CVE-2026-26007

High

Advisory

Published 10 Feb 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.003; 28th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 474; of 17,787 indexed, latest versions
Container images: 468; deployed by those charts
Fix available: 2 of 2; affected packages

cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

Carried by container images the latest versions of 474 of 17,787 indexed charts deploy, on 468 images.

Affected package	Affected versions	Fixed in	Images
cryptographypypi	1.7.2, 1.9, 2.1.4, 2.2.2+68 more	46.0.5	468
python-cryptographydeb	2.1.4-1ubuntu1.2, 2.1.4-1ubuntu1.3, 2.1.4-1ubuntu1.4, 2.8-3ubuntu0.1+8 more	2.1.4-1ubuntu1.4+esm3, 2.8-3ubuntu0.3+esm2, 3.4.8-1ubuntu2.3, 41.0.7-4ubuntu0.3	41

OSV records: GHSA-r6ph-v2qm-q3c2 UBUNTU-CVE-2026-26007 DEBIAN-CVE-2026-26007
Also known as: PYSEC-2026-2141, USN-8087-1, USN-8087-3

Charts affected

474 by stars

Chart

Latest

Affected images

Radar Score

scribesynapse

0.2.16

1 of 7 See more

scribe synapse 0.2.16

1 of the 7 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
mysql/mysql-server :latest	d6c8301b7834	cryptography@37.0.2	46.0.5

Open the chart page →

2,680

sinnersynapse

0.1.0

1 of 6 See more

sinner synapse 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
mysql/mysql-server :latest	d6c8301b7834	cryptography@37.0.2	46.0.5

Open the chart page →

1,955

tensor_apptensor-app

0.2.2

1 of 3 See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	cryptography@3.2.1	46.0.5

Open the chart page →

17,461

supabaseteochenglim

0.1.2

1 of 13 See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
supabase/realtime :latest	d3aa0c86c7b3	cryptography@43.0.0	46.0.5

Open the chart page →

9,556

kasa-exporterth-charts

0.1.0

1 of 1 See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
thelande/kasa_exporter :v0.2.3	a1fdb8baa152	cryptography@42.0.7	46.0.5

Open the chart page →

1,515

the0the0

0.9.8

1 of 9 See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
ghcr.io/alexanderwanyoike/the0/runtime :1.14.7	459010a02aff	cryptography@41.0.7	46.0.5

Open the chart page →

7,248

synapsetranhailong

0.1.0

1 of 2 See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.78.0	def97fd537d8	cryptography@39.0.1	46.0.5

Open the chart page →

3,164

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	cryptography@38.0.1	46.0.5

Open the chart page →

8,607

opencloudunxwares

0.2.3

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	cryptography@41.0.7 python-cryptography@41.0.7-4build3	46.0.5 41.0.7-4ubuntu0.3

Open the chart page →

45,239

phonebook-chartusuladams2

0.2.1

1 of 3 See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
library/mysql :5.7	4bc6bc963e6d	cryptography@3.2.1	46.0.5

Open the chart page →

3,176

simple-prima-notavcnngr

0.5.3

1 of 4 See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :9.2	52cb72a9e3da	cryptography@44.0.2	46.0.5

Open the chart page →

4,768

browserlessvictorlane

0.2.0

1 of 1 See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	cryptography@41.0.7 python-cryptography@41.0.7-4ubuntu0.1	46.0.5 41.0.7-4ubuntu0.3

Open the chart page →

4,305

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	cryptography@3.4.8 python-cryptography@3.4.8-1ubuntu2.1	46.0.5 3.4.8-1ubuntu2.3

Open the chart page →

13,459

calibre-webvista

0.1.3

1 of 1 See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :0.6.24	241009026e6f	cryptography@43.0.3	46.0.5

Open the chart page →

7,628

wazuhwazuh-helm-eks

1.2.10

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	cryptography@44.0.1	46.0.5

Open the chart page →

5,484

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	cryptography@3.3.2	46.0.5

Open the chart page →

11,119

supersetwbstack

0.1.0

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	cryptography@42.0.4	46.0.5

Open the chart page →

7,085

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	cryptography@38.0.4 python-cryptography@38.0.4-3+deb12u1	46.0.5 no fix listed

Open the chart page →

9,117

ceph-csi-cephfswikimedia

0.1.8

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	cryptography@3.2.1	46.0.5

Open the chart page →

10,285

ceph-csi-rbdwikimedia

0.1.13

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	cryptography@3.2.1	46.0.5

Open the chart page →

11,784

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	cryptography@35.0.0	46.0.5

Open the chart page →

2,643

zerossl-cert-managerzerossl-cert-manager

0.1.0

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	cryptography@44.0.2	46.0.5

Open the chart page →

570

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	cryptography@36.0.1	46.0.5

Open the chart page →

3,118

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-26007.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	cryptography@36.0.1	46.0.5

Open the chart page →

1,636

Container images carrying it

468 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
apache/airflow :2.8.4-python3.9	64e58748b6b9	cryptography@41.0.7	46.0.5	1
apache/airflow :2.10.2-python3.9	ce90bdc3d2af	cryptography@42.0.8	46.0.5	1
apache/airflow :2.8.1	e5560ad0b86e	cryptography@41.0.7	46.0.5	1
apache/hertzbeat :1.8.0	75d48a62748f	cryptography@41.0.7 python-cryptography@41.0.7-4ubuntu0.1	46.0.5 41.0.7-4ubuntu0.3	1
apache/hertzbeat-collector :1.8.0	a2bab1be574c	cryptography@41.0.7 python-cryptography@41.0.7-4ubuntu0.1	46.0.5 41.0.7-4ubuntu0.3	1
apache/superset :9cdaa280429ec297db16d56c94fd77b5d2aff107	975ab033580d	cryptography@3.4.7	46.0.5	1
apache/superset :4.0.1	ab9467fd712c	cryptography@42.0.4	46.0.5	1
apache/tika :3.2.2.0-full	ffab324253ed	cryptography@43.0.0	46.0.5	1
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	cryptography@41.0.7	46.0.5	1
arconixforge/mongodb-secure-backup :v1.1	c08d7c438966	cryptography@39.0.2	46.0.5	1
aristidetm/basic-notebook :3.6.5	469dbc951224	cryptography@42.0.8	46.0.5	1
aristidetm/k8s-hub :3.3.7	ccb516cb8474	cryptography@42.0.5	46.0.5	1
assistiot/authorization_db :latest	c3adbab6a3e7	cryptography@41.0.3	46.0.5	1
assistiot/cybersecurity-monitoring_id-wzh :latest	0aacefac9677	cryptography@3.3.2	46.0.5	1
baserow/backend :1.31.1	e0b3c8130b91	cryptography@42.0.8	46.0.5	1
baserow/baserow :1.30.1	df0c42eb67e8	cryptography@42.0.8	46.0.5	1
behnambm/docker-sample :v1	bd3ad88afff9	cryptography@41.0.7	46.0.5	1
benbusby/whoogle-search :0.5.4	f77f7e6e4ad2	cryptography@3.3.2	46.0.5	1
berkeleyskypilot/skypilot-nightly :latest	8da2f3cda472	cryptography@43.0.3	46.0.5	1
bmeares/meerschaum :2.8.4	8e9c5bacaa82	cryptography@44.0.0	46.0.5	1
bnjbvr/kresus :0.22.1	37e216b182c8	cryptography@38.0.4 python-cryptography@38.0.4-3+deb12u1	46.0.5 no fix listed	1
boky/postfix :5.1.0	aafc77238423	cryptography@46.0.3	46.0.5	1
camerahub/camerahub :0.36.23	a5af37dd6e1b	cryptography@40.0.2	46.0.5	1
camptocamp/ekorre :0.1.0	35c91d5fda04	cryptography@2.8	46.0.5	1
camptocamp/pghoard :10	bff736b15623	cryptography@2.3.1	46.0.5	1
camptocamp/snow-webhook :latest	2924b43dbf40	cryptography@2.6.1	46.0.5	1
castai/hibernate :v0.14	da62858c8381	cryptography@43.0.3	46.0.5	1
cdignam/kodiak :v0.54.0	5a6a55b39cee	cryptography@3.4.8	46.0.5	1
ceph/daemon :latest-nautilus	90f30824a96e	cryptography@1.7.2	46.0.5	1
ceticasbl/pg-ldap-sync :latest	6c0aa7567145	cryptography@2.6.1	46.0.5	1
chorss/docker-pgadmin4 :4.11	5c549cacb8ab	cryptography@2.7	46.0.5	1
cleveritcz/opencve :1.5.0	c75c1636e0b7	cryptography@42.0.5	46.0.5	1
cloudve/janis-terminal :latest	af56e77ca587	cryptography@2.1.4 python-cryptography@2.1.4-1ubuntu1.3	46.0.5 2.1.4-1ubuntu1.4+esm3	1
cloudve/ttyd :latest	d79c1c5881c0	cryptography@2.9.2	46.0.5	1
codecov/self-hosted-api :24.4.1	0475cb1c3136	cryptography@42.0.0	46.0.5	1
codecov/self-hosted-worker :24.4.1	837f546b479b	cryptography@42.0.5	46.0.5	1
confluentinc/cp-enterprise-control-center :6.1.0	f2975d507a2a	cryptography@3.3.1	46.0.5	1
confluentinc/cp-enterprise-kafka :6.1.0	8f1544df1f48	cryptography@3.3.1	46.0.5	1
confluentinc/cp-kafka :7.1.2.amd64	3bf359d5e340	cryptography@3.4.8	46.0.5	1
confluentinc/cp-kafka :7.4.4	c0224a1adf7a	cryptography@41.0.7	46.0.5	1
confluentinc/cp-kafka :7.5.1	dc9b972db002	cryptography@41.0.4	46.0.5	1
confluentinc/cp-kafka-connect :6.1.0	4bc70a83ca6f	cryptography@3.3.1	46.0.5	1
confluentinc/cp-kafka-rest :6.1.0	b0b7aa26254a	cryptography@3.3.1	46.0.5	1
confluentinc/cp-ksqldb-server :7.6.0	8ec46c27982f	cryptography@41.0.7	46.0.5	1
confluentinc/cp-ksqldb-server :6.1.0	ee403d5b9090	cryptography@3.3.1	46.0.5	1
confluentinc/cp-schema-registry :6.1.0	b651d4b6185a	cryptography@3.3.1	46.0.5	1
confluentinc/cp-zookeeper :7.5.1	0bec03c1f3ce	cryptography@41.0.4	46.0.5	1
confluentinc/cp-zookeeper :6.1.0	78c190f4472c	cryptography@3.3.1	46.0.5	1
copyparty/ac :1.19.20	0a0a8605062c	cryptography@44.0.3	46.0.5	1
dannielkil/book-db :latest	433290c5c1db	cryptography@42.0.7	46.0.5	1