StackRadar

CVE-2026-75805

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.002
12th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,459
of 17,985 indexed, latest versions
Container images
2,512
deployed by those charts
Fix available
2 of 3
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,459 of 17,985 indexed charts deploy, on 2,512 images.

Affected packageAffected versionsFixed inImages
openssldeb3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+69 more3.0.2-0ubuntu1.30, 3.0.13-0ubuntu3.16, 3.5.5-1ubuntu3.6, 3.5.7-1~deb13u32,214
opensslapk3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+5 more3.3.7-r2298
nodejsdeb16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+2 moreno fix listed6
OSV records
ALPINE-CVE-2026-75805DEBIAN-CVE-2026-75805UBUNTU-CVE-2026-75805ECHO-738e-73da-1b38
Also known as
USN-8847-1
Trending
Rank 13 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

2,459 by stars
ChartLatestAffected imagesRadar Score
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container imageDigestPackageFixed in
library/nginx:stableb972f831f200
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

1,836
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
openssl@3.0.11-1~deb12u2
no fix listed

Open the chart page →

2,894
jenkinszanise-jenkins-helm-chart0.1.01 of 1See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container imageDigestPackageFixed in
jenkins/jenkins:ltsc1e4c349365f
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

2,887
changedetection-iozekker6Verified publisher1.103.01 of 1See more

changedetection-io zekker6 1.103.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.834df3680db1c
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

2,901
endlessh-gozekker6Verified publisher0.4.01 of 1See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container imageDigestPackageFixed in
ghcr.io/shizunge/endlessh-go:2026.0730.08826dad32623
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

637
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3

Open the chart page →

1,836
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
openssl@3.0.20-1~deb12u2
no fix listed

Open the chart page →

5,003
zimagizimagi2.7.171 of 6See more

zimagi zimagi 2.7.17

1 of the 6 container images this version deploys carry CVE-2026-75805.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.15.331407c0e8e32
openssl@3.0.17-1~deb12u2
no fix listed

Open the chart page →

2,129
zoo-project-druzoo-projectOfficialVerified publisher0.10.81 of 6See more

zoo-project-dru zoo-project 0.10.8

1 of the 6 container images this version deploys carry CVE-2026-75805.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
openssl@3.0.2-0ubuntu1.30
no fix listed

Open the chart page →

6,257

Container images carrying it

2,512 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
onyxdotapp/onyx-web-server:latestec05c4275f8f
openssl@3.5.7-1~deb13u2+dhi0
3.5.7-1~deb13u3
1
opea/asr:1.025dd26d9cd09
openssl@3.0.14-1~deb12u2
no fix listed
1
opea/chatqna:1.038c51b791efa
openssl@3.0.14-1~deb12u2
no fix listed
1
opea/codegen:1.058f91683892d
openssl@3.0.14-1~deb12u2
no fix listed
1
opea/codegen-ui:1.02bee4eb66f3e
openssl@3.0.11-1~deb12u2
no fix listed
1
opea/codetrans:1.0e2436483b73d
openssl@3.0.14-1~deb12u2
no fix listed
1
opea/codetrans-ui:1.03ef121f34610
openssl@3.0.11-1~deb12u2
no fix listed
1
opea/docsum:1.03eaa91849512
openssl@3.0.14-1~deb12u2
no fix listed
1
opea/docsum-ui:1.07f854e9bffaf
openssl@3.0.11-1~deb12u2
no fix listed
1
opea/guardrails-tgi:1.0262c6048aab8
openssl@3.0.14-1~deb12u2
no fix listed
1
opea/guardrails-tgi:latestf68bec6a1271
openssl@3.0.15-1~deb12u1
no fix listed
1
opea/llm-docsum-tgi:1.002f9e8fa5d71
openssl@3.0.14-1~deb12u2
no fix listed
1
opea/speecht5:1.0249afad3d268
openssl@3.0.14-1~deb12u2
no fix listed
1
opea/tts:1.0257ae94709e9
openssl@3.0.14-1~deb12u2
no fix listed
1
opea/web-retriever-chroma:1.0fe08165d7770
openssl@3.0.14-1~deb12u2
no fix listed
1
openaev/platform:3.260923.06c512196d956
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16
1
openbas/caldera-server:5.1.0a277796d9724
openssl@3.0.15-1~deb12u1
no fix listed
1
openbas/platform:2.0.5d986d80b0a75
openssl@3.0.13-0ubuntu3.6
3.0.13-0ubuntu3.16
1
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
openssl@3.0.17-1~deb12u2
no fix listed
1
opencsghq/csgbot:v0.6.9-ee7d0271e26521
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3
1
opencsghq/csghub-portal:v2.5.0-ee1cb36b49151e
openssl@3.0.20-1~deb12u2
no fix listed
1
opencsghq/csghub-server:v2.5.0-ee587046575c2c
openssl@3.0.18-1~deb12u1
no fix listed
1
opencsghq/csghub-xnet:v2.5.0-ee86ea22f495c7
openssl@3.0.18-1~deb12u1
no fix listed
1
opencsghq/csgship-portal:v1.2.1865814dc87a1
openssl@3.3.3-r0
3.3.7-r2
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
openssl@3.0.14-1~deb12u2
no fix listed
1
opencsghq/gitlab-shell:v19.2.580a65ac370da
openssl@3.0.20-1~deb12u2
no fix listed
1
opendatacube/ows:latest668cbb41473c
openssl@3.0.13-0ubuntu3.4
3.0.13-0ubuntu3.16
1
opendatacube/wps:latest80df355a660b
openssl@3.0.2-0ubuntu1.19
3.0.2-0ubuntu1.30
1
opendronemap/nodeodm:3.6.2fcd99eb23d8d
openssl@3.0.13-0ubuntu3.12
3.0.13-0ubuntu3.16
1
openebs/rawfile-localpv:v0.15.396fd7987ea79
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3
1
openhab/openhab:5.2.1bfd4a60e90da
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3
1
openkruise/kruise-manager:v1.8.30482722b4e56
openssl@3.3.6-r0
3.3.7-r2
1
openkruise/kruise-manager:v1.9.1f81ae78a36a4
openssl@3.3.7-r0
3.3.7-r2
1
opennode/waldur-mastermind:8.1.24c82b15d9042
openssl@3.5.6-1~deb13u2
3.5.7-1~deb13u3
1
openproject/hocuspocus:release-338001b288dc1359dfb5
openssl@3.0.17-1~deb12u2
no fix listed
1
openthread/border-router:v2026.09.07616b9d514de
openssl@3.0.13-0ubuntu3.15
3.0.13-0ubuntu3.16
1
openvino/model_server:2025.2.11e7cd1d70cc1
openssl@3.0.13-0ubuntu3.5
3.0.13-0ubuntu3.16
1
openvpn/openvpn-as:latest2253c10ec652
openssl@3.0.13-0ubuntu3.11
3.0.13-0ubuntu3.16
1
operaton/operaton:1.0.0-beta-4b35867ffe4d8
openssl@3.3.3-r0
3.3.7-r2
1
orbitalreg/orbitalreg-frontend:0.1.04fd449582a3c
openssl@3.3.3-r0
3.3.7-r2
1
oryd/hydra:v26.2.0ff67c7fb5f95
openssl@3.3.6-r0
3.3.7-r2
1
oryd/hydra-login-consent-node:v26.2.06465e95993b5
openssl@3.3.3-r0
3.3.7-r2
1
oryd/keto:v26.2.0bfdb8b9e283a
openssl@3.3.6-r0
3.3.7-r2
1
oryd/oathkeeper:v26.2.0467329abde34
openssl@3.3.6-r0
3.3.7-r2
1
outlinewiki/outline:0.82.0494dfb9249a6
openssl@3.0.15-1~deb12u1
no fix listed
1
outlinewiki/outline:1.10.1832051f039b4
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3
1
owncloud/server:10.16.274c53d341076
openssl@3.0.2-0ubuntu1.23
3.0.2-0ubuntu1.30
1
owncloud/server:10.16.3b3f9efdcd7f7
openssl@3.0.2-0ubuntu1.25
3.0.2-0ubuntu1.30
1
pangeo/base-notebook:2024.01.155fbe688a4f80
openssl@3.0.2-0ubuntu1.12
3.0.2-0ubuntu1.30
1
passbolt/passbolt:5.16.0-1-ce1768916a04b1
openssl@3.5.7-1~deb13u2
3.5.7-1~deb13u3
1

syft 1.42.1 · advisories as of 2 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.