{ "vulnerabilities": [ { "id": "SNYK-ALPINE323-CURL-17970539", "cpes": [], "title": "Cleartext Transmission of Sensitive Information", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<8.20.0-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "8.20.0-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://curl.se/docs/CVE-2026-6276.html", "title": "https://curl.se/docs/CVE-2026-6276.html" }, { "url": "https://curl.se/docs/CVE-2026-6276.json", "title": "https://curl.se/docs/CVE-2026-6276.json" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/29/13", "title": "http://www.openwall.com/lists/oss-security/2026/04/29/13" }, { "url": "https://hackerone.com/reports/3671818", "title": "https://hackerone.com/reports/3671818" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-05-15T01:17:11.949298Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "cvssV3BaseScore": 3.7, "modificationTime": "2026-05-03T06:28:26.656176Z" }, { "assigner": "SUSE", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "cvssV3BaseScore": 3.7, "modificationTime": "2026-05-07T17:44:55.449755Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-05-15T01:17:11.949298Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-05-03T06:28:26.656176Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "assigner": "SUSE", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-05-07T17:44:55.449755Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `curl` package and not the `curl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nUsing libcurl, when a custom `Host:` header is first set for an HTTP request\nand a second request is subsequently done using the same *easy handle* but\nwithout the custom `Host:` header set, the second request would use stale\ninformation and pass on cookies meant for the first host in the second\nrequest. Leak them.\n## Remediation\nUpgrade `Alpine:3.23` `curl` to version 8.20.0-r0 or higher.\n## References\n- [https://curl.se/docs/CVE-2026-6276.html](https://curl.se/docs/CVE-2026-6276.html)\n- [https://curl.se/docs/CVE-2026-6276.json](https://curl.se/docs/CVE-2026-6276.json)\n- [http://www.openwall.com/lists/oss-security/2026/04/29/13](http://www.openwall.com/lists/oss-security/2026/04/29/13)\n- [https://hackerone.com/reports/3671818](https://hackerone.com/reports/3671818)\n", "epssDetails": { "percentile": "0.21622", "probability": "0.00295", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-6276" ], "CWE": [ "CWE-319" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "curl", "creationTime": "2026-07-14T14:27:37.843700Z", "disclosureTime": "2026-05-13T13:01:56.800000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-07-14T14:27:37.849167Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:05:09.695549Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/libcurl@8.17.0-r1" ], "upgradePath": [ false, "curl/libcurl@8.20.0-r0" ], "isUpgradable": true, "isPatchable": false, "name": "curl/libcurl", "version": "8.17.0-r1", "nearestFixedInVersion": "8.20.0-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-CURL-17970543", "cpes": [], "title": "Server-Side Request Forgery (SSRF)", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "credit": [ "" ], "semver": { "vulnerable": [ "<8.20.0-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "8.20.0-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://curl.se/docs/CVE-2026-5773.html", "title": "https://curl.se/docs/CVE-2026-5773.html" }, { "url": "https://curl.se/docs/CVE-2026-5773.json", "title": "https://curl.se/docs/CVE-2026-5773.json" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/29/9", "title": "http://www.openwall.com/lists/oss-security/2026/04/29/9" }, { "url": "https://hackerone.com/reports/3650689", "title": "https://hackerone.com/reports/3650689" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cvssV3BaseScore": 7.5, "modificationTime": "2026-05-14T01:15:00.748629Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cvssV3BaseScore": 6.5, "modificationTime": "2026-05-03T06:27:56.247814Z" }, { "assigner": "SUSE", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "cvssV3BaseScore": 3.7, "modificationTime": "2026-08-27T11:03:00.391483Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-05-14T01:15:00.748629Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "assigner": "Red Hat", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-05-03T06:27:56.247814Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "assigner": "SUSE", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-08-27T11:03:00.391483Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `curl` package and not the `curl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nlibcurl might in some circumstances reuse the wrong connection for SMB(S)\ntransfers.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a network transfer operation that was requested by an\napplication could wrongfully reuse an existing SMB connection to the same\nserver that was using a different "share" than the new subsequent transfer\nshould.\n\nThis could in unlucky situations lead to the download of the wrong file or the\nupload of a file to the wrong place. When this happens, the same credentials\nare used and the server name is the same.\n## Remediation\nUpgrade `Alpine:3.23` `curl` to version 8.20.0-r0 or higher.\n## References\n- [https://curl.se/docs/CVE-2026-5773.html](https://curl.se/docs/CVE-2026-5773.html)\n- [https://curl.se/docs/CVE-2026-5773.json](https://curl.se/docs/CVE-2026-5773.json)\n- [http://www.openwall.com/lists/oss-security/2026/04/29/9](http://www.openwall.com/lists/oss-security/2026/04/29/9)\n- [https://hackerone.com/reports/3650689](https://hackerone.com/reports/3650689)\n", "epssDetails": { "percentile": "0.45952", "probability": "0.00618", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-5773" ], "CWE": [ "CWE-918" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "curl", "creationTime": "2026-07-14T14:27:53.172225Z", "disclosureTime": "2026-05-13T13:01:56.307000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-07-14T14:27:53.175924Z", "severityBasedOn": "CVSS", "modificationTime": "2026-09-15T13:27:47.997674Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/libcurl@8.17.0-r1" ], "upgradePath": [ false, "curl/libcurl@8.20.0-r0" ], "isUpgradable": true, "isPatchable": false, "name": "curl/libcurl", "version": "8.17.0-r1", "nearestFixedInVersion": "8.20.0-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-CURL-17970539", "cpes": [], "title": "Cleartext Transmission of Sensitive Information", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<8.20.0-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "8.20.0-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://curl.se/docs/CVE-2026-6276.html", "title": "https://curl.se/docs/CVE-2026-6276.html" }, { "url": "https://curl.se/docs/CVE-2026-6276.json", "title": "https://curl.se/docs/CVE-2026-6276.json" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/29/13", "title": "http://www.openwall.com/lists/oss-security/2026/04/29/13" }, { "url": "https://hackerone.com/reports/3671818", "title": "https://hackerone.com/reports/3671818" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-05-15T01:17:11.949298Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "cvssV3BaseScore": 3.7, "modificationTime": "2026-05-03T06:28:26.656176Z" }, { "assigner": "SUSE", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "cvssV3BaseScore": 3.7, "modificationTime": "2026-05-07T17:44:55.449755Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-05-15T01:17:11.949298Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-05-03T06:28:26.656176Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "assigner": "SUSE", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-05-07T17:44:55.449755Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `curl` package and not the `curl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nUsing libcurl, when a custom `Host:` header is first set for an HTTP request\nand a second request is subsequently done using the same *easy handle* but\nwithout the custom `Host:` header set, the second request would use stale\ninformation and pass on cookies meant for the first host in the second\nrequest. Leak them.\n## Remediation\nUpgrade `Alpine:3.23` `curl` to version 8.20.0-r0 or higher.\n## References\n- [https://curl.se/docs/CVE-2026-6276.html](https://curl.se/docs/CVE-2026-6276.html)\n- [https://curl.se/docs/CVE-2026-6276.json](https://curl.se/docs/CVE-2026-6276.json)\n- [http://www.openwall.com/lists/oss-security/2026/04/29/13](http://www.openwall.com/lists/oss-security/2026/04/29/13)\n- [https://hackerone.com/reports/3671818](https://hackerone.com/reports/3671818)\n", "epssDetails": { "percentile": "0.21622", "probability": "0.00295", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-6276" ], "CWE": [ "CWE-319" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "curl", "creationTime": "2026-07-14T14:27:37.843700Z", "disclosureTime": "2026-05-13T13:01:56.800000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-07-14T14:27:37.849167Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:05:09.695549Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1", "curl/libcurl@8.17.0-r1" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "curl/libcurl", "version": "8.17.0-r1", "nearestFixedInVersion": "8.20.0-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-CURL-17970543", "cpes": [], "title": "Server-Side Request Forgery (SSRF)", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "credit": [ "" ], "semver": { "vulnerable": [ "<8.20.0-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "8.20.0-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://curl.se/docs/CVE-2026-5773.html", "title": "https://curl.se/docs/CVE-2026-5773.html" }, { "url": "https://curl.se/docs/CVE-2026-5773.json", "title": "https://curl.se/docs/CVE-2026-5773.json" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/29/9", "title": "http://www.openwall.com/lists/oss-security/2026/04/29/9" }, { "url": "https://hackerone.com/reports/3650689", "title": "https://hackerone.com/reports/3650689" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cvssV3BaseScore": 7.5, "modificationTime": "2026-05-14T01:15:00.748629Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cvssV3BaseScore": 6.5, "modificationTime": "2026-05-03T06:27:56.247814Z" }, { "assigner": "SUSE", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "cvssV3BaseScore": 3.7, "modificationTime": "2026-08-27T11:03:00.391483Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-05-14T01:15:00.748629Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "assigner": "Red Hat", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-05-03T06:27:56.247814Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "assigner": "SUSE", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-08-27T11:03:00.391483Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `curl` package and not the `curl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nlibcurl might in some circumstances reuse the wrong connection for SMB(S)\ntransfers.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a network transfer operation that was requested by an\napplication could wrongfully reuse an existing SMB connection to the same\nserver that was using a different "share" than the new subsequent transfer\nshould.\n\nThis could in unlucky situations lead to the download of the wrong file or the\nupload of a file to the wrong place. When this happens, the same credentials\nare used and the server name is the same.\n## Remediation\nUpgrade `Alpine:3.23` `curl` to version 8.20.0-r0 or higher.\n## References\n- [https://curl.se/docs/CVE-2026-5773.html](https://curl.se/docs/CVE-2026-5773.html)\n- [https://curl.se/docs/CVE-2026-5773.json](https://curl.se/docs/CVE-2026-5773.json)\n- [http://www.openwall.com/lists/oss-security/2026/04/29/9](http://www.openwall.com/lists/oss-security/2026/04/29/9)\n- [https://hackerone.com/reports/3650689](https://hackerone.com/reports/3650689)\n", "epssDetails": { "percentile": "0.45952", "probability": "0.00618", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-5773" ], "CWE": [ "CWE-918" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "curl", "creationTime": "2026-07-14T14:27:53.172225Z", "disclosureTime": "2026-05-13T13:01:56.307000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-07-14T14:27:53.175924Z", "severityBasedOn": "CVSS", "modificationTime": "2026-09-15T13:27:47.997674Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1", "curl/libcurl@8.17.0-r1" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "curl/libcurl", "version": "8.17.0-r1", "nearestFixedInVersion": "8.20.0-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-CURL-17970539", "cpes": [], "title": "Cleartext Transmission of Sensitive Information", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<8.20.0-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "8.20.0-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://curl.se/docs/CVE-2026-6276.html", "title": "https://curl.se/docs/CVE-2026-6276.html" }, { "url": "https://curl.se/docs/CVE-2026-6276.json", "title": "https://curl.se/docs/CVE-2026-6276.json" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/29/13", "title": "http://www.openwall.com/lists/oss-security/2026/04/29/13" }, { "url": "https://hackerone.com/reports/3671818", "title": "https://hackerone.com/reports/3671818" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-05-15T01:17:11.949298Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "cvssV3BaseScore": 3.7, "modificationTime": "2026-05-03T06:28:26.656176Z" }, { "assigner": "SUSE", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "cvssV3BaseScore": 3.7, "modificationTime": "2026-05-07T17:44:55.449755Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-05-15T01:17:11.949298Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-05-03T06:28:26.656176Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "assigner": "SUSE", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-05-07T17:44:55.449755Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `curl` package and not the `curl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nUsing libcurl, when a custom `Host:` header is first set for an HTTP request\nand a second request is subsequently done using the same *easy handle* but\nwithout the custom `Host:` header set, the second request would use stale\ninformation and pass on cookies meant for the first host in the second\nrequest. Leak them.\n## Remediation\nUpgrade `Alpine:3.23` `curl` to version 8.20.0-r0 or higher.\n## References\n- [https://curl.se/docs/CVE-2026-6276.html](https://curl.se/docs/CVE-2026-6276.html)\n- [https://curl.se/docs/CVE-2026-6276.json](https://curl.se/docs/CVE-2026-6276.json)\n- [http://www.openwall.com/lists/oss-security/2026/04/29/13](http://www.openwall.com/lists/oss-security/2026/04/29/13)\n- [https://hackerone.com/reports/3671818](https://hackerone.com/reports/3671818)\n", "epssDetails": { "percentile": "0.21622", "probability": "0.00295", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-6276" ], "CWE": [ "CWE-319" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "curl", "creationTime": "2026-07-14T14:27:37.843700Z", "disclosureTime": "2026-05-13T13:01:56.800000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-07-14T14:27:37.849167Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:05:09.695549Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1" ], "upgradePath": [ false, "curl/curl@8.20.0-r0" ], "isUpgradable": true, "isPatchable": false, "name": "curl/curl", "version": "8.17.0-r1", "nearestFixedInVersion": "8.20.0-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-CURL-17970543", "cpes": [], "title": "Server-Side Request Forgery (SSRF)", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "credit": [ "" ], "semver": { "vulnerable": [ "<8.20.0-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "8.20.0-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://curl.se/docs/CVE-2026-5773.html", "title": "https://curl.se/docs/CVE-2026-5773.html" }, { "url": "https://curl.se/docs/CVE-2026-5773.json", "title": "https://curl.se/docs/CVE-2026-5773.json" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/29/9", "title": "http://www.openwall.com/lists/oss-security/2026/04/29/9" }, { "url": "https://hackerone.com/reports/3650689", "title": "https://hackerone.com/reports/3650689" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cvssV3BaseScore": 7.5, "modificationTime": "2026-05-14T01:15:00.748629Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cvssV3BaseScore": 6.5, "modificationTime": "2026-05-03T06:27:56.247814Z" }, { "assigner": "SUSE", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "cvssV3BaseScore": 3.7, "modificationTime": "2026-08-27T11:03:00.391483Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-05-14T01:15:00.748629Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "assigner": "Red Hat", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-05-03T06:27:56.247814Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N", "assigner": "SUSE", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-08-27T11:03:00.391483Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `curl` package and not the `curl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nlibcurl might in some circumstances reuse the wrong connection for SMB(S)\ntransfers.\n\nlibcurl features a pool of recent connections so that subsequent requests can\nreuse an existing connection to avoid overhead.\n\nWhen reusing a connection a range of criteria must be met. Due to a logical\nerror in the code, a network transfer operation that was requested by an\napplication could wrongfully reuse an existing SMB connection to the same\nserver that was using a different "share" than the new subsequent transfer\nshould.\n\nThis could in unlucky situations lead to the download of the wrong file or the\nupload of a file to the wrong place. When this happens, the same credentials\nare used and the server name is the same.\n## Remediation\nUpgrade `Alpine:3.23` `curl` to version 8.20.0-r0 or higher.\n## References\n- [https://curl.se/docs/CVE-2026-5773.html](https://curl.se/docs/CVE-2026-5773.html)\n- [https://curl.se/docs/CVE-2026-5773.json](https://curl.se/docs/CVE-2026-5773.json)\n- [http://www.openwall.com/lists/oss-security/2026/04/29/9](http://www.openwall.com/lists/oss-security/2026/04/29/9)\n- [https://hackerone.com/reports/3650689](https://hackerone.com/reports/3650689)\n", "epssDetails": { "percentile": "0.45952", "probability": "0.00618", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-5773" ], "CWE": [ "CWE-918" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "curl", "creationTime": "2026-07-14T14:27:53.172225Z", "disclosureTime": "2026-05-13T13:01:56.307000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-07-14T14:27:53.175924Z", "severityBasedOn": "CVSS", "modificationTime": "2026-09-15T13:27:47.997674Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1" ], "upgradePath": [ false, "curl/curl@8.20.0-r0" ], "isUpgradable": true, "isPatchable": false, "name": "curl/curl", "version": "8.17.0-r1", "nearestFixedInVersion": "8.20.0-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-LIBXML2-17111950", "cpes": [], "title": "Access of Resource Using Incompatible Type ('Type Confusion')", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<2.13.9-r1" ] }, "exploit": "Not Defined", "fixedIn": [ "2.13.9-r1" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://access.redhat.com/errata/RHSA-2026:11503", "title": "https://access.redhat.com/errata/RHSA-2026:11503" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-6732", "title": "https://access.redhat.com/security/cve/CVE-2026-6732" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461300", "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2461300" }, { "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097", "title": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097" }, { "url": "https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411", "title": "https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-05-06T01:13:49.836779Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-24T12:31:15.534753Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 6.5, "modificationTime": "2026-07-17T11:04:47.222521Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-05-06T01:13:49.836779Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T12:31:15.534753Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-07-17T11:04:47.222521Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `libxml2` package and not the `libxml2` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nA flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.\n## Remediation\nUpgrade `Alpine:3.23` `libxml2` to version 2.13.9-r1 or higher.\n## References\n- [https://access.redhat.com/errata/RHSA-2026:11503](https://access.redhat.com/errata/RHSA-2026:11503)\n- [https://access.redhat.com/security/cve/CVE-2026-6732](https://access.redhat.com/security/cve/CVE-2026-6732)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2461300](https://bugzilla.redhat.com/show_bug.cgi?id=2461300)\n- [https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097](https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097)\n- [https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411](https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411)\n", "epssDetails": { "percentile": "0.45330", "probability": "0.00632", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-6732" ], "CWE": [ "CWE-843" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "libxml2", "creationTime": "2026-05-31T14:22:01.550879Z", "disclosureTime": "2026-04-23T23:16:16.443000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-05-31T14:22:01.557983Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T15:25:43.655179Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "libxml2/libxml2@2.13.9-r0" ], "upgradePath": [ false, "libxml2/libxml2@2.13.9-r1" ], "isUpgradable": true, "isPatchable": false, "name": "libxml2/libxml2", "version": "2.13.9-r0", "nearestFixedInVersion": "2.13.9-r1", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-LIBXML2-17111950", "cpes": [], "title": "Access of Resource Using Incompatible Type ('Type Confusion')", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<2.13.9-r1" ] }, "exploit": "Not Defined", "fixedIn": [ "2.13.9-r1" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://access.redhat.com/errata/RHSA-2026:11503", "title": "https://access.redhat.com/errata/RHSA-2026:11503" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-6732", "title": "https://access.redhat.com/security/cve/CVE-2026-6732" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461300", "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2461300" }, { "url": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097", "title": "https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097" }, { "url": "https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411", "title": "https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-05-06T01:13:49.836779Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-24T12:31:15.534753Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 6.5, "modificationTime": "2026-07-17T11:04:47.222521Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-05-06T01:13:49.836779Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T12:31:15.534753Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-07-17T11:04:47.222521Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `libxml2` package and not the `libxml2` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nA flaw was found in libxml2. This vulnerability occurs when the library processes a specially crafted XML Schema Definition (XSD) validated document that includes an internal entity reference. An attacker could exploit this by providing a malicious document, leading to a type confusion error that causes the application to crash. This results in a denial of service (DoS), making the affected system or application unavailable.\n## Remediation\nUpgrade `Alpine:3.23` `libxml2` to version 2.13.9-r1 or higher.\n## References\n- [https://access.redhat.com/errata/RHSA-2026:11503](https://access.redhat.com/errata/RHSA-2026:11503)\n- [https://access.redhat.com/security/cve/CVE-2026-6732](https://access.redhat.com/security/cve/CVE-2026-6732)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2461300](https://bugzilla.redhat.com/show_bug.cgi?id=2461300)\n- [https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097](https://gitlab.gnome.org/GNOME/libxml2/-/issues/1097)\n- [https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411](https://gitlab.gnome.org/GNOME/libxml2/-/merge_requests/411)\n", "epssDetails": { "percentile": "0.45330", "probability": "0.00632", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-6732" ], "CWE": [ "CWE-843" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "libxml2", "creationTime": "2026-05-31T14:22:01.550879Z", "disclosureTime": "2026-04-23T23:16:16.443000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-05-31T14:22:01.557983Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T15:25:43.655179Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "libxslt/libxslt@1.1.43-r3", "libxml2/libxml2@2.13.9-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "libxml2/libxml2", "version": "2.13.9-r0", "nearestFixedInVersion": "2.13.9-r1", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [ false, "openssl/libcrypto3@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [ false, "openssl/libcrypto3@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [ false, "openssl/libcrypto3@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [ false, "openssl/libcrypto3@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [ false, "openssl/libcrypto3@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "busybox/ssl_client@1.37.0-r30", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "busybox/ssl_client@1.37.0-r30", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "busybox/ssl_client@1.37.0-r30", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "busybox/ssl_client@1.37.0-r30", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "busybox/ssl_client@1.37.0-r30", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "coreutils/coreutils@9.8-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "coreutils/coreutils@9.8-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "coreutils/coreutils@9.8-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "coreutils/coreutils@9.8-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "coreutils/coreutils@9.8-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "nginx/nginx@1.29.5-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "nginx/nginx@1.29.5-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "nginx/nginx@1.29.5-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "nginx/nginx@1.29.5-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "nginx/nginx@1.29.5-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "redis/redis@8.4.0-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "redis/redis@8.4.0-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "redis/redis@8.4.0-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "redis/redis@8.4.0-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "redis/redis@8.4.0-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "coreutils/coreutils@9.8-r1", "coreutils/coreutils-sha512sum@9.8-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "coreutils/coreutils@9.8-r1", "coreutils/coreutils-sha512sum@9.8-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "coreutils/coreutils@9.8-r1", "coreutils/coreutils-sha512sum@9.8-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "coreutils/coreutils@9.8-r1", "coreutils/coreutils-sha512sum@9.8-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "coreutils/coreutils@9.8-r1", "coreutils/coreutils-sha512sum@9.8-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1", "curl/libcurl@8.17.0-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1", "curl/libcurl@8.17.0-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1", "curl/libcurl@8.17.0-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1", "curl/libcurl@8.17.0-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1", "curl/libcurl@8.17.0-r1", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libssl3@3.5.5-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libssl3@3.5.5-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libssl3@3.5.5-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libssl3@3.5.5-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libssl3@3.5.5-r0", "openssl/libcrypto3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libcrypto3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [ false, "openssl/libssl3@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [ false, "openssl/libssl3@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [ false, "openssl/libssl3@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [ false, "openssl/libssl3@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [ false, "openssl/libssl3@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "busybox/ssl_client@1.37.0-r30", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "busybox/ssl_client@1.37.0-r30", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "busybox/ssl_client@1.37.0-r30", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "busybox/ssl_client@1.37.0-r30", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "busybox/ssl_client@1.37.0-r30", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "nginx/nginx@1.29.5-r1", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "nginx/nginx@1.29.5-r1", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "nginx/nginx@1.29.5-r1", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "nginx/nginx@1.29.5-r1", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "nginx/nginx@1.29.5-r1", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "redis/redis@8.4.0-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "redis/redis@8.4.0-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "redis/redis@8.4.0-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "redis/redis@8.4.0-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "redis/redis@8.4.0-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "apk-tools/apk-tools@3.0.4-r0", "apk-tools/libapk@3.0.4-r0", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1", "curl/libcurl@8.17.0-r1", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1", "curl/libcurl@8.17.0-r1", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1", "curl/libcurl@8.17.0-r1", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1", "curl/libcurl@8.17.0-r1", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "curl/curl@8.17.0-r1", "curl/libcurl@8.17.0-r1", "openssl/libssl3@3.5.5-r0" ], "upgradePath": [], "isUpgradable": false, "isPatchable": false, "name": "openssl/libssl3", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993253", "cpes": [], "title": "CVE-2026-28390", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc", "title": "https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc" }, { "url": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6", "title": "https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6" }, { "url": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4", "title": "https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4" }, { "url": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788", "title": "https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788" }, { "url": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75", "title": "https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.199622Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-11T04:37:15.181387Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:12:03.567644Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyTransportRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyTransportRecipientInfo with\nRSA-OAEP encryption is processed, the optional parameters field of\nRSA-OAEP SourceFunc algorithm identifier is examined without checking\nfor its presence. This results in a NULL pointer dereference if the field\nis missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc](https://github.com/openssl/openssl/commit/01194a8f1941115cd0383bfa91c736dd3993c8bc)\n- [https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6](https://github.com/openssl/openssl/commit/2e39b7a6993be445fddb9fbce316fa756e0397b6)\n- [https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4](https://github.com/openssl/openssl/commit/af2a5fecd3e71a29e7568f9c1453dec5cebbaff4)\n- [https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788](https://github.com/openssl/openssl/commit/ea7b4ea4f9f853521ba34830cbcadc970d2e0788)\n- [https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75](https://github.com/openssl/openssl/commit/fd2f1a6cf53b9ceeca723a001aa4b825d7c7ee75)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28390" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:08.106520Z", "disclosureTime": "2026-04-07T22:16:21.190000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:08.113118Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.405287Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0" ], "upgradePath": [ false, "openssl/openssl@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/openssl", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993258", "cpes": [], "title": "CVE-2026-28388", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e", "title": "https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e" }, { "url": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139", "title": "https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139" }, { "url": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3", "title": "https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3" }, { "url": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8", "title": "https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8" }, { "url": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726", "title": "https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.097816Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:47:01.842319Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "SUSE", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-07-05T23:07:34.759996Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: When a delta CRL that contains a Delta CRL Indicator extension\nis processed a NULL pointer dereference might happen if the required CRL\nNumber extension is missing.\n\nImpact summary: A NULL pointer dereference can trigger a crash which\nleads to a Denial of Service for an application.\n\nWhen CRL processing and delta CRL processing is enabled during X.509\ncertificate verification, the delta CRL processing does not check\nwhether the CRL Number extension is NULL before dereferencing it.\nWhen a malformed delta CRL file is being processed, this parameter\ncan be NULL, causing a NULL pointer dereference.\n\nExploiting this issue requires the X509_V_FLAG_USE_DELTAS flag to be enabled in\nthe verification context, the certificate being verified to contain a\nfreshestCRL extension or the base CRL to have the EXFLAG_FRESHEST flag set, and\nan attacker to provide a malformed CRL to an application that processes it.\n\nThe vulnerability is limited to Denial of Service and cannot be escalated to\nachieve code execution or memory disclosure. For that reason the issue was\nassessed as Low severity according to our Security Policy.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue,\nas the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e](https://github.com/openssl/openssl/commit/59c3b3158553ab53275bbbccca5cb305d591cf2e)\n- [https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139](https://github.com/openssl/openssl/commit/5a0b4930779cd2408880979db765db919da55139)\n- [https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3](https://github.com/openssl/openssl/commit/602542f2c0c2d5edb47128f93eac10b62aeeefb3)\n- [https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8](https://github.com/openssl/openssl/commit/a9d187dd1000130100fa7ab915f8513532cb3bb8)\n- [https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726](https://github.com/openssl/openssl/commit/d3a901e8d9f021f3e67d6cfbc12e768129862726)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.56424", "probability": "0.00885", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28388" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:13.332679Z", "disclosureTime": "2026-04-07T22:16:20.863000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:13.336375Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:49.609111Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0" ], "upgradePath": [ false, "openssl/openssl@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/openssl", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993259", "cpes": [], "title": "CVE-2026-28389", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.5, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5", "title": "https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5" }, { "url": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616", "title": "https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616" }, { "url": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f", "title": "https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f" }, { "url": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a", "title": "https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a" }, { "url": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686", "title": "https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 7.5, "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5.9, "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.5, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:52.297059Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.9, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:46.745668Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:29.756813Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: During processing of a crafted CMS EnvelopedData message\nwith KeyAgreeRecipientInfo a NULL pointer dereference can happen.\n\nImpact summary: Applications that process attacker-controlled CMS data may\ncrash before authentication or cryptographic operations occur resulting in\nDenial of Service.\n\nWhen a CMS EnvelopedData message that uses KeyAgreeRecipientInfo is\nprocessed, the optional parameters field of KeyEncryptionAlgorithmIdentifier\nis examined without checking for its presence. This results in a NULL\npointer dereference if the field is missing.\n\nApplications and services that call CMS_decrypt() on untrusted input\n(e.g., S/MIME processing or CMS-based protocols) are vulnerable.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5](https://github.com/openssl/openssl/commit/16cea4188e0ea567deb4f93f85902247e67384f5)\n- [https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616](https://github.com/openssl/openssl/commit/785cbf7ea3b5a6f5adf0c1ccb92b79d89c35c616)\n- [https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f](https://github.com/openssl/openssl/commit/7b5274e812400cacb6f3be4c2df5340923fa807f)\n- [https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a](https://github.com/openssl/openssl/commit/c6725634e089eb2b634b10ede33944be7248172a)\n- [https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686](https://github.com/openssl/openssl/commit/f80f83bc5fd036bc47d773e8b15a001e2b4ce686)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.53918", "probability": "0.00805", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28389" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:19.778484Z", "disclosureTime": "2026-04-07T22:16:21.030000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:19.781633Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.848776Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0" ], "upgradePath": [ false, "openssl/openssl@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/openssl", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993266", "cpes": [], "title": "CVE-2026-31789", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "critical", "cvssScore": 9.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde", "title": "https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde" }, { "url": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf", "title": "https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf" }, { "url": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49", "title": "https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49" }, { "url": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9", "title": "https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9" }, { "url": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521", "title": "https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "critical", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 9.8, "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "cvssV3BaseScore": 5.8, "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "critical", "baseScore": 9.8, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.322162Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-04-15T00:23:01.358492Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:54.650024Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: Converting an excessively large OCTET STRING value to\na hexadecimal string leads to a heap buffer overflow on 32 bit platforms.\n\nImpact summary: A heap buffer overflow may lead to a crash or possibly\nan attacker controlled code execution or other undefined behavior.\n\nIf an attacker can supply a crafted X.509 certificate with an excessively\nlarge OCTET STRING value in extensions such as the Subject Key Identifier\n(SKID) or Authority Key Identifier (AKID) which are being converted to hex,\nthe size of the buffer needed for the result is calculated as multiplication\nof the input length by 3. On 32 bit platforms, this multiplication may overflow\nresulting in the allocation of a smaller buffer and a heap buffer overflow.\n\nApplications and services that print or log contents of untrusted X.509\ncertificates are vulnerable to this issue. As the certificates would have\nto have sizes of over 1 Gigabyte, printing or logging such certificates\nis a fairly unlikely operation and only 32 bit platforms are affected,\nthis issue was assigned Low severity.\n\nThe FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this\nissue, as the affected code is outside the OpenSSL FIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde](https://github.com/openssl/openssl/commit/364f095b80601db632b0def6a33316967f863bde)\n- [https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf](https://github.com/openssl/openssl/commit/7a9087efd769f362ad9c0e30c7baaa6bbfa65ecf)\n- [https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49](https://github.com/openssl/openssl/commit/945b935ac66cc7f1a41f1b849c7c25adb5351f49)\n- [https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9](https://github.com/openssl/openssl/commit/a24216018e1ede8ff01a4ff5afff7dfbd443e2f9)\n- [https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521](https://github.com/openssl/openssl/commit/a91e537d16d74050dbde50bb0dfb1fe9930f0521)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n", "epssDetails": { "percentile": "0.15604", "probability": "0.00243", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-31789" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "critical", "packageName": "openssl", "creationTime": "2026-04-12T15:36:44.096734Z", "disclosureTime": "2026-04-07T22:16:21.617000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:44.099367Z", "severityBasedOn": "CVSS", "modificationTime": "2026-07-24T14:04:38.637084Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "critical", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0" ], "upgradePath": [ false, "openssl/openssl@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/openssl", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-OPENSSL-15993268", "cpes": [], "title": "CVE-2026-28387", "CVSSv3": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<3.5.6-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "3.5.6-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b", "title": "https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b" }, { "url": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe", "title": "https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe" }, { "url": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3", "title": "https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3" }, { "url": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7", "title": "https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7" }, { "url": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177", "title": "https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177" }, { "url": "https://openssl-library.org/news/secadv/20260407.txt", "title": "https://openssl-library.org/news/secadv/20260407.txt" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-032379.html" }, { "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html", "title": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8.1, "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "assigner": "Red Hat", "severity": "low", "cvssV3Vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "cvssV3BaseScore": 3.7, "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cvssV3BaseScore": 6.5, "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.1, "cvssVersion": "3.1", "modificationTime": "2026-04-24T02:21:53.574331Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "assigner": "Red Hat", "severity": "low", "baseScore": 3.7, "cvssVersion": "3.1", "modificationTime": "2026-04-13T00:46:44.895108Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 6.5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T03:29:17.808435Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `openssl` package and not the `openssl` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nIssue summary: An uncommon configuration of clients performing DANE TLSA-based\nserver authentication, when paired with uncommon server DANE TLSA records, may\nresult in a use-after-free and/or double-free on the client side.\n\nImpact summary: A use after free can have a range of potential consequences\nsuch as the corruption of valid data, crashes or execution of arbitrary code.\n\nHowever, the issue only affects clients that make use of TLSA records with both\nthe PKIX-TA(0/PKIX-EE(1) certificate usages and the DANE-TA(2) certificate\nusage.\n\nBy far the most common deployment of DANE is in SMTP MTAs for which RFC7672\nrecommends that clients treat as 'unusable' any TLSA records that have the PKIX\ncertificate usages. These SMTP (or other similar) clients are not vulnerable\nto this issue. Conversely, any clients that support only the PKIX usages, and\nignore the DANE-TA(2) usage are also not vulnerable.\n\nThe client would also need to be communicating with a server that publishes a\nTLSA RRset with both types of TLSA records.\n\nNo FIPS modules are affected by this issue, the problem code is outside the\nFIPS module boundary.\n## Remediation\nUpgrade `Alpine:3.23` `openssl` to version 3.5.6-r0 or higher.\n## References\n- [https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b](https://github.com/openssl/openssl/commit/07e727d304746edb49a98ee8f6ab00256e1f012b)\n- [https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe](https://github.com/openssl/openssl/commit/258a8f63b26995ba357f4326da00e19e29c6acbe)\n- [https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3](https://github.com/openssl/openssl/commit/444958deaf450aea819171f97ae69eaedede42c3)\n- [https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7](https://github.com/openssl/openssl/commit/7a4e08cee62a728d32e60b0de89e6764339df0a7)\n- [https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177](https://github.com/openssl/openssl/commit/ec03fa050b3346997ed9c5fef3d0e16ad7db8177)\n- [https://openssl-library.org/news/secadv/20260407.txt](https://openssl-library.org/news/secadv/20260407.txt)\n- [https://cert-portal.siemens.com/productcert/html/ssa-032379.html](https://cert-portal.siemens.com/productcert/html/ssa-032379.html)\n- [https://cert-portal.siemens.com/productcert/html/ssa-265688.html](https://cert-portal.siemens.com/productcert/html/ssa-265688.html)\n", "epssDetails": { "percentile": "0.49234", "probability": "0.00671", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28387" ], "CWE": [], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "openssl", "creationTime": "2026-04-12T15:36:50.054209Z", "disclosureTime": "2026-04-07T22:16:20.700000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-12T15:36:50.057209Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-19T14:04:48.183620Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "openssl/openssl@3.5.5-r0" ], "upgradePath": [ false, "openssl/openssl@3.5.6-r0" ], "isUpgradable": true, "isPatchable": false, "name": "openssl/openssl", "version": "3.5.5-r0", "nearestFixedInVersion": "3.5.6-r0", "dockerfileInstruction": "apk add --no-cache openssl redis coreutils curl bash xxd netcat-openbsd libxml2 libxslt" }, { "id": "SNYK-ALPINE323-VIM-15366677", "cpes": [], "title": "Improper Input Validation", "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<9.2.0078-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "9.2.0078-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/vim/vim/commit/65c1a143c331c886dc28", "title": "https://github.com/vim/vim/commit/65c1a143c331c886dc28" }, { "url": "https://github.com/vim/vim/releases/tag/v9.2.0077", "title": "https://github.com/vim/vim/releases/tag/v9.2.0077" }, { "url": "https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p", "title": "https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p" }, { "url": "http://www.openwall.com/lists/oss-security/2026/02/27/10", "title": "http://www.openwall.com/lists/oss-security/2026/02/27/10" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7.8, "modificationTime": "2026-03-05T01:21:40.141247Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-02-28T07:52:24.291276Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-05-12T01:16:06.417516Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.8, "cvssVersion": "3.1", "modificationTime": "2026-03-05T01:21:40.141247Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-02-28T07:52:24.291276Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-05-12T01:16:06.417516Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `vim` package and not the `vim` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nVim is an open source, command line text editor. Versions prior to 9.2.0077 have a heap-buffer-overflow and a segmentation fault (SEGV) exist in Vim's swap file recovery logic. Both are caused by unvalidated fields read from crafted pointer blocks within a swap file. Version 9.2.0077 fixes the issue.\n## Remediation\nUpgrade `Alpine:3.23` `vim` to version 9.2.0078-r0 or higher.\n## References\n- [https://github.com/vim/vim/commit/65c1a143c331c886dc28](https://github.com/vim/vim/commit/65c1a143c331c886dc28)\n- [https://github.com/vim/vim/releases/tag/v9.2.0077](https://github.com/vim/vim/releases/tag/v9.2.0077)\n- [https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p](https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p)\n- [http://www.openwall.com/lists/oss-security/2026/02/27/10](http://www.openwall.com/lists/oss-security/2026/02/27/10)\n", "epssDetails": { "percentile": "0.07413", "probability": "0.00177", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28421" ], "CWE": [ "CWE-20", "CWE-122" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "vim", "creationTime": "2026-03-02T02:40:08.871536Z", "disclosureTime": "2026-02-27T22:16:25.493000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-03-02T02:40:08.891924Z", "severityBasedOn": "CVSS", "modificationTime": "2026-06-15T15:52:23.661813Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "vim/xxd@9.1.1942-r0" ], "upgradePath": [ false, "vim/xxd@9.2.0078-r0" ], "isUpgradable": true, "isPatchable": false, "name": "vim/xxd", "version": "9.1.1942-r0", "nearestFixedInVersion": "9.2.0078-r0" }, { "id": "SNYK-ALPINE323-VIM-15366679", "cpes": [], "title": "OS Command Injection", "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<9.2.0078-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "9.2.0078-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/vim/vim/commit/79348dbbc09332130f4c860", "title": "https://github.com/vim/vim/commit/79348dbbc09332130f4c860" }, { "url": "https://github.com/vim/vim/releases/tag/v9.2.0073", "title": "https://github.com/vim/vim/releases/tag/v9.2.0073" }, { "url": "https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336", "title": "https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336" }, { "url": "http://www.openwall.com/lists/oss-security/2026/02/27/6", "title": "http://www.openwall.com/lists/oss-security/2026/02/27/6" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7.8, "modificationTime": "2026-03-04T01:17:29.889176Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "cvssV3BaseScore": 4.4, "modificationTime": "2026-02-28T07:52:22.345469Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 5.3, "modificationTime": "2026-03-21T15:01:16.042264Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.8, "cvssVersion": "3.1", "modificationTime": "2026-03-04T01:17:29.889176Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "assigner": "Red Hat", "severity": "medium", "baseScore": 4.4, "cvssVersion": "3.1", "modificationTime": "2026-02-28T07:52:22.345469Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-03-21T15:01:16.042264Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `vim` package and not the `vim` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nVim is an open source, command line text editor. Prior to version 9.2.0073, an OS command injection vulnerability exists in the `netrw` standard plugin bundled with Vim. By inducing a user to open a crafted URL (e.g., using the `scp://` protocol handler), an attacker can execute arbitrary shell commands with the privileges of the Vim process. Version 9.2.0073 fixes the issue.\n## Remediation\nUpgrade `Alpine:3.23` `vim` to version 9.2.0078-r0 or higher.\n## References\n- [https://github.com/vim/vim/commit/79348dbbc09332130f4c860](https://github.com/vim/vim/commit/79348dbbc09332130f4c860)\n- [https://github.com/vim/vim/releases/tag/v9.2.0073](https://github.com/vim/vim/releases/tag/v9.2.0073)\n- [https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336](https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336)\n- [http://www.openwall.com/lists/oss-security/2026/02/27/6](http://www.openwall.com/lists/oss-security/2026/02/27/6)\n", "epssDetails": { "percentile": "0.62978", "probability": "0.01162", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-28417" ], "CWE": [ "CWE-78" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "vim", "creationTime": "2026-03-02T02:41:02.572222Z", "disclosureTime": "2026-02-27T22:16:24.833000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-03-02T02:41:02.575787Z", "severityBasedOn": "CVSS", "modificationTime": "2026-06-15T15:52:24.882181Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "vim/xxd@9.1.1942-r0" ], "upgradePath": [ false, "vim/xxd@9.2.0078-r0" ], "isUpgradable": true, "isPatchable": false, "name": "vim/xxd", "version": "9.1.1942-r0", "nearestFixedInVersion": "9.2.0078-r0" }, { "id": "SNYK-ALPINE323-VIM-15763075", "cpes": [], "title": "OS Command Injection", "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<9.2.0219-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "9.2.0219-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.3, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a", "title": "https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a" }, { "url": "https://github.com/vim/vim/releases/tag/v9.2.0202", "title": "https://github.com/vim/vim/releases/tag/v9.2.0202" }, { "url": "https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c", "title": "https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c" }, { "url": "http://www.openwall.com/lists/oss-security/2026/03/19/10", "title": "http://www.openwall.com/lists/oss-security/2026/03/19/10" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7.3, "modificationTime": "2026-03-26T01:20:57.447380Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7.3, "modificationTime": "2026-03-26T13:42:39.880374Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N", "cvssV3BaseScore": 5.3, "modificationTime": "2026-04-17T11:08:31.471961Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-03-26T01:20:57.447380Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-03-26T13:42:39.880374Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:N", "assigner": "SUSE", "severity": "medium", "baseScore": 5.3, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:08:31.471961Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `vim` package and not the `vim` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nVim is an open source, command line text editor. Prior to version 9.2.0202, a command injection vulnerability exists in Vim's glob() function on Unix-like systems. By including a newline character (\\n) in a pattern passed to glob(), an attacker may be able to execute arbitrary shell commands. This vulnerability depends on the user's 'shell' setting. This issue has been patched in version 9.2.0202.\n## Remediation\nUpgrade `Alpine:3.23` `vim` to version 9.2.0219-r0 or higher.\n## References\n- [https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a](https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a)\n- [https://github.com/vim/vim/releases/tag/v9.2.0202](https://github.com/vim/vim/releases/tag/v9.2.0202)\n- [https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c](https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c)\n- [http://www.openwall.com/lists/oss-security/2026/03/19/10](http://www.openwall.com/lists/oss-security/2026/03/19/10)\n", "epssDetails": { "percentile": "0.53075", "probability": "0.00834", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-33412" ], "CWE": [ "CWE-78" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "vim", "creationTime": "2026-03-24T20:04:32.158844Z", "disclosureTime": "2026-03-24T20:16:29.740000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-03-24T20:04:32.166759Z", "severityBasedOn": "CVSS", "modificationTime": "2026-06-30T14:04:03.529834Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "vim/xxd@9.1.1942-r0" ], "upgradePath": [ false, "vim/xxd@9.2.0219-r0" ], "isUpgradable": true, "isPatchable": false, "name": "vim/xxd", "version": "9.1.1942-r0", "nearestFixedInVersion": "9.2.0219-r0" }, { "id": "SNYK-ALPINE323-VIM-15869613", "cpes": [], "title": "OS Command Injection", "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<9.2.0272-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "9.2.0272-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.6, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/vim/vim/commit/664701eb7576edb7c7c7d9f2d600815ec1f43459", "title": "https://github.com/vim/vim/commit/664701eb7576edb7c7c7d9f2d600815ec1f43459" }, { "url": "https://github.com/vim/vim/releases/tag/v9.2.0272", "title": "https://github.com/vim/vim/releases/tag/v9.2.0272" }, { "url": "https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh", "title": "https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh" }, { "url": "https://www.openwall.com/lists/oss-security/2026/03/30/3", "title": "https://www.openwall.com/lists/oss-security/2026/03/30/3" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/02/4", "title": "http://www.openwall.com/lists/oss-security/2026/04/02/4" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/02/5", "title": "http://www.openwall.com/lists/oss-security/2026/04/02/5" }, { "url": "http://www.openwall.com/lists/oss-security/2026/04/03/6", "title": "http://www.openwall.com/lists/oss-security/2026/04/03/6" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-34714", "title": "https://access.redhat.com/security/cve/CVE-2026-34714" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453139", "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2453139" }, { "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34714.json", "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34714.json" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "cvssV3BaseScore": 8.6, "modificationTime": "2026-04-03T01:25:18.505696Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "cvssV3BaseScore": 8.6, "modificationTime": "2026-04-03T23:30:46.821370Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "cvssV3BaseScore": 8.6, "modificationTime": "2026-04-17T11:08:39.323313Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.6, "cvssVersion": "3.1", "modificationTime": "2026-04-03T01:25:18.505696Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 8.6, "cvssVersion": "3.1", "modificationTime": "2026-04-03T23:30:46.821370Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "assigner": "SUSE", "severity": "high", "baseScore": 8.6, "cvssVersion": "3.1", "modificationTime": "2026-04-17T11:08:39.323313Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `vim` package and not the `vim` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nVim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %{expr} injection occurs with tabpanel lacking P_MLE.\n## Remediation\nUpgrade `Alpine:3.23` `vim` to version 9.2.0272-r0 or higher.\n## References\n- [https://github.com/vim/vim/commit/664701eb7576edb7c7c7d9f2d600815ec1f43459](https://github.com/vim/vim/commit/664701eb7576edb7c7c7d9f2d600815ec1f43459)\n- [https://github.com/vim/vim/releases/tag/v9.2.0272](https://github.com/vim/vim/releases/tag/v9.2.0272)\n- [https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh](https://github.com/vim/vim/security/advisories/GHSA-2gmj-rpqf-pxvh)\n- [https://www.openwall.com/lists/oss-security/2026/03/30/3](https://www.openwall.com/lists/oss-security/2026/03/30/3)\n- [http://www.openwall.com/lists/oss-security/2026/04/02/4](http://www.openwall.com/lists/oss-security/2026/04/02/4)\n- [http://www.openwall.com/lists/oss-security/2026/04/02/5](http://www.openwall.com/lists/oss-security/2026/04/02/5)\n- [http://www.openwall.com/lists/oss-security/2026/04/03/6](http://www.openwall.com/lists/oss-security/2026/04/03/6)\n- [https://access.redhat.com/security/cve/CVE-2026-34714](https://access.redhat.com/security/cve/CVE-2026-34714)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2453139](https://bugzilla.redhat.com/show_bug.cgi?id=2453139)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34714.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34714.json)\n", "epssDetails": { "percentile": "0.43657", "probability": "0.00588", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-34714" ], "CWE": [ "CWE-78" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "vim", "creationTime": "2026-04-01T09:08:24.163184Z", "disclosureTime": "2026-03-30T19:16:26.853000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-01T09:08:24.167366Z", "severityBasedOn": "CVSS", "modificationTime": "2026-09-02T01:30:33.634771Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "vim/xxd@9.1.1942-r0" ], "upgradePath": [ false, "vim/xxd@9.2.0272-r0" ], "isUpgradable": true, "isPatchable": false, "name": "vim/xxd", "version": "9.1.1942-r0", "nearestFixedInVersion": "9.2.0272-r0" }, { "id": "SNYK-ALPINE323-VIM-15907846", "cpes": [], "title": "Directory Traversal", "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<9.2.0280-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "9.2.0280-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.1, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24", "title": "https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "cvssV3BaseScore": 7.1, "modificationTime": "2026-04-21T01:18:17.445219Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L", "cvssV3BaseScore": 4.1, "modificationTime": "2026-04-10T04:02:04.742412Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.1, "cvssVersion": "3.1", "modificationTime": "2026-04-21T01:18:17.445219Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:L", "assigner": "Red Hat", "severity": "medium", "baseScore": 4.1, "cvssVersion": "3.1", "modificationTime": "2026-04-10T04:02:04.742412Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `vim` package and not the `vim` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nVim is an open source, command line text editor. Prior to 9.2.0280, a path traversal bypass in Vim's zip.vim plugin allows overwriting of arbitrary files when opening specially crafted zip archives, circumventing the previous fix for CVE-2025-53906. This vulnerability is fixed in 9.2.0280.\n## Remediation\nUpgrade `Alpine:3.23` `vim` to version 9.2.0280-r0 or higher.\n## References\n- [https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24](https://github.com/vim/vim/security/advisories/GHSA-jc86-w7vm-8p24)\n", "epssDetails": { "percentile": "0.02612", "probability": "0.00126", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-35177" ], "CWE": [ "CWE-22" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "vim", "creationTime": "2026-04-05T11:29:26.853888Z", "disclosureTime": "2026-04-06T18:16:44.003000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-05T11:29:26.860719Z", "severityBasedOn": "CVSS", "modificationTime": "2026-06-23T14:06:09.022398Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "vim/xxd@9.1.1942-r0" ], "upgradePath": [ false, "vim/xxd@9.2.0280-r0" ], "isUpgradable": true, "isPatchable": false, "name": "vim/xxd", "version": "9.1.1942-r0", "nearestFixedInVersion": "9.2.0280-r0" }, { "id": "SNYK-ALPINE323-VIM-15976287", "cpes": [], "title": "Arbitrary Code Injection", "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<9.2.0321-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "9.2.0321-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19", "title": "https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19" }, { "url": "https://github.com/vim/vim/releases/tag/v9.2.0316", "title": "https://github.com/vim/vim/releases/tag/v9.2.0316" }, { "url": "https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6", "title": "https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7.8, "modificationTime": "2026-04-22T17:50:08.098226Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:N", "cvssV3BaseScore": 5, "modificationTime": "2026-04-12T02:23:13.130338Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N", "cvssV3BaseScore": 6, "modificationTime": "2026-05-21T11:05:34.665041Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.8, "cvssVersion": "3.1", "modificationTime": "2026-04-22T17:50:08.098226Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:N", "assigner": "Red Hat", "severity": "medium", "baseScore": 5, "cvssVersion": "3.1", "modificationTime": "2026-04-12T02:23:13.130338Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N", "assigner": "SUSE", "severity": "medium", "baseScore": 6, "cvssVersion": "3.1", "modificationTime": "2026-05-21T11:05:34.665041Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `vim` package and not the `vim` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nVim is an open source, command line text editor. Prior to 9.2.0316, a command injection vulnerability in Vim's netbeans interface allows a malicious netbeans server to execute arbitrary Ex commands when Vim connects to it, via unsanitized strings in the defineAnnoType and specialKeys protocol messages. This vulnerability is fixed in 9.2.0316.\n## Remediation\nUpgrade `Alpine:3.23` `vim` to version 9.2.0321-r0 or higher.\n## References\n- [https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19](https://github.com/vim/vim/commit/7ab76a86048ed492374ac6b19)\n- [https://github.com/vim/vim/releases/tag/v9.2.0316](https://github.com/vim/vim/releases/tag/v9.2.0316)\n- [https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6](https://github.com/vim/vim/security/advisories/GHSA-mr87-rhgv-7pw6)\n", "epssDetails": { "percentile": "0.44802", "probability": "0.00620", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-39881" ], "CWE": [ "CWE-94" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "vim", "creationTime": "2026-04-11T04:28:58.240777Z", "disclosureTime": "2026-04-08T21:17:00.400000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-04-11T04:28:58.246747Z", "severityBasedOn": "CVSS", "modificationTime": "2026-06-15T16:00:26.887869Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "vim/xxd@9.1.1942-r0" ], "upgradePath": [ false, "vim/xxd@9.2.0321-r0" ], "isUpgradable": true, "isPatchable": false, "name": "vim/xxd", "version": "9.1.1942-r0", "nearestFixedInVersion": "9.2.0321-r0" }, { "id": "SNYK-ALPINE323-VIM-16722458", "cpes": [], "title": "OS Command Injection", "CVSSv3": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<9.2.0481-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "9.2.0481-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1", "title": "https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1" }, { "url": "https://github.com/vim/vim/releases/tag/v9.2.0479", "title": "https://github.com/vim/vim/releases/tag/v9.2.0479" }, { "url": "https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w", "title": "https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7, "modificationTime": "2026-05-19T13:26:14.139004Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7, "modificationTime": "2026-05-21T05:28:53.860156Z" }, { "assigner": "SUSE", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7.8, "modificationTime": "2026-06-02T11:07:08.594511Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7, "cvssVersion": "3.1", "modificationTime": "2026-05-19T13:26:14.139004Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7, "cvssVersion": "3.1", "modificationTime": "2026-05-21T05:28:53.860156Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "assigner": "SUSE", "severity": "high", "baseScore": 7.8, "cvssVersion": "3.1", "modificationTime": "2026-06-02T11:07:08.594511Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `vim` package and not the `vim` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nVim is an open source, command line text editor. Prior to 9.2.0479, a command injection vulnerability exists in tar#Vimuntar() in\nruntime/autoload/tar.vim when decompressing .tgz archives on Unix-like systems. The function builds :!gunzip and :!gzip -d commands using shellescape(tartail) without the {special} flag, allowing a crafted archive filename to trigger Vim cmdline-special expansion and execute shell commands in the user's context. This vulnerability is fixed in 9.2.0479.\n## Remediation\nUpgrade `Alpine:3.23` `vim` to version 9.2.0481-r0 or higher.\n## References\n- [https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1](https://github.com/vim/vim/commit/3fb5e58fbc63d86a3e65f1a141b0d67af2aa38a1)\n- [https://github.com/vim/vim/releases/tag/v9.2.0479](https://github.com/vim/vim/releases/tag/v9.2.0479)\n- [https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w](https://github.com/vim/vim/security/advisories/GHSA-2fpv-9ff7-xg5w)\n", "epssDetails": { "percentile": "0.41775", "probability": "0.00552", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-46483" ], "CWE": [ "CWE-78", "CWE-88" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "vim", "creationTime": "2026-05-17T05:05:08.089106Z", "disclosureTime": "2026-05-15T15:16:54.237000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-05-17T05:05:08.094893Z", "severityBasedOn": "CVSS", "modificationTime": "2026-06-23T14:06:04.355741Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "vim/xxd@9.1.1942-r0" ], "upgradePath": [ false, "vim/xxd@9.2.0481-r0" ], "isUpgradable": true, "isPatchable": false, "name": "vim/xxd", "version": "9.1.1942-r0", "nearestFixedInVersion": "9.2.0481-r0" }, { "id": "SNYK-ALPINE323-VIM-16722462", "cpes": [], "title": "Arbitrary Code Injection", "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<9.2.0481-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "9.2.0481-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://access.redhat.com/security/cve/CVE-2026-43961", "title": "https://access.redhat.com/security/cve/CVE-2026-43961" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460434", "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2460434" }, { "url": "https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3", "title": "https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3" }, { "url": "http://www.openwall.com/lists/oss-security/2026/05/14/7", "title": "http://www.openwall.com/lists/oss-security/2026/05/14/7" }, { "url": "https://access.redhat.com/errata/RHSA-2026:57614", "title": "https://access.redhat.com/errata/RHSA-2026:57614" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7.8, "modificationTime": "2026-08-20T01:30:09.056587Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7.8, "modificationTime": "2026-08-20T23:57:25.413443Z" }, { "assigner": "SUSE", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L", "cvssV3BaseScore": 4.8, "modificationTime": "2026-06-02T11:06:46.726152Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.8, "cvssVersion": "3.1", "modificationTime": "2026-08-20T01:30:09.056587Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.8, "cvssVersion": "3.1", "modificationTime": "2026-08-20T23:57:25.413443Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L", "assigner": "SUSE", "severity": "medium", "baseScore": 4.8, "cvssVersion": "3.1", "modificationTime": "2026-06-02T11:06:46.726152Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `vim` package and not the `vim` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nA flaw was found in Vim's netrw plugin. A crafted filename containing quote characters and expression fragments can break out of the quoted context during mark/unmark operations, allowing arbitrary Vimscript execution. This can be leveraged to run shell commands with the privileges of the user running Vim.\n## Remediation\nUpgrade `Alpine:3.23` `vim` to version 9.2.0481-r0 or higher.\n## References\n- [https://access.redhat.com/security/cve/CVE-2026-43961](https://access.redhat.com/security/cve/CVE-2026-43961)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2460434](https://bugzilla.redhat.com/show_bug.cgi?id=2460434)\n- [https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3](https://github.com/vim/vim/security/advisories/GHSA-66hr-7p6x-x5j3)\n- [http://www.openwall.com/lists/oss-security/2026/05/14/7](http://www.openwall.com/lists/oss-security/2026/05/14/7)\n- [https://access.redhat.com/errata/RHSA-2026:57614](https://access.redhat.com/errata/RHSA-2026:57614)\n", "epssDetails": { "percentile": "0.05596", "probability": "0.00159", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-43961" ], "CWE": [ "CWE-94" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "vim", "creationTime": "2026-05-17T05:05:17.573991Z", "disclosureTime": "2026-08-19T14:17:31.793000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-05-17T05:05:17.577330Z", "severityBasedOn": "CVSS", "modificationTime": "2026-09-21T13:14:58.441102Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "vim/xxd@9.1.1942-r0" ], "upgradePath": [ false, "vim/xxd@9.2.0481-r0" ], "isUpgradable": true, "isPatchable": false, "name": "vim/xxd", "version": "9.1.1942-r0", "nearestFixedInVersion": "9.2.0481-r0" }, { "id": "SNYK-ALPINE323-VIM-17328653", "cpes": [], "title": "Arbitrary Code Injection", "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<9.2.0498-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "9.2.0498-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d", "title": "https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d" }, { "url": "https://github.com/vim/vim/releases/tag/v9.2.0561", "title": "https://github.com/vim/vim/releases/tag/v9.2.0561" }, { "url": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c", "title": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7.8, "modificationTime": "2026-06-16T01:18:47.324676Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7.3, "modificationTime": "2026-08-04T05:26:07.859135Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.8, "cvssVersion": "3.1", "modificationTime": "2026-06-16T01:18:47.324676Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-08-04T05:26:07.859135Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `vim` package and not the `vim` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nVim is an open source, command line text editor. Prior to version 9.2.0561, the Python omni-completion script in python3complete.vim for Vim with the +python3 interpreter enabled (and the legacy pythoncomplete.vim for builds with the +python interpreter) executes the import and from statements found in the current buffer through Python's import machinery. Because the buffer's working directory is on sys.path, opening a hostile .py file with a sibling Python package and invoking omni-completion runs that package's top-level code as the editing user. This issue has been patched in version 9.2.0561.\n## Remediation\nUpgrade `Alpine:3.23` `vim` to version 9.2.0498-r0 or higher.\n## References\n- [https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d](https://github.com/vim/vim/commit/4b850457e12e1a678dd209f2868154f7553cbf8d)\n- [https://github.com/vim/vim/releases/tag/v9.2.0561](https://github.com/vim/vim/releases/tag/v9.2.0561)\n- [https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c](https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c)\n", "epssDetails": { "percentile": "0.10005", "probability": "0.00201", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-52858" ], "CWE": [ "CWE-94", "CWE-95", "CWE-829" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "vim", "creationTime": "2026-06-13T03:09:05.533738Z", "disclosureTime": "2026-06-11T19:16:47.487000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-06-13T03:09:05.541780Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-04T05:26:08.273348Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "vim/xxd@9.1.1942-r0" ], "upgradePath": [ false, "vim/xxd@9.2.0498-r0" ], "isUpgradable": true, "isPatchable": false, "name": "vim/xxd", "version": "9.1.1942-r0", "nearestFixedInVersion": "9.2.0498-r0" }, { "id": "SNYK-ALPINE323-VIM-17328654", "cpes": [], "title": "Out-of-bounds Read", "CVSSv3": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<9.2.0567-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "9.2.0567-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 8.2, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19", "title": "https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19" }, { "url": "https://github.com/vim/vim/releases/tag/v9.2.0565", "title": "https://github.com/vim/vim/releases/tag/v9.2.0565" }, { "url": "https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm", "title": "https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "cvssV3BaseScore": 8.2, "modificationTime": "2026-06-16T01:18:46.881366Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "cvssV3BaseScore": 5, "modificationTime": "2026-06-13T06:42:17.179788Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "assigner": "NVD", "severity": "high", "baseScore": 8.2, "cvssVersion": "3.1", "modificationTime": "2026-06-16T01:18:46.881366Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H", "assigner": "Red Hat", "severity": "medium", "baseScore": 5, "cvssVersion": "3.1", "modificationTime": "2026-06-13T06:42:17.179788Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `vim` package and not the `vim` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nVim is an open source, command line text editor. Prior to version 9.2.0565, the update_snapshot() function in src/terminal.c copies the visible terminal screen into the scrollback buffer when a snapshot is taken. For each screen cell it walks the cell's chars[] array with no upper bound, stopping only when it encounters a NUL terminator. When a cell legitimately fills all VTERM_MAX_CHARS_PER_CELL (6) slots — a base character plus five combining marks — the bundled libvterm returns the array without a terminating NUL, so the loop reads past the fixed six-element array and appends the out-of-bounds values to a buffer reserved for only six characters. A program whose output is rendered inside a :terminal window can trigger this with a short byte sequence and no Vim scripting, leading to a crash. This issue has been patched in version 9.2.0565.\n## Remediation\nUpgrade `Alpine:3.23` `vim` to version 9.2.0567-r0 or higher.\n## References\n- [https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19](https://github.com/vim/vim/commit/63680c6d3d52477817b49cd1a66e7aabe8a7aa19)\n- [https://github.com/vim/vim/releases/tag/v9.2.0565](https://github.com/vim/vim/releases/tag/v9.2.0565)\n- [https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm](https://github.com/vim/vim/security/advisories/GHSA-47gw-8gc3-mgcm)\n", "epssDetails": { "percentile": "0.21741", "probability": "0.00303", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-52859" ], "CWE": [ "CWE-125" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "vim", "creationTime": "2026-06-13T03:09:14.136872Z", "disclosureTime": "2026-06-11T19:16:47.627000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-06-13T03:09:14.140643Z", "severityBasedOn": "CVSS", "modificationTime": "2026-06-23T14:06:13.993527Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "vim/xxd@9.1.1942-r0" ], "upgradePath": [ false, "vim/xxd@9.2.0567-r0" ], "isUpgradable": true, "isPatchable": false, "name": "vim/xxd", "version": "9.1.1942-r0", "nearestFixedInVersion": "9.2.0567-r0" }, { "id": "SNYK-ALPINE323-VIM-17328655", "cpes": [], "title": "Arbitrary Code Injection", "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "credit": [ "" ], "semver": { "vulnerable": [ "<9.2.0602-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "9.2.0602-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.8, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2", "title": "https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2" }, { "url": "https://github.com/vim/vim/releases/tag/v9.2.0597", "title": "https://github.com/vim/vim/releases/tag/v9.2.0597" }, { "url": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c", "title": "https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c" }, { "url": "https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468", "title": "https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468" }, { "url": "https://access.redhat.com/security/cve/CVE-2026-52860", "title": "https://access.redhat.com/security/cve/CVE-2026-52860" }, { "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487987", "title": "https://bugzilla.redhat.com/show_bug.cgi?id=2487987" }, { "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52860.json", "title": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52860.json" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 7.8, "modificationTime": "2026-06-16T01:18:47.209220Z" }, { "assigner": "Red Hat", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "cvssV3BaseScore": 8, "modificationTime": "2026-06-19T05:47:23.897734Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "assigner": "NVD", "severity": "high", "baseScore": 7.8, "cvssVersion": "3.1", "modificationTime": "2026-06-16T01:18:47.209220Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "assigner": "Red Hat", "severity": "high", "baseScore": 8, "cvssVersion": "3.1", "modificationTime": "2026-06-19T05:47:23.897734Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `vim` package and not the `vim` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nVim is an open source, command line text editor. Prior to version 9.2.0597, Vim's Python omni-completion executes reconstructed function and class definitions from the current buffer with exec() as part of populating the completion dictionary. Python evaluates function default values, parameter annotations, and class base expressions at definition time, so a hostile buffer can execute attacker-controlled Python expressions during omni-completion. The existing g:pythoncomplete_allow_import mitigation (GHSA-52mc-rq6p-rc7c) does not cover this path, because the attacker-controlled code is not a harvested import/from statement. This issue has been patched in version 9.2.0597.\n## Remediation\nUpgrade `Alpine:3.23` `vim` to version 9.2.0602-r0 or higher.\n## References\n- [https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2](https://github.com/vim/vim/commit/c8c63673bc4253212820626aeeb75999d9a539d2)\n- [https://github.com/vim/vim/releases/tag/v9.2.0597](https://github.com/vim/vim/releases/tag/v9.2.0597)\n- [https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c](https://github.com/vim/vim/security/advisories/GHSA-52mc-rq6p-rc7c)\n- [https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468](https://github.com/vim/vim/security/advisories/GHSA-65p9-mwwx-7468)\n- [https://access.redhat.com/security/cve/CVE-2026-52860](https://access.redhat.com/security/cve/CVE-2026-52860)\n- [https://bugzilla.redhat.com/show_bug.cgi?id=2487987](https://bugzilla.redhat.com/show_bug.cgi?id=2487987)\n- [https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52860.json](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-52860.json)\n", "epssDetails": { "percentile": "0.12863", "probability": "0.00224", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-52860" ], "CWE": [ "CWE-94" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "vim", "creationTime": "2026-06-13T03:09:19.440691Z", "disclosureTime": "2026-06-11T19:16:47.773000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-06-13T03:09:19.443972Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-25T01:30:18.594728Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "vim/xxd@9.1.1942-r0" ], "upgradePath": [ false, "vim/xxd@9.2.0602-r0" ], "isUpgradable": true, "isPatchable": false, "name": "vim/xxd", "version": "9.1.1942-r0", "nearestFixedInVersion": "9.2.0602-r0" }, { "id": "SNYK-ALPINE323-VIM-18916326", "cpes": [], "title": "Arbitrary Command Injection", "CVSSv3": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L", "credit": [ "" ], "semver": { "vulnerable": [ "<9.2.0854-r0" ] }, "exploit": "Not Defined", "fixedIn": [ "9.2.0854-r0" ], "patches": [], "insights": { "triageAdvice": null }, "language": "linux", "severity": "high", "cvssScore": 7.3, "malicious": false, "isDisputed": false, "references": [ { "url": "https://github.com/vim/vim/commit/b2cc9be119d51212bf0d3f2a99", "title": "https://github.com/vim/vim/commit/b2cc9be119d51212bf0d3f2a99" }, { "url": "https://github.com/vim/vim/releases/tag/v9.2.0678", "title": "https://github.com/vim/vim/releases/tag/v9.2.0678" }, { "url": "https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf", "title": "https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf" } ], "cvssDetails": [ { "assigner": "NVD", "severity": "high", "cvssV3Vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L", "cvssV3BaseScore": 7.3, "modificationTime": "2026-06-26T13:28:53.304100Z" }, { "assigner": "Red Hat", "severity": "medium", "cvssV3Vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L", "cvssV3BaseScore": 5.8, "modificationTime": "2026-06-29T05:52:36.135279Z" } ], "cvssSources": [ { "type": "primary", "vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L", "assigner": "NVD", "severity": "high", "baseScore": 7.3, "cvssVersion": "3.1", "modificationTime": "2026-06-26T13:28:53.304100Z" }, { "type": "secondary", "vector": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:H/A:L", "assigner": "Red Hat", "severity": "medium", "baseScore": 5.8, "cvssVersion": "3.1", "modificationTime": "2026-06-29T05:52:36.135279Z" } ], "description": "## NVD Description\n**_Note:_** _Versions mentioned in the description apply only to the upstream `vim` package and not the `vim` package as distributed by `Alpine`._\n_See `How to fix?` for `Alpine:3.23` relevant fixed versions and status._\n\nVim is an open source, command line text editor. From 9.1.1784 until 9.2.0678, when the bundled zip plugin autoload/zip.vim falls back to PowerShell to browse, read, extract, update or delete entries in a zip archive, it builds the PowerShell command by inserting archive entry names that are quoted only for the shell, not for PowerShell. A crafted entry name can break out of the intended string context and cause PowerShell to execute arbitrary commands with the privileges of the user running Vim, triggered by opening, viewing or extracting the archive. This vulnerability is fixed in 9.2.0678.\n## Remediation\nUpgrade `Alpine:3.23` `vim` to version 9.2.0854-r0 or higher.\n## References\n- [https://github.com/vim/vim/commit/b2cc9be119d51212bf0d3f2a99](https://github.com/vim/vim/commit/b2cc9be119d51212bf0d3f2a99)\n- [https://github.com/vim/vim/releases/tag/v9.2.0678](https://github.com/vim/vim/releases/tag/v9.2.0678)\n- [https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf](https://github.com/vim/vim/security/advisories/GHSA-x5fg-h5w9-9frf)\n", "epssDetails": { "percentile": "0.10809", "probability": "0.00208", "modelVersion": "v2026.06.15" }, "identifiers": { "CVE": [ "CVE-2026-57453" ], "CWE": [ "CWE-77" ], "ALTERNATIVE": [] }, "nvdSeverity": "high", "packageName": "vim", "creationTime": "2026-08-19T02:58:14.359379Z", "disclosureTime": "2026-06-25T16:16:42.520000Z", "exploitDetails": { "sources": [], "maturityLevels": [ { "type": "secondary", "level": "Not Defined", "format": "CVSSv3" }, { "type": "primary", "level": "Not Defined", "format": "CVSSv4" } ] }, "packageManager": "alpine:3.23", "publicationTime": "2026-08-19T02:58:14.364262Z", "severityBasedOn": "CVSS", "modificationTime": "2026-08-24T14:05:07.465977Z", "socialTrendAlert": false, "relativeImportance": null, "severityWithCritical": "high", "from": [ "docker-image|docker.io/scopear/docker-nginx@1.11.19_32e7e85.111", "vim/xxd@9.1.1942-r0" ], "upgradePath": [ false, "vim/xxd@9.2.0854-r0" ], "isUpgradable": true, "isPatchable": false, "name": "vim/xxd", "version": "9.1.1942-r0", "nearestFixedInVersion": "9.2.0854-r0" } ], "ok": false, "dependencyCount": 54, "org": "sean.graham", "policy": "# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.\nversion: v1.25.1\nignore: {}\npatch: {}\n", "isPrivate": true, "licensesPolicy": { "severities": {}, "orgLicenseRules": { "AGPL-1.0": { "licenseType": "AGPL-1.0", "severity": "high", "instructions": "" }, "AGPL-3.0": { "licenseType": "AGPL-3.0", "severity": "high", "instructions": "" }, "Artistic-1.0": { "licenseType": "Artistic-1.0", "severity": "medium", "instructions": "" }, "Artistic-2.0": { "licenseType": "Artistic-2.0", "severity": "medium", "instructions": "" }, "CDDL-1.0": { "licenseType": "CDDL-1.0", "severity": "medium", "instructions": "" }, "CPOL-1.02": { "licenseType": "CPOL-1.02", "severity": "high", "instructions": "" }, "EPL-1.0": { "licenseType": "EPL-1.0", "severity": "medium", "instructions": "" }, "GPL-2.0": { "licenseType": "GPL-2.0", "severity": "high", "instructions": "" }, "GPL-3.0": { "licenseType": "GPL-3.0", "severity": "high", "instructions": "" }, "LGPL-2.0": { "licenseType": "LGPL-2.0", "severity": "medium", "instructions": "" }, "LGPL-2.1": { "licenseType": "LGPL-2.1", "severity": "medium", "instructions": "" }, "LGPL-3.0": { "licenseType": "LGPL-3.0", "severity": "medium", "instructions": "" }, "MPL-1.1": { "licenseType": "MPL-1.1", "severity": "medium", "instructions": "" }, "MPL-2.0": { "licenseType": "MPL-2.0", "severity": "medium", "instructions": "" }, "MS-RL": { "licenseType": "MS-RL", "severity": "medium", "instructions": "" }, "SimPL-2.0": { "licenseType": "SimPL-2.0", "severity": "high", "instructions": "" } } }, "packageManager": "apk", "ignoreSettings": { "adminOnly": false, "reasonRequired": false, "disregardFilesystemIgnores": false, "autoApproveIgnores": false, "approvalWorkflowEnabled": false }, "docker": { "os": { "prettyName": "Alpine Linux v3.23" } }, "summary": "110 high or critical severity vulnerable dependency paths", "severityThreshold": "high", "filesystemPolicy": false, "filtered": { "ignore": [], "patch": [] }, "uniqueCount": 20, "projectName": "docker-image|docker.io/scopear/docker-nginx", "platform": "linux/amd64", "hasUnknownVersions": false, "path": "docker.io/scopear/docker-nginx:1.11.19_32e7e85.111/scopear/docker-nginx" }