StackRadar

CVE-2026-23490

High

Advisory

Published 16 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
101
of 17,781 indexed, latest versions
Container images
102
deployed by those charts
Fix available
2 of 2
affected packages

pyasn1 has a DoS vulnerability in decoder

Carried by container images the latest versions of 101 of 17,781 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
pyasn1pypi0.6.10.6.290
pyasn1deb0.4.2-3, 0.4.8-1, 0.4.8-30.4.2-3ubuntu0.18.04.1~esm1, 0.4.8-1ubuntu0.1, 0.4.8-3+deb12u113
OSV records
DEBIAN-CVE-2026-23490GHSA-63vm-454h-vhhqUBUNTU-CVE-2026-23490
Also known as
DSA-6114-1, PYSEC-2026-1810, USN-7975-1, USN-8134-1

Charts affected

101 by stars
ChartLatestAffected imagesRadar Score
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
pyasn1@0.6.1
0.6.2

Open the chart page →

570

Container images carrying it

102 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
opea/codegen:1.058f91683892d
pyasn1@0.6.1
0.6.2
1
opea/codetrans:1.0e2436483b73d
pyasn1@0.6.1
0.6.2
1
opea/docsum:1.03eaa91849512
pyasn1@0.6.1
0.6.2
1
opea/web-retriever-chroma:1.0fe08165d7770
pyasn1@0.6.1
0.6.2
1
openbas/caldera-server:5.1.0a277796d9724
pyasn1@0.6.1
0.6.2
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
pyasn1@0.6.1
0.6.2
1
opencsghq/csgship-agentic:v0.4.02cd29671a03e
pyasn1@0.6.1
0.6.2
1
opendatacube/restcube:latest91870111837c
pyasn1@0.4.2-3
0.4.2-3ubuntu0.18.04.1~esm1
1
opendatacube/wms:latest1b90cdf68831
pyasn1@0.4.2-3
0.4.2-3ubuntu0.18.04.1~esm1
1
redash/redash:25.8.000d813437db5
pyasn1@0.6.1
0.6.2
1
redash/redash:26.3.0c5c9148f5c38
pyasn1@0.6.1
0.6.2
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
pyasn1@0.4.8-1
0.4.8-1ubuntu0.1
1
shadowrhyder/gke-volume-autoscaler:3.0.24aae9270356a
pyasn1@0.6.1
0.6.2
1
supabase/realtime:latestd3aa0c86c7b3
pyasn1@0.6.1
0.6.2
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
pyasn1@0.4.8-1
0.4.8-1ubuntu0.1
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
pyasn1@0.4.8-1
0.4.8-1ubuntu0.1
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
pyasn1@0.4.8-1
pyasn1@0.6.1
0.4.8-1ubuntu0.1
0.6.2
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
pyasn1@0.4.8-1
0.4.8-1ubuntu0.1
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
pyasn1@0.4.8-1
0.4.8-1ubuntu0.1
1
vabene1111/recipes:2.3.50f8d061895e9
pyasn1@0.6.1
0.6.2
1
vcnngr/telegram-login:latest1a849a997b6d
pyasn1@0.6.1
0.6.2
1
vcnngr/telegram-rebot:latest30f1f05e57a6
pyasn1@0.6.1
0.6.2
1
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
pyasn1@0.6.1
0.6.2
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
pyasn1@0.6.1
0.6.2
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
pyasn1@0.6.1
0.6.2
1
ghcr.io/bensoer/external-secrets-reloader:v0.1.38e31b5a81853
pyasn1@0.6.1
0.6.2
1
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
pyasn1@0.6.1
0.6.2
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
pyasn1@0.6.1
0.6.2
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
pyasn1@0.6.1
0.6.2
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
pyasn1@0.6.1
0.6.2
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
pyasn1@0.6.1
0.6.2
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
pyasn1@0.6.1
0.6.2
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
pyasn1@0.6.1
0.6.2
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
pyasn1@0.6.1
0.6.2
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
pyasn1@0.6.1
0.6.2
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
pyasn1@0.6.1
0.6.2
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
pyasn1@0.6.1
0.6.2
1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
pyasn1@0.6.1
0.6.2
1
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
pyasn1@0.6.1
0.6.2
1
ghcr.io/substra/substra-backend:1.0.121967f54ec86
pyasn1@0.6.1
0.6.2
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
pyasn1@0.6.1
0.6.2
1
ghcr.io/texano00/urunner:0.6.07c8be1dae3cd
pyasn1@0.6.1
0.6.2
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
pyasn1@0.4.8-3
0.4.8-3+deb12u1
1
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
pyasn1@0.6.1
0.6.2
1
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
pyasn1@0.6.1
0.6.2
1
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
pyasn1@0.6.1
0.6.2
1
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
pyasn1@0.6.1
0.6.2
1
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
pyasn1@0.6.1
0.6.2
1
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
pyasn1@0.6.1
0.6.2
1
quay.io/kiwigrid/k8s-sidecar:1.30.10835d79d8fbae
pyasn1@0.6.1
0.6.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.