StackRadar

CVE-2024-26130

High

Advisory

Published 21 Feb 2024In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
56th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
185
of 17,787 indexed, latest versions
Container images
187
deployed by those charts
Fix available
2 of 2
affected packages

cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

Carried by container images the latest versions of 185 of 17,787 indexed charts deploy, on 187 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.9, 2.3, 2.4.1, 2.5+27 more42.0.4187
python-cryptographydeb38.0.4-3, 41.0.7-4build338.0.4-3+deb12u1, 41.0.7-4ubuntu0.12
OSV records
DEBIAN-CVE-2024-26130GHSA-6vqw-3v5j-54x4PYSEC-2024-225UBUNTU-CVE-2024-26130
Also known as
USN-6673-3

Charts affected

185 by stars
ChartLatestAffected imagesRadar Score
snappassappuio1.0.01 of 3See more

snappass appuio 1.0.0

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
samueldg/snappass:latest3987195edbe6
cryptography@2.8
42.0.4

Open the chart page →

1,488
authorizationassist-iot-authorisation0.1.01 of 2See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
assistiot/authorization_db:latestc3adbab6a3e7
cryptography@41.0.3
42.0.4

Open the chart page →

5,536
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
cryptography@41.0.4
42.0.4
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
cryptography@41.0.4
42.0.4

Open the chart page →

14,725
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
cryptography@41.0.7
42.0.4

Open the chart page →

8,555
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
cryptography@41.0.7
42.0.4

Open the chart page →

2,738
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
cryptography@2.8
42.0.4

Open the chart page →

2,018
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
cryptography@2.8
42.0.4

Open the chart page →

2,505
duoauthproxy-radius-simplecaerus0.1.01 of 1See more

duoauthproxy-radius-simple caerus 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
42.0.4

Open the chart page →

3,012
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
cryptography@40.0.2
42.0.4

Open the chart page →

2,507
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
cryptography@2.8
42.0.4

Open the chart page →

3,891
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
cryptography@2.6.1
42.0.4

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
cryptography@2.6.1
42.0.4

Open the chart page →

1,310
kube-ops-viewchristianhuthVerified publisher8.3.31 of 1See more

kube-ops-view christianhuth 8.3.3

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
cryptography@40.0.2
42.0.4

Open the chart page →

1,227
syncserverchristianhuthVerified publisher1.3.01 of 1See more

syncserver christianhuth 1.3.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
mozilla/syncserver:latest016162bf39d8
cryptography@2.6.1
42.0.4

Open the chart page →

1,382
prometheus-operatorcloudnativeapp6.4.01 of 7See more

prometheus-operator cloudnativeapp 6.4.0

1 of the 7 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.186eb52513d59e
cryptography@2.7
42.0.4

Open the chart page →

2,954
sentry-kubernetescloudnativeapp0.2.01 of 1See more

sentry-kubernetes cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
getsentry/sentry-kubernetes:latest6ac37974fd2a
cryptography@2.6.1
42.0.4

Open the chart page →

1,415
supersetcloudnativeapp1.1.61 of 1See more

superset cloudnativeapp 1.1.6

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
amancevice/superset:0.28.1c8c04bfe3d66
cryptography@1.9
42.0.4

Open the chart page →

5,060
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
cryptography@41.0.3
42.0.4

Open the chart page →

25,152
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4

Open the chart page →

12,505
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4

Open the chart page →

12,176
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4

Open the chart page →

11,640
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
cryptography@38.0.1
42.0.4

Open the chart page →

16,117
couchpotatocronce0.0.11 of 1See more

couchpotato cronce 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls389cd8d5fb1ac
cryptography@2.5
42.0.4

Open the chart page →

3,871
wopiservercs3orgOfficialVerified publisher0.9.21 of 1See more

wopiserver cs3org 0.9.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
cs3org/wopiserver:v9.4.202a9e78757b4
cryptography@39.0.1
42.0.4

Open the chart page →

2,348
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
cryptography@41.0.4
42.0.4

Open the chart page →

6,178
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
cryptography@2.7
42.0.4

Open the chart page →

27,749
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
cryptography@2.7
42.0.4

Open the chart page →

24,356
seafilederp3.2.01 of 1See more

seafile derp 3.2.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:10.0.170628f29c663
cryptography@41.0.1
42.0.4

Open the chart page →

14,910
argocddevtron1.8.11 of 3See more

argocd devtron 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
42.0.4

Open the chart page →

10,468
argocddevtron-labs1.8.11 of 3See more

argocd devtron-labs 1.8.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
42.0.4

Open the chart page →

10,468
autonodelabeldjjudas21Verified publisher0.0.101 of 1See more

autonodelabel djjudas21 0.0.10

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
djjudas21/autonodelabel:0.0.6f17233350c4f
cryptography@41.0.3
42.0.4

Open the chart page →

1,303
uptime-kumadjjudas21Verified publisher1.5.181 of 1See more

uptime-kuma djjudas21 1.5.18

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.23.12bc6f244ecf27
cryptography@2.6.1
42.0.4

Open the chart page →

4,217
dnation-kubernetes-linterdnationcloud0.1.21 of 1See more

dnation-kubernetes-linter dnationcloud 0.1.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
cryptography@2.6.1
42.0.4

Open the chart page →

2,115
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
cryptography@42.0.0
42.0.4

Open the chart page →

24,975
helpdeskdoubanVerified publisher0.3.31 of 2See more

helpdesk douban 0.3.3

1 of the 2 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
douz/helpdesk:latest4384103d0219
cryptography@2.8
42.0.4

Open the chart page →

4,550
amundsenduyet1.1.01 of 7See more

amundsen duyet 1.1.0

1 of the 7 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
amundsendev/amundsen-frontend:2.1.169e7915e61c1
cryptography@2.9
42.0.4

Open the chart page →

11,174
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
cryptography@2.8
42.0.4

Open the chart page →

5,055
uptime-kumaegebackVerified publisher2.0.121 of 1See more

uptime-kuma egeback 2.0.12

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
cryptography@38.0.4
42.0.4

Open the chart page →

30,167
seafileeleksbai0.1.11 of 3See more

seafile eleksbai 0.1.1

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.106693911bcc40
cryptography@38.0.4
42.0.4

Open the chart page →

25,239
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
cryptography@39.0.0
42.0.4

Open the chart page →

4,085
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
cryptography@2.8
42.0.4

Open the chart page →

14,688
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cryptography@2.8
42.0.4

Open the chart page →

64,192
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
cryptography@41.0.7
42.0.4

Open the chart page →

5,340
uptime-kumafluent-operatorVerified publisher0.1.01 of 1See more

uptime-kuma fluent-operator 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:13d632903e6af
cryptography@2.6.1
42.0.4

Open the chart page →

3,474
powerdns-admingeek-cookbookVerified publisher1.2.21 of 1See more

powerdns-admin geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
cryptography@35.0.0
42.0.4

Open the chart page →

2,643
pgadminhalkeye1.0.01 of 1See more

pgadmin halkeye 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
chorss/docker-pgadmin4:4.115c549cacb8ab
cryptography@2.7
42.0.4

Open the chart page →

2,555
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
cryptography@41.0.1
42.0.4

Open the chart page →

3,700
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
42.0.4

Open the chart page →

7,987
notediscoveryhelmforgeVerified publisher2.0.11 of 1See more

notediscovery helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
cryptography@41.0.7
42.0.4

Open the chart page →

1,238
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2024-26130.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
cryptography@38.0.4
42.0.4

Open the chart page →

30,106

Container images carrying it

187 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
oomk8s/readiness-check:2.0.2875814cc853d
cryptography@2.6.1
42.0.4
11
argoproj/argocd:v1.8.1830e86cacefd
cryptography@2.6.1
42.0.4
3
cloudve/cloudlaunch-server:latest4a3d7fae90bb
cryptography@35.0.0
42.0.4
3
amancevice/superset:0.35.212a0a9e66550
cryptography@2.7
42.0.4
2
apache/tika:2.9.2.1-fullae0b86d3c4d0
cryptography@41.0.7
python-cryptography@41.0.7-4build3
42.0.4
41.0.7-4ubuntu0.1
2
confluentinc/cp-kafka:6.2.11-1-ubi8ac776fad95a5
cryptography@39.0.2
42.0.4
2
confluentinc/cp-zookeeper:6.2.11-1-ubi8cae577096489
cryptography@39.0.2
42.0.4
2
cs3org/wopiserver:v9.4.202a9e78757b4
cryptography@39.0.1
42.0.4
2
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
cryptography@41.0.1
42.0.4
2
library/mysql:8.2.0212fe73edca5
cryptography@41.0.3
42.0.4
2
louislam/uptime-kuma:2.5.4917318f9d7be
cryptography@38.0.4
42.0.4
2
louislam/uptime-kuma:2.3.29aeb4e51d038
cryptography@38.0.4
42.0.4
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
cryptography@38.0.4
42.0.4
2
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
cryptography@35.0.0
42.0.4
2
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
42.0.4
2
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
cryptography@41.0.7
42.0.4
2
akeyless/base-rhel:0.0.14ba8900a0061
cryptography@39.0.2
42.0.4
1
amancevice/superset:0.28.1c8c04bfe3d66
cryptography@1.9
42.0.4
1
amundsendev/amundsen-frontend:2.1.169e7915e61c1
cryptography@2.9
42.0.4
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
cryptography@41.0.7
42.0.4
1
apache/airflow:2.8.4-python3.964e58748b6b9
cryptography@41.0.7
42.0.4
1
apache/airflow:2.8.1e5560ad0b86e
cryptography@41.0.7
42.0.4
1
apache/hertzbeat:1.8.075d48a62748f
cryptography@41.0.7
42.0.4
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
cryptography@41.0.7
42.0.4
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
cryptography@41.0.7
42.0.4
1
arconixforge/mongodb-secure-backup:v1.1c08d7c438966
cryptography@39.0.2
42.0.4
1
assistiot/authorization_db:latestc3adbab6a3e7
cryptography@41.0.3
42.0.4
1
behnambm/docker-sample:v1bd3ad88afff9
cryptography@41.0.7
42.0.4
1
bnjbvr/kresus:0.22.137e216b182c8
cryptography@38.0.4
42.0.4
1
camerahub/camerahub:0.36.23a5af37dd6e1b
cryptography@40.0.2
42.0.4
1
camptocamp/ekorre:0.1.035c91d5fda04
cryptography@2.8
42.0.4
1
camptocamp/snow-webhook:latest2924b43dbf40
cryptography@2.6.1
42.0.4
1
ceticasbl/pg-ldap-sync:latest6c0aa7567145
cryptography@2.6.1
42.0.4
1
chorss/docker-pgadmin4:4.115c549cacb8ab
cryptography@2.7
42.0.4
1
codecov/self-hosted-api:24.4.10475cb1c3136
cryptography@42.0.0
42.0.4
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
cryptography@41.0.7
42.0.4
1
confluentinc/cp-kafka:7.5.1dc9b972db002
cryptography@41.0.4
42.0.4
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
cryptography@41.0.7
42.0.4
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
cryptography@41.0.4
42.0.4
1
datadog/agent:7.22.08f20e56b5311
cryptography@2.8
42.0.4
1
deconzcommunity/deconz:2.29.2062de2362641
cryptography@38.0.4
42.0.4
1
deconzcommunity/deconz:2.12.066541bbb78952
cryptography@2.6.1
42.0.4
1
devopstales/trivy-operator:2.575136aa7a26e
cryptography@39.0.0
42.0.4
1
djjudas21/autonodelabel:0.0.6f17233350c4f
cryptography@41.0.3
42.0.4
1
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
cryptography@2.6.1
42.0.4
1
douz/helpdesk:latest4384103d0219
cryptography@2.8
42.0.4
1
dpage/pgadmin4:7.537946e4f3e7b
cryptography@41.0.2
42.0.4
1
dpage/pgadmin4:4.5a5a656e1d5fd
cryptography@2.6.1
42.0.4
1
dysnix/pritunl:v1.29-r819951e3e7a32
cryptography@2.8
42.0.4
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
cryptography@2.8
42.0.4
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.