StackRadar

CVE-2026-1584

High

Advisory

Published 9 Apr 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
69th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
26
of 17,781 indexed, latest versions
Container images
29
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 26 of 17,781 indexed charts deploy, on 29 images.

Affected packageAffected versionsFixed inImages
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r03.8.12-r029
OSV records
ALPINE-CVE-2026-1584

Charts affected

26 by stars
ChartLatestAffected imagesRadar Score
krokicowboysysopVerified publisher6.1.04 of 5See more

kroki cowboysysop 6.1.0

4 of the 5 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
yuzutech/kroki-bpmn:0.29.1444805c4b917
gnutls@3.8.8-r0
3.8.12-r0
yuzutech/kroki-diagramsnet:0.29.1b810edbf9c62
gnutls@3.8.8-r0
3.8.12-r0
yuzutech/kroki-excalidraw:0.29.157917319ea70
gnutls@3.8.8-r0
3.8.12-r0
yuzutech/kroki-mermaid:0.29.1963b4acfde6e
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

6,743
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
gitea/gitea:1.22.376f516a1a8c2
gnutls@3.8.5-r0
3.8.12-r0

Open the chart page →

23,228
boundaryboundaryVerified publisher0.1.01 of 1See more

boundary boundary 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
hashicorp/boundary:0.21.037bf86488b74
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

1,438
openclaw-with-brainopenclaw-with-brainVerified publisher0.1.671 of 3See more

openclaw-with-brain openclaw-with-brain 0.1.67

1 of the 3 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

5,218
enavenav-service-architectureVerified publisher0.0.71 of 10See more

enav enav-service-architecture 0.0.7

1 of the 10 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
apache/kafka:3.9.0fbc7d7c428e3
gnutls@3.8.5-r0
3.8.12-r0

Open the chart page →

15,860
featurehubfeaturehub4.1.63 of 7See more

featurehub featurehub 4.1.6

3 of the 7 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
featurehub/dacha2:1.9.1c8d5551b5e40
gnutls@3.8.8-r0
3.8.12-r0
featurehub/edge:1.9.198ad426737f6
gnutls@3.8.8-r0
3.8.12-r0
featurehub/mr:1.9.1477d8bf771a9
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

8,240
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

5,213
akto-source-code-analyserakto0.1.51 of 3See more

akto-source-code-analyser akto 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

4,880
kafkacagriekinVerified publisher0.2.01 of 2See more

kafka cagriekin 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
apache/kafka:4.1.0bff074a5d005
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

2,398
entrypoint-balancereclipse-aeriosVerified publisher1.3.01 of 1See more

entrypoint-balancer eclipse-aerios 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
gnutls@3.8.11-r0
3.8.12-r0

Open the chart page →

2,512
management-portaleclipse-aeriosVerified publisher1.1.01 of 2See more

management-portal eclipse-aerios 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
gnutls@3.8.11-r0
3.8.12-r0

Open the chart page →

3,888
flywayeosc-lot-1Verified publisher0.7.01 of 3See more

flyway eosc-lot-1 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
alpine/git:v2.49.1c0280cf95723
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

9,334
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

1,395
floating-serverfloating-server1.6.31 of 2See more

floating-server floating-server 1.6.3

1 of the 2 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
censedata/floating-server:v1.6.3ebfffb9dd4c0
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

1,453
mod-searchfolio-org0.1.351 of 1See more

mod-search folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
folioci/mod-search:latest44d7ee9acdf6
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

1,531
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
gnutls@3.8.5-r0
3.8.12-r0

Open the chart page →

2,155
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
gnutls@3.8.5-r0
3.8.12-r0

Open the chart page →

2,155
beetsk8s-home-lab-repo3.1.11 of 1See more

beets k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

2,733
metabase-k8smetabase-k8s1.0.01 of 1See more

metabase-k8s metabase-k8s 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
metabase/metabase:v0.53.4.17807bc5cad17
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

2,589
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
gnutls@3.8.5-r0
3.8.12-r0

Open the chart page →

5,826
karakeeprtomik-helm-chartsVerified publisher0.0.11 of 3See more

karakeep rtomik-helm-charts 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

5,338
trmnl-serverrubxkubeVerified publisher0.1.01 of 2See more

trmnl-server rubxkube 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
alpine/git:2.47.2062a01ad7a0e
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

2,757
samba-serversamba-serverVerified publisher1.1.01 of 1See more

samba-server samba-server 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

1,027
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

2,817
tikatikaVerified publisher0.3.01 of 1See more

tika tika 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
gnutls@3.8.11-r0
3.8.12-r0

Open the chart page →

1,825
togglr-backendtogglrVerified publisher1.0.01 of 1See more

togglr-backend togglr 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-1584.

Container imageDigestPackageFixed in
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
gnutls@3.8.8-r0
3.8.12-r0

Open the chart page →

3,221

Container images carrying it

29 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
alpine/git:2.47.2062a01ad7a0e
gnutls@3.8.8-r0
3.8.12-r0
2
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
gnutls@3.8.5-r0
3.8.12-r0
2
aktosecurity/akto-puppeteer-replay:doom_latest853e37321e6e
gnutls@3.8.8-r0
3.8.12-r0
1
alpine/git:v2.49.1c0280cf95723
gnutls@3.8.8-r0
3.8.12-r0
1
apache/kafka:4.1.0bff074a5d005
gnutls@3.8.8-r0
3.8.12-r0
1
apache/kafka:3.9.0fbc7d7c428e3
gnutls@3.8.5-r0
3.8.12-r0
1
censedata/floating-server:v1.6.3ebfffb9dd4c0
gnutls@3.8.8-r0
3.8.12-r0
1
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
gnutls@3.8.11-r0
3.8.12-r0
1
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
gnutls@3.8.11-r0
3.8.12-r0
1
featurehub/dacha2:1.9.1c8d5551b5e40
gnutls@3.8.8-r0
3.8.12-r0
1
featurehub/edge:1.9.198ad426737f6
gnutls@3.8.8-r0
3.8.12-r0
1
featurehub/mr:1.9.1477d8bf771a9
gnutls@3.8.8-r0
3.8.12-r0
1
folioci/mod-search:latest44d7ee9acdf6
gnutls@3.8.8-r0
3.8.12-r0
1
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
gnutls@3.8.8-r0
3.8.12-r0
1
gitea/gitea:1.22.376f516a1a8c2
gnutls@3.8.5-r0
3.8.12-r0
1
hashicorp/boundary:0.21.037bf86488b74
gnutls@3.8.8-r0
3.8.12-r0
1
jlesage/firefox:v25.03.1055c28defe31
gnutls@3.8.8-r0
3.8.12-r0
1
metabase/metabase:v0.53.4.17807bc5cad17
gnutls@3.8.8-r0
3.8.12-r0
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
gnutls@3.8.5-r0
3.8.12-r0
1
saidsef/scapy-containerised:v2025.02f17f7c435891
gnutls@3.8.8-r0
3.8.12-r0
1
yuzutech/kroki-bpmn:0.29.1444805c4b917
gnutls@3.8.8-r0
3.8.12-r0
1
yuzutech/kroki-diagramsnet:0.29.1b810edbf9c62
gnutls@3.8.8-r0
3.8.12-r0
1
yuzutech/kroki-excalidraw:0.29.157917319ea70
gnutls@3.8.8-r0
3.8.12-r0
1
yuzutech/kroki-mermaid:0.29.1963b4acfde6e
gnutls@3.8.8-r0
3.8.12-r0
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
gnutls@3.8.8-r0
3.8.12-r0
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
gnutls@3.8.8-r0
3.8.12-r0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
gnutls@3.8.8-r0
3.8.12-r0
1
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
gnutls@3.8.11-r0
3.8.12-r0
1
quay.io/underndog/samba:1.2.0-not-recyclecca801de9fa5
gnutls@3.8.8-r0
3.8.12-r0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.