CVE-2026-30922

High

Advisory

Published 17 Mar 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.008; 55th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 386; of 17,781 indexed, latest versions
Container images: 380; deployed by those charts
Fix available: 2 of 2; affected packages

Denial of Service in pyasn1 via Unbounded Recursion

Carried by container images the latest versions of 386 of 17,781 indexed charts deploy, on 380 images.

Affected package	Affected versions	Fixed in	Images
pyasn1pypi	0.1.9, 0.3.7, 0.4.1, 0.4.2+11 more	0.6.3	380
pyasn1deb	0.4.2-3, 0.4.8-1, 0.4.8-3	0.4.2-3ubuntu0.18.04.1~esm1, 0.4.8-1ubuntu0.2, 0.4.8-3+deb12u2	13

OSV records: DEBIAN-CVE-2026-30922 GHSA-jr27-m4p2-rc6r UBUNTU-CVE-2026-30922
Also known as: PYSEC-2026-2263, USN-8129-1, USN-8134-1

Charts affected

386 by stars

Chart

Latest

Affected images

Radar Score

kube-prometheus-stacksoftonic

81.5.1

1 of 6 See more

kube-prometheus-stack softonic 81.5.1

1 of the 6 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
quay.io/kiwigrid/k8s-sidecar :2.5.0	a6b3f707f883	pyasn1@0.6.2	0.6.3

Open the chart page →

4,974

pgadminstakater

0.1.14

1 of 1 See more

2,060

cost-analyzerstatcan

1.82.2

1 of 9 See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :1.12.0	89739be9ff38	pyasn1@0.4.8	0.6.3

Open the chart page →

16,506

prometheus-operatorstatcan

0.2.2

1 of 7 See more

prometheus-operator statcan 0.2.2

1 of the 7 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :0.1.151	7b98eecdf6d1	pyasn1@0.4.8	0.6.3

Open the chart page →

12,237

storageclass-routerstorageclass-router

0.4.1

1 of 1 See more

storageclass-router storageclass-router 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
quay.io/maxiv/storageclass-router :0.4.1	60725dab588c	pyasn1@0.5.1	0.6.3

Open the chart page →

1,058

substra-backendsubstra

26.15.3

1 of 7 See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	pyasn1@0.6.1	0.6.3

Open the chart page →

4,731

icinga2svtech-public-helm-charts

1.0.0

1 of 4 See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_icinga2 :v1.1.6	67be2aba9436	pyasn1@0.4.8	0.6.3

Open the chart page →

5,511

rundecksvtech-public-helm-charts

1.0.0

1 of 2 See more

rundeck svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_rundeck :v1.2.2	6e368ace0977	pyasn1@0.4.8	0.6.3

Open the chart page →

18,756

gtmetrix-bqt3n

1.0.0

1 of 1 See more

gtmetrix-bq t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
t3nde/gtmetrix-bq :0.2.0	d2939e9a719b	pyasn1@0.4.8	0.6.3

Open the chart page →

1,287

supabaseteochenglim

0.1.2

1 of 13 See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
supabase/realtime :latest	d3aa0c86c7b3	pyasn1@0.6.1	0.6.3

Open the chart page →

9,556

chatqnatest-opea

1.0.0

1 of 11 See more

39,090

codegentest-opea

1.0.0

1 of 5 See more

28,814

codetranstest-opea

1.0.0

1 of 5 See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
opea/codetrans :1.0	e2436483b73d	pyasn1@0.6.1	0.6.3

Open the chart page →

28,385

docsumtest-opea

1.0.0

1 of 5 See more

28,858

web-retrievertest-opea

1.0.0

1 of 1 See more

web-retriever test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
opea/web-retriever-chroma :1.0	fe08165d7770	pyasn1@0.6.1	0.6.3

Open the chart page →

5,350

monitoringthl-charts

0.1.1

1 of 10 See more

monitoring thl-charts 0.1.1

1 of the 10 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
quay.io/kiwigrid/k8s-sidecar :1.15.6	1f025ae37b7b	pyasn1@0.4.8	0.6.3

Open the chart page →

18,908

jenkinstnh

2.7.1

1 of 2 See more

jenkins tnh 2.7.1

1 of the 2 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :0.1.193	170069ff0976	pyasn1@0.4.8	0.6.3

Open the chart page →

4,423

traefik-external-dns-operatortraefik-external-dns-operator

1.0.1

1 of 1 See more

traefik-external-dns-operator traefik-external-dns-operator 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
ybucci/traefik-external-dns-operator :1.0.0	f1fcc7c8d9fd	pyasn1@0.6.1	0.6.3

Open the chart page →

1,083

synapsetranhailong

0.1.0

1 of 2 See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
matrixdotorg/synapse :v1.78.0	def97fd537d8	pyasn1@0.4.8	0.6.3

Open the chart page →

3,164

tfy-grafanatruefoundry

0.1.21

1 of 3 See more

tfy-grafana truefoundry 0.1.21

1 of the 3 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
quay.io/kiwigrid/k8s-sidecar :2.1.2	716b0b33ff2d	pyasn1@0.6.1	0.6.3

Open the chart page →

1,062

truefoundry-monitoringtruefoundry

0.1.6

1 of 8 See more

truefoundry-monitoring truefoundry 0.1.6

1 of the 8 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
quay.io/kiwigrid/k8s-sidecar :2.1.2	716b0b33ff2d	pyasn1@0.6.1	0.6.3

Open the chart page →

4,526

jupyterhubuninettsigma2

1.6.0

1 of 5 See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
quay.io/nird-toolkit/jupyterhub-server :20221215-e6aa80e	cae8c0622533	pyasn1@0.4.8	0.6.3

Open the chart page →

8,607

simple-prima-notavcnngr

0.5.3

1 of 4 See more

simple-prima-nota vcnngr 0.5.3

1 of the 4 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
dpage/pgadmin4 :9.2	52cb72a9e3da	pyasn1@0.6.1	0.6.3

Open the chart page →

4,768

telegram-rebotvcnngr

1.0.0

2 of 3 See more

telegram-rebot vcnngr 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
vcnngr/telegram-login :latest	1a849a997b6d	pyasn1@0.6.1	0.6.3
vcnngr/telegram-rebot :latest	30f1f05e57a6	pyasn1@0.6.1	0.6.3

Open the chart page →

5,026

twenty-crmvictorlane

0.0.1

1 of 3 See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	pyasn1@0.4.8-1 pyasn1@0.4.8	0.4.8-1ubuntu0.2 0.6.3

Open the chart page →

13,459

calibre-webvista

0.1.3

1 of 1 See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :0.6.24	241009026e6f	pyasn1@0.6.1	0.6.3

Open the chart page →

7,628

wazuhwazuh-helm-eks

1.2.10

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	pyasn1@0.4.8	0.6.3

Open the chart page →

5,484

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	pyasn1@0.4.8	0.6.3

Open the chart page →

11,119

supersetwbstack

0.1.0

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	pyasn1@0.5.1	0.6.3

Open the chart page →

7,085

ambassadorwenerme

6.9.5

1 of 2 See more

ambassador wenerme 6.9.5

1 of the 2 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
datawire/aes :1.14.4	8588eafe6862	pyasn1@0.4.8	0.6.3

Open the chart page →

4,086

ceph-csi-cephfswikimedia

0.1.8

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	pyasn1@0.3.7	0.6.3

Open the chart page →

10,285

ceph-csi-rbdwikimedia

0.1.13

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	pyasn1@0.3.7	0.6.3

Open the chart page →

11,784

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	pyasn1@0.4.8	0.6.3

Open the chart page →

2,643

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	pyasn1@0.6.1	0.6.3

Open the chart page →

13,677

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	pyasn1@0.4.8	0.6.3

Open the chart page →

1,838

zerossl-cert-managerzerossl-cert-manager

0.1.0

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-30922.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	pyasn1@0.6.1	0.6.3

Open the chart page →

570

Container images carrying it

380 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
lsstsqre/prepuller :latest	19c2dfc4e4ff	pyasn1@0.4.8	0.6.3	1
lsstsqre/sciplat-hub :latest	5e0ade6bed1c	pyasn1@0.4.8	0.6.3	1
lsstsqre/strimzi-registry-operator :0.4.1	e139fde946d7	pyasn1@0.4.8	0.6.3	1
lsstsqre/wfdispatcher :latest	e9feb99f524d	pyasn1@0.4.8	0.6.3	1
marcoimme/oidcmock :latest	b6035c0721a8	pyasn1@0.6.2	0.6.3	1
matrixdotorg/synapse :v1.127.1	c3c4a9de2a0b	pyasn1@0.6.1	0.6.3	1
matrixdotorg/synapse :v1.53.0	cb89c0f17ba1	pyasn1@0.4.8	0.6.3	1
matrixdotorg/synapse :v1.78.0	def97fd537d8	pyasn1@0.4.8	0.6.3	1
mirrorgitlabcontainers/gitlab-task-runner-ce :v13.2.2	9efd73993c34	pyasn1@0.4.8	0.6.3	1
mozilla/syncserver :latest	016162bf39d8	pyasn1@0.4.8	0.6.3	1
mvitale1989/docker-taiga :20191031-4.2.14	1504ccda06df	pyasn1@0.4.7	0.6.3	1
netboxcommunity/netbox :v3.2.8	3d652dca5351	pyasn1@0.4.8	0.6.3	1
netboxcommunity/netbox :v3.7.8-2.8.0	9bf83b350a89	pyasn1@0.6.0	0.6.3	1
ngoduykhanh/powerdns-admin :0.2.3	099371dd9ba6	pyasn1@0.4.8	0.6.3	1
ngoduykhanh/powerdns-admin :latest	9898a7cf37d2	pyasn1@0.4.8	0.6.3	1
nlmacamp/check_mk :latest	5dbb8589f824	pyasn1@0.4.2	0.6.3	1
octoprint/octoprint :1.4.0	106c26efcd8a	pyasn1@0.4.8	0.6.3	1
odaniait/aws-kubectl :latest	3fff8a8570ec	pyasn1@0.4.8	0.6.3	1
odavid/my-bloody-jenkins :2.462.3-306	e7ab3bbc948e	pyasn1@0.6.1	0.6.3	1
oled01/automx2 :2025.1.1	05d3e398e675	pyasn1@0.6.1	0.6.3	1
omecproject/progran-synchronizer :comac-1.0.0	d109a8e57e71	pyasn1@0.4.4	0.6.3	1
opea/chatqna :1.0	38c51b791efa	pyasn1@0.6.1	0.6.3	1
opea/codegen :1.0	58f91683892d	pyasn1@0.6.1	0.6.3	1
opea/codetrans :1.0	e2436483b73d	pyasn1@0.6.1	0.6.3	1
opea/docsum :1.0	3eaa91849512	pyasn1@0.6.1	0.6.3	1
opea/web-retriever-chroma :1.0	fe08165d7770	pyasn1@0.6.1	0.6.3	1
openbas/caldera-server :5.1.0	a277796d9724	pyasn1@0.6.1	0.6.3	1
opencsghq/agenticflow :ee-v0.6-5	2f03fead54db	pyasn1@0.6.1	0.6.3	1
opencsghq/csgbot :v0.6.7-ee	af7191a9cf8a	pyasn1@0.6.2	0.6.3	1
opencsghq/csgship-agentic :v0.4.0	2cd29671a03e	pyasn1@0.6.1	0.6.3	1
opencsghq/label-studio :v2.5.0	47e22aa71870	pyasn1@0.5.0	0.6.3	1
opencsghq/label-studio :v2.4.0	b4e849fcf94a	pyasn1@0.5.0	0.6.3	1
opendatacube/restcube :latest	91870111837c	pyasn1@0.4.2-3 pyasn1@0.4.2	0.4.2-3ubuntu0.18.04.1~esm1 0.6.3	1
opendatacube/wms :latest	1b90cdf68831	pyasn1@0.4.2-3 pyasn1@0.4.2	0.4.2-3ubuntu0.18.04.1~esm1 0.6.3	1
openstackhelm/keystone :wallaby-ubuntu_focal	e07d75953d2e	pyasn1@0.4.8	0.6.3	1
openvpn/openvpn-as :latest	2253c10ec652	pyasn1@0.4.8	0.6.3	1
phntom/postgresql-backup-s3 :1.0.22	49b6488f618b	pyasn1@0.4.8	0.6.3	1
pnnlmiscscripts/gitlab-runner-operator :0.1.3-1	155131891741	pyasn1@0.4.8	0.6.3	1
pnnlmiscscripts/tenant-namespace-operator :0.1.24-1	8af4b7551d40	pyasn1@0.5.0	0.6.3	1
prefecthq/prefect :2.20.4-python3.10	1df4b5b6238a	pyasn1@0.6.0	0.6.3	1
prompve/prometheus-pve-exporter :2.0.1	ff6749eb03b0	pyasn1@0.4.7	0.6.3	1
pryorda/vmware_exporter :v0.18.4	79925e63e59f	pyasn1@0.4.8	0.6.3	1
pryorda/vmware_exporter :v0.18.3	e0f5ba8b7856	pyasn1@0.4.8	0.6.3	1
pschiffe/pdns-admin :0.4.1	37ebba8c2b8f	pyasn1@0.4.8	0.6.3	1
psono/psono-server :5.0.0	3b974b43ea03	pyasn1@0.6.0	0.6.3	1
redash/redash :25.8.0	00d813437db5	pyasn1@0.6.1	0.6.3	1
redash/redash :10.0.0.b50363	9392753c0376	pyasn1@0.4.8	0.6.3	1
redash/redash :26.3.0	c5c9148f5c38	pyasn1@0.6.1	0.6.3	1
rook/ceph :v1.19.2	944a1dd70496	pyasn1@0.4.8	0.6.3	1
seafileltd/seafile-mc :11.0.12	d0c66e4621bd	pyasn1@0.4.8-1 pyasn1@0.4.8	0.4.8-1ubuntu0.2 0.6.3	1