StackRadar

CVE-2026-63076

High

Advisory

Published 25 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,968
of 17,821 indexed, latest versions
Container images
3,334
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-63076 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 2,968 of 17,821 indexed charts deploy, on 3,334 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+59 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.7-1~deb13u21,878
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,425
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 moreno fix listed17
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-614
OSV records
ALPINE-CVE-2026-63076DEBIAN-CVE-2026-63076UBUNTU-CVE-2026-63076AZL-97941ECHO-b5fe-8a22-4e2a
Also known as
USN-8678-1

Charts affected

2,968 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

3,334 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
mojaloop/security-role-perm-operator-svc:v3.0.212af60892c75
openssl@3.5.4-r0
3.5.8-r0
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
openssl@3.0.13-1~deb12u1
no fix listed
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
openssl@3.0.11-1~deb12u2
no fix listed
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
openssl@3.0.11-1~deb12u2
no fix listed
2
n8nio/n8n:2.36.714c4285bc303
openssl@3.5.7-r1
3.5.8-r0
2
natsio/nats-server-config-reloader:0.21.110ff229eaf52
openssl@3.5.4-r0
3.5.8-r0
2
natsio/prometheus-nats-exporter:0.17.326c826662ac8
openssl@3.3.3-r0
3.3.7-r1
2
netapp/trident-protect-utils:v2.0.0cd0c18d8f9ec
openssl@3.5.6-r0
3.5.8-r0
2
netbirdio/dashboard:latest:v2.92.0fa2d8b02a817
openssl@3.5.7-r0
3.5.8-r0
2
nginxinc/nginx-unprivileged:1.27-alpine65e3e85dbaed
openssl@3.3.3-r0
3.3.7-r1
2
nutanix/nai-jobs:v2.8.09c373718e1b1
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
obolnetwork/charon:v1.10.0278c7e2897b6
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
2
opea/embedding-tei:1.05c9639de61c1
openssl@3.0.14-1~deb12u2
no fix listed
2
opea/reranking-tei:1.0e48613afb191
openssl@3.0.14-1~deb12u2
no fix listed
2
opea/retriever-redis:1.0eb746b263705
openssl@3.0.14-1~deb12u2
no fix listed
2
opencloudeu/web-extensions:unzip-1.0.01691ad6612a3
openssl@3.0.15-1~deb12u1
no fix listed
2
opencloudeu/web-extensions:draw-io-1.0.027cb9b952f0d
openssl@3.0.15-1~deb12u1
no fix listed
2
opencloudeu/web-extensions:external-sites-1.0.05b176baa3694
openssl@3.0.15-1~deb12u1
no fix listed
2
opencloudeu/web-extensions:importer-1.0.06e8b2df6c5a4
openssl@3.0.15-1~deb12u1
no fix listed
2
opencloudeu/web-extensions:progress-bars-1.0.082f888a34440
openssl@3.0.15-1~deb12u1
no fix listed
2
opencloudeu/web-extensions:json-viewer-1.0.0e0ac35a9576e
openssl@3.0.15-1~deb12u1
no fix listed
2
opendatacube/ows:latest668cbb41473c
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.15
2
openebs/alpine-bash:4.6.0366d6c5f18c3
openssl@3.5.7-r0
3.5.8-r0
2
openebs/alpine-sh:4.6.0640c187dccda
openssl@3.5.7-r0
3.5.8-r0
2
openebs/provisioner-localpv:4.6.099f5116f5cb8
openssl@3.5.7-r0
3.5.8-r0
2
pgautoupgrade/pgautoupgrade:18-alpine48b448825656
openssl@3.5.7-r0
3.5.8-r0
2
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
pgvector/pgvector:0.8.6-pg16-bookworm:pg16ccc6e83d6e35
openssl@3.0.20-1~deb12u2
no fix listed
2
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.29
2
qichenxu4pd/pythonexample:1.0f3a8502bc21b
openssl@3.0.11-1~deb12u2
no fix listed
2
quickwit/quickwit:v0.8.2363ff56ce456
openssl@3.0.11-1~deb12u2
no fix listed
2
rajnandan1/kener:3.2.1930407afca731
openssl@3.0.17-1~deb12u1
no fix listed
2
rancher/local-path-provisioner:v0.0.3534ff0847cc47
openssl@3.5.5-r0
3.5.8-r0
2
redis/redis-stack:7.2.0-v91c5f43fddcdd
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
2
redis/redis-stack-server:7.4.0:7.4.0-v172035434f455
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29
2
redis/redis-stack-server:7.2.0-v10e44b2b49d059
openssl@3.0.2-0ubuntu1.15
3.0.2-0ubuntu1.29
2
rotationalio/quarterdeck:0.16.00e7ad3a031dc
openssl@3.0.20-1~deb12u2
no fix listed
2
safeglobal/safe-config-service:latest09a5e495c219
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
safeglobal/safe-transaction-service:latest80db836cc5d5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
sigp/lighthouse:v8.1.344aa773dcf27
openssl@3.0.2-0ubuntu1.21
3.0.2-0ubuntu1.29
2
sigp/lighthouse:latest9a62bb870545
openssl@3.0.2-0ubuntu1.26
3.0.2-0ubuntu1.29
2
sikalabs/hello-world-server:latest5f49bf889a64
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
siscc/dotstatsuite-core-transfer:master46b7e3c888c4
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.15
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
openssl@3.5.7-r0
3.5.8-r0
2
speckle/speckle-preview-service:2.18.11-branch.testing2.88634-335d469:2.18.12-branch.testing3.88744-f55b3414bd113093583
openssl@3.0.11-1~deb12u2
no fix listed
2
svtechnmaa/svtech_debuger:v1.0.0b2987abe57d3
openssl@3.0.2-0ubuntu1.5
3.0.2-0ubuntu1.29
2
syncthing/syncthing:2.1.1775c4aac4862
openssl@3.5.6-r0
3.5.8-r0
2
sysnet4admin/dashboard:bluec5bd3bb1b5a6
openssl@3.3.3-r0
3.3.7-r1
2
taigaio/taiga-back:latest4beed8f62c9f
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
2
taigaio/taiga-protected:latestfd4568a97a59
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
2

syft 1.42.1 · advisories as of 21 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.