StackRadar

CVE-2026-63075

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.005
41st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,771
of 17,805 indexed, latest versions
Container images
1,641
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63075 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 1,771 of 17,805 indexed charts deploy, on 1,641 images.

Affected packageAffected versionsFixed inImages
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,171
openssldeb3.5.1-1, 3.5.1-1+deb13u1, 3.5.4-1~deb13u1, 3.5.4-1~deb13u2+10 more3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2433
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed17
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-620
OSV records
ALPINE-CVE-2026-63075DEBIAN-CVE-2026-63075UBUNTU-CVE-2026-63075AZL-97938
Also known as
USN-8678-1

Charts affected

1,771 by stars
ChartLatestAffected imagesRadar Score
hello-worldsikalabs0.17.01 of 1See more

hello-world sikalabs 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/sikalabs/hello-world-server:latestcf8538bf6489
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,217
hello-world-examplesikalabs0.1.31 of 1See more

hello-world-example sikalabs 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,217
pgadminsikalabs0.1.01 of 2See more

pgadmin sikalabs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
dpage/pgadmin4:latest2f4ce946ddf8
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

398
vault-devsikalabs0.2.01 of 1See more

vault-dev sikalabs 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
hashicorp/vault:latest5520cc26271c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

231
wordpress-mysqlsikalabs0.1.21 of 2See more

wordpress-mysql sikalabs 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/wordpress:latest5a93c470ae82
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,966
sonatype-nexus3simcube1.0.11 of 2See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/alpine:328bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,962
bitwardensinextraVerified publisher0.10.21 of 1See more

bitwarden sinextra 0.10.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,788
fluentdsinextraVerified publisher1.4.51 of 1See more

fluentd sinextra 1.4.5

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/fluentd:1.19.33273d13f1e75
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,136
headscalesinextraVerified publisher0.1.01 of 1See more

headscale sinextra 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:v0.29.30e7f1c6e4ce6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

576
ipsecsinextraVerified publisher0.6.41 of 1See more

ipsec sinextra 0.6.4

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/ipsec:5.236f4e651d1fe
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

710
tabixsinextraVerified publisher0.2.21 of 1See more

tabix sinextra 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/tabix:22.05.17a6e3e996a4ae
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

1,251
tailscalesinextraVerified publisher0.18.11 of 2See more

tailscale sinextra 0.18.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/tailscale:1.102.3d91287e83d1a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,082
mosquittosintef-mosquitto-helm-chart0.1.11 of 1See more

mosquitto sintef-mosquitto-helm-chart 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:2.0.22212f89e1eaeb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
yopasssky-sailVerified publisher1.3.11 of 2See more

yopass sky-sail 1.3.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/memcached:1.6.409ae868852d0b
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

3,073
slothsloth0.16.01 of 2See more

sloth sloth 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
openssl@3.5.1-1
3.5.7-1~deb13u2

Open the chart page →

4,010
multicloudsmo-helm-chart6.0.01 of 14See more

multicloud smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/rabbitmq:alpine3486d98205df
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

9,621
smtpsmtpVerified publisher1.3.31 of 1See more

smtp smtp 1.3.3

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,431
avalanchesnowplow-devopsVerified publisher0.12.11 of 6See more

avalanche snowplow-devops 0.12.1

1 of the 6 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/nats:2.10-alpineb83efabe3e7d
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,332
axonhubsnubisks0.1.02 of 3See more

axonhub snubisks 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
openssl@3.5.7-r0
3.5.8-r0
looplj/axonhub:latest2c71eeaef295
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

684
deeplxsnubisks0.1.01 of 1See more

deeplx snubisks 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
missuo/deeplx:v1.2.232e492587678
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

481
ingress-nginxsoftonic4.15.11 of 2See more

ingress-nginx softonic 4.15.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
registry.k8s.io/ingress-nginx/controller:v1.15.1594ceea76b01
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,542
kube-prometheus-stacksoftonic81.5.12 of 6See more

kube-prometheus-stack softonic 81.5.1

2 of the 6 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
grafana/grafana:12.3.2ba93c9d192e5
openssl@3.5.4-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

5,020
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
openssl@3.5.5-1ubuntu3
3.5.5-1ubuntu3.4

Open the chart page →

3,126
stewardsoftwaremillVerified publisher0.1.121 of 1See more

steward softwaremill 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
fthomas/scala-steward:latest367afe974b7a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

592
solidinvoicesolidinvoiceVerified publisher3.0.11 of 1See more

solidinvoice solidinvoice 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
solidinvoice/solidinvoice:3.0.1ae7c0e155cb5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
redissomaz94Verified publisher0.1.21 of 1See more

redis somaz94 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/redis:8.2-alpine30abb90e62f1
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

180
sqs-to-snssqs-to-sns2.0.151 of 1See more

sqs-to-sns sqs-to-sns 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
udhos/sqs-to-sns:2.0.15cf7979da82e1
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

951
squadsquadVerified publisher0.1.111 of 1See more

squad squad 0.1.11

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
cm2network/squad:latest8cba47f53df5
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,532
srebotsrebot0.14.01 of 2See more

srebot srebot 0.14.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/redis:alpinebecdda6c7f4b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,616
servicexssl-hep1.8.511 of 16See more

servicex ssl-hep 1.8.5

11 of the 16 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/python:3.1070c9cc675605
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ncsa/checks:main0b738bbc8d70
openssl@3.5.1-1
3.5.7-1~deb13u2
sslhep/servicex_app:v1.8.51d12f943cec5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex_code_gen_atlas_xaod:v1.8.5e7aff7f97b89
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex_code_gen_func_adl_uproot:v1.8.5b01b8ee966ed
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex_code_gen_python:v1.8.50e4175a4e1eb
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex_code_gen_raw_uproot:v1.8.5671980005c57
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex_code_gen_topcp:v1.8.5596db2abdd09
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex-did-finder-atlasopenmagic:v1.8.554aaf1721d03
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex-did-finder-cernopendata:v1.8.52cb88ceab5bb
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
sslhep/servicex-did-finder-xrootd:v1.8.5c284442b44e3
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

69,027
hazelcaststakaterVerified publisher1.0.21 of 1See more

hazelcast stakater 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
hazelcast/hazelcast:latestf086bf0ecb23
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,697
my-appstakefish0.1.01 of 3See more

my-app stakefish 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/redis:alpinebecdda6c7f4b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

280
multus-cnistartechnicaVerified publisher0.1.41 of 1See more

multus-cni startechnica 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:latest-thickb2136983532b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,057
open-appsec-injectorstartechnicaVerified publisher1.1.21 of 3See more

open-appsec-injector startechnica 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2

Open the chart page →

4,358
dotstatsuitestatcan0.2.81 of 6See more

dotstatsuite statcan 0.2.8

1 of the 6 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
siscc/dotstatsuite-dbup:master432e55811520
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,886
fdi-dotstatsuitestatcan0.3.51 of 3See more

fdi-dotstatsuite statcan 0.3.5

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
siscc/sdmxri-nsi-maapi:master6cf1145566f0
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

582
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

6,069
fdi-dotstatsuite-sfs-solr-statefulstatcan1.0.21 of 2See more

fdi-dotstatsuite-sfs-solr-stateful statcan 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

921
anna-nginxstatic-nginx1.31.111 of 2See more

anna-nginx static-nginx 1.31.11

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
quay.io/shesselink81/anna-nginx:v1.31.1120c19fa8a918
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

531
hesselinkme-nginxstatic-nginx1.31.111 of 2See more

hesselinkme-nginx static-nginx 1.31.11

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
quay.io/shesselink81/hesselinkme-nginx:v1.31.114f43beb13fc2
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

531
node-configstevehipwellVerified publisher0.7.01 of 2See more

node-config stevehipwell 0.7.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
its-mytabsstone0.3.01 of 1See more

its-mytabs stone 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
louislam/its-mytabs:1.7.02e478d3170bd
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,528
strapistrapi-xmv0.1.11 of 1See more

strapi strapi-xmv 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/xmv-solutions-gmbh/strapi:latesta288b4571142
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

689
stunner-prometheusstunner0.2.11 of 4See more

stunner-prometheus stunner 0.2.1

1 of the 4 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
grafana/grafana:latestf772d434e8fa
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,066
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
ghcr.io/subshell/group-challenge:0.14.19a64f1db04da
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,626
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,060
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,862
mybbsudermanjr0.1.01 of 3See more

mybb sudermanjr 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
mybb/mybb:1.8f2a54bce31c5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,151
stresssudermanjr0.2.01 of 1See more

stress sudermanjr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
library/ubuntu:latest2260313b31c8
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4

Open the chart page →

761
jellyfinsudo-kraken-jellyfinVerified publisher2.1.31 of 1See more

jellyfin sudo-kraken-jellyfin 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-63075.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.6333b64771663
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

3,446

Container images carrying it

1,641 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-63075.

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.