StackRadar

CVE-2026-75803

Critical

Advisory

Published 20 Aug 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.002
13th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
3,050
of 17,803 indexed, latest versions
Container images
3,356
deployed by those charts
Fix available
3 of 4
affected packages

CVE-2026-75803 affecting package openssl for versions less than 3.3.7-6

Carried by container images the latest versions of 3,050 of 17,803 indexed charts deploy, on 3,356 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+61 more3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.5, 3.5.7-1~deb13u21,865
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+12 more3.3.7-r1, 3.5.8-r01,457
nodejsdeb4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+3 moreno fix listed11
opensslrpm3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3, 3.3.7-4.azl33.3.7-623
OSV records
ALPINE-CVE-2026-75803DEBIAN-CVE-2026-75803UBUNTU-CVE-2026-75803AZL-97935ECHO-f836-71cf-434b
Also known as
USN-8678-1, USN-8678-3

Charts affected

3,050 by stars
ChartLatestAffected imagesRadar Score
proxmox-csi-pluginproxmox-csi0.5.121 of 7See more

proxmox-csi-plugin proxmox-csi 0.5.12

1 of the 7 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/proxmox-csi-node:v0.20.0e0151137a1c5
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,862
victoria-metrics-singlevictoriametricsVerified publisher0.46.01 of 1See more

victoria-metrics-single victoriametrics 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
victoriametrics/victoria-metrics:v1.151.06d164540a04f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
apisix-ingress-controllerapisix1.4.01 of 2See more

apisix-ingress-controller apisix 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
apache/apisix-ingress-controller:2.2.05c5efa4c7f2a
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

1,708
concourseconcourseVerified publisher20.3.01 of 2See more

concourse concourse 20.3.0

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

2,088
headscalegabe565Verified publisher0.16.02 of 2See more

headscale gabe565 0.16.0

2 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0
ghcr.io/juanfont/headscale:v0.25.097febecbe6cb
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

2,016
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
openssl@3.3.4-r0
3.3.7-r1

Open the chart page →

16,456
openbaoopenbaoVerified publisher0.29.52 of 2See more

openbao openbao 0.29.5

2 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
hashicorp/vault-k8s:1.7.2ae3d307658b7
openssl@3.5.4-r0
3.5.8-r0
quay.io/openbao/openbao:2.6.211fd73a2102c
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,519
openprojectopenproject-helm-chartsOfficialVerified publisher13.12.03 of 5See more

openproject openproject-helm-charts 13.12.0

3 of the 5 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
openssl@3.0.11-1~deb12u2
no fix listed
library/postgres:16f1c3376c26f2
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
openproject/hocuspocus:release-338001b288dc1359dfb5
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

20,185
sftpgosftpgoOfficialVerified publisher0.47.01 of 1See more

sftpgo sftpgo 0.47.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/drakkan/sftpgo:v2.7.46cb60f08fede
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,290
wazuhwazuh-helm-morgovedVerified publisher2.0.72 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

2 of the 5 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
openssl@3.0.17-1~deb12u3
no fix listed
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

11,446
lemmyananace-chartsVerified publisher0.6.152 of 5See more

lemmy ananace-charts 0.6.15

2 of the 5 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
dessalines/lemmy:0.19.2079e9f02c286c
openssl@3.0.20-1~deb12u2
no fix listed
dessalines/lemmy-ui:0.19.20ee4c620d8e93
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

7,298
zabbixcetic3.1.35 of 5See more

zabbix cetic 3.1.3

5 of the 5 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.29
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.29
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.29
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
openssl@3.0.2-0ubuntu1.6
3.0.2-0ubuntu1.29

Open the chart page →

34,041
chatwootchatwootVerified publisher2.0.241 of 3See more

chatwoot chatwoot 2.0.24

1 of the 3 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v4.15.167ebc751c171
openssl@3.3.7-r0
3.3.7-r1

Open the chart page →

9,364
csi-driver-smbcsi-driver-smbVerified publisher1.20.31 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

1 of the 6 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

3,019
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
openssl@3.0.9-1
no fix listed

Open the chart page →

4,338
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
openssl@3.0.13-1~deb12u1
no fix listed

Open the chart page →

6,605
stacks-blockchain-apihirosystemsVerified publisher6.5.12 of 5See more

stacks-blockchain-api hirosystems 6.5.1

2 of the 5 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
openssl@3.0.17-1~deb12u3
no fix listed
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

8,453
imgproxyimgproxy1.1.01 of 1See more

imgproxy imgproxy 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

2,397
cloudflaredkubitodevVerified publisher1.7.91 of 1See more

cloudflared kubitodev 1.7.9

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
cloudflare/cloudflared:2026.3.06b599ca3e974
openssl@3.5.4-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

1,477
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
openssl@3.0.17-1~deb12u1
no fix listed

Open the chart page →

6,117
weaviateweaviateOfficialVerified publisher17.8.31 of 2See more

weaviate weaviate 17.8.3

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/alpine:latest28bd5fe8b56d
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

149
daskdask2024.1.11 of 2See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.29

Open the chart page →

12,902
dgraphdgraph24.1.41 of 1See more

dgraph dgraph 24.1.4

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
dgraph/dgraph:v24.1.4b57fa31f9b7f
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

3,056
netbirdjaconiVerified publisher0.15.14 of 4See more

netbird jaconi 0.15.1

4 of the 4 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
library/golang:latest512690a56605
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
netbirdio/management:0.45.10c9994b393ea
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15
netbirdio/relay:0.45.1872e3add0e1e
openssl@3.0.16-1~deb12u1
no fix listed
netbirdio/signal:0.45.146ce5a45538f
openssl@3.0.16-1~deb12u1
no fix listed

Open the chart page →

8,651
k8upk8upVerified publisher4.10.01 of 1See more

k8up k8up 4.10.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/k8up-io/k8up:v2.16.029458113b8b6
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

726
litellm-helmlitellm1.101.01 of 2See more

litellm-helm litellm 1.101.0

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

5,049
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2

Open the chart page →

10,181
argocdnicklasfrahm-argocdVerified publisher0.3.02 of 2See more

argocd nicklasfrahm-argocd 0.3.0

2 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
public.ecr.aws/docker/library/redis:7.2.8-alpinec88ea2979a49
openssl@3.3.3-r0
3.3.7-r1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.15

Open the chart page →

5,483
oneuptimeoneuptimeOfficialVerified publisher13.0.73 of 7See more

oneuptime oneuptime 13.0.7

3 of the 7 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.7c28b8916e10e
openssl@3.0.2-0ubuntu1.29
no fix listed
library/postgres:latest4ef4dbc939d6
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u2
oneuptime/probe:releasec5ef060a0bf3
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

11,722
openclawopenclaw-helmVerified publisher1.5.402 of 2See more

openclaw openclaw-helm 1.5.40

2 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
openssl@3.5.5-1~deb13u2
3.5.7-1~deb13u2
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
openssl@3.0.20-1~deb12u1
no fix listed

Open the chart page →

5,735
postgres-operatorpostgres-operator2.0.21 of 1See more

postgres-operator postgres-operator 2.0.2

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v2.0.275f69eac43ac
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

325
prometheus-cloudwatch-exporterprometheus-communityVerified publisher0.28.21 of 1See more

prometheus-cloudwatch-exporter prometheus-community 0.28.2

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
prom/cloudwatch-exporter:v0.16.071c2e988af06
openssl@3.0.13-0ubuntu3.2
3.0.13-0ubuntu3.15

Open the chart page →

3,441
telepresence-osstelepresence-ossOfficialVerified publisher2.31.21 of 2See more

telepresence-oss telepresence-oss 2.31.2

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/telepresenceio/tel2:2.31.26f1d705594ba
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

1,044
trivytrivy-operator0.26.01 of 1See more

trivy trivy-operator 0.26.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
aquasec/trivy:0.74.062b1e65e8869
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

447
amd-gpuamd-gpu-helmOfficialVerified publisher0.22.01 of 1See more

amd-gpu amd-gpu-helm 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
rocm/k8s-device-plugin:1.31.0.926212c665aab
openssl@3.3.3-r0
3.3.7-r1

Open the chart page →

1,176
camel-kcamel-kVerified publisher2.11.01 of 1See more

camel-k camel-k 2.11.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
apache/camel-k:2.11.0d173e7efe258
openssl@3.5.5-1ubuntu3.3
3.5.5-1ubuntu3.5

Open the chart page →

1,346
cert-manager-webhook-ovhcert-manager-webhook-ovhVerified publisher0.9.161 of 1See more

cert-manager-webhook-ovh cert-manager-webhook-ovh 0.9.16

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/aureq/cert-manager-webhook-ovh:0.9.160339cf9a75ca
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

203
falcosidekickfalcosecurity0.14.01 of 1See more

falcosidekick falcosecurity 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
falcosecurity/falcosidekick:2.32.01976da721518
openssl@3.5.1-r0
3.5.8-r0

Open the chart page →

1,773
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
openssl@3.0.2-0ubuntu1.10
3.0.2-0ubuntu1.29

Open the chart page →

12,143
helm-dashboardkomodorVerified publisher2.0.71 of 1See more

helm-dashboard komodor 2.0.7

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
komodorio/helm-dashboard:2.1.3258a9044e658
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

317
outlinekubitodevVerified publisher1.2.21 of 4See more

outline kubitodev 1.2.2

1 of the 4 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
outlinewiki/outline:0.82.0494dfb9249a6
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

5,416
plane-cemakeplaneOfficialVerified publisher1.8.11 of 11See more

plane-ce makeplane 1.8.1

1 of the 11 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
valkey/valkey:7.2.11-alpine10328d00120d
openssl@3.5.5-r0
3.5.8-r0

Open the chart page →

5,002
milvusmilvus-helm5.0.282 of 4See more

milvus milvus-helm 5.0.28

2 of the 4 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
openssl@3.0.2-0ubuntu1.18
3.0.2-0ubuntu1.29
milvusdb/etcd:3.5.25-r1fededb2f2d63
openssl@3.0.2-0ubuntu1.20
3.0.2-0ubuntu1.29

Open the chart page →

11,078
opa-kube-mgmtopa-kube-mgmtVerified publisher11.0.121 of 2See more

opa-kube-mgmt opa-kube-mgmt 11.0.12

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
openpolicyagent/kube-mgmt:11.0.123a8b1bacbcd8
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

622
s3-proxyoxyno-zetaVerified publisher2.28.01 of 1See more

s3-proxy oxyno-zeta 2.28.0

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
oxynozeta/s3-proxy:5.1.121115040e224
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

183
prefect-serverprefectVerified publisher2026.9.141419101 of 2See more

prefect-server prefect 2026.9.14141910

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:14.13.0df6ec02e2b9a
openssl@3.0.15-1~deb12u1
no fix listed

Open the chart page →

5,598
privatebinprivatebin0.23.61 of 1See more

privatebin privatebin 0.23.6

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
privatebin/nginx-fpm-alpine:2.0.613290e2f04bf
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

484
rocketmqrocketmq12.6.01 of 2See more

rocketmq rocketmq 12.6.0

1 of the 2 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
apache/rocketmq:5.4.0319cd8a81ed1
openssl@3.0.13-0ubuntu3.7
3.0.13-0ubuntu3.15

Open the chart page →

6,416
wireguardwireguardVerified publisher0.32.01 of 3See more

wireguard wireguard 0.32.0

1 of the 3 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/wireguard:mainab6815bdfe2f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

171
bytebasebytebase1.1.51 of 1See more

bytebase bytebase 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-75803.

Container imageDigestPackageFixed in
bytebase/bytebase:latest9fcde38c0d5f
openssl@3.5.7-r0
3.5.8-r0

Open the chart page →

459

Container images carrying it

3,356 by charts deploying them

A fixed version is listed for 3 of the 4 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/ingress-nginx/controller:v1.13.137e489b22ac7
openssl@3.5.1-r0
3.5.8-r0
1
registry.k8s.io/ingress-nginx/controller:v1.12.0e6b8de175acd
openssl@3.3.2-r4
3.3.7-r1
1
registry.k8s.io/kwok/kwok:v0.8.06d25aa8fbdfe
openssl@3.5.7-r0
3.5.8-r0
1
registry.k8s.io/provider-os/manila-csi-plugin:v1.36.0190976e2e2fe
openssl@3.5.4-r0
3.5.8-r0
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
openssl@3.0.20-1~deb12u2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
openssl@3.0.15-1~deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.