CVE-2026-9076

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,211; of 17,792 indexed, latest versions
Container images: 2,413; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-9076 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 2,211 of 17,792 indexed charts deploy, on 2,413 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+103 more	1.0.1f-1ubuntu2.27+esm14, 1.0.2g-1ubuntu4.20+esm16, 1.1.1-1ubuntu2.1~18.04.23+esm9, 1.1.1f-1ubuntu2.24+esm4+6 more	1,780
opensslapk	3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more	3.5.7-r0, 3.6.3-r0	628
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm5	15
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3	3.3.7-3	5

OSV records: ALPINE-CVE-2026-9076 CGA-6mcp-mm5g-jxrj CGA-847w-c3x7-8qp6 DEBIAN-CVE-2026-9076 UBUNTU-CVE-2026-9076 AZL-89934
Also known as: CGA-6p96-39qh-rm77, CGA-f2mp-q84v-4jv2, USN-8414-1, USN-8414-2

Charts affected

2,211 by stars

Chart

Latest

Affected images

Radar Score

voice-biometricslumenvox

2.0.1

12 of 26 See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
lumenvox/cloud-assure-api :2.0.0	fcb9fb54a9fd	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-assure-identity :2.0.0	147854a3c916	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-audit :2.0.0	79428add7f38	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-binary-storage :2.0.0	53decadc102d	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-configuration :2.0.0	17fbce1a8bc6	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-deployment :2.0.0	ea8110886d38	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-engine-resource :2.0.0	e2e5abe27abc	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-management-api :2.0.0	b9a23345eabd	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-reporting :2.0.0	7a9ffdc2178a	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-reporting-api :2.0.0	dbbaf5462ad6	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-transaction :2.0.0	8b74f9d3ba09	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
lumenvox/cloud-voice-verifier :2.0.0	14170ad34903	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

71,268

dnsbl-exporterluzilla

0.5.0

1 of 2 See more

dnsbl-exporter luzilla 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/luzilla/unbound :v0.12.0	4fd8da9dc13c	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,147

drillmagasin-drill

0.9.0

1 of 3 See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
merlos/zookeeper :3.9.3	a38fc7e09ed7	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

5,752

magentomagento

3.2.3

2 of 12 See more

magento magento 3.2.3

2 of the 12 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/mariadb :10.4	22edfe1c7834	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm4
library/rabbitmq :4.1.0-management	935b3f84c1e4	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11

Open the chart page →

13,643

plane-enterprisemakeplane

3.7.2

1 of 13 See more

plane-enterprise makeplane 3.7.2

1 of the 13 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
valkey/valkey :7.2.11-alpine	10328d00120d	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

4,973

maptiler-servermaptiler

1.3.0

1 of 1 See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
maptiler/server :4.8.0	7e206140057b	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

3,017

Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacion

1.0.1

1 of 6 See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/mongo :4.2.3	58b25d51baa1	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

19,195

mcpmcp-charts

0.0.23

2 of 7 See more

mcp mcp-charts 0.0.23

2 of the 7 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/gla-rad/mc-mms-edgerouter :latest	3620d5680775	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2
ghcr.io/gla-rad/mc-mms-router :latest	032e977d9adf	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

7,025

jellyfinmedia-servarr

0.16.0

1 of 2 See more

jellyfin media-servarr 0.16.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.11	aefb67e6a7ff	openssl@3.5.6-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

2,775

metrics-server-exportermetrics-server-exporter

2.4.0

1 of 1 See more

metrics-server-exporter metrics-server-exporter 2.4.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
mrnim94/metrics-server-exporter :v2.4.0	86c4807a4bca	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,273

mw-kube-agent-v2middleware-labs

2.8.6

1 of 1 See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/middleware-labs/mw-kube-agent :1.12.0	9c7bc0f9bb35	openssl@3.0.13-0ubuntu3.4	3.0.13-0ubuntu3.11

Open the chart page →

4,197

photoprismmmontes

0.14.0

1 of 1 See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
photoprism/photoprism :251130	db16ee6b1ba3	openssl@3.5.3-1ubuntu2	3.5.3-1ubuntu3.4

Open the chart page →

11,109

model-manager-loadermodel-manager-loader

1.27.0

1 of 1 See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader :1.27.0	26ac7263a823	openssl@3.5.1-1	3.5.6-1~deb13u2

Open the chart page →

2,710

food-managermoreillon

0.5.0

1 of 2 See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
moreillon/food-manager :latest	e8fd856e593d	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

13,812

n8nn8n-helm

2.25.7

1 of 1 See more

2,576

satisfactorynaj98

1.1.1

1 of 1 See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
wolveix/satisfactory-server :v1.9.1	199be1064b18	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25

Open the chart page →

3,732

surveyornats

0.20.9

1 of 1 See more

surveyor nats 0.20.9

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
natsio/nats-surveyor :0.9.9	104a3e938b23	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

909

clowder2ncsa

1.9.7

6 of 12 See more

clowder2 ncsa 1.9.7

6 of the 12 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
bitnamilegacy/os-shell :12-debian-12-r16	d24925821dd2	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
clowder/clowder2-backend :2.0.0-beta.4	11f3d844e4c0	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2
clowder/clowder2-frontend :2.0.0-beta.4	fe97882672ca	openssl@3.5.4-r0	3.5.7-r0
clowder/clowder2-heartbeat :2.0.0-beta.4	14155326c7b9	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2
clowder/clowder2-messages :2.0.0-beta.4	bf146f1ca24f	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2

Open the chart page →

37,504

node-provider-labelernode-provider-labeler

0.20.0

1 of 1 See more

node-provider-labeler node-provider-labeler 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/jossware/node-provider-labeler :v0.8.0	f80e85291439	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

1,105

helm-composenousefreak

0.1.3

1 of 2 See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/mariadb :10.8.2-focal	490f01279be1	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

14,363

octopuso7studios-octopus-helm-charts

1.2.3

3 of 5 See more

octopus o7studios-octopus-helm-charts 1.2.3

3 of the 5 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/nats :2.11.9-alpine	777787bbb4c7	openssl@3.5.1-r0	3.5.7-r0
natsio/nats-box :0.18.0	abdc9f9f0120	openssl@3.5.0-r0	3.5.7-r0
natsio/nats-server-config-reloader :0.19.1	81edf32a3680	openssl@3.5.1-r0	3.5.7-r0

Open the chart page →

6,120

oadaoada

5.0.6

10 See more

oada oada 5.0.6

10 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
oada/auth :4.0.0	c0d077e79ef4	openssl@3.5.1-r0	3.5.7-r0
oada/http-handler :4.0.0	d87efe8ba4b0	openssl@3.5.1-r0	3.5.7-r0
oada/rev-graph-update :4.0.0	ebc8343f05ff	openssl@3.5.1-r0	3.5.7-r0
oada/shares :4.0.0	c6ffb4e8ed63	openssl@3.5.1-r0	3.5.7-r0
oada/startup :4.0.0	fc09495e2f3c	openssl@3.5.1-r0	3.5.7-r0
oada/sync-handler :4.0.0	b7a2cfc137cf	openssl@3.5.1-r0	3.5.7-r0
oada/users :4.0.0	b6c562fa5b1b	openssl@3.5.1-r0	3.5.7-r0
oada/webhooks :4.0.0	6590c60de347	openssl@3.5.1-r0	3.5.7-r0
oada/well-known :4.0.0	7943fde43b19	openssl@3.5.1-r0	3.5.7-r0
oada/write-handler :4.0.0	8464c7f48aae	openssl@3.5.1-r0	3.5.7-r0

Open the chart page →

—

nginx-s3olopost

0.2.1

1 of 1 See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss	3db8145349a3	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

5,062

opencatalogiopencatalogi

1.0.6

2 of 8 See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/conductionnl/gateway-ui :stag	6a5594b7b32c	openssl@3.0.9-1	3.0.20-1~deb12u2
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

14,884

dhcp-serveropencord

1.0.2

1 of 1 See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
networkboot/dhcpd :latest	e99bbfbd6fb2	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.25

Open the chart page →

4,208

openrouter-botopenrouter-bot

0.2.0

1 of 1 See more

openrouter-bot openrouter-bot 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
lifailon/openrouter-bot :latest	ea37e4b6b952	openssl@3.5.1-r0	3.5.7-r0

Open the chart page →

1,059

librechatopenshift

1.9.0

2 of 3 See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/mongo :8.0.20	098862b1339f	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

5,849

opentelemetry-demoopentelemetry-helm

0.41.2

9 of 34 See more

opentelemetry-demo opentelemetry-helm 0.41.2

9 of the 34 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger :2.19.0	ede4864215be	openssl@3.5.6-r0	3.5.7-r0
ghcr.io/open-telemetry/demo :3.0.0-frontend-proxy	1c53bfb59697	openssl@3.0.2-0ubuntu1.25	no fix listed
ghcr.io/open-telemetry/demo :3.0.0-cart	3f89a444250a	openssl@3.5.6-r0	3.5.7-r0
ghcr.io/open-telemetry/demo :3.0.0-image-provider	93e1585e97ac	openssl@3.5.4-r0	3.5.7-r0
ghcr.io/open-telemetry/demo :3.0.0-load-generator	cd12cb42fb15	openssl@3.5.6-r0	3.5.7-r0
ghcr.io/open-telemetry/demo :3.0.0-payment	d498c7434d22	openssl@3.0.18-1~deb12u2	3.0.20-1~deb12u2
ghcr.io/open-telemetry/demo :3.0.0-email	d674d4081ca4	openssl@3.5.6-r0	3.5.7-r0
ghcr.io/open-telemetry/demo :3.0.0-ad	e6c593fe75eb	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11
quay.io/kiwigrid/k8s-sidecar :2.8.1	abb55b2165c6	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

22,916

openvaultopenvault

0.8.1

2 of 2 See more

openvault openvault 0.8.1

2 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/wgbh-mla/ov-frontend :v1.1.0	bfc3118f6565	openssl@3.5.0-r0	3.5.7-r0
ghcr.io/wgbh-mla/ov-wag :v1.1.0	6df27f944fe8	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

6,936

opikopik

2.2.66

3 See more

opik opik 2.2.66

3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
alpine/kubectl :1.35.0	862d86046bbc	openssl@3.5.5-r0	3.5.7-r0
library/zookeeper :3.9.4	dfa9ba46d14b	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.25
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25

Open the chart page →

—

opsops

1.2.0

2 of 2 See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
shaowenchen/ops-controller-manager :latest	26da43bb5b66	openssl@3.0.2-0ubuntu1.25	no fix listed
shaowenchen/ops-server :latest	315444f703f4	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25

Open the chart page →

9,101

palworldpalworld-server-chart

2.7.1

1 of 1 See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
thijsvanloef/palworld-server-docker :v2.7.1	401d3eb5c053	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2

Open the chart page →

3,715

prowlarrpanzer1119

0.4.18

1 of 2 See more

prowlarr panzer1119 0.4.18

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
linuxserver/prowlarr :2.4.0.5397-ls149	a46d0ce0a823	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,001

radarrpanzer1119

0.2.2

1 of 1 See more

radarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/radarr :6.0.4.10291-ls289	6c0948b42c14	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

950

sonarrpanzer1119

0.2.2

1 of 1 See more

sonarr panzer1119 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/sonarr :4.0.16.2944-ls300	8b9f2138ec50	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

948

paperless-ngxpaperless

0.4.0

1 of 3 See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresqldigest-pinned	926356130b77	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

8,553

uptime-kumapascaliske

3.0.0

1 of 1 See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.0.2-slim-rootless	9865163f92c1	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2

Open the chart page →

6,918

patchworkpatchwork

0.8.6

1 of 2 See more

patchwork patchwork 0.8.6

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/patchwork :main	c01e018bced4	openssl@3.5.0-r0	3.5.7-r0

Open the chart page →

2,084

pbuf-registrypbuf-registry

0.4.1

1 of 2 See more

pbuf-registry pbuf-registry 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/pbufio/registry :v0.4.1	77a36c035b4b	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

1,948

fahclientpcktdmp

2.6.0

1 of 2 See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
foldingathome/fah-gpu :latest	5ef7742d1eb4	openssl@1.1.1-1ubuntu2.1~18.04.13	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

4,735

peertubepeertube

0.1.3

1 of 1 See more

peertube peertube 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
chocobozzz/peertube :v8.1.5	052712130691	openssl@3.5.6-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

7,128

periscopeperiscope

1.1.6

1 of 1 See more

periscope periscope 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/gnana997/periscope :1.1.6	21b284fb00f2	openssl@3.0.20-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

825

spring-boot-api-apppiomin

0.3.11

1 of 1 See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.25

Open the chart page →

7,622

portraitportrait

0.2.13

2 of 8 See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/elasticsearch :7.17.0	332c6d416808	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4
treskon/portrait-web-setup :DEV-latest	a475d80e4ecf	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

32,033

readarrpree-helm-charts

1.17.1

1 of 1 See more

readarr pree-helm-charts 1.17.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/readarr :0.4.18.2805	8f7551205fbd	openssl@3.5.0-r0	3.5.7-r0

Open the chart page →

1,099

preparrpreparr

0.19.7

1 of 6 See more

preparr preparr 0.19.7

1 of the 6 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/robbeverhelst/preparr :latest	9acc172942f3	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,126

privacyideaprivacyidea

1.0.6

2 of 2 See more

privacyidea privacyidea 1.0.6

2 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
gpappsoft/privacyidea-docker :3.12.2	af7841adad26	openssl@3.6.0-r4	3.6.3-r0
library/mariadb :11.7.2	fcc7fcd7114a	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11

Open the chart page →

5,490

prowlerprowler-app

0.0.9

1 of 5 See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/neo4j :2026.02.2	5ab4ab0358cf	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

8,269

psa-restricted-patcherpsa-restricted-patcher

0.10.1

1 of 1 See more

psa-restricted-patcher psa-restricted-patcher 0.10.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/bryopsida/psa-restricted-patcher :main	a53ef16b024a	openssl@3.5.1-r0	3.5.7-r0

Open the chart page →

1,402

pzserverpzserver

0.1.17

1 of 2 See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
lis314/project-zomboid-docker :latest	aa2089c37920	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

3,224

Container images carrying it

2,413 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/zoriya/kyoo_back :4.7.1	416e980f76a6	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/zoriya/kyoo_migrations :4.7.1	f7e607f24071	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress :1.6.0	bccaa701e2df	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm4	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	openssl@1.1.1-1ubuntu2.1~18.04.23 openssl1.0@1.0.2n-1ubuntu5.13	1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	openssl@1.1.1f-1ubuntu2.12	1.1.1f-1ubuntu2.24+esm4	1
mcr.microsoft.com/mssql/server :2022-latest	ba4c8329f48f	openssl@3.0.2-0ubuntu1.25	no fix listed	1
mcr.microsoft.com/mssql/server :2025-CU5-ubuntu-24.04	cee0f4db03b5	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11	1
mcr.microsoft.com/mssql/server :2017-latest	fbf79e0fea59	openssl@1.1.1-1ubuntu2.1~18.04.23 openssl1.0@1.0.2n-1ubuntu5.13	1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-provisioner :v5.2.0	afdfa3da79df	openssl@3.3.5-1.azl3	3.3.7-3	1
mcr.microsoft.com/oss/v2/kubernetes-csi/csi-resizer :v1.13.2	fa8eba9843ff	openssl@3.3.5-3.azl3	3.3.7-3	1
mcr.microsoft.com/oss/v2/kubernetes-csi/livenessprobe :v2.15.0	59b9d0348428	openssl@3.3.5-3.azl3	3.3.7-3	1
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver :v1.5.6	5f91243cfd60	openssl@3.3.5-5.azl3	3.3.7-3	1
mcr.microsoft.com/oss/v2/kubernetes-csi/secrets-store/driver-crds :v1.5.6	cb0112636dc4	openssl@3.3.5-5.azl3	3.3.7-3	1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.74.4_local	1ed844ecab29	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11	1
public.ecr.aws/aktosecurity/akto-puppeteer-replay :1.49.4_latest	f1c5763d565e	openssl@3.5.6-r0	3.5.7-r0	1
public.ecr.aws/aktosecurity/mirror-api-logging :k8s_ebpf_core_imp	d94ce715f051	openssl@3.5.5-r0	3.5.7-r0	1
public.ecr.aws/aktosecurity/redis	47200b041382	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	1
public.ecr.aws/aktosecurity/redis :latestV8.6.2	832d7785830f	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	1
public.ecr.aws/buildkite/agent-metrics :v5.11.0	16e7f5c7161e	openssl@3.5.1-r0	3.5.7-r0	1
public.ecr.aws/datadog/agent :7.73.0	f4925b15ce94	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11	1
public.ecr.aws/decisiveai/valkey :9.0.1	59c7e728fb3a	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2	1
public.ecr.aws/groundcovercom/grafana-groundcover :v0.0.54-grafana11.3.7	ee9d973e3952	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25	1
public.ecr.aws/jtekt-corporation/image-storage-service :v1.16.17	b1493760c716	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/jtekt-corporation/image-storage-service-gui :v1.9.4	34823c8abe00	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/jtekt-corporation/shinsei-manager :v2.8.1	5cd62142d6ed	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/jtekt-corporation/shinsei-manager-front :v1.5.5	f8fb4eea4071	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/k2x0t8t6/kubeadapt/app/kubeadapt-k8s-pulse :v3.0.1	dc5a516c2333	openssl@3.0.19-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/k6v9y5g3/cluster-agent :master.575	36d051110158	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
public.ecr.aws/k6v9y5g3/cluster-agent :cost_k8s_process.576	9e14a72b066d	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/outerbounds/metaflow_metadata_service :v2.4.13	f7567ce3419d	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
public.ecr.aws/spotinst/spot-network-client :1.0.14	86380a01587d	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
public.ecr.aws/spotinst/spot-network-client :1.0.0-8-lb_endpoint-d0ec127	efcecf98b912	openssl@1.1.1-1ubuntu2.1~18.04.20	1.1.1-1ubuntu2.1~18.04.23+esm9	1
public.ecr.aws/supportpal/helpdesk-monolithic :4.0.4	573779e57fae	openssl@1.1.1f-1ubuntu2.3	1.1.1f-1ubuntu2.24+esm4	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
public.ecr.aws/truefoundrycloud/timberio/vector :v0.50.0	5833723de9e4	openssl@3.5.4-r0	3.5.7-r0	1
public.ecr.aws/zinclabs/openobserve :v0.8.1	27f8de509169	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
quay.io/aerokube/jumphost :1.0.1	70fd7c00418d	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25	1
quay.io/aerokube/keygen :1.0.1	578934444f04	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.25	1
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25	1
quay.io/argoprojlabs/argocd-image-updater :v1.2.1	3c56f354fac5	openssl@3.5.6-r0	3.5.7-r0	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	openssl@3.0.2-0ubuntu1.13	3.0.2-0ubuntu1.25	1
quay.io/cilium/cilium :v1.18.2	858f807ea4e2	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
quay.io/cilium/cilium :v1.17.14	cdcfab5b4466	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1