StackRadar

CVE-2026-63076

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,968
of 17,821 indexed, latest versions
Container images
3,334
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,968 of 17,821 indexed charts deploy, on 3,334 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+59 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u21,878
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,425
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed17
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-614
OSV records
ALPINE-CVE-2026-63076DEBIAN-CVE-2026-63076UBUNTU-CVE-2026-63076AZL-97941ECHO-b5fe-8a22-4e2a
Also known as
USN-8678-1

Charts affected

2,968 by stars
ChartLatestAffected imagesRadar Score
jellyfinschoolguys-helmcharts0.4.21 of 1See more

jellyfin schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
jellyfin/jellyfin:10.11.81694ff069f0c
openssl@3.5.5-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

3,081
mikrotik-exporterschoolguys-helmcharts0.2.41 of 1See more

mikrotik-exporter schoolguys-helmcharts 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/akpw/mktxp:1.2.17bd6f22f7db0a
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

585
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
openssl@3.5.5-1ubuntu3
3.5.5-1ubuntu3.4

Open the chart page →

52,466
restic-serverschoolguys-helmcharts0.3.11 of 1See more

restic-server schoolguys-helmcharts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
restic/rest-server:0.14.0d2aff06f47eb
openssl@3.5.0-r0
3.5.8-r0

Open the chart page →

2,262
satisfactory-serverschoolguys-helmcharts0.1.81 of 1See more

satisfactory-server schoolguys-helmcharts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/wolveix/satisfactory-server:v1.9.10e0f2f8c97598
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.29

Open the chart page →

3,490
typo3schoolguys-helmcharts0.4.21 of 1See more

typo3 schoolguys-helmcharts 0.4.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
openssl@3.0.20-1~deb12u1
no fix listed

Open the chart page →

5,057
unboundschoolguys-helmcharts0.1.11 of 1See more

unbound schoolguys-helmcharts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
mvance/unbound:1.20.04bf67b567f39
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

3,175
vaultwardenschoolguys-helmcharts0.3.91 of 1See more

vaultwarden schoolguys-helmcharts 0.3.9

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.1-alpineb094afed4ed5
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

290
wyoming-faster-whisperschoolguys-helmcharts0.1.41 of 1See more

wyoming-faster-whisper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
rhasspy/wyoming-whisper:3.5.0308b7959a925
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

2,338
wyoming-piperschoolguys-helmcharts0.1.41 of 1See more

wyoming-piper schoolguys-helmcharts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.3.169b7f797ae3a
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,910
sealed-secrets-uisealed-secrets-uiVerified publisher0.0.81 of 1See more

sealed-secrets-ui sealed-secrets-ui 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

4,757
sealed-secrets-websealed-secrets-web-ociVerified publisher3.3.21 of 1See more

sealed-secrets-web sealed-secrets-web-oci 3.3.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/bakito/sealed-secrets-web:v3.3.2cb4d892c61c3
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
search-proxysearch-proxy2026.38.01 of 1See more

search-proxy search-proxy 2026.38.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,353
seawise-dashboardseawiseVerified publisher1.7.11 of 1See more

seawise-dashboard seawise 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
shwcloud/seawise-backup:v1.7.1a97479a54df4
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,136
secretssecrets-proxy1.0.61 of 1See more

secrets secrets-proxy 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
udhos/secrets:1.0.6daa2b4eaac09
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

1,150
persistence-elasticsecurecodebox-persistence-elastic5.7.01 of 1See more

persistence-elastic securecodebox-persistence-elastic 5.7.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
securecodebox/persistence-elastic-dashboard-importer:5.7.0afcefbd56d61
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

880
trivysecurecodebox-trivy5.9.01 of 1See more

trivy securecodebox-trivy 5.9.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
aquasec/trivy:0.74.062b1e65e8869
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

447
seed-audio-ai-pwa-toolkitseed-audio-ai-pwa-helm-chartsVerified publisher0.1.01 of 1See more

seed-audio-ai-pwa-toolkit seed-audio-ai-pwa-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/nginx:1.27-alpine65645c7bb6a0
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

990
seerr-chartseerr-chartVerified publisher3.9.11 of 1See more

seerr-chart seerr-chart 3.9.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/seerr-team/seerr:v3.4.1f4768de5f616
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

2,010
postgresself-hosters-by-nightVerified publisher0.14.31 of 1See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,367
semaphoresemaphore-light1.0.01 of 1See more

semaphore semaphore-light 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
semaphoreui/semaphore:latest3996804607eb
openssl@3.3.7-r0
3.3.7-r1

Open the chart page →

1,869
cortezasergiotocaliniVerified publisher1.0.11 of 1See more

corteza sergiotocalini 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
cortezaproject/corteza:2024.9.60bcdcbcd3c63
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.29

Open the chart page →

3,355
guacamolesergiotocaliniVerified publisher1.0.01 of 2See more

guacamole sergiotocalini 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
guacamole/guacamole:1.5.50f62f6d17ab3
openssl@3.0.2-0ubuntu1.14
3.0.2-0ubuntu1.29

Open the chart page →

5,532
rdpgwsergiotocaliniVerified publisher1.0.01 of 1See more

rdpgw sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
bolkedebruin/rdpgw:masterc0dc0589373a
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

687
service-exampleservice-example-10.1.02 of 7See more

service-example service-example-1 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
library/redis:latest298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

9,067
serviceexampleserviceexample-chart0.3.03 of 4See more

serviceexample serviceexample-chart 0.3.0

3 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
library/redis:latest298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
tibyandocker/serviceexample:latesta4ad592cea84
openssl@3.0.19-1~deb12u2
no fix listed

Open the chart page →

4,025
serviceexampleservice-example-helm-chart0.1.02 of 4See more

serviceexample service-example-helm-chart 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
library/redis:latest298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,265
service-exampleservice-example-jt0.1.15 of 9See more

service-example service-example-jt 0.1.1

5 of the 9 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
janzo83/serviceexample:latestfb3c4ac36f3e
openssl@3.0.17-1~deb12u3
no fix listed
library/nats:2.12.2-alpine2d5fce3229ae
openssl@3.5.4-r0
3.5.8-r0
natsio/nats-box:0.19.28031d190c7ee
openssl@3.5.4-r0
3.5.8-r0
natsio/nats-server-config-reloader:0.20.147094fcae2f4
openssl@3.5.4-r0
3.5.8-r0
natsio/prometheus-nats-exporter:0.17.326c826662ac8
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

7,599
return-nginx-chartseture0.1.01 of 1See more

return-nginx-chart seture 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
seyiogunniran/my-nginx:1.03a0ed39e5830
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,297
ccx-monitoringseveralnines0.6.213 of 7See more

ccx-monitoring severalnines 0.6.21

3 of the 7 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
grafana/grafana:12.3.12175aaa91c96
openssl@3.5.4-r0
3.5.8-r0
victoriametrics/victoria-metrics:v1.120.0a1cb2f3dfd45
openssl@3.5.0-r0
3.5.8-r0
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

7,748
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

3,115
shopsyncshopsyncVerified publisher1.0.01 of 1See more

shopsync shopsync 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
shyamkrishna21/shopsync:latest3998b83def53
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

1,238
shopwareshopware-storeVerified publisher2.1.21 of 5See more

shopware shopware-store 2.1.2

1 of the 5 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
rustfs/rustfs:1.0.0-alpha.738e467b32af3f
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

4,141
bffshortlink0.2.11 of 1See more

bff shortlink 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/bff:latestf2194e526915
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,699
linkshortlink0.7.31 of 1See more

link shortlink 0.7.3

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/link:latest86d87291ffd4
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,683
link-uishortlink0.7.51 of 1See more

link-ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,319
uishortlink0.7.51 of 1See more

ui shortlink 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
registry.gitlab.com/shortlink-org/shortlink/ui:main9bdb1062d960
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

1,319
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
mcpuse/inspector:latest91b25e3eb604
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

5,325
shulker-operatorshulker-operator0.13.01 of 1See more

shulker-operator shulker-operator 0.13.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/jeremylvln/shulker-operator:0.13.027c55706c126
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

912
sibylsibyl0.2.01 of 1See more

sibyl sibyl 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

1,024
hedgedocsi-gitops0.12.31 of 2See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/postgres:18.43a82e1f56c8f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,716
moksi-gitops0.16.41 of 2See more

mok si-gitops 0.16.4

1 of the 2 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
quay.io/shivering-isles/postfix:3.11.70f40af2070c8
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

664
nut-exportersi-gitops0.5.01 of 1See more

nut-exporter si-gitops 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ghcr.io/druggeri/nut_exporter:3.3.0276460d141c7
openssl@3.5.6-r0
3.5.8-r0

Open the chart page →

812
backendsignalen4.24.01 of 4See more

backend signalen 4.24.0

1 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
signalen/backend:2.50.14760256000738
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

11,904
frontendsignalen4.24.01 of 1See more

frontend signalen 4.24.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
signalen/frontend:2.27.81ab79cb7fe21
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,157
postgresqlsignoz0.0.21 of 1See more

postgresql signoz 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,618
ctlogsigstoreVerified publisher0.2.681 of 4See more

ctlog sigstore 0.2.68

1 of the 4 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
curlimages/curl:8.17.0935d9100e9ba
openssl@3.5.4-r0
3.5.8-r0

Open the chart page →

2,752
counter-dhlsikademo0.3.01 of 3See more

counter-dhl sikademo 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
ondrejsika/counter:latestd95eaeee2172
openssl@3.5.6-1~deb13u1
3.5.7-1~deb13u2

Open the chart page →

4,400
gordy-redissikademo0.1.01 of 1See more

gordy-redis sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
library/redis:latest298e5b3bc566
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

929
test-hello-worldsikademo0.1.01 of 1See more

test-hello-world sikademo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-63076.

Container imageDigestPackageFixed in
sikalabs/hello-world-server:latest5f49bf889a64
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,222

Container images carrying it

3,334 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

No deployed image carries CVE-2026-63076.

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.