL-97938
Also known as
USN-8678-1

Charts affected

1,758 by stars
ChartLatestAffected imagesRadar Score
grafana-chartmy-personal-grafana0.1.01 of 1See more

grafana-chart my-personal-grafana 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

745
haproxy-ingressn42-gateway0.16.11 of 1See more

haproxy-ingress n42-gateway 0.16.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
quay.io/jcmoraisjr/haproxy-ingress:v0.16.16fd744191ef6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

794
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
openssl@3.5.7-r1
3.5.8-r0

Open the chart page →

1,050
dependency-tracknaj980.0.92 of 3See more

dependency-track naj98 0.0.9

2 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
dependencytrack/apiserver:latestf1da63ed610a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
dependencytrack/frontend:latest8854a8320475
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,501
jupyterhub-metricsncsaVerified publisher1.3.04 of 5See more

jupyterhub-metrics ncsa 1.3.0

4 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0
library/postgres:15-alpinefe0737ba566a
openssl@3.5.7-r0
3.5.8-r0
timescale/timescaledb:latest-pg156343bdc87ca1
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/ncsa/jupyterhub-metrics/collector:1.3.0dcb8c731bb1b
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

4,168
ixyneoskop2.1.11 of 1See more

ixy neoskop 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
neoskop/ixy:2.1.125152b474f54
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,167
neosyncneosyncVerified publisher0.5.411 of 3See more

neosync neosync 0.5.41

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

7,314
appneosync-appVerified publisher0.5.411 of 1See more

app neosync-app 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/app:0.5.41ca31ec35b829
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

1,572
bluesky-pdsnerkho-helm-charts0.4.21 of 1See more

bluesky-pds nerkho-helm-charts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/bluesky-social/pds:0.4.204cbc6e3ea157d
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

2,398
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,946
agent-controlnewrelic0.0.921 of 1See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
openssl@3.5.1-1
3.5.7-1~deb13u2

Open the chart page →

3,917
nexus-tasksnexus-tasks2.0.02 of 5See more

nexus-tasks nexus-tasks 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-backend:2.0.0f80349eb018b
openssl@3.5.6-r0
3.5.8-r0
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

3,927
f5-waf-policy-controllernginxVerified publisher5.15.01 of 4See more

f5-waf-policy-controller nginx 5.15.0

1 of the 4 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
curlimages/curl:8.20.0b3f1fb2a51d9
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

419
ciliumnicklasfrahm-ciliumVerified publisher0.7.41 of 6See more

cilium nicklasfrahm-cilium 0.7.4

1 of the 6 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
quay.io/cilium/hubble-ui:v0.13.3661d5de70501
openssl@3.5.2-r0
3.5.8-r0

Open the chart page →

7,246
wireguardnicklasfrahm-wireguard0.2.01 of 1See more

wireguard nicklasfrahm-wireguard 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:145f26407fd2ed
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

1,160
terraform-backendnimbolus0.3.21 of 2See more

terraform-backend nimbolus 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/nimbolus/terraform-backend:0.2.2bf876252fbe1
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,511
base-jobnn-coVerified publisher0.1.01 of 4See more

base-job nn-co 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

753
akash-nodenodeifyVerified publisher1.0.01 of 2See more

akash-node nodeify 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/alpine:3.2214358309a308
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
cosmoshub-rpcnodeifyVerified publisher1.0.72 of 2See more

cosmoshub-rpc nodeify 1.0.7

2 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

2,017
cosmos-nodenodeifyVerified publisher2.6.02 of 2See more

cosmos-node nodeify 2.6.0

2 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/alpine:3.2214358309a308
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/cosmos/gaia:v25.1.0f115777d1112
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

2,017
nostreamnostream0.1.01 of 1See more

nostream nostream 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/cameri/nostream:main8726533b9e69
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

597
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,940
keycloak-helm-chartnotesprojectchart0.1.01 of 2See more

keycloak-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,686
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

6,903
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,966
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,923
fluentd-kubernetes-daemonsetnovum-rgi-charts0.1.01 of 1See more

fluentd-kubernetes-daemonset novum-rgi-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
fluent/fluentd-kubernetes-daemonset:v1-debian-graylogfda93f768f98
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,048
example-dev-toolsnoygal0.2.81 of 3See more

example-dev-tools noygal 0.2.8

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
linuxserver/codimd:latestb801bbcf6386
nodejs@10.23.0-1nodesource1
no fix listed

Open the chart page →

27,560
nai-corenutanix-helm-releasesVerified publisher2.8.01 of 14See more

nai-core nutanix-helm-releases 2.8.0

1 of the 14 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
nutanix/nai-jobs:v2.8.09c373718e1b1
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

840
nai-operatorsnutanix-helm-releasesVerified publisher2.8.01 of 5See more

nai-operators nutanix-helm-releases 2.8.0

1 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
nutanix/nai-jobs:v2.8.09c373718e1b1
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

840
nutanix-flow-cninutanix-helm-releasesVerified publisher1.1.01 of 7See more

nutanix-flow-cni nutanix-helm-releases 1.1.0

1 of the 7 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

4,997
firecrawlobeoneVerified publisher3.0.62 of 5See more

firecrawl obeone 3.0.6

2 of the 5 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/rabbitmq:3.13-management-alpine606d8c0d6b3c
openssl@3.5.4-r0
3.5.8-r0
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

10,311
mktxpobeoneVerified publisher1.1.102 of 2See more

mktxp obeone 1.1.10

2 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/akpw/mktxp:latest2b3ccb1c2bd9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

332
ollamaobeoneVerified publisher0.3.11 of 2See more

ollama obeone 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/obeone/ollama-exporter:latestf43af285c6e0
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,120
ocellusaiocellusaiVerified publisher0.1.121 of 2See more

ocellusai ocellusai 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,211
lensoci-ai-incubations0.1.144 of 16See more

lens oci-ai-incubations 0.1.14

4 of the 16 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
openssl@3.5.0-r0
3.5.8-r0
grafana/grafana:12.1.1a1701c218024
openssl@3.5.1-r0
3.5.8-r0
library/postgres:134689940c6838
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2
registry.k8s.io/ingress-nginx/controller:v1.13.21f7eaeb01933
openssl@3.5.2-r0
3.5.8-r0

Open the chart page →

17,257
ocisocis-community0.1.01 of 1See more

ocis ocis-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
owncloud/ocis:8.0.1b38fd8fdd58f
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

2,356
octantisoctantis0.1.01 of 1See more

octantis octantis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/vinny1892/octantis:latest45459c0910fc
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

2,618
octant-uioctant-ui0.0.1-testing1 of 1See more

octant-ui octant-ui 0.0.1-testing

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/mydecisive/octant-ui:0.0.1-testing61e4066b22fb
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,105
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,347
mailpitoli-the-devVerified publisher1.0.11 of 1See more

mailpit oli-the-dev 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
axllent/mailpit:v1.31.0c96991d9bef7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
nocodbone-acre-fundVerified publisher0.4.61 of 3See more

nocodb one-acre-fund 0.4.6

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,241
oafpassone-acre-fundVerified publisher0.1.32 of 2See more

oafpass one-acre-fund 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
jhaals/yopass:14.9.0934e4f2c016f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/memcached:1.6-alpinec29847751abb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

599
cron-jobonechart-slVerified publisher0.73.71 of 1See more

cron-job onechart-sl 0.73.7

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/debian:stable-slim04634311a8d5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,004
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,686
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest473fdffe4e67
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

6,697
oom-traceroom-tracerVerified publisher0.1.01 of 1See more

oom-tracer oom-tracer 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/eminaktas/oom-tracer:v0.1.0c90ca8389c87
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,125
jobopen-charts2.0.01 of 1See more

job open-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

753
comacopencord1.0.01 of 9See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
omecproject/onos-progran:1.0.05715e5648aa0
nodejs@8.9.4-1nodesource1
no fix listed

Open the chart page →

251,005
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
nodejs@8.9.4-1nodesource1
no fix listed

Open the chart page →

94,372

Container images carrying it

1,647 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-63075.

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.