StackRadar

CVE-2026-23490

High

Advisory

Published 16 Jan 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.008
54th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
101
of 17,781 indexed, latest versions
Container images
102
deployed by those charts
Fix available
2 of 2
affected packages

pyasn1 has a DoS vulnerability in decoder

Carried by container images the latest versions of 101 of 17,781 indexed charts deploy, on 102 images.

Affected packageAffected versionsFixed inImages
pyasn1pypi0.6.10.6.290
pyasn1deb0.4.2-3, 0.4.8-1, 0.4.8-30.4.2-3ubuntu0.18.04.1~esm1, 0.4.8-1ubuntu0.1, 0.4.8-3+deb12u113
OSV records
DEBIAN-CVE-2026-23490GHSA-63vm-454h-vhhqUBUNTU-CVE-2026-23490
Also known as
DSA-6114-1, PYSEC-2026-1810, USN-7975-1, USN-8134-1

Charts affected

101 by stars
ChartLatestAffected imagesRadar Score
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
pyasn1@0.6.1
0.6.2

Open the chart page →

8,923
volume-autoscalergke-volume-autoscaler3.0.21 of 1See more

volume-autoscaler gke-volume-autoscaler 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
shadowrhyder/gke-volume-autoscaler:3.0.24aae9270356a
pyasn1@0.6.1
0.6.2

Open the chart page →

901
docker-registry-gcgmelilloVerified publisher0.1.91 of 1See more

docker-registry-gc gmelillo 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
gmelillo/registry:0.1.8c599d608a2f7
pyasn1@0.6.1
0.6.2

Open the chart page →

981
gnp-stackgnp-stack0.0.51 of 14See more

gnp-stack gnp-stack 0.0.5

1 of the 14 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.30.10835d79d8fbae
pyasn1@0.6.1
0.6.2

Open the chart page →

7,659
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
pyasn1@0.6.1
0.6.2

Open the chart page →

2,789
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
pyasn1@0.6.1
0.6.2

Open the chart page →

49,025
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
pyasn1@0.6.1
0.6.2

Open the chart page →

4,647
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
pyasn1@0.6.1
0.6.2

Open the chart page →

25,017
kubeflowkromanow94-kubeflow0.5.13 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

3 of the 30 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
pyasn1@0.6.1
0.6.2
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
pyasn1@0.6.1
0.6.2
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
pyasn1@0.6.1
0.6.2

Open the chart page →

70,530
kube-infokube-info0.1.01 of 1See more

kube-info kube-info 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
andreymileshin/kube-info:v0.1.0f7b300bc9e66
pyasn1@0.6.1
0.6.2

Open the chart page →

519
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
pyasn1@0.6.1
0.6.2

Open the chart page →

4,439
lightlyticslightlytics0.1.212 of 2See more

lightlytics lightlytics 0.1.21

2 of the 2 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
pyasn1@0.6.1
0.6.2
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
pyasn1@0.6.1
0.6.2

Open the chart page →

5,354
delugelinkding0.2.31 of 1See more

deluge linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
pyasn1@0.6.1
0.6.2

Open the chart page →

1,433
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
pyasn1@0.6.1
0.6.2

Open the chart page →

5,025
mayastormayastorVerified publisher2.12.11 of 31See more

mayastor mayastor 2.12.1

1 of the 31 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.2cdb361e67b1b
pyasn1@0.6.1
0.6.2

Open the chart page →

21,064
kube-prometheus-stackmesosphere-stable75.9.11 of 7See more

kube-prometheus-stack mesosphere-stable 75.9.1

1 of the 7 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.30.349dcce269568
pyasn1@0.6.1
0.6.2

Open the chart page →

10,180
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
alpine/k8s:1.31.106dbe6f391eda
pyasn1@0.6.1
0.6.2

Open the chart page →

17,070
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
pyasn1@0.6.1
0.6.2

Open the chart page →

5,826
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
pyasn1@0.6.1
0.6.2

Open the chart page →

5,288
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
pyasn1@0.6.1
0.6.2

Open the chart page →

10,978
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
pyasn1@0.6.1
0.6.2

Open the chart page →

4,749
phronetisphronetis0.1.272 of 2See more

phronetis phronetis 0.1.27

2 of the 2 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
pyasn1@0.6.1
0.6.2
knspar/phronetis-operator:0.1.60c4f0543ee58
pyasn1@0.6.1
0.6.2

Open the chart page →

16,196
prismeai-appsprismeai0.7.11 of 4See more

prismeai-apps prismeai 0.7.1

1 of the 4 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
pyasn1@0.6.1
0.6.2

Open the chart page →

2,751
prismeai-coreprismeai1.12.11 of 7See more

prismeai-core prismeai 1.12.1

1 of the 7 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-infra:latestb1198ea741d1
pyasn1@0.6.1
0.6.2

Open the chart page →

3,270
prometheus-optimizerprometheus-optimizer0.2.221 of 1See more

prometheus-optimizer prometheus-optimizer 0.2.22

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
pyasn1@0.6.1
0.6.2

Open the chart page →

4,416
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
pyasn1@0.6.1
0.6.2

Open the chart page →

21,211
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
pyasn1@0.6.1
0.6.2

Open the chart page →

9,355
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
pyasn1@0.4.8-3
0.4.8-3+deb12u1

Open the chart page →

15,591
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
pyasn1@0.6.1
0.6.2

Open the chart page →

9,256
monitoringrocketchat-server0.0.171 of 9See more

monitoring rocketchat-server 0.0.17

1 of the 9 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.98c06e1ba643a
pyasn1@0.6.1
0.6.2

Open the chart page →

6,859
imgtagrotationalVerified publisher0.2.01 of 1See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
pyasn1@0.6.1
0.6.2

Open the chart page →

3,312
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
pyasn1@0.6.1
0.6.2

Open the chart page →

4,499
pgadminsb-helm-charts0.3.01 of 1See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.13561c1f8f99f2
pyasn1@0.6.1
0.6.2

Open the chart page →

1,713
sibylsibyl0.2.01 of 1See more

sibyl sibyl 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
pyasn1@0.6.1
0.6.2

Open the chart page →

1,020
cost-analyzersoftonic2.5.51 of 6See more

cost-analyzer softonic 2.5.5

1 of the 6 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/kiwigrid/k8s-sidecar:1.29.142002d66ddb3
pyasn1@0.6.1
0.6.2

Open the chart page →

7,901
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
pyasn1@0.6.1
0.6.2

Open the chart page →

4,731
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
supabase/realtime:latestd3aa0c86c7b3
pyasn1@0.6.1
0.6.2

Open the chart page →

9,556
chatqnatest-opea1.0.01 of 11See more

chatqna test-opea 1.0.0

1 of the 11 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
opea/chatqna:1.038c51b791efa
pyasn1@0.6.1
0.6.2

Open the chart page →

39,090
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
opea/codegen:1.058f91683892d
pyasn1@0.6.1
0.6.2

Open the chart page →

28,814
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
opea/codetrans:1.0e2436483b73d
pyasn1@0.6.1
0.6.2

Open the chart page →

28,385
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
opea/docsum:1.03eaa91849512
pyasn1@0.6.1
0.6.2

Open the chart page →

28,858
web-retrievertest-opea1.0.01 of 1See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
opea/web-retriever-chroma:1.0fe08165d7770
pyasn1@0.6.1
0.6.2

Open the chart page →

5,350
traefik-external-dns-operatortraefik-external-dns-operator1.0.11 of 1See more

traefik-external-dns-operator traefik-external-dns-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
ybucci/traefik-external-dns-operator:1.0.0f1fcc7c8d9fd
pyasn1@0.6.1
0.6.2

Open the chart page →

1,083
tfy-grafanatruefoundryVerified publisher0.1.211 of 3See more

tfy-grafana truefoundry 0.1.21

1 of the 3 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
pyasn1@0.6.1
0.6.2

Open the chart page →

1,062
truefoundry-monitoringtruefoundryVerified publisher0.1.61 of 8See more

truefoundry-monitoring truefoundry 0.1.6

1 of the 8 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.1.2716b0b33ff2d
pyasn1@0.6.1
0.6.2

Open the chart page →

4,526
simple-prima-notavcnngrVerified publisher0.5.31 of 4See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.252cb72a9e3da
pyasn1@0.6.1
0.6.2

Open the chart page →

4,768
telegram-rebotvcnngrVerified publisher1.0.02 of 3See more

telegram-rebot vcnngr 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
vcnngr/telegram-login:latest1a849a997b6d
pyasn1@0.6.1
0.6.2
vcnngr/telegram-rebot:latest30f1f05e57a6
pyasn1@0.6.1
0.6.2

Open the chart page →

5,026
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
pyasn1@0.4.8-1
0.4.8-1ubuntu0.1

Open the chart page →

13,459
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
pyasn1@0.6.1
0.6.2

Open the chart page →

7,628
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-23490.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
pyasn1@0.6.1
0.6.2

Open the chart page →

13,677

Container images carrying it

102 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/opsmxpublic/ubi8-oes-datascience:isd-spin-2025.10.01-af26a30d4-202511261054d8f66f4117fe
pyasn1@0.6.1
0.6.2
1
quay.io/stackgres/operator:1.19.1f241b0b20326
pyasn1@0.6.1
0.6.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.