CVE-2026-9076

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,220; of 17,790 indexed, latest versions
Container images: 2,434; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-9076 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 2,220 of 17,790 indexed charts deploy, on 2,434 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+103 more	1.0.1f-1ubuntu2.27+esm14, 1.0.2g-1ubuntu4.20+esm16, 1.1.1-1ubuntu2.1~18.04.23+esm9, 1.1.1f-1ubuntu2.24+esm4+6 more	1,792
opensslapk	3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more	3.5.7-r0, 3.6.3-r0	637
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm5	15
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3	3.3.7-3	5

OSV records: ALPINE-CVE-2026-9076 CGA-6mcp-mm5g-jxrj CGA-847w-c3x7-8qp6 DEBIAN-CVE-2026-9076 UBUNTU-CVE-2026-9076 AZL-89934
Also known as: CGA-6p96-39qh-rm77, CGA-f2mp-q84v-4jv2, USN-8414-1, USN-8414-2

Charts affected

2,220 by stars

Chart

Latest

Affected images

Radar Score

sequencerastria

4.0.0

1 of 3 See more

sequencer astria 4.0.0

1 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/sequencer :latest	44f82ee0b24c	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

6,335

sequencer-relayerastria

2.0.0

1 of 1 See more

sequencer-relayer astria 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/astriaorg/sequencer-relayer :latest	5f6c74993f08	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

1,952

asya-playgroundasya

1.1.3

1 of 1 See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
localstack/localstack :3.1	9d278167f2b7	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

9,429

istio-discoveryavesha

1.16.0

1 of 1 See more

istio-discovery avesha 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
istio/pilot :1.16.0	ac0284d75ec9	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25

Open the chart page →

6,958

webappavzi-webapp

0.1.0

1 of 1 See more

webapp avzi-webapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
avzini/web-app :latest	f40b30210ed0	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

6,321

aws9helmaws9helm

0.1.0

4 of 4 See more

aws9helm aws9helm 0.1.0

4 of the 4 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
kuzwolka/aws9 :main	1ad759b961b1	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
kuzwolka/aws9 :news	3e8880fbbb96	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
kuzwolka/aws9 :blog	4a7707410bf1	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2
kuzwolka/aws9 :shop	84a9d9766345	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

18,436

azp-agentazp-agent

1.2.0

1 of 1 See more

azp-agent azp-agent 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
cheveo/azp-agent :1.0.2	82240f890884	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25

Open the chart page →

3,310

ragflowbaboulinet

0.1.1

1 of 5 See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
infiniflow/infinity :v0.7.0	992c87a68612	openssl@3.0.2-0ubuntu1.23	3.0.2-0ubuntu1.25

Open the chart page →

5,894

backstage-pyactionsbackstage-pyactions

0.1.0

1 of 1 See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
mawad98/backstage-pyactions :demo	99422c56a274	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

2,760

basic-auth-s3-nginxbasic-auth-s3-nginx

1.0.0

1 of 1 See more

basic-auth-s3-nginx basic-auth-s3-nginx 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
dachichang/basic-auth-s3-nginx :1.0.0	7ccac90a935e	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

6,321

bookinfobasictechno

0.1.0

3 of 6 See more

bookinfo basictechno 0.1.0

3 of the 6 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-reviews-v1 :1.17.0	b8f16a765eea	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm4
istio/examples-bookinfo-reviews-v2 :1.17.0	72f25a55f078	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm4
istio/examples-bookinfo-reviews-v3 :1.17.0	8f92fc1b6592	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

20,794

audiobookshelfbdclark-helm-charts

0.1.4

1 of 1 See more

audiobookshelf bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/advplyr/audiobookshelf :2.36.0	180acad33d69	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,722

mealiebdclark-helm-charts

0.1.15

1 of 1 See more

mealie bdclark-helm-charts 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v3.25.1	6066c29eca95	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

4,059

qbittorrent-vpnbdclark-helm-charts

0.7.6

1 of 2 See more

qbittorrent-vpn bdclark-helm-charts 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
qmcgaw/gluetun :v3.41.1	1a5bf4b4820a	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,010

bluesky-pdsbear

0.4.208

1 of 1 See more

bluesky-pds bear 0.4.208

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/bluesky-social/pds :0.4.208	637083d9369d	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

2,137

pagesberrutig-pages

1.0.0

2 of 3 See more

pages berrutig-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm4
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

20,242

algorand-participationbiatec-repo

4.4.1

1 of 1 See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-mainnet-extended :4.4.1-stable	5aaa5d4ab8b8	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25

Open the chart page →

7,246

algorand-relaybiatec-repo

4.4.1

1 of 1 See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
scholtz2/algorand-relay-mainnet :4.4.1-stable	e9af7d8ff6bb	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11

Open the chart page →

5,117

mx-nodebicarus-labs

0.1.0

1 of 1 See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

8,029

huebigdata-charts

1.0.4

1 of 2 See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
gethue/hue :4.10.0	5702b2c37ff9	nodejs@14.17.0-1nodesource1 openssl@1.1.1-1ubuntu2.1~18.04.9 openssl1.0@1.0.2n-1ubuntu5.6	no fix listed 1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5

Open the chart page →

22,929

bitpokebitpoke

1.8.19

1 of 1 See more

bitpoke bitpoke 1.8.19

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
gcr.io/press-labs-public/dashboard :1.8.19	b88f88070fb0	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

2,336

baserowblackbird-cloud

1.0.17

1 of 6 See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
baserow/backend :1.31.1	e0b3c8130b91	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

10,225

blackduck-alertblackduck

8.4.0

3 of 4 See more

blackduck-alert blackduck 8.4.0

3 of the 4 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
blackducksoftware/blackduck-alert :8.4.0	90cca32de2cc	openssl@3.5.6-r0	3.5.7-r0
blackducksoftware/blackduck-alert-db :8.4.0	6310fac39d53	openssl@3.5.6-r0	3.5.7-r0
blackducksoftware/blackduck-alert-rabbitmq :8.4.0	8f422b18d171	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

4,297

firehoseblip-firehose

0.0.18

1 of 11 See more

firehose blip-firehose 0.0.18

1 of the 11 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
obsidiandynamics/kafdrop :3.30.0	5337c9e0e2de	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

13,517

bnkrbnkr

1.0.5

1 of 2 See more

bnkr bnkr 1.0.5

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
engrmth/bnkr :2.1.0	6d8464e6f0e8	openssl@1.1.1f-1ubuntu2.13	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

15,302

istio-bookinfobookinfo

1.2.2

3 of 6 See more

istio-bookinfo bookinfo 1.2.2

3 of the 6 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
istio/examples-bookinfo-reviews-v1 :1.15.0	40e8aba77c1b	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm16
istio/examples-bookinfo-reviews-v2 :1.15.0	e86d247b7ac2	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm16
istio/examples-bookinfo-reviews-v3 :1.15.0	e454cab754cf	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

19,006

colosseumbook-k8sinfra-v2

1.0.18

4 of 5 See more

colosseum book-k8sinfra-v2 1.0.18

4 of the 5 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
sysnet4admin/colosseum-agg :log	bc25b152d88e	openssl@3.0.2-0ubuntu1.25	no fix listed
sysnet4admin/colosseum-cms :log	e74b43c7f492	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
sysnet4admin/colosseum-prm :log	5802bfcd7fed	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
sysnet4admin/colosseum-rwd :log	74ded2d92f07	openssl@3.5.1-1+deb13u1	3.5.6-1~deb13u2

Open the chart page →

27,215

csi-driver-nfsbook-k8sinfra-v2

4.12.1

1 of 6 See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

6,289

jaegerbook-k8sinfra-v2

3.4.0

2 of 5 See more

jaeger book-k8sinfra-v2 3.4.0

2 of the 5 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25
library/cassandra :3.11.6	5aa8400b4b3b	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

19,311

jenkinsbook-k8sinfra-v2

5.1.12

1 of 2 See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
jenkins/jenkins :2.440.3-jdk17	de4fea113221	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

8,339

flaresolverrbrandan-schmitz-helm-charts

1.4.0

1 of 1 See more

flaresolverr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
flaresolverr/flaresolverr :v3.5.0	139dfee1c6f8	openssl@3.0.20-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

27,554

overseerrbrandan-schmitz-helm-charts

1.4.0

1 of 1 See more

overseerr brandan-schmitz-helm-charts 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
linuxserver/overseerr :1.35.0	6108ed066d4a	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

3,072

pagesbrian-pages

1.0.0

2 of 3 See more

pages brian-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm4
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

20,242

pagesbrixton-mayuribhavsar23-pages

1.0.0

2 of 3 See more

pages brixton-mayuribhavsar23-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm4
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

20,242

pagesbrixton-pages

1.0.0

2 of 3 See more

pages brixton-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm4
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

20,242

ombibryanalves

0.4.0

1 of 1 See more

ombi bryanalves 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
linuxserver/ombi :3.0.4572-ls45	2fbb21fb4903	openssl@1.1.0g-2ubuntu4.3 openssl1.0@1.0.2n-1ubuntu5.3	1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5

Open the chart page →

10,785

plexbryanalves

0.5.0

1 of 1 See more

plex bryanalves 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
plexinc/pms-docker :1.25.4.5487-648a8f9f9	46ea59b96f2b	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

6,749

node-appbryopsida

0.5.1

1 of 2 See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11

Open the chart page →

14,513

syslog-portalbryopsida

0.3.1

1 of 1 See more

syslog-portal bryopsida 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/syslog-portal :main	3947bfd04f49	openssl@3.5.0-r0	3.5.7-r0

Open the chart page →

1,307

category-microservicebusi-ads

1.0.0

1 of 2 See more

category-microservice busi-ads 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
dellcloud/category :distributed	02fc234353a9	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

11,958

mariadbbysamio

1.0.2

1 of 1 See more

mariadb bysamio 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/mariadb :12.0.2	607835cd628b	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11

Open the chart page →

2,948

caddycaddy

0.0.4

1 of 1 See more

caddy caddy 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/caddy :2.11.2-alpine	834468128c76	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,684

kafkacagriekin

0.2.0

1 of 2 See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
apache/kafka :4.1.0	bff074a5d005	openssl@3.5.2-r0	3.5.7-r0

Open the chart page →

2,399

ct-singlecalltelemetry

0.8.4

1 of 7 See more

ct-single calltelemetry 0.8.4

1 of the 7 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
calltelemetry/web :0.8.1-rc72	05d13269e350	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

10,661

pagescamden-pages

1.0.0

2 of 3 See more

pages camden-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm4
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

20,242

camellia-redis-proxycamellia-redis-proxy

1.4.0

1 of 2 See more

camellia-redis-proxy camellia-redis-proxy 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
48n6e/camellia-redis-proxy :1.4.0-jdk-21-0.0.1	a6ed886fddfc	openssl@3.0.9-1	3.0.20-1~deb12u2

Open the chart page →

8,024

geoservercamptocamp2

0.0.3

7 of 12 See more

geoserver camptocamp2 0.0.3

7 of the 12 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC2	ca58b74529cd	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-rest :1.0-RC2	5dc0c93a1710	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-wcs :1.0-RC2	47ae1bdb4bcc	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-webui :1.0-RC2	28c3e5a8c5a3	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-wfs :1.0-RC2	8c70ee06d5ab	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-wms :1.0-RC2	42775ba6a4da	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
library/postgres :12	2f2a8c2a7d10	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

88,618

httpd-ldapauth-proxycamptocamp3

1.0.2

1 of 1 See more

httpd-ldapauth-proxy camptocamp3 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/httpd :2.4.63	1ae8051591a5	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

3,334

nginx-s3-gatewaycamptocamp3

1.0.0

1 of 1 See more

nginx-s3-gateway camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss-20250331	3db8145349a3	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

5,062

prometheus-puppetdb-sdcamptocamp3

8.0.2

1 of 2 See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
puppet/puppet-agent :7.14.0	0b6fd9a6b7da	openssl@1.1.1-1ubuntu2.1~18.04.15	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

6,153

Container images carrying it

2,434 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
speckle/speckle-webhook-service :2.17.14-branch.testing.72707.921a5f8	99913052b72e	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
speckle/speckle-webhook-service :2.26.3	c58eb372c488	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
speckle/speckle-webhook-service :2.20.6-branch.testing1.154030-9b09114	cf1d99bad89a	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
speckle/speckle-webhook-service :2.25.10-branch.testing6.645-b125c1e	dd9db6cbe9bb	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
spy86/rabbitmq-stomp :latest	ea649101b9fb	openssl@1.1.1f-1ubuntu2.17	1.1.1f-1ubuntu2.24+esm4	1
stackstorm/st2actionrunner :3.8	88235ba70cad	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4	1
stackstorm/st2api :3.8	6f56d239d280	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4	1
stackstorm/st2auth :3.8	33ecfda16608	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4	1
stackstorm/st2garbagecollector :3.8	4e3f8c7ca52d	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4	1
stackstorm/st2notifier :3.8	f190a6212195	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4	1
stackstorm/st2rulesengine :3.8	259503496ff9	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4	1
stackstorm/st2scheduler :3.8	b1de2055c362	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4	1
stackstorm/st2sensorcontainer :3.8	b1a338f64773	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4	1
stackstorm/st2stream :3.8	1c8904a3bf67	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4	1
stackstorm/st2timersengine :3.8	1bf35bfaf00c	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4	1
stackstorm/st2web :3.8	09989a26c8b7	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4	1
stackstorm/st2workflowengine :3.8	19fdfffdbba8	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4	1
stalwartlabs/stalwart :v0.15.5	dcf575db2d53	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2	1
stashapp/stash :latest	24dbd7607174	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm4	1
stashapp/stash :v0.31.1	df744af5a0c9	openssl@3.5.5-r0	3.5.7-r0	1
stashapp/stash-box :latest	a534c8afdf39	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
statcan/ckan :2.9	3921305425b8	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm4	1
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm4	1
structurizr/onpremises :2025.11.09	4b5ffb5119c8	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
substratusai/verba :v0.4.0-baseURL2	61695be635eb	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
supabase/edge-runtime :v1.74.0	2781daf92394	openssl@3.0.19-1~deb12u2	3.0.20-1~deb12u2	1
supabase/edge-runtime :v1.59.0	eff9c554d649	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
supabase/gotrue :v2.189.0	385184459f57	openssl@3.5.6-r0	3.5.7-r0	1
supabase/postgres :17.6.1.136	f371b5f3f2ac	openssl@3.5.6-r0	3.5.7-r0	1
supabase/postgres-meta :v0.96.6	a84cc713585e	openssl@3.0.19-1~deb12u2	3.0.20-1~deb12u2	1
supabase/postgres-meta :v0.84.2	d0a96973e9f1	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
supabase/realtime :v2.102.3	aa1c92c0cf32	openssl@3.0.20-1~deb12u1	3.0.20-1~deb12u2	1
supabase/realtime :v2.33.8	d207e6e23ad3	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
supabase/storage-api :v1.60.4	c8eb9858eafe	openssl@3.5.6-r0	3.5.7-r0	1
supabase/studio :20241021-9f9b083	26d8070c55e9	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
svtechnmaa/svtech_debuger :v1.0.3	a934ffd63d25	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25	1
svtechnmaa/svtech_grafana :v1.2.2	1d71314424aa	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm4	1
svtechnmaa/svtech_maxscale :v1.0.3	410a25b51f9f	openssl@3.0.2-0ubuntu1.13	3.0.2-0ubuntu1.25	1
svtechnmaa/svtech_nagvis :v1.2.1	18394b08e6c3	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	openssl@1.1.1f-1ubuntu2.19	1.1.1f-1ubuntu2.24+esm4	1
syepes/network_exporter :1.8.0	00af1691570e	openssl@3.5.1-r0	3.5.7-r0	1
syncthing/syncthing :2.1.0	7c60eb0ec887	openssl@3.5.6-r0	3.5.7-r0	1
sysadminsmedia/homebox :0.26.0	56e880b62309	openssl@3.5.6-r0	3.5.7-r0	1
sysnet4admin/colosseum-agg :log	bc25b152d88e	openssl@3.0.2-0ubuntu1.25	no fix listed	1
sysnet4admin/colosseum-cms :log	e74b43c7f492	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
sysnet4admin/colosseum-prm :log	5802bfcd7fed	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
sysnet4admin/colosseum-rwd :log	74ded2d92f07	openssl@3.5.1-1+deb13u1	3.5.6-1~deb13u2	1
tailscale/tailscale :v1.96.5	dbeff02d2337	openssl@3.5.5-r0	3.5.7-r0	1
teknas09/bird-pod :latest	12a1fa85c4aa	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
temporalio/admin-tools :1.29.1-tctl-1.18.4-cli-1.5.0	a3a52e6ca122	openssl@3.5.0-r0	3.5.7-r0	1