StackRadar

CVE-2024-26130

High

Advisory

Published 21 Feb 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
56th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
184
of 17,781 indexed, latest versions
Container images
186
deployed by those charts
Fix available
2 of 2
affected packages

cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

Carried by container images the latest versions of 184 of 17,781 indexed charts deploy, on 186 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.9, 2.3, 2.4.1, 2.5+27 more42.0.4186
python-cryptographydeb38.0.4-3, 41.0.7-4build338.0.4-3+deb12u1, 41.0.7-4ubuntu0.12
OSV records
DEBIAN-CVE-2024-26130GHSA-6vqw-3v5j-54x4PYSEC-2024-225UBUNTU-CVE-2024-26130
Also known as
USN-6673-3

Charts affected

184 by stars
ChartLatestAffected imagesRadar Score
snappassappuio1.0.01 of 3See more

snappass appuio 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
samueldg/snappass:latest3987195edbe6
cryptography@2.8
42.0.4

Open the chart page →

1,488
authorizationassist-iot-authorisation0.1.01 of 2See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
assistiot/authorization_db:latestc3adbab6a3e7
cryptography@41.0.3
42.0.4

Open the chart page →

5,537
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
cryptography@41.0.4
42.0.4
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
cryptography@41.0.4
42.0.4

Open the chart page →

14,728
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
cryptography@41.0.7
42.0.4

Open the chart page →

9,412
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
cryptography@41.0.7
42.0.4

Open the chart page →

2,727
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
cryptography@2.8
42.0.4

Open the chart page →

2,018
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
cryptography@2.8
42.0.4

Open the chart page →

2,504
duoauthproxy-radius-simplecaerus0.1.01 of 1See more

duoauthproxy-radius-simple caerus 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
42.0.4

Open the chart page →

2,974
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
cryptography@40.0.2
42.0.4

Open the chart page →

2,507
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
cryptography@2.8
42.0.4

Open the chart page →

3,891
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
cryptography@2.6.1
42.0.4

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
cryptography@2.6.1
42.0.4

Open the chart page →

1,310
kube-ops-viewchristianhuthVerified publisher8.3.31 of 1See more

kube-ops-view christianhuth 8.3.3

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
cryptography@40.0.2
42.0.4

Open the chart page →

1,227
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
cryptography@2.6.1
42.0.4

Open the chart page →

1,382
prometheus-operatorcloudnativeapp6.4.01 of 7See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
cryptography@2.7
42.0.4

Open the chart page →

2,954
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
cryptography@2.6.1
42.0.4

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
cryptography@1.9
42.0.4

Open the chart page →

5,060
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
cryptography@41.0.3
42.0.4

Open the chart page →

25,151
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4

Open the chart page →

12,457
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4

Open the chart page →

12,131
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4

Open the chart page →

11,592
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
cryptography@38.0.1
42.0.4

Open the chart page →

16,069
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
cryptography@2.5
42.0.4

Open the chart page →

3,871
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
cryptography@39.0.1
42.0.4

Open the chart page →

2,348
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
cryptography@41.0.4
42.0.4

Open the chart page →

6,179
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
cryptography@2.7
42.0.4

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
cryptography@2.7
42.0.4

Open the chart page →

24,335
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
cryptography@41.0.1
42.0.4

Open the chart page →

14,856
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
42.0.4

Open the chart page →

10,466
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
42.0.4

Open the chart page →

10,466
autonodelabeldjjudas21Verified publisher0.0.101 of 1See more

autonodelabel djjudas21 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
djjudas21/autonodelabel:0.0.6f17233350c4f
cryptography@41.0.3
42.0.4

Open the chart page →

1,304
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
cryptography@2.6.1
42.0.4

Open the chart page →

4,217
dnation-kubernetes-linterdnationcloud0.1.21 of 1See more

dnation-kubernetes-linter dnationcloud 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
cryptography@2.6.1
42.0.4

Open the chart page →

2,114
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
cryptography@42.0.0
42.0.4

Open the chart page →

24,917
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
cryptography@2.8
42.0.4

Open the chart page →

4,550
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
cryptography@2.9
42.0.4

Open the chart page →

11,174
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
cryptography@2.8
42.0.4

Open the chart page →

5,055
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
cryptography@38.0.4
42.0.4

Open the chart page →

30,159
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
cryptography@38.0.4
42.0.4

Open the chart page →

25,122
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
cryptography@39.0.0
42.0.4

Open the chart page →

4,085
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
cryptography@2.8
42.0.4

Open the chart page →

14,673
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cryptography@2.8
42.0.4

Open the chart page →

64,489
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
cryptography@41.0.7
42.0.4

Open the chart page →

5,292
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
cryptography@2.6.1
42.0.4

Open the chart page →

3,474
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
cryptography@35.0.0
42.0.4

Open the chart page →

2,643
pgadminhalkeye1.0.01 of 1See more

pgadmin halkeye 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
chorss/docker-pgadmin4:4.115c549cacb8ab
cryptography@2.7
42.0.4

Open the chart page →

2,555
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
cryptography@41.0.1
42.0.4

Open the chart page →

4,293
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
42.0.4

Open the chart page →

7,984
notediscoveryhelmforgeVerified publisher2.0.11 of 1See more

notediscovery helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
cryptography@41.0.7
42.0.4

Open the chart page →

1,241
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
cryptography@38.0.4
42.0.4

Open the chart page →

30,099

Container images carrying it

186 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
voltha/voltha-voltha:1.6.0ff596b62de59
cryptography@2.4.1
42.0.4
1
weblate/weblate:3.11.3-182848df56ecd
cryptography@2.8
42.0.4
1
wiremind/pghoard:12-2019-11-264dea42c8166c
cryptography@2.8
42.0.4
1
ygqygq2/mysql-exec-sql:latest54f30def1558
cryptography@41.0.3
42.0.4
1
zurdi15/romm:2.3.12db88fe44c89
cryptography@41.0.6
42.0.4
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
cryptography@41.0.7
42.0.4
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
cryptography@41.0.7
42.0.4
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
cryptography@41.0.7
42.0.4
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
cryptography@41.0.7
42.0.4
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
cryptography@38.0.3
42.0.4
1
ghcr.io/dask/dask:2024.1.0080150de7d86
cryptography@41.0.3
42.0.4
1
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
cryptography@41.0.7
42.0.4
1
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
cryptography@41.0.7
42.0.4
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
cryptography@41.0.4
42.0.4
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
cryptography@41.0.7
42.0.4
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
cryptography@41.0.7
42.0.4
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
cryptography@41.0.7
42.0.4
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
cryptography@41.0.7
42.0.4
1
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
cryptography@41.0.7
42.0.4
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
cryptography@41.0.7
42.0.4
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
cryptography@41.0.7
42.0.4
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
cryptography@41.0.7
42.0.4
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
cryptography@41.0.7
42.0.4
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
cryptography@41.0.7
42.0.4
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
cryptography@41.0.7
42.0.4
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
cryptography@41.0.7
42.0.4
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
cryptography@41.0.7
42.0.4
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
cryptography@41.0.7
42.0.4
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
cryptography@39.0.1
42.0.4
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
cryptography@38.0.4
python-cryptography@38.0.4-3
42.0.4
38.0.4-3+deb12u1
1
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
cryptography@41.0.7
42.0.4
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
cryptography@41.0.3
42.0.4
1
quay.io/freeipa/freeipa-server:fedora-39-4.11.1d422ee50c2c3
cryptography@41.0.7
42.0.4
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
cryptography@41.0.5
42.0.4
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
cryptography@38.0.1
42.0.4
1
quay.io/stackgres/operator:1.19.1f241b0b20326
cryptography@41.0.5
42.0.4
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.