StackRadar

CVE-2026-63076

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,941
of 17,821 indexed, latest versions
Container images
3,286
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,941 of 17,821 indexed charts deploy, on 3,286 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+59 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u21,849
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,408
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed16
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-613
OSV records
ALPINE-CVE-2026-63076DEBIAN-CVE-2026-63076UBUNTU-CVE-2026-63076AZL-97941ECHO-b5fe-8a22-4e2a
Also known as
USN-8678-1

Charts affected

2,941 by stars
ChartLatestAffected imagesRadar Score
qbittorrentm0nsterrr-qbittorrentVerified publisher7.1.21 of 2See more

qbittorrent m0nsterrr-qbittorrent 7.1.2

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/home-operations/qbittorrent:5.2.34fcf15b7f265
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

764
recyclarrm0nsterrr-recyclarrVerified publisher2.7.21 of 1See more

recyclarr m0nsterrr-recyclarr 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/recyclarr/recyclarr:8.7.26e69e009e1cd
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

241
routinatorm0nsterrr-routinatorVerified publisher2.3.11 of 1See more

routinator m0nsterrr-routinator 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
nlnetlabs/routinator:v0.15.2bc57d6e973c3
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

743
m9sweeperm9sweeperVerified publisher1.6.01 of 6See more

m9sweeper m9sweeper 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

9,858
magistralamagistrala-devopsVerified publisher0.16.23 of 42See more

magistrala magistrala-devops 0.16.2

3 of the 42 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.31-latestcaa5b411be16
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.29
ghcr.io/absmach/magistrala/ui-smq:latestea7e7f0e293e
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

24,771
docker-mailservermailserverVerified publisher0.2.657 of 9See more

docker-mailserver mailserver 0.2.65

7 of the 9 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
jeboehm/mailserver-filter:5.0.92e756949e537d
openssl@3.3.4-r0
3.3.7-r1
jeboehm/mailserver-mda:5.0.92d03fb7bae0a2
openssl@3.3.4-r0
3.3.7-r1
jeboehm/mailserver-mta:5.0.925fb2f31c940d
openssl@3.3.4-r0
3.3.7-r1
jeboehm/mailserver-virus:5.0.92eb5c1c260d11
openssl@3.3.4-r0
3.3.7-r1
jeboehm/mailserver-web:5.0.929da13edf5aa8
openssl@3.5.2-r0
3.5.8-r0
mvance/unbound:1.22.076906da36d18
openssl@3.0.14-1~deb12u2
no fix listed
ghcr.io/jeboehm/fetchmailmgr:0.3.2126c4691b28a4
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

11,554
plane-mcp-servermakeplaneVerified publisher1.0.01 of 2See more

plane-mcp-server makeplane 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,660
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
openssl@3.0.9-1
no fix listed

Open the chart page →

7,393
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
novosga/novosga:latest34b9acbe6e51
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

3,739
eirmargaysVerified publisher1.7.21 of 1See more

eir margays 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
margays/eir:v1.7.22883fdd06fd7
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

829
marge-botmarge-bot-helm1.3.51 of 1See more

marge-bot marge-bot-helm 1.3.5

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.16.0b59f01bc0418
openssl@3.5.1-1+deb13u1
3.5.7-1~deb13u2

Open the chart page →

3,627
ejabberdmartialblog0.3.11 of 1See more

ejabberd martialblog 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/processone/ejabberd:latest5aeb0faa39cf
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

386
kruisematrixone-operatorVerified publisher1.8.31 of 2See more

kruise matrixone-operator 1.8.3

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
openkruise/kruise-manager:v1.8.30482722b4e56
openssl@3.3.6-r0
3.3.7-r1

Open the chart page →

1,928
mattermost-team-editionmattermost-team-edition6.6.831 of 4See more

mattermost-team-edition mattermost-team-edition 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
mattermost/mattermost-team-edition:10.11.2b8bd1246cb3a
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

4,131
mauticmautic-chartVerified publisher1.0.22 of 3See more

mautic mautic-chart 1.0.2

2 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
openssl@3.0.14-1~deb12u2
no fix listed
mautic/mautic:7-apacheeb8cc73d97e1
openssl@3.0.20-1~deb12u1
no fix listed

Open the chart page →

8,526
mayastormayastorVerified publisher2.12.15 of 31See more

mayastor mayastor 2.12.1

5 of the 31 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
grafana/alloy:v1.8.17790f6f7fbd8
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
openssl@3.3.3-r0
3.3.7-r1
openebs/alpine-bash:4.6.0366d6c5f18c3
openssl@3.5.7-r0
3.5.8-r0
openebs/alpine-sh:4.6.0640c187dccda
openssl@3.5.7-r0
3.5.8-r0
openebs/provisioner-localpv:4.6.099f5116f5cb8
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

21,494
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/rabbitmq:3.9-management8a279e9396a8
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.29

Open the chart page →

29,889
claude-code-apimcp-helmVerified publisher0.1.11 of 1See more

claude-code-api mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
arbuzov/claude-code-api:0.1.02d7dd8070610
openssl@3.0.17-1~deb12u1
no fix listed

Open the chart page →

4,108
mcp-atlassianmcp-helmVerified publisher0.2.281 of 1See more

mcp-atlassian mcp-helm 0.2.28

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/sooperset/mcp-atlassian:0.11.927c8e5b890e1
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

1,741
mcp-gitlabmcp-helmVerified publisher0.3.41 of 1See more

mcp-gitlab mcp-helm 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
iwakitakuma/gitlab-mcp:2.0.7fb3e81aa6528
openssl@3.3.2-r4
3.3.7-r1

Open the chart page →

1,050
mcp-homeassistantmcp-helmVerified publisher0.2.41 of 1See more

mcp-homeassistant mcp-helm 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
voska/hass-mcp:latest7142a431e2c5
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

10,724
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

5,712
mcpomcp-helmVerified publisher0.2.81 of 1See more

mcpo mcp-helm 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

4,603
mcp-playwrightmcp-helmVerified publisher0.1.11 of 1See more

mcp-playwright mcp-helm 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
mcr.microsoft.com/playwright/mcp:v0.0.43e101b832b34d
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

4,172
searchmcp-helmVerified publisher0.1.32 of 2See more

search mcp-helm 0.1.3

2 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
laituanmanh/websearch-crawler:latest63b6da557c71
openssl@3.3.3-r0
3.3.7-r1
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

8,409
mcroutermcrouterVerified publisher0.2.02 of 2See more

mcrouter mcrouter 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/memcached:1.6.4226983a43c918
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.15

Open the chart page →

2,363
backstagemcwarmanVerified publisher0.10.102 of 2See more

backstage mcwarman 0.10.10

2 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

9,918
mdai-hubmdai-hubVerified publisher0.10.11 of 14See more

mdai-hub mdai-hub 0.10.1

1 of the 14 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
public.ecr.aws/decisiveai/valkey:9.0.159c7e728fb3a
openssl@3.5.4-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

4,930
applicationmediamarktsaturn1.37.01 of 1See more

application mediamarktsaturn 1.37.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
quay.io/heubeck/examiner:1.14.61154472ff8c4
openssl@3.0.17-1~deb12u3
no fix listed

Open the chart page →

829
dependency-trackmediamarktsaturn1.9.22 of 2See more

dependency-track mediamarktsaturn 1.9.2

2 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
dependencytrack/apiserver:4.14.21ba4f004e1ec
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
dependencytrack/frontend:4.14.200560b57a6cf
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

3,864
flaresolverrmedia-servarrVerified publisher0.18.21 of 1See more

flaresolverr media-servarr 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

6,795
profilarrmedia-servarrVerified publisher2.3.11 of 1See more

profilarr media-servarr 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/dictionarry-hub/profilarr:2.2.0ddcdd0f34004
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

337
tinymediamanagermedia-servarrVerified publisher1.6.31 of 2See more

tinymediamanager media-servarr 1.6.3

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

8,196
crdsmedia-streaming-meshVerified publisher0.0.11 of 2See more

crds media-streaming-mesh 0.0.1

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ciscolabs/msm-nc:0710202336d02faad958
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29

Open the chart page →

3,737
msmmedia-streaming-meshVerified publisher0.1.175 of 6See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.15
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.15
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
openssl@3.0.13-0ubuntu3.1
3.0.13-0ubuntu3.15

Open the chart page →

11,651
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

5,968
memgptmemgptVerified publisher0.3.191 of 2See more

memgpt memgpt 0.3.19

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ankane/pgvector:v0.5.1d3a9d8ac27bb
openssl@3.0.11-1~deb12u1
no fix listed

Open the chart page →

5,936
memgraph-mcpmemgraphVerified publisher1.0.01 of 1See more

memgraph-mcp memgraph 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,749
merminmerminOfficialVerified publisher0.4.11 of 1See more

mermin mermin 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/elastiflow/mermin:v0.4.1205053c8a3e2
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

639
istiomesosphere1.25.11 of 2See more

istio mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

5,488
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15

Open the chart page →

2,607
istio-helm-istiodmesosphere1.25.12 of 2See more

istio-helm-istiod mesosphere 1.25.1

2 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15
mesosphere/kubectl:v1.35.0-alpineea01a9387771
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

3,854
kube-prometheus-stackmesosphere87.16.03 of 7See more

kube-prometheus-stack mesosphere 87.16.0

3 of the 7 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
openssl@3.0.11-1~deb12u2
no fix listed
grafana/grafana:13.1.0121a7a9ece6d
openssl@3.5.7-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

7,524
prometheus-operatormesosphere12.11.132 of 8See more

prometheus-operator mesosphere 12.11.13

2 of the 8 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
grafana/grafana:12.3.39e1e77ade304
openssl@3.5.5-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

11,740
dexmesosphere-stable2.14.11 of 5See more

dex mesosphere-stable 2.14.1

1 of the 5 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

19,326
istiomesosphere-stable1.25.11 of 2See more

istio mesosphere-stable 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

5,488
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

3,359
istio-helm-istiodmesosphere-stable1.23.62 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

2 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
mesosphere/kubectl:v1.35.0-alpineea01a9387771
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

4,682
kube-prometheus-stackmesosphere-stable75.9.13 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

3 of the 7 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.29.2c74b703deed2
openssl@3.0.11-1~deb12u2
no fix listed
grafana/grafana:12.0.2b5b59bfc7561
openssl@3.3.3-r0
3.3.7-r1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

10,580
multusmesosphere-stable0.1.11 of 1See more

multus mesosphere-stable 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v4.2.4-thick3c20900b5381
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,834

Container images carrying it

3,286 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-63076.

syft 1.42.1 · advisories as of 20 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.