CVE-2026-63076

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.013; 70th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,842; of 17,797 indexed, latest versions
Container images: 3,070; deployed by those charts
Fix available: 3 of 4; affected packages

CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,842 of 17,797 indexed charts deploy, on 3,070 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+60 more	3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u2	1,863
opensslapk	3.5.0-r0, 3.5.1-r0, 3.5.2-r0, 3.5.4-r0+4 more	3.5.8-r0	1,173
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 more	no fix listed	11
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl3	3.3.7-6	23

OSV records: ALPINE-CVE-2026-63076 DEBIAN-CVE-2026-63076 UBUNTU-CVE-2026-63076 AZL-97941 ECHO-b5fe-8a22-4e2a
Also known as: USN-8678-1

Charts affected

2,842 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

3,070 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
gjeanmart/safe-ganache-node :latest	926264c8f2d1	openssl@3.0.9-1	no fix listed	2
gotenberg/gotenberg :8.36.0	87c16b9f3642	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
gotson/komga :1.26.3	6c2a967bbe9a	openssl@3.5.5-1ubuntu3.3	3.5.5-1ubuntu3.4	2
gradiant/ueransim :3.2.6	015b30d5fa0f	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.29	2
grafana/alloy :v1.8.1	7790f6f7fbd8	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.15	2
grafana/alloy :v1.12.2	f94b1c82957a	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.15	2
grafana/grafana :12.3.1	2175aaa91c96	openssl@3.5.4-r0	3.5.8-r0	2
grafana/grafana :12.3.3	9e1e77ade304	openssl@3.5.5-r0	3.5.8-r0	2
grafana/grafana :12.4.1	e932bd6ed0e0	openssl@3.5.5-r0	3.5.8-r0	2
hashicorp/vault :2.0.4	5be49781ecf7	openssl@3.5.7-r0	3.5.8-r0	2
hashicorp/vault-k8s :1.7.6	55e27b080c9b	openssl@3.5.7-r0	3.5.8-r0	2
helmforge/kubectl :1.35.3	c3f97e954c47	openssl@3.5.5-r0	3.5.8-r0	2
hetznercloud/hcloud-cloud-controller-manager :v1.37.0	c139e7220dbc	openssl@3.5.7-r0	3.5.8-r0	2
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	openssl@3.0.9-1	no fix listed	2
ilum/api :6.7.3	624fd09528c8	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
ilum/marquez :0.54.0	6e1d709d41f8	openssl@3.0.18-1~deb12u2	no fix listed	2
ilum/ui :6.7.3	998937726679	openssl@3.5.5-r0	3.5.8-r0	2
istio/proxyv2 :1.18.0	757d28c24100	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.29	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	openssl@3.0.11-1~deb12u2	no fix listed	2
jenkins/jenkins :2.541.3-jdk21	c4098086090c	openssl@3.5.5-1~deb13u1	3.5.7-1~deb13u2	2
jhaals/yopass :14.9.0	934e4f2c016f	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
jupyterhub/configurable-http-proxy :5.3.0 :latest	69a7170eeeda	openssl@3.5.7-r0	3.5.8-r0	2
kiwigrid/k8s-sidecar :1.30.9	8c06e1ba643a	openssl@3.5.1-r0	3.5.8-r0	2
kubeshop/testkube-api-server :2.13.2	44166c28422f	openssl@3.5.7-r0	3.5.8-r0	2
kurento/kurento-media-server :latest	03c0d34d0828	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.15	2
kutt/kutt :latest :v3.2.6	fa3d24a89b04	openssl@3.5.7-r0	3.5.8-r0	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	openssl@3.0.11-1~deb12u2	no fix listed	2
library/alpine :3.23	fd791d74b689	openssl@3.5.7-r0	3.5.8-r0	2
library/bash :5 :latest	a19c811ee9e9	openssl@3.5.7-r0	3.5.8-r0	2
library/buildpack-deps :curl	04907bdd423b	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
library/caddy :2.11.4-alpine :2-alpine	5f5c8640aae0	openssl@3.5.7-r0	3.5.8-r0	2
library/caddy :latest	df7f1c2fb114	openssl@3.5.7-r0	3.5.8-r0	2
library/cassandra :4.1.3	7cbcec0086ac	openssl@3.0.2-0ubuntu1.13	3.0.2-0ubuntu1.29	2
library/debian :stable-slim	04634311a8d5	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u2	2
library/eclipse-mosquitto :2 :2.1.2-alpine	6f8d8a947c50	openssl@3.5.7-r0	3.5.8-r0	2
library/elasticsearch :8.19.12	89729a95066a	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.15	2
library/influxdb :2.7	b8d940ca9376	openssl@3.0.19-1~deb12u2	no fix listed	2
library/mariadb :10.8.3	0abf60f81588	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.29	2
library/mariadb :10.10	334b315c10e5	openssl@3.0.2-0ubuntu1.13	3.0.2-0ubuntu1.29	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.15	2
library/mariadb :11.4	611a2fcc5fa7	openssl@3.0.13-0ubuntu3.12	3.0.13-0ubuntu3.15	2
library/mariadb :10.6	92e50059ea0a	openssl@3.0.2-0ubuntu1.26	3.0.2-0ubuntu1.29	2
library/mariadb :11.3.2	e101f9db3191	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.29	2
library/mongo :8.0.20	098862b1339f	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.15	2
library/mongo :7	b096b4cb9269	openssl@3.0.2-0ubuntu1.29	no fix listed	2
library/mongo :7.0	b6421fd6d1c5	openssl@3.0.2-0ubuntu1.26	3.0.2-0ubuntu1.29	2
library/nginx :latest	6e23479198b9	openssl@3.5.5-1~deb13u2	3.5.7-1~deb13u2	2
library/nginx :1.27.0	98f8ec75657d	openssl@3.0.13-1~deb12u1	no fix listed	2
library/nginx :1.29.4	9dd288848f44	openssl@3.5.4-1~deb13u2	3.5.7-1~deb13u2	2
library/node :24.21.0-alpine3.23	159fe6464903	openssl@3.5.7-r0	3.5.8-r0	2