StackRadar

CVE-2024-26130

High

Advisory

Published 21 Feb 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
56th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
184
of 17,781 indexed, latest versions
Container images
186
deployed by those charts
Fix available
2 of 2
affected packages

cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

Carried by container images the latest versions of 184 of 17,781 indexed charts deploy, on 186 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.9, 2.3, 2.4.1, 2.5+27 more42.0.4186
python-cryptographydeb38.0.4-3, 41.0.7-4build338.0.4-3+deb12u1, 41.0.7-4ubuntu0.12
OSV records
DEBIAN-CVE-2024-26130GHSA-6vqw-3v5j-54x4PYSEC-2024-225UBUNTU-CVE-2024-26130
Also known as
USN-6673-3

Charts affected

184 by stars
ChartLatestAffected imagesRadar Score
snappassappuio1.0.01 of 3See more

snappass appuio 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
samueldg/snappass:latest3987195edbe6
cryptography@2.8
42.0.4

Open the chart page →

1,488
authorizationassist-iot-authorisation0.1.01 of 2See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
assistiot/authorization_db:latestc3adbab6a3e7
cryptography@41.0.3
42.0.4

Open the chart page →

5,537
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
cryptography@41.0.4
42.0.4
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
cryptography@41.0.4
42.0.4

Open the chart page →

14,728
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
cryptography@41.0.7
42.0.4

Open the chart page →

9,412
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
cryptography@41.0.7
42.0.4

Open the chart page →

2,727
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
cryptography@2.8
42.0.4

Open the chart page →

2,018
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
cryptography@2.8
42.0.4

Open the chart page →

2,504
duoauthproxy-radius-simplecaerus0.1.01 of 1See more

duoauthproxy-radius-simple caerus 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
42.0.4

Open the chart page →

2,974
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
cryptography@40.0.2
42.0.4

Open the chart page →

2,507
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
cryptography@2.8
42.0.4

Open the chart page →

3,891
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
cryptography@2.6.1
42.0.4

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
cryptography@2.6.1
42.0.4

Open the chart page →

1,310
kube-ops-viewchristianhuthVerified publisher8.3.31 of 1See more

kube-ops-view christianhuth 8.3.3

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
cryptography@40.0.2
42.0.4

Open the chart page →

1,227
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
cryptography@2.6.1
42.0.4

Open the chart page →

1,382
prometheus-operatorcloudnativeapp6.4.01 of 7See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
cryptography@2.7
42.0.4

Open the chart page →

2,954
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
cryptography@2.6.1
42.0.4

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
cryptography@1.9
42.0.4

Open the chart page →

5,060
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
cryptography@41.0.3
42.0.4

Open the chart page →

25,151
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
cryptography@38.0.1
42.0.4

Open the chart page →

16,069
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
cryptography@2.5
42.0.4

Open the chart page →

3,871
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
cryptography@39.0.1
42.0.4

Open the chart page →

2,348
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
cryptography@41.0.4
42.0.4

Open the chart page →

6,179
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
cryptography@2.7
42.0.4

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
cryptography@2.7
42.0.4

Open the chart page →

24,335
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
cryptography@41.0.1
42.0.4

Open the chart page →

14,856
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
42.0.4

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
42.0.4

Open the chart page →

10,466
autonodelabeldjjudas21Verified publisher0.0.101 of 1See more

autonodelabel djjudas21 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
djjudas21/autonodelabel:0.0.6f17233350c4f
cryptography@41.0.3
42.0.4

Open the chart page →

1,304
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
cryptography@2.6.1
42.0.4

Open the chart page →

4,217
dnation-kubernetes-linterdnationcloud0.1.21 of 1See more

dnation-kubernetes-linter dnationcloud 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
cryptography@2.6.1
42.0.4

Open the chart page →

2,114
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
cryptography@42.0.0
42.0.4

Open the chart page →

24,917
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
cryptography@2.8
42.0.4

Open the chart page →

4,550
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
cryptography@2.9
42.0.4

Open the chart page →

11,174
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
cryptography@2.8
42.0.4

Open the chart page →

5,055
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
cryptography@38.0.4
42.0.4

Open the chart page →

30,159
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
cryptography@38.0.4
42.0.4

Open the chart page →

25,122
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
cryptography@39.0.0
42.0.4

Open the chart page →

4,085
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
cryptography@2.8
42.0.4

Open the chart page →

14,673
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cryptography@2.8
42.0.4

Open the chart page →

64,489
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
cryptography@41.0.7
42.0.4

Open the chart page →

5,292
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
cryptography@2.6.1
42.0.4

Open the chart page →

3,474
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
cryptography@35.0.0
42.0.4

Open the chart page →

2,643
pgadminhalkeye1.0.01 of 1See more

pgadmin halkeye 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
chorss/docker-pgadmin4:4.115c549cacb8ab
cryptography@2.7
42.0.4

Open the chart page →

2,555
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
cryptography@41.0.1
42.0.4

Open the chart page →

4,293
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
42.0.4

Open the chart page →

7,984
notediscoveryhelmforgeVerified publisher2.0.11 of 1See more

notediscovery helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
cryptography@41.0.7
42.0.4

Open the chart page →

1,241
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
cryptography@38.0.4
42.0.4

Open the chart page →

30,099

Container images carrying it

186 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
matrixdotorg/synapse:v1.78.0def97fd537d8
cryptography@39.0.1
42.0.4
1
milesmcc/shynet:v0.13.1ba54f7797a6b
cryptography@41.0.0
42.0.4
1
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
cryptography@3.0
42.0.4
1
mozilla/syncserver:latest016162bf39d8
cryptography@2.6.1
42.0.4
1
mysql/mysql-cluster:8.0.20e4ea36622cdd
cryptography@2.8
42.0.4
1
ncsapolyglot/converters-ebook-convert:latest438d82cdbdb5
cryptography@2.3
42.0.4
1
opendatacube/restcube:latest91870111837c
cryptography@2.7
42.0.4
1
opendatacube/wms:latest1b90cdf68831
cryptography@2.7
42.0.4
1
openspeedtest/latest:v2.0.0d4d62f4b7d85
cryptography@38.0.3
42.0.4
1
openvpn/openvpn-as:latest2253c10ec652
cryptography@41.0.7
42.0.4
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
cryptography@2.5
42.0.4
1
pangeo/base-notebook:2024.01.155fbe688a4f80
cryptography@41.0.3
42.0.4
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
cryptography@2.8
42.0.4
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
cryptography@41.0.3
42.0.4
1
pryorda/vmware_exporter:v0.18.479925e63e59f
cryptography@38.0.1
42.0.4
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
cryptography@39.0.2
42.0.4
1
pyaephyohein/mysql2s3bk:alphafdee05f2d441
cryptography@41.0.3
42.0.4
1
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
cryptography@41.0.7
42.0.4
1
qonstrukt/php:8.4-v8-apache089af7925aa1
cryptography@41.0.7
42.0.4
1
redash/redash:10.0.0.b503639392753c0376
cryptography@2.8
42.0.4
1
redislabs/redisinsight:1.14.0b03ab1426d0d
cryptography@39.0.1
42.0.4
1
saltstack/salt:3006.3e9c7906b7a5c
cryptography@41.0.3
42.0.4
1
samueldg/snappass:latest3987195edbe6
cryptography@2.8
42.0.4
1
seafileltd/seafile-mc:9.0.106693911bcc40
cryptography@38.0.4
42.0.4
1
seafileltd/seafile-mc:10.0.170628f29c663
cryptography@41.0.1
42.0.4
1
seafileltd/seafile-mc:9.0.97ac833196f60
cryptography@38.0.1
42.0.4
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
cryptography@3.4
42.0.4
1
semaphoreui/semaphore:v2.9.645b50bc11833f
cryptography@41.0.3
42.0.4
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
cryptography@2.8
42.0.4
1
stackstorm/st2actionrunner:3.888235ba70cad
cryptography@39.0.1
42.0.4
1
stackstorm/st2api:3.86f56d239d280
cryptography@39.0.1
42.0.4
1
stackstorm/st2auth:3.833ecfda16608
cryptography@39.0.1
42.0.4
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
cryptography@39.0.1
42.0.4
1
stackstorm/st2notifier:3.8f190a6212195
cryptography@39.0.1
42.0.4
1
stackstorm/st2rulesengine:3.8259503496ff9
cryptography@39.0.1
42.0.4
1
stackstorm/st2scheduler:3.8b1de2055c362
cryptography@39.0.1
42.0.4
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
cryptography@39.0.1
42.0.4
1
stackstorm/st2stream:3.81c8904a3bf67
cryptography@39.0.1
42.0.4
1
stackstorm/st2timersengine:3.81bf35bfaf00c
cryptography@39.0.1
42.0.4
1
stackstorm/st2workflowengine:3.819fdfffdbba8
cryptography@39.0.1
42.0.4
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
cryptography@2.6.1
42.0.4
1
supabase/realtime:v2.102.3aa1c92c0cf32
cryptography@38.0.4
42.0.4
1
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
cryptography@40.0.2
42.0.4
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cryptography@2.5
42.0.4
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
cryptography@39.0.1
42.0.4
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
cryptography@36.0.0
42.0.4
1
voltha/voltha-cli:1.6.0c4e41e92f046
cryptography@2.4.1
42.0.4
1
voltha/voltha-netconf:1.6.037f80524c207
cryptography@2.4.1
42.0.4
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
cryptography@2.4.1
42.0.4
1
voltha/voltha-tester:1.7.0655c3048a602
cryptography@2.7
42.0.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.