StackRadar

CVE-2026-63076

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,968
of 17,821 indexed, latest versions
Container images
3,334
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,968 of 17,821 indexed charts deploy, on 3,334 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+59 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u21,878
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,425
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed17
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-614
OSV records
ALPINE-CVE-2026-63076DEBIAN-CVE-2026-63076UBUNTU-CVE-2026-63076AZL-97941ECHO-b5fe-8a22-4e2a
Also known as
USN-8678-1

Charts affected

2,968 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

3,334 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
codeurjc/planner:v1.0800cf520c245
openssl@3.0.2-0ubuntu1.8
3.0.2-0ubuntu1.29
3
curlimages/curl:8.18.0d94d07ba9e7d
openssl@3.5.4-r0
3.5.8-r0
3
derailed/popeye:v0.22.18e68e22c7663
openssl@3.3.2-r4
3.3.7-r1
3
dnationcloud/kubernetes-jsonnet-translator:2.0.178fed4f3c130
openssl@3.0.14-1~deb12u2
no fix listed
3
dpage/pgadmin4:9.17:latest2f4ce946ddf8
openssl@3.5.7-r0
3.5.8-r0
3
emberstack/kubernetes-reflector:10.0.6551dbd5880929
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
3
envoyproxy/envoy:v1.31.02bf7f042e396
openssl@3.0.2-0ubuntu1.16
3.0.2-0ubuntu1.29
3
gchq/hdfs:3.3.35ec58edbb2db
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15
3
glanceapp/glance:latest:v0.8.69dfb09470b20
openssl@3.5.7-r0
3.5.8-r0
3
grafana/grafana:13.1.0121a7a9ece6d
openssl@3.5.7-r0
3.5.8-r0
3
guacamole/guacamole:1.6.0f344085e618b
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
3
hashicorp/vault:2.0.45be49781ecf7
openssl@3.5.7-r0
3.5.8-r0
3
hashicorp/vault-k8s:1.7.655e27b080c9b
openssl@3.5.7-r0
3.5.8-r0
3
hetznercloud/hcloud-csi-driver:v2.23.0024ea4b07161
openssl@3.5.7-r0
3.5.8-r0
3
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
openssl@3.3.3-r0
3.3.7-r1
3
kubegems/kubegems:v1.24.10a730bcf9322a
openssl@3.5.4-r0
3.5.8-r0
3
library/eclipse-mosquitto:2.0:2.0.22212f89e1eaeb
openssl@3.5.7-r0
3.5.8-r0
3
library/memcached:1.6:1.6.4575c93cc91e76
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
3
library/memcached:1.6.45-alpine:1.6-alpine:alpinec29847751abb
openssl@3.5.7-r0
3.5.8-r0
3
library/nats:2.10-alpineb83efabe3e7d
openssl@3.5.5-r0
3.5.8-r0
3
library/nginx:1.25:1.25.5a484819eb602
openssl@3.0.11-1~deb12u2
no fix listed
3
library/postgres:14156f0b253fd6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
3
library/rabbitmq:4.3.5-alpine:alpine3486d98205df
openssl@3.5.7-r0
3.5.8-r0
3
library/registry:3.1.1:latest1be55279f18a
openssl@3.5.7-r0
3.5.8-r0
3
library/wordpress:7.1.0-apache:latest5a93c470ae82
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
3
mcp/grafana:latest9362bcf6aa0e
openssl@3.0.20-1~deb12u2
no fix listed
3
meshery/meshery:stable-latest44b64ee128fb
openssl@3.0.20-1~deb12u2
no fix listed
3
natsio/nats-box:0.19.28031d190c7ee
openssl@3.5.4-r0
3.5.8-r0
3
neosmemo/memos:0.30.071a5b4738d1b
openssl@3.3.7-r0
3.3.7-r1
3
opencsghq/postgres:15.19b98600564e07
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
3
opencsghq/psql:latest57def8e77d0f
openssl@3.3.2-r4
3.3.7-r1
3
openebs/node-disk-manager:2.1.0f6c18b0f8c8a
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29
3
openebs/node-disk-operator:2.1.06afe2123c457
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29
3
prompve/prometheus-pve-exporter:3.10.04867684c0a93
openssl@3.5.7-r0
3.5.8-r0
3
requarks/wiki:2:latest68f0d1848261
openssl@3.5.6-r0
3.5.8-r0
3
rustfs/rustfs:1.0.0-beta.12:latest41fe89380f41
openssl@3.5.7-r0
3.5.8-r0
3
sigp/lighthouse:latest-amd6450f66cfebb6d
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.29
3
timberio/vector:0.58.0-distroless-libc6c93dfe2554c
openssl@3.0.20-1~deb12u2
no fix listed
3
tykio/tyk-dashboard:v5.13.10e03b94c153d
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
3
tykio/tyk-gateway-ee:v5.13.13e907e675bf9
openssl@3.5.6-1~deb13u2+fips+dhi1
3.5.7-1~deb13u2
3
vaultwarden/server:1.37.1ebdfe70701c6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
3
velero/velero:v1.18.237396519f399
openssl@3.0.2-0ubuntu1.25
3.0.2-0ubuntu1.29
3
ghcr.io/appscode/petset:v0.1.093fa0daf603c
openssl@3.5.6-r0
3.5.8-r0
3
ghcr.io/appscode/sidekick:v0.0.15d1036b07e348
openssl@3.5.7-r0
3.5.8-r0
3
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
openssl@3.0.15-1~deb12u1
no fix listed
3
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
openssl@3.0.9-1
no fix listed
3
ghcr.io/dgtlmoon/changedetection.io:0.60.7:latest096dae27b5d6
openssl@3.0.20-1~deb12u2
no fix listed
3
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
openssl@3.0.20-1~deb12u2
no fix listed
3
ghcr.io/flaresolverr/flaresolverr:latest:v3.5.2c80ae007ce2c
openssl@3.0.20-1~deb12u2
no fix listed
3
ghcr.io/hatchet-dev/hatchet/hatchet-frontend:v0.107.01ea61100cbff
openssl@3.3.7-r0
3.3.7-r1
3

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.