StackRadar

CVE-2026-63076

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,941
of 17,821 indexed, latest versions
Container images
3,286
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,941 of 17,821 indexed charts deploy, on 3,286 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+59 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u21,849
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,408
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-613
OSV records
ALPINE-CVE-2026-63076DEBIAN-CVE-2026-63076UBUNTU-CVE-2026-63076AZL-97941ECHO-b5fe-8a22-4e2a
Also known as
USN-8678-1

Charts affected

2,941 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

3,286 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
agentarea/agentarea-frontend:latest2098a9d7b1fe
openssl@3.5.7-r0
3.5.8-r0
1
agentarea/agentarea-mcp-runner:latestd3c209a5d531
openssl@3.0.20-1~deb12u2
no fix listed
1
agentarea/agentarea-worker:latest1e5cb68ee77a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
ahmetfurkandemir/iceberg-rest-fixture-postgresql:1.10.0142231a0b8b7
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29
1
aibrix/gateway-plugins:v0.7.05b93ea4c753a
openssl@3.0.20-1~deb12u2
no fix listed
1
aibrix/metadata-service:v0.7.063fb81a64377
openssl@3.0.15-1~deb12u1
no fix listed
1
aimmac23/conan-server:2.30.064eac08a69b9
openssl@3.5.7-r0
3.5.8-r0
1
airbyte/db:2.3.000cc017f0393
openssl@3.5.4-r0
3.5.8-r0
1
airbyte/manifest-server:7.28.2deec511b51c3
openssl@3.0.20-1~deb12u2
no fix listed
1
airbyte/pod-sweeper:1.5.198d2c39d512e
openssl@3.0.15-1~deb12u1
no fix listed
1
ajilaag/clamav-rest:latestad689c7b75b1
openssl@3.5.7-r0
3.5.8-r0
1
akaunting/akaunting:3.0.1552811b36ec3a
openssl@3.0.9-1
no fix listed
1
akeyless/akeyless-csi-provider:lateste48bddc5dd72
openssl@3.5.7-r0
3.5.8-r0
1
akeyless/base:latest759e4289fae8
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15
1
akeyless/k8s-webhook-server:0.39.0996cd9afb3b4
openssl@3.5.7-r0
3.5.8-r0
1
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
aktosecurity/akto-agent-guard-worker:1.1.4666eaffd5362
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
aktosecurity/akto-api-security-dashboard:latest3aeaee66bc66
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
1
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
openssl@3.5.1-r0
3.5.8-r0
1
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
aktosecurity/data-ingestion-service213aded7adc5
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.15
1
aktosecurity/data-ingestion-service:1.4.946ed5bcb04b2
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4
1
aktosecurity/data-ingestion-service:1.5.35d4eab1c36b9
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4
1
aktosecurity/mini-runtime:1.72.15498e3e35ecc2
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
aktosecurity/mirror-api-logging:k8s_agentc1313b1ff2ed
openssl@3.5.7-r0
3.5.8-r0
1
aktosecurity/mirror-api-logging:k8s_ebpffcf8be10bead
openssl@3.5.7-r0
3.5.8-r0
1
alakaganaguathoork/local-business:latest7eb27b0f4a5a
openssl@3.5.4-r0
3.5.8-r0
1
alazidis/stornx:1.1.1602d4f7f090c
openssl@3.0.18-1~deb12u2
no fix listed
1
alireza7/s-ui:1.5.302aa86983cdb
openssl@3.5.7-r0
3.5.8-r0
1
allegroai/clearml:2.0.0-613713ae38f7daf
openssl@3.0.15-1~deb12u1
no fix listed
1
alpine/curl:8.12.08943e8c7e8e4
openssl@3.3.2-r4
3.3.7-r1
1
alpine/curl:8.21.0a1c44bab54d8
openssl@3.5.7-r0
3.5.8-r0
1
alpine/git:2.47.2062a01ad7a0e
openssl@3.3.3-r0
3.3.7-r1
1
alpine/git:v2.49.1c0280cf95723
openssl@3.5.4-r0
3.5.8-r0
1
alpine/helm:4.1.0905a068da431
openssl@3.5.4-r0
3.5.8-r0
1
alpine/k8s:1.36.244ef4942e171
openssl@3.5.5-r0
3.5.8-r0
1
alpine/k8s:1.31.106dbe6f391eda
openssl@3.5.0-r0
3.5.8-r0
1
alpine/k8s:1.31.137a319b15cfc9
openssl@3.5.1-r0
3.5.8-r0
1
alpine/k8s:1.32.47e1e7d5b7a96
openssl@3.3.3-r0
3.3.7-r1
1
alpine/k8s:1.31.49c4976d47656
openssl@3.3.2-r4
3.3.7-r1
1
alpine/k8s:1.35.6b7a12c5ddf26
openssl@3.5.5-r0
3.5.8-r0
1
alpine/k8s:1.35.5d870622d0040
openssl@3.5.5-r0
3.5.8-r0
1
alpine/k8s:1.32.3eec354133193
openssl@3.3.3-r0
3.3.7-r1
1
alpine/kubectl:1.36.01ee9df6316d4
openssl@3.5.6-r0
3.5.8-r0
1
alpine/kubectl:1.33.32c59a3f0726c
openssl@3.5.1-r0
3.5.8-r0
1
alpine/kubectl:1.35.0862d86046bbc
openssl@3.5.5-r0
3.5.8-r0
1
alpine/kubectl:1.35.3c4a11ae9a1cb
openssl@3.5.5-r0
3.5.8-r0
1
alpine/psql:18.339824ef2b7fc
openssl@3.5.6-r0
3.5.8-r0
1
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29
1

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.