CVE-2026-75805

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.002; 12th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,469; of 17,966 indexed, latest versions
Container images: 2,527; deployed by those charts
Fix available: 2 of 3; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 2,469 of 17,966 indexed charts deploy, on 2,527 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	3.0.2-0ubuntu1, 3.0.2-0ubuntu1.2, 3.0.2-0ubuntu1.5, 3.0.2-0ubuntu1.6+68 more	3.0.2-0ubuntu1.30, 3.0.13-0ubuntu3.16, 3.5.5-1ubuntu3.6, 3.5.7-1~deb13u3	2,227
opensslapk	3.3.1-r3, 3.3.2-r4, 3.3.2-r5, 3.3.3-r0+5 more	3.3.7-r2	300
nodejsdeb	16.14.2-deb-1nodesource1, 16.18.0-deb-1nodesource1, 20.11.1-1nodesource1, 20.15.0-1nodesource1+1 more	no fix listed	5

OSV records: ALPINE-CVE-2026-75805 DEBIAN-CVE-2026-75805 UBUNTU-CVE-2026-75805 ECHO-738e-73da-1b38
Also known as: USN-8847-1
Trending: Rank 6 in indexed charts, since 30 Sept 2026. See the ranking →

Charts affected

2,469 by stars

Chart

Latest

Affected images

Radar Score

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	openssl@3.0.11-1~deb12u2	no fix listed

Open the chart page →

8,027

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	openssl@3.0.14-1~deb12u2	no fix listed
hamzaarshad10/querypodpy :1.7	154f38e8668e	openssl@3.0.14-1~deb12u2	no fix listed
library/mongo :latest	5d7043a4ffe0	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16
murtazashah46/helmfile :latest	4d11726cf803	openssl@3.0.14-1~deb12u2	no fix listed

Open the chart page →

14,267

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	openssl@3.0.13-0ubuntu3	3.0.13-0ubuntu3.16

Open the chart page →

2,339

xray-proxyxray-proxy

1.0.3

1 of 1 See more

xray-proxy xray-proxy 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
gvpaleevkz/xray-proxy :v1.0.0	46eb128d6c61	openssl@3.3.7-r0	3.3.7-r2

Open the chart page →

755

cloudeye-exporterxxl-job-admin

0.1.2

1 of 1 See more

cloudeye-exporter xxl-job-admin 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
dellnoantechnp/cloudeye-exporter :v2.0.31	6873356c882d	openssl@3.0.18-1~deb12u2	no fix listed

Open the chart page →

2,857

dingtalk-botxxl-job-admin

0.1.3

1 of 2 See more

dingtalk-bot xxl-job-admin 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
dellnoantechnp/dingtalk-bot :v1.0.1	034000bbcad5	openssl@3.5.4-1~deb13u1	3.5.7-1~deb13u3

Open the chart page →

3,565

nightingalexxl-job-admin

0.2.11

3 of 6 See more

nightingale xxl-job-admin 0.2.11

3 of the 6 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
flashcatcloud/categraf :latest	42e6ab16472e	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.16
flashcatcloud/nightingale :8.0.0-beta.11	ea1b0aaabe09	openssl@3.0.16-1~deb12u1	no fix listed
library/redis :6.2	d2ad7b21cafa	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

10,337

pgcatxxl-job-admin

0.3.3

1 of 1 See more

pgcat xxl-job-admin 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
ghcr.io/postgresml/pgcat :v1.2.0	627761f6dcbc	openssl@3.0.13-1~deb12u1	no fix listed

Open the chart page →

3,384

nginx-chartxxoznge-nginx

0.1.0

1 of 1 See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

1,822

helm-demoyahoon-helm-demo

1.0.0

1 of 1 See more

helm-demo yahoon-helm-demo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
ghcr.io/yahoon/helm-demo :1.0.0	2930290a758c	openssl@3.5.6-1~deb13u1	3.5.7-1~deb13u3

Open the chart page →

1,540

my-nginx-appyasser-nginx-app

0.1.0

1 of 1 See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
library/nginx :stable	b972f831f200	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

1,822

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	openssl@3.0.11-1~deb12u2	no fix listed

Open the chart page →

2,890

jenkinszanise-jenkins-helm-chart

0.1.0

1 of 1 See more

jenkins zanise-jenkins-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
jenkins/jenkins :lts	c1e4c349365f	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

2,846

changedetection-iozekker6

1.103.0

1 of 1 See more

changedetection-io zekker6 1.103.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
ghcr.io/dgtlmoon/changedetection.io :0.60.8	34df3680db1c	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

2,896

endlessh-gozekker6

0.4.0

1 of 1 See more

endlessh-go zekker6 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
ghcr.io/shizunge/endlessh-go :2026.0730.0	8826dad32623	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

623

NEW_APPzekker6

0.0.0

1 of 1 See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
library/nginx :latest	abe47724e466	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3

Open the chart page →

1,822

sockpuppetbrowserzekker6

0.1.0

1 of 1 See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
dgtlmoon/sockpuppetbrowser :latest	1d8f72d2ce20	openssl@3.0.20-1~deb12u2	no fix listed

Open the chart page →

4,984

zimagizimagi

2.7.17

1 of 6 See more

zimagi zimagi 2.7.17

1 of the 6 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.15.3	31407c0e8e32	openssl@3.0.17-1~deb12u2	no fix listed

Open the chart page →

2,125

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-75805.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	openssl@3.0.2-0ubuntu1.26	3.0.2-0ubuntu1.30

Open the chart page →

8,734

Container images carrying it

2,527 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
apache/hertzbeat :1.8.0	75d48a62748f	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.16	1
apache/hertzbeat-collector :1.8.0	a2bab1be574c	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.16	1
apache/nifi-registry :1.27.0	63b8e3e40742	openssl@3.0.2-0ubuntu1.16	3.0.2-0ubuntu1.30	1
apachepulsar/pulsar :3.1.0	16f9fdab3fa6	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.30	1
apachepulsar/pulsar :3.0.7	9c9947de139d	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.30	1
apache/ranger :2.7.0	76c176e8a0e4	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.30	1
apache/rocketmq :5.3.0	434d8398f996	openssl@3.0.13-0ubuntu3.1	3.0.13-0ubuntu3.16	1
apache/rocketmq-exporter :0.0.2	c8fb51195444	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.30	1
apache/skywalking-oap-server :9.2.0	133d35d2c263	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.30	1
apache/skywalking-ui :9.2.0	295f1dc87d98	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.30	1
apache/superset :4.0.1	ab9467fd712c	openssl@3.0.11-1~deb12u2	no fix listed	1
apache/tika :latest-full	80072bb73dd3	openssl@3.5.5-1ubuntu3.3	3.5.5-1ubuntu3.6	1
apache/tika :3.3.1.0	90b7fa1dc018	openssl@3.5.5-1ubuntu3	3.5.5-1ubuntu3.6	1
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	openssl@3.5.1-1	3.5.7-1~deb13u3	1
apecloud/gemini-scheduler :0.1.1	5832d1a9097a	openssl@3.3.1-r3	3.3.7-r2	1
appwrite/new :1.1.159-self-hosted	1811ce1d8154	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3	1
aquasec/starboard-operator :0.15.38	e0b1c7ddc843	openssl@3.3.7-r0	3.3.7-r2	1
aquasec/tracee :0.24.1	cfbbfee972e6	openssl@3.3.5-r0	3.3.7-r2	1
arbuzov/claude-code-api :0.1.0	2d7dd8070610	openssl@3.0.17-1~deb12u1	no fix listed	1
archivebox/archivebox :0.9.70	8c21bb233130	openssl@3.5.7-1~deb13u2	3.5.7-1~deb13u3	1
aristidetm/basic-notebook :3.6.5	469dbc951224	openssl@3.0.13-1~deb12u1	no fix listed	1
arthurjguerra18/revwallet :v0.7.12	f540af20b307	openssl@3.0.13-1~deb12u1	no fix listed	1
artifacthub/tracker :v1.23.0	5368d21a6e5c	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3	1
artur9010/wait-for :v1.0.0	6b4de3ce8b0e	openssl@3.0.11-1~deb12u2	no fix listed	1
arunvelsriram/utils :latest	655ad18fd8d6	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.16	1
assistiot/identity-manager_db :latest	0d3e6d35f168	openssl@3.0.11-1~deb12u2	no fix listed	1
assistiot/location_processing :latest	e9bae124095f	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.30	1
assistiot/open_api_backend :1.1.2	30812ba93555	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.30	1
assistiot/smart-orchestrator_mcs :latest	7d6a0d534c7f	openssl@3.0.11-1~deb12u2	no fix listed	1
assistiot/smart-orchestrator_scheduler :latest	38b003e55ff3	openssl@3.0.11-1~deb12u2	no fix listed	1
assistiot/smart-orchestrator_scheduler_mc :latest	b1dbe4d62a03	openssl@3.0.9-1	no fix listed	1
athou/commafeed :6.2.0-postgresql	5e388351df1a	openssl@3.5.4-1~deb13u2	3.5.7-1~deb13u3	1
atlassian/bamboo :12.1.11	9160c3bfb73b	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16	1
atlassian/bamboo-agent-base :12.1.11	47d6dadc050e	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16	1
atlassian/bitbucket :10.2.7	05933f2b1cfd	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16	1
atlassian/confluence-server :7.10.0	3b9222ab32ef	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.30	1
atlassian/crowd :7.2.3	51e6d33676f6	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16	1
atlassian/crowd :5.2.2	708162b8c094	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16	1
atlassian/jira-software :8.14.0	37bc46cbec1a	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.30	1
atlassian/jira-software :11.3.11	4046f4a668a4	openssl@3.0.13-0ubuntu3.15	3.0.13-0ubuntu3.16	1
atlassian/jira-software :9.7.2	64a75aa4ec4e	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.16	1
automatischio/automatisch :0.15.0	3bace7a12d5f	openssl@3.3.3-r0	3.3.7-r2	1
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	openssl@3.0.13-1~deb12u1	no fix listed	1
avinash263/pyredis263 :latest	aa2b8727f1a6	openssl@3.0.9-1	no fix listed	1
avzini/web-app :latest	f40b30210ed0	openssl@3.0.11-1~deb12u2	no fix listed	1
b3log/siyuan :v3.1.25	95c0d129bc19	openssl@3.3.3-r0	3.3.7-r2	1
b4bz/homer :v25.02.2	c367265313f9	openssl@3.3.3-r0	3.3.7-r2	1
baserow/backend :2.3.3	7c00549b3a6f	openssl@3.5.6-1~deb13u2	3.5.7-1~deb13u3	1
baserow/backend :1.31.1	e0b3c8130b91	openssl@3.0.15-1~deb12u1	no fix listed	1
baserow/baserow :1.30.1	df0c42eb67e8	openssl@3.0.15-1~deb12u1	no fix listed	1