CVE-2026-9076

High

Advisory

Published 9 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 2,220; of 17,790 indexed, latest versions
Container images: 2,434; deployed by those charts
Fix available: 4 of 5; affected packages

CVE-2026-9076 affecting package openssl for versions less than 3.3.7-3

Carried by container images the latest versions of 2,220 of 17,790 indexed charts deploy, on 2,434 images.

Affected package	Affected versions	Fixed in	Images
openssldeb	1.0.1f-1ubuntu2.5, 1.0.1f-1ubuntu2.8, 1.0.1f-1ubuntu2.25, 1.0.1f-1ubuntu2.27+103 more	1.0.1f-1ubuntu2.27+esm14, 1.0.2g-1ubuntu4.20+esm16, 1.1.1-1ubuntu2.1~18.04.23+esm9, 1.1.1f-1ubuntu2.24+esm4+6 more	1,792
opensslapk	3.2.0-r0, 3.3.1-r4, 3.3.2-r0, 3.3.2-r2+13 more	3.5.7-r0, 3.6.3-r0	637
nodejsdeb	4.2.6~dfsg-1ubuntu4.1, 7.10.1-2nodesource1~xenial1, 8.9.4-1nodesource1, 8.10.0~dfsg-2ubuntu0.4+8 more	no fix listed	16
openssl1.0deb	1.0.2n-1ubuntu5.3, 1.0.2n-1ubuntu5.4, 1.0.2n-1ubuntu5.6, 1.0.2n-1ubuntu5.10+2 more	1.0.2n-1ubuntu5.13+esm5	15
opensslrpm	3.3.5-1.azl3, 3.3.5-3.azl3, 3.3.5-5.azl3	3.3.7-3	5

OSV records: ALPINE-CVE-2026-9076 CGA-6mcp-mm5g-jxrj CGA-847w-c3x7-8qp6 DEBIAN-CVE-2026-9076 UBUNTU-CVE-2026-9076 AZL-89934
Also known as: CGA-6p96-39qh-rm77, CGA-f2mp-q84v-4jv2, USN-8414-1, USN-8414-2

Charts affected

2,220 by stars

Chart

Latest

Affected images

Radar Score

comac-cuopencord

0.1.1

1 of 4 See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	openssl@1.1.0g-2ubuntu4.1	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

8,056

comac-platformopencord

0.0.17

1 of 11 See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
omecproject/mcord-synchronizer :comac-1.0.0	cfdb566dd949	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

26,246

freeradiusopencord

1.0.4

1 of 1 See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

15,718

mcord-cdn-remoteopencord

0.1.6

2 of 2 See more

mcord-cdn-remote opencord 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm16
woojoong/wowza :latest	ec230db19652	openssl@1.1.0g-2ubuntu4.1	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

42,655

mcord-cdn-remote-freeopencord

0.1.3

1 of 1 See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
omecproject/cdn-video-repo :remote-v3	d59ccb138ffb	openssl@1.0.2g-1ubuntu4.14	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

29,156

mcord-control-planeopencord

0.2.2

2 of 5 See more

mcord-control-plane opencord 0.2.2

2 of the 5 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ngick8stesting/c3po-mme :mwca-mme-debug	8dd6dea45be4	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm16
ngick8stesting/c3po-mmeinit :latest	1e764eab77b4	openssl@1.1.0g-2ubuntu4.1	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

15,666

oaisimopencord

0.1.7

2 of 3 See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
omecproject/lte-softmodem :1.1.0	b5ddd36ec20c	openssl@1.1.1-1ubuntu2.1~18.04.6 openssl1.0@1.0.2n-1ubuntu5.4	1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5
omecproject/lte-uesoftmodem :1.1.0	686f8bc37d8c	openssl@1.1.1-1ubuntu2.1~18.04.9 openssl1.0@1.0.2n-1ubuntu5.6	1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5

Open the chart page →

14,556

omec-control-planeopencord

0.1.31

4 of 8 See more

omec-control-plane opencord 0.1.31

4 of the 8 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
omecproject/c3po-hss :master-latest	638671ef4842	openssl@1.0.2g-1ubuntu4.20	1.0.2g-1ubuntu4.20+esm16
omecproject/c3po-hssdb :master-latest	28a90cc26716	openssl@1.1.1f-1ubuntu2.4	1.1.1f-1ubuntu2.24+esm4
omecproject/mme-exporter :paging-latest	bcc5f19fd676	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9
omecproject/openmme :master-latest	64776cb9edb3	openssl@1.0.2g-1ubuntu4.17	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

40,825

onosopencord

3.0.2

1 of 1 See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
onosproject/onos :2.2.1	44914a8d4b3f	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

12,942

onos-progranopencord

1.2.7

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	nodejs@8.9.4-1nodesource1 openssl@1.0.2g-1ubuntu4.10	no fix listed 1.0.2g-1ubuntu4.20+esm16

Open the chart page →

38,902

ponsimv2opencord

1.2.3

1 of 2 See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
voltha/voltha-tester :1.7.0	655c3048a602	openssl@1.0.2g-1ubuntu4.15	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

12,626

sebaopencord

1.0.0

6 of 17 See more

seba opencord 1.0.0

6 of the 17 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
tpdock/freeradius :2.2.9	3da600c95a49	openssl@1.0.2g-1ubuntu4.9	1.0.2g-1ubuntu4.20+esm16
voltha/voltha-cli :1.6.0	c4e41e92f046	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm16
voltha/voltha-envoy :1.6.0	59ab2a00f712	openssl@1.0.1f-1ubuntu2.27	1.0.1f-1ubuntu2.27+esm14
voltha/voltha-netconf :1.6.0	37f80524c207	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm16
voltha/voltha-ofagent :1.6.0	9ee8c1f4428c	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm16
voltha/voltha-voltha :1.6.0	ff596b62de59	openssl@1.0.2g-1ubuntu4.13	1.0.2g-1ubuntu4.20+esm16

Open the chart page →

93,946

voltha-infraopencord

2.14.0

2 of 10 See more

voltha-infra opencord 2.14.0

2 of the 10 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
freeradius/freeradius-server :3.0.21	21c8bfa904d8	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9
voltha/voltha-onos :5.1.8	e038acb950d3	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

41,101

opencost-parquet-exporteropencost

0.3.1

1 of 1 See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

11,051

opencost-lensopencost-lens

1.0.0

1 of 2 See more

opencost-lens opencost-lens 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/opencost/opencost-ui :1.118.0	571f87e528ea	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

1,110

kafka-connectoropenfaas

0.7.15

1 of 1 See more

kafka-connector openfaas 0.7.15

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/kafka-connector :0.7.16	0e58eac0e2f7	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

1,164

pro-builderopenfaas

0.6.13

1 of 2 See more

pro-builder openfaas 0.6.13

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/pro-builder :0.6.0	6c17297f9098	openssl@3.5.0-r0	3.5.7-r0

Open the chart page →

2,745

queue-workeropenfaas

0.2.34

1 of 1 See more

queue-worker openfaas 0.2.34

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/openfaasltd/jetstream-queue-worker :0.5.10	e9245a0bca88	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

572

dokuopenlit

0.1.4

1 of 3 See more

doku openlit 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :latest	fa394da808cc	openssl@3.0.2-0ubuntu1.29	no fix listed

Open the chart page →

1,737

openlitopenlit

1.24.0

1 of 3 See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :24.4.1	2e6587b81a26	openssl@1.1.1f-1ubuntu2.22	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

5,068

openlit-operatoropenlit

0.2.2

1 of 1 See more

openlit-operator openlit 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/openlit/openlit-operator :0.0.2	457bb5ada68b	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

858

openobserveopenobserve

0.92.2

3 of 6 See more

openobserve openobserve 0.92.2

3 of the 6 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
natsio/nats-box :0.19.7	ffce8bd10338	openssl@3.5.6-r0	3.5.7-r0
natsio/nats-server-config-reloader :0.23.0	64cb6c858e79	openssl@3.5.5-r0	3.5.7-r0
natsio/prometheus-nats-exporter :0.20.1	4fbf6dacb847	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

3,166

openpanelopenpanel

0.9.0

1 of 6 See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
clickhouse/clickhouse-server :25.10.2.65	e019438e1e05	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.25

Open the chart page →

3,465

llm-stackopenproject-helm-charts

1.1.0

1 of 2 See more

llm-stack openproject-helm-charts 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
apache/apisix :3.16.0-ubuntu	5e47692cac00	openssl@3.0.13-0ubuntu3.9	3.0.13-0ubuntu3.11

Open the chart page →

1,992

kubedb-certifiedopenshift

2026.7.10

1 of 8 See more

kubedb-certified openshift 2026.7.10

1 of the 8 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/appscode/petset :v0.1.0	93fa0daf603c	openssl@3.5.6-r0	3.5.7-r0

Open the chart page →

4,145

mattermost-team-editionopenshift

6.6.83

1 of 4 See more

mattermost-team-edition openshift 6.6.83

1 of the 4 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
mattermost/mattermost-team-edition :10.11.2	b8bd1246cb3a	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

4,113

voyager-gatewayopenshift

2026.1.15

1 of 2 See more

voyager-gateway openshift 2026.1.15

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/voyagermesh/crd-manager :v0.1.0	13fd0cccafe8	openssl@3.0.18-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

2,645

open-vpnopenvpn

0.0.1

1 of 1 See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	openssl@1.1.1-1ubuntu2.1~18.04.6	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

15,602

openwhiskopenwhisk

1.0.0

1 of 10 See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
openwhisk/ow-utils :1.0.0	c80dba0de3aa	nodejs@8.10.0~dfsg-2ubuntu0.4 openssl@1.1.1-1ubuntu2.1~18.04.6 openssl1.0@1.0.2n-1ubuntu5.4	no fix listed 1.1.1-1ubuntu2.1~18.04.23+esm9 1.0.2n-1ubuntu5.13+esm5

Open the chart page →

36,252

kubernetes-syncopslevel

0.8.0

1 of 1 See more

kubernetes-sync opslevel 0.8.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
public.ecr.aws/opslevel/kubectl-opslevel :v2024.9.5	71697b5ff713	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

1,739

opslevelopslevel

2025.1.22

1 of 10 See more

opslevel opslevel 2025.1.22

1 of the 10 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
replicated/replicated-sdk :1.0.0-beta.31	8751b4963250	openssl@3.3.2-r2	3.6.3-r0

Open the chart page →

5,658

issuegenopsmx

1.0.2

1 of 1 See more

issuegen opsmx 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
opsmx11/issuegen :v2.1.0	5c50ca123d88	openssl@1.0.1f-1ubuntu2.25	1.0.1f-1ubuntu2.27+esm14

Open the chart page →

26,364

hiveopstty

0.1.9

1 of 4 See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :16	233f361c5819	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

4,550

grrosdfir-infrastructure

1.0.3

2 of 5 See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/mariadb :11.3.2	e101f9db3191	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

11,021

osdfir-infrastructureosdfir-infrastructure

2.15.0

7 of 40 See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

7 of the 40 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
bitnamilegacy/git :latest	4b08d0c5af8d	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2
chromadb/chroma :1.5.7	fc8dc8e11fb2	openssl@3.5.5-1~deb13u1	3.5.6-1~deb13u2
library/mariadb :11.3.2	e101f9db3191	openssl@3.0.2-0ubuntu1.15	3.0.2-0ubuntu1.25
library/postgres :17.5-alpine	6567bca8d7bc	openssl@3.5.1-r0	3.5.7-r0
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	openssl@3.0.18-1~deb12u2	3.0.20-1~deb12u2
ghcr.io/openrelik/openrelik-ui :latest	7f91594d5eb3	openssl@3.5.5-r0	3.5.7-r0

Open the chart page →

72,547

fluent-bitot-container-kit

0.0.3

1 of 2 See more

fluent-bit ot-container-kit 0.0.3

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
quay.io/opstree/fluent-bit :5.0.3	391eef5a68ff	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2

Open the chart page →

899

loki-standaloneot-container-kit

1.0.2

3 of 5 See more

loki-standalone ot-container-kit 1.0.2

3 of the 5 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
nginxinc/nginx-unprivileged :1.29-alpine	0c79d56aee56	openssl@3.5.6-r0	3.5.7-r0
quay.io/opstree/k8s-sidecar :2.7.1	26aa9bb3386b	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
quay.io/opstree/memcached :1.6.38-alpine3.22	cabbdfd2c3fe	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2

Open the chart page →

3,620

vm-standaloneot-container-kit

0.0.4

2 of 6 See more

vm-standalone ot-container-kit 0.0.4

2 of the 6 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
quay.io/opstree/grafana :12.4.3	b61c1ed2f015	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2
quay.io/opstree/k8s-sidecar :2.7.3	7075d455b219	openssl@3.5.5-1~deb13u2	3.5.6-1~deb13u2

Open the chart page →

3,430

outscale-s3-exploreroutscale-s3-explorer

0.1.4

1 of 1 See more

outscale-s3-explorer outscale-s3-explorer 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/solucteam/outscale-s3-explorer :v1.0.0	9665c3e71889	openssl@3.5.4-r0	3.5.7-r0

Open the chart page →

1,812

automatap2p-avs

0.1.0

1 of 2 See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.25

Open the chart page →

3,670

avap2p-avs

0.1.0

1 of 1 See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2

Open the chart page →

3,327

k3p2p-avs

0.1.5

1 of 2 See more

k3 p2p-avs 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.25

Open the chart page →

2,342

mishtip2p-avs

0.1.0

1 of 2 See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.25

Open the chart page →

4,041

radiusp2p-avs

0.1.0

1 of 1 See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
theradius/loggia :0.4	63ba348546ec	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2

Open the chart page →

12,440

ungatep2p-avs

0.1.0

3 of 3 See more

ungate p2p-avs 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester :latest	d0e0aa238b02	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi :latest	2745b5fd8785	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2
ghcr.io/foundry-rs/foundry :latest	0c00cb0bda1a	openssl@3.0.2-0ubuntu1.21	3.0.2-0ubuntu1.25

Open the chart page →

27,597

p4p4

0.1.0

4 of 7 See more

p4 p4 0.1.0

4 of the 7 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
codeurjc/toposervice :v1.23	9fb4c11e6a49	openssl@1.1.1-1ubuntu2.1~18.04.21	1.1.1-1ubuntu2.1~18.04.23+esm9
library/mongo :5.0-focal	5e15a3f014ed	openssl@1.1.1f-1ubuntu2.24	1.1.1f-1ubuntu2.24+esm4
library/rabbitmq :3.11-management	c3f70098e01d	openssl@3.0.2-0ubuntu1.14	3.0.2-0ubuntu1.25
mastercloudapps/planner :v1.23	40a950b311b2	openssl@3.0.2-0ubuntu1.8	3.0.2-0ubuntu1.25

Open the chart page →

27,702

myappp4-helm

0.1.0

1 of 6 See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/mongo :4.2.3	58b25d51baa1	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

19,728

pacmanpacman-mh

0.1.28

1 of 2 See more

pacman pacman-mh 0.1.28

1 of the 2 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
library/mongo :7.0.28-jammy	88785f6f665a	openssl@3.0.2-0ubuntu1.20	3.0.2-0ubuntu1.25

Open the chart page →

3,604

pagespages

1.0.0

2 of 3 See more

pages pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
dellcloud/pages :monitor	6ba7b22caacd	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm4
flyway/flyway :6.4.4	22d97ceb0c47	openssl@1.1.1-1ubuntu2.1~18.04.5	1.1.1-1ubuntu2.1~18.04.23+esm9

Open the chart page →

20,242

pagespages-1

0.1.0

1 of 1 See more

pages pages-1 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-9076.

Container image	Digest	Package	Fixed in
dellcloud/pages :1.0	4d2eb25b9225	openssl@1.1.1f-1ubuntu2.1	1.1.1f-1ubuntu2.24+esm4

Open the chart page →

10,437

Container images carrying it

2,434 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
atlassian/jira-software :9.7.2	64a75aa4ec4e	openssl@3.0.13-0ubuntu3.5	3.0.13-0ubuntu3.11	1
avaprotocol/ap-avs :1.2.0	c430ea5c37d6	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
avinash263/pyredis263 :latest	aa2b8727f1a6	openssl@3.0.9-1	3.0.20-1~deb12u2	1
avzini/web-app :latest	f40b30210ed0	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
awesometechnologies/synapse-admin :0.11.4	a1c1f4662875	openssl@3.5.5-r0	3.5.7-r0	1
baserow/backend :1.31.1	e0b3c8130b91	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
baserow/baserow :1.30.1	df0c42eb67e8	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	openssl@1.1.1f-1ubuntu2.10	1.1.1f-1ubuntu2.24+esm4	1
beanbag/reviewboard :latest	6b840f546e1c	openssl@3.0.2-0ubuntu1.29	no fix listed	1
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	openssl@3.5.1-1	3.5.6-1~deb13u2	1
beyzkaya/blog-backend :v1.0.1	12a6a3d1c5f9	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
beyzkaya/blog-frontend :v1.0.0	bf412d75c510	openssl@3.5.0-r0	3.5.7-r0	1
bicarus/elrond-rosetta :v1.3.50.0	b1dab0721e1c	openssl@1.1.1f-1ubuntu2.16	1.1.1f-1ubuntu2.24+esm4	1
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/clickhouse :24.12.3-debian-12-r1	3cf6544f6c6c	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/clickhouse :24.12.4	c7e70bf1d3fb	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/clickhouse :24.6.2-debian-12-r3	dcc172c6c55f	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/consul :1.21.4-debian-12-r1	33ae872fc99d	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/git :latest	4b08d0c5af8d	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/grafana :11.4.0-debian-12-r0	cb8ab5515676	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/keycloak :24.0.4	cc599cbd15ff	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
bitnamilegacy/keycloak :26.3.3-debian-12-r0	da3df0976a9f	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2	1
bitnamilegacy/kubectl :1.30	1249fc292e84	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/kubectl :1.31	64614ef8290f	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/kubectl :1.30.5	744f84cf7493	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
bitnamilegacy/kubectl :1.29.3	f5fc0d561d9e	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
bitnamilegacy/kube-state-metrics :2	04a3044b384b	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/mariadb :11.3.2-debian-12-r9	320c70dfd914	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/mariadb :11.2.6-debian-12-r0	373c3c260571	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
bitnamilegacy/mariadb :11.4.3-debian-12-r0	8b3778160e34	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/mariadb :11.4.5-debian-12-r12	8bc50a0961a7	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/mariadb :11.4.7-debian-12-r2	90dc6acb7b2e	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/mariadb :latest	bbd4e17f1ef8	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/mariadb-galera :11.3.2-debian-12-r9	aee9c668098f	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/mariadb-galera :11.4.3-debian-12-r0	cb8beb6dbb58	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/matomo :5.3.2-debian-12-r13	f02c000c54b1	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2	1
bitnamilegacy/memcached :1.6.24-debian-12-r0	1d80b6a96f00	openssl@3.0.11-1~deb12u2	3.0.20-1~deb12u2	1
bitnamilegacy/memcached :1.6.29-debian-12-r4	ff0e7239c17c	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/minio :2024.8.3-debian-12-r1	5501c419f42e	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/minio :2025.7.23-debian-12-r5	6dabb4a2088c	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2	1
bitnamilegacy/minio :2025.7.23-debian-12-r0	8935e75fa5d1	openssl@3.0.16-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/minio :2024.7.4-debian-12-r0	952f86d1116c	openssl@3.0.13-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/minio :2025.3.12-debian-12-r0	ba9f3b4b0b00	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/minio :2024.12.18-debian-12-r1	c0ede65eb88e	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/minio :2024.12.18-debian-12-r0	cce234b4381a	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/minio :2025.4.22-debian-12-r1	d7cd0e172c4c	openssl@3.0.15-1~deb12u1	3.0.20-1~deb12u2	1
bitnamilegacy/mongodb :7.0.14-debian-12-r3	21e8f8baa432	openssl@3.0.14-1~deb12u2	3.0.20-1~deb12u2	1
bitnamilegacy/mongodb :8.0.13-debian-12-r0	2579e968033e	openssl@3.0.17-1~deb12u2	3.0.20-1~deb12u2	1