CVE-2026-9076

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,211; of 17,792 indexed, latest versions
Container images: 2,413; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-9076 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 2,211 of 17,792 indexed charts deploy, on 2,413 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+103 more	1.0.1f-1ubuntu2.27+esm14, 1.0.2g-1ubuntu4.20+esm16, 1.1.1-1ubuntu2.1~18.04.23+esm9, 1.1.1f-1ubuntu2.24+esm4+6 more	1,780
opensslapk	3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more	3.5.7-r0, 3.6.3-r0	628
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm5	15
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3	3.3.7-3	5

OSV records: ALPINE-CVE-2026-9076 CGA-6mcp-mm5g-jxrj CGA-847w-c3x7-8qp6 DEBIAN-CVE-2026-9076 UBUNTU-CVE-2026-9076 AZL-89934
Also known as: CGA-6p96-39qh-rm77, CGA-f2mp-q84v-4jv2, USN-8414-1, USN-8414-2

Charts affected

2,211 by stars

Chart

Latest

Affected images

Radar Score

sn-platformstreamnative

1.11.44

1 of 9 See more

sn-platform streamnative 1.11.44

1 of the 9 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

15,564

repmanszpadel-charts

3.52.17

1 of 3 See more

repman szpadel-charts 3.52.17

1 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/nginx :1.27.3	fb197595ebe7	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

7,075

pocketbasetechwolf12

0.29.3

1 of 1 See more

pocketbase techwolf12 0.29.3

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/techwolf12/pocketbase :0.29.3	106099641679	openssl@3.5.1-r0	3.5.7-r0

Open the chart page →

1,448

mealieth-charts

0.5.1

1 of 1 See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/mealie-recipes/mealie :v3.7.0	bb2939094eed	openssl@3.5.1-1	3.5.6-1~deb13u2

Open the chart page →

3,827

feedbacksystemthm-mni-ii

0.47.1

4 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

4 of the 10 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
thmmniii/fbs-collab :v1.27.1	5d389e3c5ce6	openssl@3.5.1-r0	3.5.7-r0
thmmniii/fbs-core :v1.27.1	5438517d9fc2	openssl@3.0.2-0ubuntu1.6	3.0.2-0ubuntu1.25
thmmniii/fbs-qcm-backend :v1.27.1	afbe511e5c24	openssl@3.5.1-r0	3.5.7-r0
thmmniii/fbs-qcm-frontend :v1.27.1	a347f7f4d144	openssl@3.5.1-r0	3.5.7-r0

Open the chart page →

28,634

argocdtwomartens

0.1.1

1 of 3 See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
quay.io/argoproj/argocd :v2.8.6	acaf37352569	openssl@3.0.2-0ubuntu1.12	3.0.2-0ubuntu1.25

Open the chart page →

10,373

uptraceuptrace

2.0.2

1 of 2 See more

uptrace uptrace 2.0.2

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
uptrace/uptrace :2.0.2	34a02c3b2d12	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

1,627

huginnutkuozdemir

2.2.1

1 of 4 See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
huginn/huginn-single-process :4d17829cf6b15b004ad3f4be196303dca4944810	c794eddc7b47	openssl@1.1.1-1ubuntu2.1~18.04.8	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

18,177

vaultvault

1.22.0

3 of 4 See more

vault vault 1.22.0

3 of the 4 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.5	d870622d0040	openssl@3.5.5-r0	3.5.7-r0
hashicorp/vault :2.0.1	755355002715	openssl@3.5.6-r0	3.5.7-r0
ghcr.io/bank-vaults/bank-vaults :v1.33.1	98b6ea2ed319	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

4,266

structurizrvirtualroot

0.5.0

1 of 1 See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
structurizr/onpremises :2025.11.09	4b5ffb5119c8	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11

Open the chart page →

4,418

api-firewallwallarm

0.9.6

1 of 1 See more

api-firewall wallarm 0.9.6

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
wallarm/api-firewall :v0.9.6	4d45db0ff240	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

1,000

argo-cdwenerme

10.9.1

1 of 3 See more

argo-cd wenerme 10.9.1

1 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/dexidp/dex :v2.45.1	8499afd690c4	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

3,003

wgerwger

1.0.0

1 of 8 See more

wger wger 1.0.0

1 of the 8 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
wger/server :2.6	997ead43aabd	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11

Open the chart page →

8,634

zeroclawzeroclaw

0.2.1

1 of 2 See more

zeroclaw zeroclaw 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/zeroclaw-labs/zeroclaw :v0.1.7	497893753e16	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2

Open the chart page →

794

paperless-ngxadnoctem

0.4.2

1 of 5 See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
apache/tika :2.9.0.0	92d055a84e9e	openssl@3.0.2-0ubuntu1.10	3.0.2-0ubuntu1.25

Open the chart page →

19,828

github-actions-runneradwerx

0.10.3

1 of 1 See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
adwerx/github-actions-runner :2.276.1-20.04-1	840d2b078682	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

13,671

agentareaagentarea

0.0.18

2 of 16 See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
temporalio/auto-setup :1.29.1	5b3502a3b685	openssl@3.5.0-r0	3.5.7-r0
valkey/valkey :9.0.1	546304417fea	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

15,049

akeyless-api-gatewayakeyless-services-helm

1.62.24

1 See more

akeyless-api-gateway akeyless-services-helm 1.62.24

1 container image this version deploys carries CVE-2026-9076.

Container image	Digest	Package	Fixed in
akeyless/base :latest	759e4289fae8	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11

Open the chart page →

—

icat-k8salba-helm-charts

1.1.0

2 of 4 See more

icat-k8s alba-helm-charts 1.1.0

2 of the 4 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
curlimages/curl :8.18.0	d94d07ba9e7d	openssl@3.5.4-r0	3.5.7-r0
payara/server-full :7.2026.2-jdk25	31f1253f0cf8	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.25

Open the chart page →

3,746

jellyfinalekc

0.9.0

1 of 1 See more

jellyfin alekc 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
jellyfin/jellyfin :10.11.11	aefb67e6a7ff	openssl@3.5.6-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

2,626

paperless-ngxalexmorbo-paperless-ngx

0.2.0

2 of 2 See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

2 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
valkey/valkey :9.0.2	930b41430fb7	openssl@3.5.4-1~deb13u2	3.5.6-1~deb13u2
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

12,092

clearml-agentallegroai

5.3.3

1 of 1 See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
allegroai/clearml-agent-k8s-base :1.24-21	772827a01bb5	openssl@1.1.1-1ubuntu2.1~18.04.19 openssl1.0@1.0.2n-1ubuntu5.10	1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5

Open the chart page →

12,081

mariadbalphani-helm-charts

10.10.3

1 of 1 See more

mariadb alphani-helm-charts 10.10.3

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/mariadb :10.10.2	bfc25a68e113	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25

Open the chart page →

8,387

upcloud-csiankra-charts

0.4.0

2 of 8 See more

upcloud-csi ankra-charts 0.4.0

2 of the 8 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.13	7a319b15cfc9	openssl@3.5.1-r0	3.5.7-r0
ghcr.io/upcloudltd/upcloud-csidigest-pinned	5af91c663788	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

14,969

alazanteon

0.12.0

1 of 1 See more

alaz anteon 0.12.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ddosify/alaz :v0.12.0	ea602056d9ce	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

3,395

anteonanteon

2.6.4

2 of 13 See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ddosify/selfhosted_backend :3.2.9	3c11e3182652	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2
ddosify/selfhosted_hammermanager :2.0.2	b796b8c73011	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

22,304

apache-rangerapache-ranger

0.1.0

1 of 2 See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
apache/ranger :2.7.0	76c176e8a0e4	openssl@3.0.2-0ubuntu1.19	3.0.2-0ubuntu1.25

Open the chart page →

7,794

scannerappscode

2026.1.15

2 of 3 See more

scanner appscode 2026.1.15

2 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/scanner :v0.0.21	16907aae5de1	openssl@3.5.4-r0	3.5.7-r0
ghcr.io/appscode/trivydb :0.0.3	67ffb0309acb	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

5,315

argocd-backup-s3argocd-backup-s3

0.9.5

1 of 1 See more

argocd-backup-s3 argocd-backup-s3 0.9.5

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/oguzhan-yilmaz/argocd-backup-s3 :latest	b61c750ade19	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2

Open the chart page →

5,249

arvancloud-webhookarvancloud-webhook

1.0.0

1 of 1 See more

arvancloud-webhook arvancloud-webhook 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/parmincloud/arvancloud-certmanager-issuer :v1.0.0	0b97452674a3	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2

Open the chart page →

2,327

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

1 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-cas :latest	6a107f224c34	openssl@1.1.1f-1ubuntu2.20	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

17,951

dltbrokerassist-iot-distributed-broker

0.2.0

3 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :latest	a70b6ba64a08	openssl@3.0.2-0ubuntu1.25	no fix listed
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm16
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

77,883

dltloggingassist-iot-logging-auditing

0.2.0

3 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

3 of the 9 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
hyperledger/fabric-ca :latest	a70b6ba64a08	openssl@3.0.2-0ubuntu1.25	no fix listed
hyperledger/fabric-ca-tools :latest	4ce6f43ded2e	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm16
hyperledger/fabric-couchdb :0.4.15	f6c724592abf	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

77,863

astradnsastradns

0.2.9

1 of 2 See more

astradns astradns 0.2.9

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/astradns/astradns-agent :v0.2.9-unbound	6ba69487f1b0	openssl@3.0.18-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

2,649

cso-proxyav1o-charts

0.1.3

1 of 1 See more

cso-proxy av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/djcass44/cso-proxy :cccf49fd	b360d44125ad	openssl@1.1.1-1ubuntu2.1~18.04.14	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

4,308

kube-image-webhookav1o-charts

0.1.3

1 of 1 See more

kube-image-webhook av1o-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

3,731

seerrbdclark-helm-charts

0.1.5

1 of 1 See more

seerr bdclark-helm-charts 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/seerr-team/seerr :v3.4.1	f4768de5f616	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,991

open-elevationbeeinventor

0.1.0

1 of 2 See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
openelevation/open-elevation :latest	82fb21612e86	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

13,219

aramid-indexerbiatec-repo

3.9.0

1 of 5 See more

aramid-indexer biatec-repo 3.9.0

1 of the 5 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-follow-node :v4.3.0-stable	1ec63eca86b6	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11

Open the chart page →

13,544

aramid-participationbiatec-repo

4.4.1

1 of 1 See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-aramidmain-extended :4.4.1-stable	f12ce1cfb72e	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25

Open the chart page →

7,246

aramid-relaybiatec-repo

4.4.1

1 of 1 See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
scholtz2/aramid-algo-node :v4.4.1-stable	70263d8fab5b	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11

Open the chart page →

5,117

voimain-participationbiatec-repo

4.4.1

1 of 1 See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
scholtz2/algorand-participation-voimain-extended :4.4.1-stable	64966de56d9f	openssl@3.0.2-0ubuntu1.18	3.0.2-0ubuntu1.25

Open the chart page →

7,246

self-hostbitwarden

2.4.1

1 of 11 See more

self-host bitwarden 2.4.1

1 of the 11 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2025-CU5-ubuntu-24.04	cee0f4db03b5	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11

Open the chart page →

5,269

syncthingbrandan-schmitz-helm-charts

2.1.0

1 of 1 See more

syncthing brandan-schmitz-helm-charts 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
syncthing/syncthing :2.1.1	775c4aac4862	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

1,230

brightdata-exporterbrightdata-charts

0.2.17

1 of 1 See more

brightdata-exporter brightdata-charts 0.2.17

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/danielgines/brightdata-exporter :0.2.17	6920d17cf6ff	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2

Open the chart page →

1,306

buildkite-agent-metricsbuildkite-agent-metrics

0.1.0

1 of 1 See more

buildkite-agent-metrics buildkite-agent-metrics 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
public.ecr.aws/buildkite/agent-metrics :v5.11.0	16e7f5c7161e	openssl@3.5.1-r0	3.5.7-r0

Open the chart page →

1,541

static-httpserverbyjg

0.2.0

1 of 1 See more

static-httpserver byjg 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
byjg/static-httpserver :latest	562cc8b9c40b	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

677

geoserver-cloudcamptocamp2

0.0.5

6 of 11 See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

84,710

geoserverCloudcamptocamp2

0.0.6

6 of 11 See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	openssl@1.1.1f-1ubuntu2.8	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

84,710

cbioportalcbioportal

1.1.0

1 of 1 See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11

Open the chart page →

3,745

Container images carrying it

2,413 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/cilium/cilium-envoy :v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be	60031f396695	openssl@3.0.13-0ubuntu3.7	3.0.13-0ubuntu3.11	1
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
quay.io/cilium/hubble-ui :v0.13.3	661d5de70501	openssl@3.5.2-r0	3.5.7-r0	1
quay.io/clustersecret/clustersecret :0.0.14	a9f835d1b241	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
quay.io/codefresh/redis :7.4.3-debian-12-r0	935f97598255	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2	1
quay.io/cortexproject/cortex :v1.21.1	8577eb292a01	openssl@3.5.6-r0	3.5.7-r0	1
quay.io/deployhub/ms-nginx :svccat-v11.0.815-g717581	d2d3400664e8	openssl@3.5.4-r0	3.5.7-r0	1
quay.io/deployhub/ms-ui :svccat-v11.0.815-g717581	f5dedbc31e6f	openssl@3.5.4-r0	3.5.7-r0	1
quay.io/enix/topomatik :1.3.1	d9f0bec83ef0	openssl@3.0.2-0ubuntu1.23	3.0.2-0ubuntu1.25	1
quay.io/enix/zfs-exporter :2.3.12	23b053f1cbd0	openssl@3.5.6-r0	3.5.7-r0	1
quay.io/evryfs/docker-mcrouter :0.40.0-9	a2d3a4c67b0f	openssl@1.1.1-1ubuntu2.1~18.04.20	1.1.1-1ubuntu2.1~18.04.23+esm9	1
quay.io/evryfs/spring-boot-admin :2.7.10	60950ef63764	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	openssl@3.0.2-0ubuntu1.7	3.0.2-0ubuntu1.25	1
quay.io/heubeck/examiner :1.14.6	1154472ff8c4	openssl@3.0.17-1~deb12u3	3.0.20-1~deb12u2	1
quay.io/jupyterhub/k8s-hub :4.3.5	113e372cf71b	openssl@3.0.19-1~deb12u2	3.0.20-1~deb12u2	1
quay.io/jupyterhub/k8s-hub :4.3.4	92f883d09270	openssl@3.0.19-1~deb12u2	3.0.20-1~deb12u2	1
quay.io/kiwigrid/k8s-sidecar :2.7.3	694950d736c8	openssl@3.5.6-r0	3.5.7-r0	1
quay.io/kiwigrid/k8s-sidecar :1.30.10	835d79d8fbae	openssl@3.5.1-r0	3.5.7-r0	1
quay.io/kiwigrid/k8s-sidecar :2.6.0	a6c101156d42	openssl@3.5.5-r0	3.5.7-r0	1
quay.io/kubevirt/aaq-operator :v1.7.0	d28a2daa5b15	openssl@3.5.1-r0	3.5.7-r0	1
quay.io/kubevirt/virt-operator :v1.7.0	37d2ef21e3e5	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
quay.io/kubevirt/virt-operator :v1.8.4	65d23c9ad917	openssl@3.0.18-1~deb12u2	3.0.20-1~deb12u2	1
quay.io/maxiv/pieeat :0.9.3	099715479210	openssl@3.5.6-1~deb13u1	3.5.6-1~deb13u2	1
quay.io/mittwald/kube-httpcache :stable	2169032c5840	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	openssl@1.0.2g-1ubuntu4.17	1.0.2g-1ubuntu4.20+esm16	1
quay.io/opsmxpublic/opa :opa-sidecar-v1.0	3dcbf3caa454	openssl@3.5.4-r0	3.5.7-r0	1
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	openssl@3.0.13-0ubuntu3.6	3.0.13-0ubuntu3.11	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm16	1
quay.io/opsmxpublic/ubi8-oes-datascience :isd-spin-2025.10.01-af26a30d4-202511261054	d8f66f4117fe	openssl@3.5.4-1~deb13u1	3.5.6-1~deb13u2	1
quay.io/opstree/fluent-bit :5.0.3	391eef5a68ff	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	1
quay.io/opstree/grafana :12.4.3	b61c1ed2f015	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	1
quay.io/opstree/k8s-sidecar :2.7.1	26aa9bb3386b	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	1
quay.io/opstree/k8s-sidecar :2.7.3	7075d455b219	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	1
quay.io/opstree/memcached :1.6.38-alpine3.22	cabbdfd2c3fe	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2	1
quay.io/ortelius/ms-compitem-crud :main-v10.0.1566-gf3f815	97b7f49eec76	openssl@3.6.0-r6	3.6.3-r0	1
quay.io/ortelius/ms-dep-pkg-r :main-v10.0.1705-g21b3dc	8a4150e94a45	openssl@3.6.0-r6	3.6.3-r0	1
quay.io/ortelius/ms-textfile-crud :main-v10.0.1635-g5076aa	f5c4c8adfc82	openssl@3.6.0-r6	3.6.3-r0	1
quay.io/ortelius/ms-validate-user :main-v10.0.1694-g98ed94	b5054bd4e97a	openssl@3.6.0-r6	3.6.3-r0	1
quay.io/reactiveops/rbac-manager :v1.9.5	87e3f461446f	openssl@3.5.4-r0	3.5.7-r0	1
quay.io/seamware/fdsc-dashboard :0.6.0	f7706c316c5a	openssl@3.5.6-r0	3.5.7-r0	1
quay.io/wraft/wraft-frontend :latest	f1bbbd5e9bb9	openssl@3.5.1-r0	3.5.7-r0	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	openssl@3.0.9-1	3.0.20-1~deb12u2	1
registry.gitlab.com/autokubeops/kube-image-webhook :v0.2.0	fcf464708a21	openssl@1.1.1-1ubuntu2.1~18.04.17	1.1.1-1ubuntu2.1~18.04.23+esm9	1
registry.gitlab.com/dyff/workflows-informer :0.4.4	bfbadc49635d	openssl@3.0.20-1~deb12u1	3.0.20-1~deb12u2	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	openssl@3.0.20-1~deb12u1	3.0.20-1~deb12u2	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq :3.12.14	5a9334f371f3	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
registry.gitlab.com/evolves-fr/s3-browser :0.4.1	c350c941fe7b	openssl@3.5.6-r0	3.5.7-r0	1
registry.gitlab.com/gitlab-org/ci-cd/gitlab-runner-pod-cleanup :latest	4369f3ba1d9a	openssl@3.5.6-r0	3.5.7-r0	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	openssl@1.1.1f-1ubuntu2.2	1.1.1f-1ubuntu2.24+esm4	1