StackRadar

CVE-2024-26130

High

Advisory

Published 21 Feb 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
56th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
184
of 17,781 indexed, latest versions
Container images
186
deployed by those charts
Fix available
2 of 2
affected packages

cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

Carried by container images the latest versions of 184 of 17,781 indexed charts deploy, on 186 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.9, 2.3, 2.4.1, 2.5+27 more42.0.4186
python-cryptographydeb38.0.4-3, 41.0.7-4build338.0.4-3+deb12u1, 41.0.7-4ubuntu0.12
OSV records
DEBIAN-CVE-2024-26130GHSA-6vqw-3v5j-54x4PYSEC-2024-225UBUNTU-CVE-2024-26130
Also known as
USN-6673-3

Charts affected

184 by stars
ChartLatestAffected imagesRadar Score
snappassappuio1.0.01 of 3See more

snappass appuio 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
samueldg/snappass:latest3987195edbe6
cryptography@2.8
42.0.4

Open the chart page →

1,488
authorizationassist-iot-authorisation0.1.01 of 2See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
assistiot/authorization_db:latestc3adbab6a3e7
cryptography@41.0.3
42.0.4

Open the chart page →

5,537
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
cryptography@41.0.4
42.0.4
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
cryptography@41.0.4
42.0.4

Open the chart page →

14,728
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
cryptography@41.0.7
42.0.4

Open the chart page →

9,412
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
cryptography@41.0.7
42.0.4

Open the chart page →

2,727
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
cryptography@2.8
42.0.4

Open the chart page →

2,018
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
cryptography@2.8
42.0.4

Open the chart page →

2,504
duoauthproxy-radius-simplecaerus0.1.01 of 1See more

duoauthproxy-radius-simple caerus 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
42.0.4

Open the chart page →

2,974
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
cryptography@40.0.2
42.0.4

Open the chart page →

2,507
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
cryptography@2.8
42.0.4

Open the chart page →

3,891
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
cryptography@2.6.1
42.0.4

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
cryptography@2.6.1
42.0.4

Open the chart page →

1,310
kube-ops-viewchristianhuthVerified publisher8.3.31 of 1See more

kube-ops-view christianhuth 8.3.3

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
cryptography@40.0.2
42.0.4

Open the chart page →

1,227
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
cryptography@2.6.1
42.0.4

Open the chart page →

1,382
prometheus-operatorcloudnativeapp6.4.01 of 7See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
cryptography@2.7
42.0.4

Open the chart page →

2,954
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
cryptography@2.6.1
42.0.4

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
cryptography@1.9
42.0.4

Open the chart page →

5,060
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
cryptography@41.0.3
42.0.4

Open the chart page →

25,151
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
cryptography@38.0.1
42.0.4

Open the chart page →

16,069
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
cryptography@2.5
42.0.4

Open the chart page →

3,871
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
cryptography@39.0.1
42.0.4

Open the chart page →

2,348
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
cryptography@41.0.4
42.0.4

Open the chart page →

6,179
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
cryptography@2.7
42.0.4

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
cryptography@2.7
42.0.4

Open the chart page →

24,335
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
cryptography@41.0.1
42.0.4

Open the chart page →

14,856
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
42.0.4

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
42.0.4

Open the chart page →

10,466
autonodelabeldjjudas21Verified publisher0.0.101 of 1See more

autonodelabel djjudas21 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
djjudas21/autonodelabel:0.0.6f17233350c4f
cryptography@41.0.3
42.0.4

Open the chart page →

1,304
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
cryptography@2.6.1
42.0.4

Open the chart page →

4,217
dnation-kubernetes-linterdnationcloud0.1.21 of 1See more

dnation-kubernetes-linter dnationcloud 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
cryptography@2.6.1
42.0.4

Open the chart page →

2,114
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
cryptography@42.0.0
42.0.4

Open the chart page →

24,917
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
cryptography@2.8
42.0.4

Open the chart page →

4,550
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
cryptography@2.9
42.0.4

Open the chart page →

11,174
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
cryptography@2.8
42.0.4

Open the chart page →

5,055
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
cryptography@38.0.4
42.0.4

Open the chart page →

30,159
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
cryptography@38.0.4
42.0.4

Open the chart page →

25,122
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
cryptography@39.0.0
42.0.4

Open the chart page →

4,085
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
cryptography@2.8
42.0.4

Open the chart page →

14,673
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cryptography@2.8
42.0.4

Open the chart page →

64,489
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
cryptography@41.0.7
42.0.4

Open the chart page →

5,292
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
cryptography@2.6.1
42.0.4

Open the chart page →

3,474
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
cryptography@35.0.0
42.0.4

Open the chart page →

2,643
pgadminhalkeye1.0.01 of 1See more

pgadmin halkeye 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
chorss/docker-pgadmin4:4.115c549cacb8ab
cryptography@2.7
42.0.4

Open the chart page →

2,555
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
cryptography@41.0.1
42.0.4

Open the chart page →

4,293
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
42.0.4

Open the chart page →

7,984
notediscoveryhelmforgeVerified publisher2.0.11 of 1See more

notediscovery helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
cryptography@41.0.7
42.0.4

Open the chart page →

1,241
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
cryptography@38.0.4
42.0.4

Open the chart page →

30,099

Container images carrying it

186 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
esphome/esphome:1.18.03f51ec10e823
cryptography@2.6.1
42.0.4
1
esphome/esphome:2024.3.09ab8cc88b28c
cryptography@42.0.2
42.0.4
1
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
42.0.4
1
evk02/mlflow:2.2.1ef6ff257ef35
cryptography@39.0.2
42.0.4
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
cryptography@39.0.0
42.0.4
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cryptography@2.8
42.0.4
1
flanksource/batch-runner:v1.0.44689687a7cf95
cryptography@41.0.7
42.0.4
1
fossology/fossology:4.2.18bd1f22ba7bb
cryptography@38.0.3
42.0.4
1
galaxy/cloudman-server:lateste5c265fe9fcd
cryptography@38.0.1
42.0.4
1
getsentry/sentry-kubernetes:latest6ac37974fd2a
cryptography@2.6.1
42.0.4
1
goofball222/pritunl:1.32.3602.807bf26032dfce
cryptography@38.0.4
42.0.4
1
healthchecks/healthchecks:v2.8.1e82bb0836e30
cryptography@39.0.2
42.0.4
1
hhyo/archery:v1.9.11aa41843419e
cryptography@38.0.1
42.0.4
1
hjacobs/kube-downscaler:23.2.05d328c003efe
cryptography@39.0.1
42.0.4
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
cryptography@41.0.1
42.0.4
1
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
cryptography@40.0.2
42.0.4
1
hjacobs/kube-resource-report:22.11.0c173cd02f5af
cryptography@38.0.4
42.0.4
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
cryptography@41.0.1
42.0.4
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
cryptography@41.0.4
42.0.4
1
homeassistant/home-assistant:2023.12.48d000332b09b
cryptography@41.0.7
42.0.4
1
i4trust/activation-service:2.2.09f3719176893
cryptography@41.0.1
42.0.4
1
jertel/elastalert2:2.2.34dcc0ef93efc
cryptography@35.0.0
42.0.4
1
jmferrer/azure-devops-agent:latest030f68ec6998
cryptography@2.8
42.0.4
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
cryptography@38.0.4
42.0.4
1
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
cryptography@41.0.3
42.0.4
1
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
cryptography@41.0.3
42.0.4
1
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
cryptography@41.0.3
42.0.4
1
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
cryptography@2.7
42.0.4
1
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
cryptography@2.6.1
42.0.4
1
lib42/deluge:20c4d1d326f95
cryptography@39.0.2
42.0.4
1
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
cryptography@2.5
42.0.4
1
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
cryptography@2.8
42.0.4
1
linuxserver/healthchecks:2.7.2023033194696dab3c50
cryptography@39.0.2
42.0.4
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
cryptography@2.8
42.0.4
1
lnbitsdocker/lnbits-legend:latest26fae6327477
cryptography@41.0.7
42.0.4
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
cryptography@40.0.2
42.0.4
1
lncm/specter-desktop:v0.10.4bca14d04397d
cryptography@3.2
42.0.4
1
localstack/localstack:3.19d278167f2b7
cryptography@41.0.7
42.0.4
1
louislam/uptime-kuma:2.2.1-slim059b49d64739
cryptography@38.0.4
42.0.4
1
louislam/uptime-kuma:1.22.10b55bcb83a1c
cryptography@2.6.1
42.0.4
1
louislam/uptime-kuma:13d632903e6af
cryptography@2.6.1
42.0.4
1
louislam/uptime-kuma:2.5.33e24e96c89ef
cryptography@38.0.4
42.0.4
1
louislam/uptime-kuma:2.0.24c364ef96aad
cryptography@38.0.4
42.0.4
1
louislam/uptime-kuma:2.4.091e963bfda56
cryptography@38.0.4
42.0.4
1
louislam/uptime-kuma:1.23.1396510915e6be
cryptography@2.6.1
42.0.4
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
cryptography@38.0.4
42.0.4
1
louislam/uptime-kuma:1.17.1a4eab252e5a2
cryptography@2.6.1
42.0.4
1
louislam/uptime-kuma:1.18.5a84767d7934f
cryptography@2.6.1
42.0.4
1
louislam/uptime-kuma:1.23.12bc6f244ecf27
cryptography@2.6.1
42.0.4
1
marcoimme/oidcmock:latestb6035c0721a8
cryptography@42.0.0
42.0.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.