CVE-2026-3338

High

Advisory

Published 2 Mar 2026In the index since 8 Sept 2026

AWS-LC has PKCS7_verify Signature Validation Bypass

Carried by container images the latest versions of 2 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
aws-lc-syscargo	0.25.1, 0.29.0	0.38.0	2

2 by stars

Chart

Latest

Affected images

Radar Score

mumbledjjuniorjpdj

1 of the 2 container images this version deploys carry CVE-2026-3338.

Container image	Digest	Package	Fixed in
ghcr.io/juniorjpdj/mumbledj :latest	558cb7e2604d	aws-lc-sys@0.29.0	0.38.0

953

1 of the 7 container images this version deploys carry CVE-2026-3338.

Container image	Digest	Package	Fixed in
ghcr.io/element-hq/matrix-authentication-service :0.14.0	834ea54370f0	aws-lc-sys@0.25.1	0.38.0

9,256

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/element-hq/matrix-authentication-service :0.14.0	834ea54370f0	aws-lc-sys@0.25.1	0.38.0	1
ghcr.io/juniorjpdj/mumbledj :latest	558cb7e2604d	aws-lc-sys@0.29.0	0.38.0	1