StackRadar

CVE-2026-63076

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,867
of 17,787 indexed, latest versions
Container images
3,109
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,867 of 17,787 indexed charts deploy, on 3,109 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+60 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u21,880
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,195
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63076DEBIAN-CVE-2026-63076UBUNTU-CVE-2026-63076AZL-97941ECHO-b5fe-8a22-4e2a
Also known as
USN-8678-1

Charts affected

2,867 by stars
ChartLatestAffected imagesRadar Score
librechatopenshift1.9.02 of 3See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

5,833
opentelemetry-demoopentelemetry-helmVerified publisher0.41.124 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

24 of the 34 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
grafana/grafana:13.1.0121a7a9ece6d
openssl@3.5.7-r0
3.5.8-r0
jaegertracing/jaeger:2.19.0ede4864215be
openssl@3.5.6-r0
3.5.8-r0
library/postgres:18.4a02db8cac496
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-telemetry/demo:3.0.0-shipping02602e60edbf
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-telemetry/demo:3.0.0-kafka0601750a3ca4
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
openssl@3.0.2-0ubuntu1.25
3.0.2-0ubuntu1.29
ghcr.io/open-telemetry/demo:3.0.0-telemetry-docs3519858704e7
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-cart3f89a444250a
openssl@3.5.6-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-opamp-server62cfae32adb1
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-recommendation6510027907f9
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-mcp654f860148ba
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-telemetry/demo:3.0.0-chatbot66ba53497f1f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-telemetry/demo:3.0.0-quote6bc8f7f6809e
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15
ghcr.io/open-telemetry/demo:3.0.0-image-provider93e1585e97ac
openssl@3.5.4-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-frontend9505e349e140
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-telemetry/demo:3.0.0-load-generatorcd12cb42fb15
openssl@3.5.6-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-paymentd498c7434d22
openssl@3.0.18-1~deb12u2
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-emaild674d4081ca4
openssl@3.5.6-r0
3.5.8-r0
ghcr.io/open-telemetry/demo:3.0.0-agentdf5ee05e23e3
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
ghcr.io/open-telemetry/demo:3.0.0-currencyf82a7805e7ba
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/valkey-io/valkey:9.0.4-alpine3.23107b203169a2
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

22,678
openvaultopenvaultVerified publisher0.8.12 of 2See more

openvault openvault 0.8.1

2 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-frontend:v1.1.0bfc3118f6565
openssl@3.5.0-r0
3.5.8-r0
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

6,899
opikopikOfficialVerified publisher2.2.615 of 13See more

opik opik 2.2.61

5 of the 13 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
alpine/kubectl:1.35.0862d86046bbc
openssl@3.5.5-r0
3.5.8-r0
library/zookeeper:3.9.4dfa9ba46d14b
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.29
redis/redis-stack-server:7.2.0-v10e44b2b49d059
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
ghcr.io/comet-ml/opik/opik-frontend:2.2.6182af3818731e
openssl@3.5.6-r0
3.5.8-r0
ghcr.io/comet-ml/opik/opik-python-backend:2.2.61df70104803cb
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

14,422
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
openssl@3.0.2-0ubuntu1.25
3.0.2-0ubuntu1.29
shaowenchen/ops-server:latest315444f703f4
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29

Open the chart page →

9,049
orbitalregorbitalregVerified publisher0.3.01 of 4See more

orbitalreg orbitalreg 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/postgres:16-alpinecf78e76683b9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,279
ouriosouriosVerified publisher0.4.81 of 1See more

ourios ourios 0.4.8

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/jensholdgaard/ourios:latest3d87d932391d
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

339
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,694
prowlarrpanzer1119Verified publisher0.4.181 of 2See more

prowlarr panzer1119 0.4.18

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
linuxserver/prowlarr:2.4.0.5397-ls149a46d0ce0a823
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,001
radarrpanzer1119Verified publisher0.2.21 of 1See more

radarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/radarr:6.0.4.10291-ls2896c0948b42c14
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

950
sonarrpanzer1119Verified publisher0.2.21 of 1See more

sonarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/sonarr:4.0.16.2944-ls3008b9f2138ec50
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

947
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
bitnamilegacy/postgresqldigest-pinned926356130b77
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

8,510
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

6,890
patchworkpatchworkVerified publisher0.8.61 of 2See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/patchwork:mainc01e018bced4
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

2,084
pbuf-registrypbuf-registry0.4.11 of 2See more

pbuf-registry pbuf-registry 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/pbufio/registry:v0.4.177a36c035b4b
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,941
fahclientpcktdmp2.6.01 of 2See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,732
peertubepeertubeVerified publisher0.1.31 of 1See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
chocobozzz/peertube:v8.1.5052712130691
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

7,075
periscopeperiscopeVerified publisher1.1.61 of 1See more

periscope periscope 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/gnana997/periscope:1.1.621b284fb00f2
openssl@3.0.20-1~deb12u1
no fix listed

Open the chart page →

806
piholepihole-helmVerified publisher1.6.01 of 1See more

pihole pihole-helm 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
pihole/pihole:2026.07.2f7d1be836e3b
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

571
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.29

Open the chart page →

7,616
matomopockostVerified publisher1.3.02 of 3See more

matomo pockost 1.3.0

2 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

5,102
portraitportraitVerified publisher0.2.134 of 8See more

portrait portrait 0.2.13

4 of the 8 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
treskon/portrait:DEV-latest88e813f22347
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
treskon/portrait-pythonruntime:DEV-latest694c098bcb52
openssl@3.5.7-r0
3.5.8-r0
treskon/portrait-ui:DEV-lateste7970783bc8d
openssl@3.5.7-r0
3.5.8-r0
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

31,949
postgresqlpostgresqlVerified publisher0.3.172 of 2See more

postgresql postgresql 0.3.17

2 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/postgres:18.6-alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0
pgautoupgrade/pgautoupgrade:18-alpine48b448825656
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,268
postgresqlpostgresql-helm0.1.21 of 1See more

postgresql postgresql-helm 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,638
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,139
readarrpree-helm-chartsVerified publisher1.17.11 of 1See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/home-operations/readarr:0.4.18.28058f7551205fbd
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

1,099
preparrpreparr0.19.72 of 6See more

preparr preparr 0.19.7

2 of the 6 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/postgres:18-alpined3e1620b530c
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/robbeverhelst/preparr:latest9acc172942f3
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,126
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/mariadb:11.7.2fcc7fcd7114a
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

5,483
dockerhub-exporterpromhippieVerified publisher2.15.11 of 1See more

dockerhub-exporter promhippie 2.15.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
quay.io/promhippie/dockerhub-exporter:2.15.1e432ef421257
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
hcloud-exporterpromhippieVerified publisher4.27.11 of 1See more

hcloud-exporter promhippie 4.27.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
quay.io/promhippie/hcloud-exporter:3.27.2c0110b2a3896
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

165
prowlerprowler-appVerified publisher0.0.93 of 5See more

prowler prowler-app 0.0.9

3 of the 5 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/neo4j:2026.02.25ab4ab0358cf
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
prowlercloud/prowler-api:5.31.14f252d579be2
openssl@3.0.20-1~deb12u2
no fix listed
prowlercloud/prowler-ui:5.31.179ee83c8e702
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

8,203
proxy-ipsecproxy-ipsec1.0.141 of 1See more

proxy-ipsec proxy-ipsec 1.0.14

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
caligari/proxy-ipsec:latest9d537a9c883d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

290
psa-restricted-patcherpsa-restricted-patcherVerified publisher0.10.11 of 1See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/psa-restricted-patcher:maina53ef16b024a
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,402
pwpwVerified publisher1.6.43 of 3See more

pw pw 1.6.4

3 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/nginx:1.31.4-alpine-slim1870de6d59aa
openssl@3.5.7-r0
3.5.8-r0
library/redis:8.6.6-alpine75934ddb37bf
openssl@3.5.7-r0
3.5.8-r0
tinyops/pw:1.15.4efdc97ede5c4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

466
pzserverpzserver0.1.171 of 2See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
lis314/project-zomboid-docker:latestaa2089c37920
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

3,022
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15

Open the chart page →

24,038
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29

Open the chart page →

6,835
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

2,809
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29

Open the chart page →

7,466
redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher1.0.21 of 1See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
promzeus/redis-sentinel-gateway:v182f6d56e280b
openssl@3.0.14-1~deb12u2
no fix listed

Open the chart page →

2,665
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

4,252
kminionredpanda-dataOfficialVerified publisher0.15.21 of 1See more

kminion redpanda-data 0.15.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
redpandadata/kminion:v2.3.0c05fa976428e
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

923
reportportalreportportal-ioOfficialVerified publisher26.8.128 of 15See more

reportportal reportportal-io 26.8.12

8 of the 15 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
openssl@3.0.16-1~deb12u1
no fix listed
library/postgres:18.4a02db8cac496
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
library/rabbitmq:4.3.4-managementeb5295d08332
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
reportportal/k8s-wait-for:latest06cdf299b397
openssl@3.5.7-r0
3.5.8-r0
reportportal/migrations:5.15.4464468240d7b
openssl@3.5.7-r1
3.5.8-r0
reportportal/service-auto-analyzer:5.15.5c449b93629a5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
reportportal/service-index:5.15.1b1860ed33071
openssl@3.5.7-r1
3.5.8-r0
reportportal/service-ui:5.15.5aea8747cb639
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

11,943
reservation-appreservation-app1.0.91 of 4See more

reservation-app reservation-app 1.0.9

1 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
zbalogh/reservation-angular-ui:1.0.95eb19e460b3c
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

6,640
resurfaceresurfaceioVerified publisher3.9.02 of 3See more

resurface resurfaceio 3.9.0

2 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
jitesoft/kubectl:latest9996dd28914f
openssl@3.5.7-r0
3.5.8-r0
resurfaceio/resurface:3.7.84d5cda2f64109
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29

Open the chart page →

7,487
atuinrm3lVerified publisher0.11.02 of 3See more

atuin rm3l 0.11.0

2 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
openssl@3.0.11-1~deb12u2
no fix listed
ghcr.io/atuinsh/atuin:18.12.0e953fa9e36ef
openssl@3.0.18-1~deb12u2
no fix listed

Open the chart page →

6,548
dev-feedrm3lVerified publisher3.1.21 of 3See more

dev-feed rm3l 3.1.2

1 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
openssl@3.0.13-1~deb12u1
no fix listed

Open the chart page →

9,885
kimai2robjuz5.0.141 of 2See more

kimai2 robjuz 5.0.14

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
kimai/kimai2:2.67.03084f1e5ecdc
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

4,508
rocketadminrocketadminOfficialVerified publisher1.0.421 of 1See more

rocketadmin rocketadmin 1.0.42

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
rocketadmin/rocketadmin:1.17.710955ef540b9
openssl@3.0.19-1~deb12u2
no fix listed

Open the chart page →

5,508
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

7,767

Container images carrying it

3,109 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
apache/apisix:3.16.0-ubuntu5e47692cac00
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15
1
apache/camel-k:2.11.0d173e7efe258
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
apache/gravitino-iceberg-rest:1.3.080136ae753ee
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.29
1
apache/hertzbeat:1.8.075d48a62748f
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
1
apache/kafka:4.1.0bff074a5d005
openssl@3.5.2-r0
3.5.8-r0
1
apache/kafka-native:4.1.09a9d16e60894
openssl@3.5.1-r0
3.5.8-r0
1
apache/nifi-registry:1.27.063b8e3e40742
openssl@3.0.2-0ubuntu1.16
3.0.2-0ubuntu1.29
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29
1
apachepulsar/pulsar:3.0.79c9947de139d
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29
1
apache/ranger:2.7.076c176e8a0e4
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29
1
apache/rocketmq:5.3.0434d8398f996
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.15
1
apache/rocketmq-exporter:0.0.2c8fb51195444
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.29
1
apache/skywalking-oap-server:9.2.0133d35d2c263
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.29
1
apache/skywalking-ui:9.2.0295f1dc87d98
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.29
1
apache/spark-kubernetes-operator:1.0.0349da72f95c2
openssl@3.5.7-r0
3.5.8-r0
1
apache/superset:4.0.1ab9467fd712c
openssl@3.0.11-1~deb12u2
no fix listed
1
apache/tika:latest-full80072bb73dd3
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
1
apache/tika:3.3.1.090b7fa1dc018
openssl@3.5.5-1ubuntu3
3.5.5-1ubuntu3.4
1
apache/tika:2.9.0.092d055a84e9e
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
openssl@3.5.1-1
3.5.7-1~deb13u2
1
appwrite/appwrite:1.9.01aaa70127114
openssl@3.5.5-r0
3.5.8-r0
1
appwrite/appwrite:1.9.6adc7d0e7ec23
openssl@3.5.6-r0
3.5.8-r0
1
appwrite/console:8.7.383dcdc8492ac6
openssl@3.5.5-r0
3.5.8-r0
1
aquasec/kube-bench:v0.15.07a8fa32dce21
openssl@3.5.5-r0
3.5.8-r0
1
aquasec/trivy:0.74.062b1e65e8869
openssl@3.5.7-r0
3.5.8-r0
1
aquasec/trivy:0.69.3bcc376de8d77
openssl@3.5.5-r0
3.5.8-r0
1
archivebox/archivebox:0.7.41a5a37331091
openssl@3.0.20-1~deb12u1
no fix listed
1
aristidetm/basic-notebook:3.6.5469dbc951224
openssl@3.0.13-1~deb12u1
no fix listed
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
openssl@3.0.13-1~deb12u1
no fix listed
1
artifacthub/db-migrator:v1.23.028c13565ac5c
openssl@3.5.7-r0
3.5.8-r0
1
artifacthub/hub:v1.23.07d3a91c539dc
openssl@3.5.7-r0
3.5.8-r0
1
artifacthub/scanner:v1.23.02d8365601f0e
openssl@3.5.7-r0
3.5.8-r0
1
artifacthub/tracker:v1.23.05368d21a6e5c
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
openssl@3.0.11-1~deb12u2
no fix listed
1
arunvelsriram/utils:latest655ad18fd8d6
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
1
assistiot/identity-manager_db:latest0d3e6d35f168
openssl@3.0.11-1~deb12u2
no fix listed
1
assistiot/location_processing:lateste9bae124095f
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29
1
assistiot/open_api_backend:1.1.230812ba93555
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.29
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
openssl@3.0.11-1~deb12u2
no fix listed
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
openssl@3.0.11-1~deb12u2
no fix listed
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
openssl@3.0.9-1
no fix listed
1
athou/commafeed:6.2.0-postgresql5e388351df1a
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
1
atlassian/confluence-server:7.10.03b9222ab32ef
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29
1
atlassian/jira-software:8.14.037bc46cbec1a
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
1
atlassian/jira-software:9.7.264a75aa4ec4e
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
1
avaprotocol/ap-avs:1.2.0c430ea5c37d6
openssl@3.0.13-1~deb12u1
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
openssl@3.0.9-1
no fix listed
1
avzini/web-app:latestf40b30210ed0
openssl@3.0.11-1~deb12u2
no fix listed
1
awesometechnologies/synapse-admin:0.11.4a1c1f4662875
openssl@3.5.5-r0
3.5.8-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.