StackRadar

CVE-2026-63076

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,022
of 17,813 indexed, latest versions
Container images
3,306
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,022 of 17,813 indexed charts deploy, on 3,306 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+60 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u21,844
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,426
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed17
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-619
OSV records
ALPINE-CVE-2026-63076DEBIAN-CVE-2026-63076UBUNTU-CVE-2026-63076AZL-97941ECHO-b5fe-8a22-4e2a
Also known as
USN-8678-1

Charts affected

3,022 by stars
ChartLatestAffected imagesRadar Score
cbt-apiethereum-helm-chartsVerified publisher0.0.141 of 1See more

cbt-api ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/cbt-api:latest9dc0b50e6c27
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

416
chaos-meshethereum-helm-chartsVerified publisher0.0.33 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

3 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
openssl@3.0.17-1~deb12u2
no fix listed
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
openssl@3.0.17-1~deb12u2
no fix listed
ghcr.io/chaos-mesh/chaos-mesh:v2.8.0091b906a0b13
openssl@3.3.4-r0
3.3.7-r1

Open the chart page →

12,474
contributoorethereum-helm-chartsVerified publisher0.0.21 of 1See more

contributoor ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/contributoor:latest1edd4074fd79
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

893
eleelethereum-helm-chartsVerified publisher0.1.71 of 1See more

eleel ethereum-helm-charts 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/eleel:mainb8f1b707aee0
openssl@3.0.13-0ubuntu3.9
3.0.13-0ubuntu3.15

Open the chart page →

1,095
ethereum-address-metrics-exporterethereum-helm-chartsVerified publisher0.2.01 of 1See more

ethereum-address-metrics-exporter ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/ethereum-address-metrics-exporter:latest431cd3790ed2
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

546
eth-faucetethereum-helm-chartsVerified publisher0.1.11 of 1See more

eth-faucet ethereum-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
chainflag/eth-faucet:latestac642796bcb6
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,998
ethrexethereum-helm-chartsVerified publisher0.1.31 of 2See more

ethrex ethereum-helm-charts 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/lambdaclass/ethrex:latest0c7896f060d6
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

700
execution-processorethereum-helm-chartsVerified publisher0.0.31 of 1See more

execution-processor ethereum-helm-charts 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/execution-processor:latest5c4832e9588f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

709
forkyethereum-helm-chartsVerified publisher0.2.01 of 1See more

forky ethereum-helm-charts 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/forky:debian-latestc937f4ba737c
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,772
nethermindethereum-helm-chartsVerified publisher1.1.21 of 2See more

nethermind ethereum-helm-charts 1.1.2

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
nethermind/nethermind:latest1b6b01419de4
openssl@3.5.5-1ubuntu3.2
3.5.5-1ubuntu3.4

Open the chart page →

999
observoorethereum-helm-chartsVerified publisher0.0.31 of 1See more

observoor ethereum-helm-charts 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/observoor:masterc7e5055defcb
openssl@3.0.19-1~deb12u2
no fix listed

Open the chart page →

1,560
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

4,461
rpc-proxyethereum-helm-chartsVerified publisher0.1.21 of 1See more

rpc-proxy ethereum-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/gochain/rpc-proxy/rpc-proxy:latestca01f5ab95f7
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,473
rpc-snooperethereum-helm-chartsVerified publisher0.0.21 of 1See more

rpc-snooper ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/rpc-snooper:latestc0b30fcf64bc
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,535
spamoorethereum-helm-chartsVerified publisher1.0.11 of 1See more

spamoor ethereum-helm-charts 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/spamoor:latest5f731b20ec50
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,166
splitoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

splitoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/splitoor:latest989da6bea4bd
openssl@3.0.18-1~deb12u2
no fix listed

Open the chart page →

1,263
syncoor-serverethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-server ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor:master233aa9808fc7
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

964
syncoor-webethereum-helm-chartsVerified publisher0.0.11 of 1See more

syncoor-web ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/ethpandaops/syncoor-web:master60d7c38d6062
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

371
tekuethereum-helm-chartsVerified publisher1.2.11 of 2See more

teku ethereum-helm-charts 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
consensys/teku:latest3a4f5761ae1c
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15

Open the chart page →

1,065
web3signerethereum-helm-chartsVerified publisher1.0.62 of 4See more

web3signer ethereum-helm-charts 1.0.6

2 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
consensys/web3signer:latestf146a51a1ba3
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.4
library/bash:latesta19c811ee9e9
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

2,090
xatuethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

628
xatu-cannonethereum-helm-chartsVerified publisher0.2.21 of 1See more

xatu-cannon ethereum-helm-charts 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

628
xatu-cbt-apiethereum-helm-chartsVerified publisher0.0.131 of 1See more

xatu-cbt-api ethereum-helm-charts 0.0.13

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/xatu-cbt-api:latestf7dec2e07091
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,233
xatu-cl-mimicryethereum-helm-chartsVerified publisher0.0.21 of 1See more

xatu-cl-mimicry ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

628
xatu-consumoorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-consumoor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

628
xatu-discoveryethereum-helm-chartsVerified publisher0.0.61 of 1See more

xatu-discovery ethereum-helm-charts 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

628
xatu-mimicryethereum-helm-chartsVerified publisher0.0.71 of 1See more

xatu-mimicry ethereum-helm-charts 0.0.7

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

628
xatu-relay-monitorethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-relay-monitor ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

628
xatu-sageethereum-helm-chartsVerified publisher0.0.11 of 1See more

xatu-sage ethereum-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

628
xatu-sentryethereum-helm-chartsVerified publisher0.0.81 of 1See more

xatu-sentry ethereum-helm-charts 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

628
xatu-sentry-logsethereum-helm-chartsVerified publisher0.0.21 of 1See more

xatu-sentry-logs ethereum-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/xatu:sentry-logs-latest6ce31bb0eafd
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

921
xatu-serverethereum-helm-chartsVerified publisher0.0.141 of 1See more

xatu-server ethereum-helm-charts 0.0.14

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethpandaops/xatu:latest74d4cf2c436c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

628
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
openssl@3.0.14-1~deb12u2
no fix listed

Open the chart page →

3,514
beekeeperethersphereVerified publisher0.4.141 of 1See more

beekeeper ethersphere 0.4.14

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethersphere/beekeeper:lateste4cda693ed63
openssl@3.0.19-1~deb12u2
no fix listed

Open the chart page →

1,656
beeport-uiethersphereVerified publisher0.76.21 of 3See more

beeport-ui ethersphere 0.76.2

1 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

7,550
multichain-proxyethersphereVerified publisher0.1.01 of 1See more

multichain-proxy ethersphere 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ethersphere/multichain-proxy:0.0.261f5419afbcd
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

942
multichain-uiethersphereVerified publisher0.73.11 of 3See more

multichain-ui ethersphere 0.73.1

1 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

7,550
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29

Open the chart page →

88,959
static-siteethersphereVerified publisher0.73.11 of 2See more

static-site ethersphere 0.73.1

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/node:latestf5d1cc40abc1
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

7,149
gradle-build-cacheeugen0.1.21 of 1See more

gradle-build-cache eugen 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
gradle/build-cache-node:21.25bacbee677a9
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

491
localpatheugen1.3.21 of 1See more

localpath eugen 1.3.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.361eba82e9c386
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

522
snyk-farcaster-agenteugen1.0.11 of 1See more

snyk-farcaster-agent eugen 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
probely/farcaster-onprem-agent:v3741b34e8166f
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,128
evcc-kubernetesevcc-kubernetesVerified publisher1.7.61 of 1See more

evcc-kubernetes evcc-kubernetes 1.7.6

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
evcc/evcc:0.315.0327318279998
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

374
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
openssl@3.0.2-0ubuntu1.7
3.0.2-0ubuntu1.29

Open the chart page →

6,063
eximeebpmseximeebpms-k8sOfficialVerified publisher0.4.01 of 1See more

eximeebpms eximeebpms-k8s 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/eximeebpms/eximeebpms-bpm-platform:run-1.4.00f4a5c0eea07
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.02 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
grafana/promtail:3.5.165bfae480b57
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
ghcr.io/marcuwynu23/express-typescript-sample:latest9ef671b78ea8
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

5,841
extended-ceph-exporterextended-ceph-exporterVerified publisher1.10.01 of 2See more

extended-ceph-exporter extended-ceph-exporter 1.10.0

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
galexrt/extended-ceph-exporter:v1.8.05373078a3a08
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

3,018
external-secrets-reloaderexternal-secrets-reloader0.1.01 of 1See more

external-secrets-reloader external-secrets-reloader 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/bensoer/external-secrets-reloader:v0.1.38e31b5a81853
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,033
perliteextrim-helm-chartsVerified publisher0.1.01 of 1See more

perlite extrim-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
extrim/perlite:1.5.99cb7eb5598b6
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

1,588
siyuanextrim-helm-chartsVerified publisher0.1.11 of 2See more

siyuan extrim-helm-charts 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
b3log/siyuan:v3.1.2595c0d129bc19
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

1,393

Container images carrying it

3,306 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
openssl@3.5.1-r0
3.5.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.7-r1
1
registry.k8s.io/kwok/kwok:v0.8.06d25aa8fbdfe
openssl@3.5.7-r0
3.5.8-r0
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
openssl@3.5.4-r0
3.5.8-r0
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
openssl@3.0.20-1~deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
openssl@3.0.15-1~deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 19 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.