StackRadar

CVE-2026-63076

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,855
of 17,790 indexed, latest versions
Container images
3,100
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,855 of 17,790 indexed charts deploy, on 3,100 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+60 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u21,876
opensslapk3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more3.5.8-r01,190
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-63076DEBIAN-CVE-2026-63076UBUNTU-CVE-2026-63076AZL-97941ECHO-b5fe-8a22-4e2a
Also known as
USN-8678-1

Charts affected

2,855 by stars
ChartLatestAffected imagesRadar Score
baikalrubxkubeVerified publisher1.3.11 of 1See more

baikal rubxkube 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ckulka/baikal:0.10.1-nginx434bdd162247
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

5,332
kyoorubxkubeVerified publisher0.1.104 of 9See more

kyoo rubxkube 0.1.10

4 of the 9 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
openssl@3.0.15-1~deb12u1
no fix listed
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
openssl@3.0.15-1~deb12u1
no fix listed
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
openssl@3.0.15-1~deb12u1
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

30,428
s3-encryption-gateways3-encryption-gatewayVerified publisher0.11.101 of 1See more

s3-encryption-gateway s3-encryption-gateway 0.11.10

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
cloud37io/s3-encryption-gateway:0.11.10f8ff2092b8af
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

265
conference-appsalaboy1.0.03 of 7See more

conference-app salaboy 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
salaboy/agenda-service-0967b907d9920c99918e2b91b91937b3digest-pinnedce9ce8293e4e
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29
salaboy/c4p-service-a3dc0474cbfa348afcdf47a8eee70ba9digest-pinnedbb64bf14467d
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29
salaboy/notifications-service-0e27884e01429ab7e350cb5dff61b525digest-pinned799c35f9f306
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29

Open the chart page →

11,031
devpisb-helm-charts0.3.01 of 1See more

devpi sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
jonasal/devpi-server:6.17.0-alpineec1eee99a18d
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

924
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

38,166
teamcityscalified-teamcityVerified publisher2026.2.01 of 3See more

teamcity scalified-teamcity 2026.2.0

1 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,649
sceptresceptreai0.1.125 of 5See more

sceptre sceptreai 0.1.12

5 of the 5 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
maponyacharles/sceptreai:postgresql-0.1.1258881351f309
openssl@3.5.7-r0
3.5.8-r0
maponyacharles/sceptreai:api-0.1.127b37b092130a
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
maponyacharles/sceptreai:seaweedfs-0.1.127c8a525f08e9
openssl@3.5.7-r0
3.5.8-r0
maponyacharles/sceptreai:ui-0.1.127cd0f11c5e55
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

4,424
schemaheroschemahero1.4.01 of 1See more

schemahero schemahero 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
schemahero/schemahero-manager:0.22.11609e1a05cd3
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

2,184
seatsurfingseatsurfing0.1.21 of 1See more

seatsurfing seatsurfing 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
seatsurfing/backend:1.119.39952e80048b0
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

537
secrets-store-csi-driver-provider-infisicalsecrets-store-csi-driver-provider-infisicalVerified publisher1.1.41 of 1See more

secrets-store-csi-driver-provider-infisical secrets-store-csi-driver-provider-infisical 1.1.4

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
gidoichi/secrets-store-csi-driver-provider-infisical:v1.1.42dd5322a0610
openssl@3.5.7-r1
3.5.8-r0

Open the chart page →

278
securosecuroVerified publisher0.15.12 of 4See more

securo securo 0.15.1

2 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/redis:8-alpinebecdda6c7f4b
openssl@3.5.7-r0
3.5.8-r0
pgvector/pgvector:pg16ccc6e83d6e35
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

3,539
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

5,220
mosquittoself-hosters-by-nightVerified publisher0.5.21 of 1See more

mosquitto self-hosters-by-night 0.5.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/eclipse-mosquitto:2.0.22212f89e1eaeb
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
templateself-hosters-by-nightVerified publisher0.7.11 of 2See more

template self-hosters-by-night 0.7.1

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
sentry-k8ssentry-k8sVerified publisher1.4.17 of 11See more

sentry-k8s sentry-k8s 1.4.1

7 of the 11 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
altinity/clickhouse-server:25.3.6.10034.altinitystable3396b15c51a2
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29
library/nginx:1.31.0-alpine2f07d83bf561
openssl@3.5.6-r0
3.5.8-r0
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/getsentry/relay:26.7.2cd29b88c1d72
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
openssl@3.0.15-1~deb12u1
no fix listed
ghcr.io/getsentry/snuba:26.7.210f8d164109b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/getsentry/taskbroker:26.7.264d0da74a578
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

16,599
seq-input-gelfseq-input-gelfVerified publisher0.3.11 of 2See more

seq-input-gelf seq-input-gelf 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

3,555
vuiseriohub1.0.62 of 3See more

vui seriohub 1.0.6

2 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
openssl@3.0.16-1~deb12u1
no fix listed
dserio83/velero-watchdog:0.1.8d5deae589229
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

11,578
querysiakhooiVerified publisher1.0.01 of 1See more

query siakhooi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
siakhooi/query:1.0.0f1f4b5b1b870
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

1,795
sigscale-csesigscale-cseOfficialVerified publisher1.4.221 of 1See more

sigscale-cse sigscale-cse 1.4.22

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
sigscale/cse:latest67d0c886516b
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

2,297
sigscale-ocssigscale-ocsOfficialVerified publisher1.1.171 of 1See more

sigscale-ocs sigscale-ocs 1.1.17

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
sigscale/ocs:latest3c1bdc9732e2
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

2,297
scaffoldsigstoreVerified publisher0.6.1151 of 15See more

scaffold sigstore 0.6.115

1 of the 15 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
curlimages/curldigest-pinned:8.17.0935d9100e9ba
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

7,686
clickhousesinextraVerified publisher0.22.01 of 1See more

clickhouse sinextra 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.3.1092098d3b31dd
openssl@3.0.2-0ubuntu1.23
3.0.2-0ubuntu1.29

Open the chart page →

2,015
mongodb-backupsinextraVerified publisher1.1.01 of 1See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

4,277
postgresql-singlesinextraVerified publisher1.15.11 of 1See more

postgresql-single sinextra 1.15.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

4,937
skippersinextraVerified publisher0.8.131 of 1See more

skipper sinextra 0.8.13

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/zalando/skipper:v0.27.883a357a2a4bef
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

162
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

2,945
wg-easyslybase-wg-easyVerified publisher1.2.01 of 1See more

wg-easy slybase-wg-easy 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/wg-easy/wg-easy:15.4.00e7bc9d34e86
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

725
snappasssnappassVerified publisher0.4.32 of 3See more

snappass snappass 0.4.3

2 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
lmacka/snappass:2.1.293f5c048b7d4
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2
valkey/valkey:8.1.61f84517eca8e
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

3,040
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
openssl@3.5.1-1
3.5.7-1~deb13u2

Open the chart page →

14,550
redis-shardedsoftonic0.5.01 of 2See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/redis:8.10.1298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,330
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

7,204
postgresql-ha-chartsoldevelo-postgresql-ha-chart16.3.42 of 2See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

2 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
soldevelo/pgpool:4.6.3-debian-12-r0044d16a65129
openssl@3.0.19-1~deb12u2
no fix listed
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

4,604
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

5,699
speckle-serverspeckleVerified publisher2.26.34 of 4See more

speckle-server speckle 2.26.3

4 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
speckle/speckle-monitor-deployment:2.26.3d51e1b0cf231
openssl@3.0.11-1~deb12u2
no fix listed
speckle/speckle-preview-service:2.26.3092384dba45d
openssl@3.0.17-1~deb12u3
no fix listed
speckle/speckle-server:2.26.379f14a2bf931
openssl@3.0.16-1~deb12u1
no fix listed
speckle/speckle-webhook-service:2.26.3c58eb372c488
openssl@3.0.13-1~deb12u1
no fix listed

Open the chart page →

10,450
ocean-metric-exporterspot1.1.11 of 1See more

ocean-metric-exporter spot 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
gcr.io/spotinst-artifacts/spot-ocean-metric-exporter:1.0.5ae57b62291aa
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,485
squidsquid-helmVerified publisher0.1.01 of 1See more

squid squid-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ubuntu/squid:5.2-22.04_beta723891b5bc74
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.29

Open the chart page →

2,624
stackradar-scannerstackradarVerified publisher0.3.01 of 1See more

stackradar-scanner stackradar 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/lockdep/stackradar-scanner:0.3.0dd8a35d50c2d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,218
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
graphprotocol/graph-node:v0.37.0f4452cdedd68
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

4,694
multusstartechnicaVerified publisher0.1.21 of 1See more

multus startechnica 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:stableec4e5dfe12b6
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

512
silverbulletstone0.10.01 of 1See more

silverbullet stone 0.10.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/silverbulletmd/silverbullet:2.10.027b5724cc367
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

422
stornxstornxVerified publisher1.1.13 of 9See more

stornx stornx 1.1.1

3 of the 9 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
alazidis/kube-netlag:1.1.00e8c84152201
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
alazidis/stornx:1.1.1602d4f7f090c
openssl@3.0.18-1~deb12u2
no fix listed
istio/pilot:1.29.1f8b0e412ac4a
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15

Open the chart page →

11,735
streamvisorstreamvisorVerified publisher4.1.61 of 1See more

streamvisor streamvisor 4.1.6

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15

Open the chart page →

2,881
supabasesupabse0.8.010 of 11See more

supabase supabse 0.8.0

10 of the 11 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.30.13b709e4a0e5e
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.15
kong/kong:3.9.16addf50e6bd8
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
library/postgres:17-alpine18cfe3ef5e68
openssl@3.5.7-r0
3.5.8-r0
supabase/edge-runtime:v1.74.02781daf92394
openssl@3.0.19-1~deb12u2
no fix listed
supabase/gotrue:v2.189.0385184459f57
openssl@3.5.6-r0
3.5.8-r0
supabase/postgres:17.6.1.136f371b5f3f2ac
openssl@3.5.6-r0
3.5.8-r0
supabase/postgres-meta:v0.96.6a84cc713585e
openssl@3.0.19-1~deb12u2
no fix listed
supabase/realtime:v2.102.3aa1c92c0cf32
openssl@3.0.20-1~deb12u1
no fix listed
supabase/storage-api:v1.60.4c8eb9858eafe
openssl@3.5.6-r0
3.5.8-r0
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

18,327
supersonicsupersonicVerified publisher0.3.11 of 2See more

supersonic supersonic 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.92956bd9de830
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29

Open the chart page →

2,142
switcher-apiswitcherapiOfficialVerified publisher1.3.53 of 3See more

switcher-api switcherapi 1.3.5

3 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
trackerforce/switcher-api:latest28ee0c4e0b88
openssl@3.5.7-r0
3.5.8-r0
trackerforce/switcher-management:latest13a604f205da
openssl@3.5.7-r0
3.5.8-r0
trackerforce/switcher-resolver-node:latest67e2c261f7b4
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

625
switcher-slack-appswitcherapiOfficialVerified publisher1.1.51 of 1See more

switcher-slack-app switcherapi 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
trackerforce/switcher-slack-app:latest39ddc489edbf
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

192
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

3,263
mumblesyntaxerror404Verified publisher1.0.41 of 1See more

mumble syntaxerror404 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.87002fd613b6a35
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15

Open the chart page →

2,143
headscaleszpadel-chartsVerified publisher0.30.22 of 3See more

headscale szpadel-charts 0.30.2

2 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/juanfont/headscale:0.29.18453e47ea6bf
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/tale/headplane:0.6.39476cc5adb12
openssl@3.0.18-1~deb12u2
no fix listed

Open the chart page →

1,880

Container images carrying it

3,100 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
jbtronics/part-db1:latest5db71f6db59d
openssl@3.0.20-1~deb12u2
no fix listed
1
jdschulze/restinthemiddle:v2.3.13fde2dfbcacc2
openssl@3.5.7-r0
3.5.8-r0
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
openssl@3.5.2-r0
3.5.8-r0
1
jellyfin/jellyfin:10.11.81694ff069f0c
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
1
jellyfin/jellyfin:10.11.717285f9cce63
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2
1
jellyfin/jellyfin:10.10.317c3a8d9dddb
openssl@3.0.15-1~deb12u1
no fix listed
1
jellyfin/jellyfin:10.11.6333b64771663
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
1
jellyfin/jellyfin:10.9.1079fb3d73a3e9
openssl@3.0.13-1~deb12u1
no fix listed
1
jellyfin/jellyfin:10.10.77ae36aab93ef
openssl@3.0.15-1~deb12u1
no fix listed
1
jellyfin/jellyfin:10.10.696b09723b22f
openssl@3.0.15-1~deb12u1
no fix listed
1
jenkins/jenkins:2.462.2-jdk1795313257a8cd
openssl@3.0.14-1~deb12u2
no fix listed
1
jenkins/jenkins:2.440.3-jdk17de4fea113221
openssl@3.0.11-1~deb12u2
no fix listed
1
jertel/elastalert2:2.31.03cbf63f9b7dc
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
jesec/flood:4.14.3c887dad96b40
openssl@3.5.7-r0
3.5.8-r0
1
jhaals/yopass:11.17.026873480863b
openssl@3.0.14-1~deb12u2
no fix listed
1
jhaals/yopass:12.5.0916a1cf45d36
openssl@3.0.17-1~deb12u3
no fix listed
1
jhonbrownn/elchi:v1.5.146936e4f1caeb
openssl@3.5.7-r0
3.5.8-r0
1
jhoncytech/bookworm-apache-wordpress:latest18c3ca1f411e
openssl@3.0.11-1~deb12u2
no fix listed
1
jitesoft/kubectl:latest9996dd28914f
openssl@3.5.7-r0
3.5.8-r0
1
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
openssl@3.0.15-1~deb12u1
no fix listed
1
jkroepke/github_exporter:1.8.03d850992786d
openssl@3.5.4-r0
3.5.8-r0
1
jodogne/orthanc-plugins:latest6ff510aa29c2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
jonasal/devpi-server:6.17.0-alpineec1eee99a18d
openssl@3.5.4-r0
3.5.8-r0
1
jordan/icinga2:latestf75025fe8ea8
openssl@3.0.20-1~deb12u2
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
1
journeyapps/powersync-service:latestbf46f66e5dcc
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
joxit/docker-registry-ui:2.6.0bb5956a6b378
openssl@3.5.4-r0
3.5.8-r0
1
jpgouin/openldap:2.6.9-fixbfdd0088c776
openssl@3.0.15-1~deb12u1
no fix listed
1
juicedata/csi-dashboard:v0.32.5b5a407a27f62
openssl@3.5.7-r0
3.5.8-r0
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
openssl@3.0.15-1~deb12u1
no fix listed
1
jupyterhub/jupyterhub:5.4.63974ba945e65
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15
1
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
openssl@3.5.7-r0
3.5.8-r0
1
jwkohnen/conntrack-stats-exporter:v0.4.471303223183bb
openssl@3.5.7-r0
3.5.8-r0
1
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15
1
kafkakraft/kafka-connect:3.7.0062d697db7e5
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
1
kafkakraft/kafka-controller:3.7.0f261ad288fce
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
1
kafkakraft/kafkakraft:3.7.02e4b593b878b
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
1
kayrosuno/kping:latestf3bd44b29b0d
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
1
kenchrcum/ansible-playbook-operator:0.1.712fb213debf1
openssl@3.5.6-r0
3.5.8-r0
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
openssl@3.5.6-r0
3.5.8-r0
1
kenchrcum/grafana-dashboard-converter:0.3.105310497aea3f
openssl@3.5.5-r0
3.5.8-r0
1
kenchrcum/hetzner-s3-operator:0.1.384dae7aeea5b
openssl@3.5.6-r0
3.5.8-r0
1
kenchrcum/wasabi-s3-operator:0.2.7ce657c622ce5
openssl@3.5.6-r0
3.5.8-r0
1
khaliq/pingme:v0.2.749f96888d2ab
openssl@3.5.4-r0
3.5.8-r0
1
kimai/kimai2:2.67.03084f1e5ecdc
openssl@3.0.20-1~deb12u2
no fix listed
1
kinseii/wazuh-agent:4.14.17160eb143728
openssl@3.0.17-1~deb12u3
no fix listed
1
kitware/cdash:v5.3.0d7767d9b9da4
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
kiwigrid/k8s-sidecar:2.10.17eac5c4fed71
openssl@3.5.7-r0
3.5.8-r0
1
kixote/typemill4e9dff179519
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1
kixote/typemill628f79a08cc7
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.