CVE-2026-75805

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.002; 12th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,469; of 17,966 indexed, latest versions
Container images: 2,527; deployed by those charts
Fix available: 2 of 3; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,469 of 17,966 indexed charts deploy, on 2,527 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+68 more	3.0.2-0ubuntu1.30, 3.0.13-0ubuntu3.16, 3.5.5-1ubuntu3.6, 3.5.7-1~deb13u3	2,227
opensslapk	3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+5 more	3.3.7-r2	300
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5

OSV records: ALPINE-CVE-2026-75805 DEBIAN-CVE-2026-75805 UBUNTU-CVE-2026-75805 ECHO-738e-73da-1b38
Also known as: USN-8847-1
Trending: Rank 6 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

2,469 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	no fix listed

Open the chart page →

8,027

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	openssl@3.0.14-1~deb12u2	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	openssl@3.0.14-1~deb12u2	no fix listed
library/mongo :latest	5d7043a4ffe0	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
murtazashah46/helmfile :latest	4d11726cf803	openssl@3.0.14-1~deb12u2	no fix listed

Open the chart page →

14,267

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.16

Open the chart page →

2,339

xray-proxyxray-proxy

1.0.3

1 of 1 See more

xray-proxy xray-proxy 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
gvpaleevkz/xray-proxy :v1.0.0	46eb128d6c61	openssl@3.3.7-r0	3.3.7-r2

Open the chart page →

755

cloudeye-exporterxxl-job-admin

0.1.2

1 of 1 See more

cloudeye-exporter xxl-job-admin 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
dellnoantechnp/cloudeye-exporter :v2.0.31	6873356c882d	openssl@3.0.18-1~deb12u2	no fix listed

Open the chart page →

2,857

dingtalk-botxxl-job-admin

0.1.3

1 of 2 See more

dingtalk-bot xxl-job-admin 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
dellnoantechnp/dingtalk-bot :v1.0.1	034000bbcad5	openssl@3.5.4-1~deb13u1	3.5.7-1~deb13u3

Open the chart page →

3,565

nightingalexxl-job-admin

0.2.11

3 of 6 See more

nightingale xxl-job-admin 0.2.11

3 of the 6 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
flashcatcloud/categraf :latest	42e6ab16472e	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.16
flashcatcloud/nightingale :8.0.0-beta.11	ea1b0aaabe09	openssl@3.0.16-1~deb12u1	no fix listed
library/redis :6.2	d2ad7b21cafa	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

10,337

pgcatxxl-job-admin

0.3.3

1 of 1 See more

pgcat xxl-job-admin 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
ghcr.io/postgresml/pgcat :v1.2.0	627761f6dcbc	openssl@3.0.13-1~deb12u1	no fix listed

Open the chart page →

3,384

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

1,822

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	openssl@3.5.6-1~deb13u1	3.5.7-1~deb13u3

Open the chart page →

1,540

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
library/nginx :stable	b972f831f200	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

1,822

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	no fix listed

Open the chart page →

2,890

jenkinszanise-jenkins-helm-chart

0.1.0

1 of 1 See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

2,846

changedetection-iozekker6

1.103.0

1 of 1 See more

changedetection-io zekker6 1.103.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.8	34df3680db1c	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

2,896

endlessh-gozekker6

0.4.0

1 of 1 See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
ghcr.io/shizunge/endlessh-go :2026.0730.0	8826dad32623	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

623

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

1,822

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	1d8f72d2ce20	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

4,984

zimagizimagi

2.7.17

1 of 6 See more

zimagi zimagi 2.7.17

1 of the 6 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.15.3	31407c0e8e32	openssl@3.0.17-1~deb12u2	no fix listed

Open the chart page →

2,125

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	3.0.2-0ubuntu1.30

Open the chart page →

8,734

Container images carrying it

2,527 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
mcp/grafana :latest	9362bcf6aa0e	openssl@3.0.20-1~deb12u2	no fix listed	3
meshery/meshery :stable-latest	44b64ee128fb	openssl@3.0.20-1~deb12u2	no fix listed	3
natsio/prometheus-nats-exporter :0.17.3	26c826662ac8	openssl@3.3.3-r0	3.3.7-r2	3
opencloudeu/web-extensions :importer-1.0.0	6e8b2df6c5a4	openssl@3.0.15-1~deb12u1	no fix listed	3
opencsghq/postgres :15.19	b98600564e07	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3	3
opencsghq/psql :latest	57def8e77d0f	openssl@3.3.2-r4	3.3.7-r2	3
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.30	3
openebs/node-disk-operator :2.1.0	6afe2123c457	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.30	3
sigp/lighthouse :latest-amd64	50f66cfebb6d	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.30	3
timberio/vector :0.58.0-distroless-libc	6c93dfe2554c	openssl@3.0.20-1~deb12u2	no fix listed	3
tykio/tyk-dashboard :v5.13.2	1161bd297135	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3	3
tykio/tyk-gateway-ee :v5.13.2	50b3e4f5398a	openssl@3.5.7-1~deb13u2+fips+dhi0	3.5.7-1~deb13u3	3
vaultwarden/server :1.37.3 :latest	1587c45feaa4	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3	3
vaultwarden/server :1.37.1	ebdfe70701c6	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3	3
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	no fix listed	3
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	openssl@3.0.9-1	no fix listed	3
ghcr.io/dgtlmoon/changedetection.io :0.60.8	34df3680db1c	openssl@3.0.20-1~deb12u2	no fix listed	3
ghcr.io/flyteorg/flyte-connectors :py3.12-v2.3.6	896fc7b18b1b	openssl@3.0.20-1~deb12u1	no fix listed	3
ghcr.io/hatchet-dev/hatchet/hatchet-frontend :v0.107.0	1ea61100cbff	openssl@3.3.7-r0	3.3.7-r2	3
ghcr.io/huggingface/text-embeddings-inference :cpu-1.5	0502794a4d86	openssl@3.0.13-1~deb12u1	no fix listed	3
ghcr.io/linuxserver/plex :1.43.4 :latest	be083133dfe0	openssl@3.5.5-1ubuntu3.5	3.5.5-1ubuntu3.6	3
ghcr.io/paperless-ngx/paperless-ngx :3.2.1	5fa76604a81d	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3	3
ghcr.io/tremolosecurity/kube-oidc-proxy :1.0.13	c5153b5f079c	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16	3
ghcr.io/voyagermesh/crd-manager :v0.3.0	e67f14e5c853	openssl@3.0.20-1~deb12u2	no fix listed	3
public.ecr.aws/aktosecurity/akto-api-security-mini-runtime :1.74.6_local :latest	8b9208c09d76	openssl@3.5.5-1ubuntu3.5	3.5.5-1ubuntu3.6	3
public.ecr.aws/docker/library/redis :7.2.8-alpine	c88ea2979a49	openssl@3.3.3-r0	3.3.7-r2	3
quay.io/cilium/cilium :v1.20.2	2939231d0d3e	openssl@3.5.5-1ubuntu3.5	3.5.5-1ubuntu3.6	3
quay.io/devtron/ai-agent :0.0.1	6545dac92173	openssl@3.0.14-1~deb12u2	no fix listed	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.30	3
quay.io/devtron/casbin :172ef62b-9450794d-464-39422	5bf041aacadd	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16	3
quay.io/devtron/chart-sync :94237c18-1021-39419	60566529446a	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16	3
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16	3
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16	3
quay.io/devtron/git-sensor :94237c18-950-39418	03c7bf249aa1	openssl@3.3.2-r4	3.3.7-r2	3
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16	3
quay.io/devtron/image-scanner :94237c18-109-39420	98580969b333	openssl@3.3.2-r4	3.3.7-r2	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.30	3
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16	3
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	openssl@3.0.13-0ubuntu3.11	3.0.13-0ubuntu3.16	3
quay.io/devtron/kubewatch :09867a9c-419-39288	d30a7c640c63	openssl@3.3.2-r4	3.3.7-r2	3
quay.io/devtron/lens :3b3d6d0e-333-39292	e886b8d2b54b	openssl@3.3.2-r4	3.3.7-r2	3
quay.io/devtron/notifier :9804331c-372-39294	709c7da19c5a	openssl@3.0.17-1~deb12u3	no fix listed	3
alazidis/kube-netlag :1.1.0	0e8c84152201	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.16	2
amaraiheanacho/nginx-site :latest	5c86fccf5daa	openssl@3.3.3-r0	3.3.7-r2	2
apache/nifi-registry :1.26.0	7cdfd8deec92	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.30	2
apache/rocketmq :5.4.0	319cd8a81ed1	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.16	2
apache/tika :2.9.0.0	92d055a84e9e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.30	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.16	2
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	openssl@3.0.17-1~deb12u2	no fix listed	2
bitnamilegacy/mariadb :11.4.5-debian-12-r9	33ce23601fc9	openssl@3.0.15-1~deb12u1	no fix listed	2