StackRadar

CVE-2026-23490

High

Advisory

Published 16 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
101
of 17,781 indexed, latest versions
Container images
102
deployed by those charts
Fix available
2 of 2
affected packages

pyasn1 has a DoS vulnerability in decoder

Carried by container images the latest versions of 101 of 17,781 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
pyasn1pypi0.6.10.6.290
pyasn1deb0.4.2-3, 0.4.8-1, 0.4.8-30.4.2-3ubuntu0.18.04.1~esm1, 0.4.8-1ubuntu0.1, 0.4.8-3+deb12u113
OSV records
DEBIAN-CVE-2026-23490GHSA-63vm-454h-vhhqUBUNTU-CVE-2026-23490
Also known as
DSA-6114-1, PYSEC-2026-1810, USN-7975-1, USN-8134-1

Charts affected

101 by stars
ChartLatestAffected imagesRadar Score
openebsopenebsOfficialVerified publisher4.6.11 of 35See more

openebs openebs 4.6.1

1 of the 35 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
pyasn1@0.6.1
0.6.2

Open the chart page →

23,894
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
pyasn1@0.6.1
0.6.2

Open the chart page →

10,622
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.11 of 2See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
quay.io/stackgres/operator:1.19.1f241b0b20326
pyasn1@0.6.1
0.6.2

Open the chart page →

2,119
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
pyasn1@0.6.1
0.6.2

Open the chart page →

16,251
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
pyasn1@0.6.1
0.6.2

Open the chart page →

5,987
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
pyasn1@0.6.1
0.6.2

Open the chart page →

3,033
emqx-operatoremqx-operator2.3.21 of 2See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
alpine/k8s:1.31.49c4976d47656
pyasn1@0.6.1
0.6.2

Open the chart page →

4,531
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
pyasn1@0.4.8-1
0.4.8-1ubuntu0.1

Open the chart page →

27,267
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
pyasn1@0.4.8-3
0.4.8-3+deb12u1

Open the chart page →

9,746
zabbix-kubernetes-discoverydjerfyVerified publisher1.4.201 of 1See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
pyasn1@0.6.1
0.6.2

Open the chart page →

4,147
kiali-operatorkiali2.31.01 of 1See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
pyasn1@0.6.1
0.6.2

Open the chart page →

1,157
kubecostmesosphere-stable0.37.51 of 9See more

kubecost mesosphere-stable 0.37.5

1 of the 9 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
pyasn1@0.6.1
0.6.2

Open the chart page →

17,693
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
pyasn1@0.6.1
0.6.2

Open the chart page →

107,811
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
pyasn1@0.6.1
0.6.2

Open the chart page →

3,804
upcloud-csiankra-chartsVerified publisher0.4.01 of 8See more

upcloud-csi ankra-charts 0.4.0

1 of the 8 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
alpine/k8s:1.31.137a319b15cfc9
pyasn1@0.6.1
0.6.2

Open the chart page →

14,917
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
pyasn1@0.6.1
0.6.2

Open the chart page →

9,205
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
pyasn1@0.4.8-1
0.4.8-1ubuntu0.1

Open the chart page →

10,858
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
pyasn1@0.6.1
0.6.2

Open the chart page →

1,965
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
pyasn1@0.6.1
0.6.2

Open the chart page →

12,397
backendikusi-bk-chart1.0.32 of 3See more

backend ikusi-bk-chart 1.0.3

2 of the 3 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
pyasn1@0.6.1
0.6.2
kyovint/kyoimgusers:1.0.080084149156e
pyasn1@0.6.1
0.6.2

Open the chart page →

5,940
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
pyasn1@0.6.1
0.6.2

Open the chart page →

11,764
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
pyasn1@0.6.1
0.6.2

Open the chart page →

4,095
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
pyasn1@0.6.1
0.6.2

Open the chart page →

2,662
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
pyasn1@0.6.1
0.6.2

Open the chart page →

4,292
clowder2ncsaVerified publisher1.9.73 of 12See more

clowder2 ncsa 1.9.7

3 of the 12 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
pyasn1@0.6.1
0.6.2
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
pyasn1@0.6.1
0.6.2
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
pyasn1@0.6.1
0.6.2

Open the chart page →

37,373
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
gpappsoft/privacyidea-docker:3.12.2af7841adad26
pyasn1@0.6.1
0.6.2

Open the chart page →

5,440
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
pyasn1@0.4.2-3
0.4.2-3ubuntu0.18.04.1~esm1

Open the chart page →

13,541
vuiseriohub1.0.61 of 3See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
dserio83/velero-watchdog:0.1.8d5deae589229
pyasn1@0.6.1
0.6.2

Open the chart page →

11,532
urunnerurunnerOfficialVerified publisher0.7.01 of 1See more

urunner urunner 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/texano00/urunner:0.6.07c8be1dae3cd
pyasn1@0.6.1
0.6.2

Open the chart page →

501
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.23.73b3a670af168
pyasn1@0.6.1
0.6.2

Open the chart page →

12,473
pgadminappscodeVerified publisher2026.3.301 of 1See more

pgadmin appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.11.050700ac17936
pyasn1@0.6.1
0.6.2

Open the chart page →

1,565
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
pyasn1@0.4.8-1
0.4.8-1ubuntu0.1

Open the chart page →

32,501
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
pyasn1@0.6.1
0.6.2

Open the chart page →

6,036
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
pyasn1@0.6.1
0.6.2

Open the chart page →

10,776
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
pyasn1@0.6.1
0.6.2

Open the chart page →

15,027
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
pyasn1@0.4.8-1
pyasn1@0.6.1
0.4.8-1ubuntu0.1
0.6.2

Open the chart page →

20,900
metaflowcluster-deploy0.2.21 of 1See more

metaflow cluster-deploy 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
public.ecr.aws/outerbounds/metaflow_metadata_service:v2.4.13f7567ce3419d
pyasn1@0.6.1
0.6.2

Open the chart page →

8,009
csghubcsghubVerified publisher2.4.32 of 34See more

csghub csghub 2.4.3

2 of the 34 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
pyasn1@0.6.1
0.6.2
opencsghq/agenticflow:ee-v0.6-52f03fead54db
pyasn1@0.6.1
0.6.2

Open the chart page →

58,897
csgshipcsghubVerified publisher0.4.61 of 10See more

csgship csghub 0.4.6

1 of the 10 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
opencsghq/csgship-agentic:v0.4.02cd29671a03e
pyasn1@0.6.1
0.6.2

Open the chart page →

11,335
dapr-agentsdapr-agents-devVerified publisher0.1.51 of 31See more

dapr-agents dapr-agents-dev 0.1.5

1 of the 31 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.98c06e1ba643a
pyasn1@0.6.1
0.6.2

Open the chart page →

22,193
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
pyasn1@0.6.1
0.6.2

Open the chart page →

5,062
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
pyasn1@0.4.2-3
0.4.2-3ubuntu0.18.04.1~esm1

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
pyasn1@0.4.2-3
0.4.2-3ubuntu0.18.04.1~esm1

Open the chart page →

24,335
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
pyasn1@0.6.1
0.6.2

Open the chart page →

19,224
dnation-kubernetes-monitoring-stackdnationcloud4.0.21 of 17See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
pyasn1@0.6.1
0.6.2

Open the chart page →

21,641
codecovdoubanVerified publisher0.2.41 of 8See more

codecov douban 0.2.4

1 of the 8 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
pyasn1@0.4.8-1
0.4.8-1ubuntu0.1

Open the chart page →

24,917
drogue-cloud-examplesdrogue-iotVerified publisher0.7.111 of 6See more

drogue-cloud-examples drogue-iot 0.7.11

1 of the 6 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
pyasn1@0.4.8-1
0.4.8-1ubuntu0.1

Open the chart page →

30,699
external-secrets-reloaderexternal-secrets-reloader0.1.01 of 1See more

external-secrets-reloader external-secrets-reloader 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/bensoer/external-secrets-reloader:v0.1.38e31b5a81853
pyasn1@0.6.1
0.6.2

Open the chart page →

1,030
tandoorgabe565Verified publisher0.9.91 of 2See more

tandoor gabe565 0.9.9

1 of the 2 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
pyasn1@0.6.1
0.6.2

Open the chart page →

2,183
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
pyasn1@0.4.2-3
0.4.2-3ubuntu0.18.04.1~esm1

Open the chart page →

13,551

Container images carrying it

102 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
pyasn1@0.6.1
0.6.2
1
quay.io/stackgres/operator:1.19.1f241b0b20326
pyasn1@0.6.1
0.6.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.