StackRadar

CVE-2026-33845

Critical

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
0.008
55th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,606
of 17,790 indexed, latest versions
Container images
1,673
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,606 of 17,790 indexed charts deploy, on 1,673 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.6.13-2ubuntu1.2, 3.6.13-2ubuntu1.3, 3.6.13-2ubuntu1.6, 3.6.13-2ubuntu1.7+33 more3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9, 3.7.9-2+deb12u7, 3.8.3-1.1ubuntu3.6+4 more1,632
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r03.8.13-r041
OSV records
ALPINE-CVE-2026-33845DEBIAN-CVE-2026-33845UBUNTU-CVE-2026-33845
Also known as
USN-8284-1, USN-8502-1

Charts affected

1,606 by stars
ChartLatestAffected imagesRadar Score
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-33845.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

7,685
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-33845.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
hamzaarshad10/querypodpy:1.7154f38e8668e
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
library/mongo:latest5211c51171f5
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
murtazashah46/helmfile:latest4d11726cf803
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

13,197
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33845.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6

Open the chart page →

2,136
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33845.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

2,674
clickhousezloi-space1.2.01 of 3See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-33845.

Container imageDigestPackageFixed in
yandex/clickhouse-server:21.3.204eccfffb01d7
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2

Open the chart page →

9,250
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-33845.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

7,916

Container images carrying it

1,673 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/mongodb:latestb0652af9c8d0
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/nginx:1.27.1934d1acd5ca8
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/pgbouncer:1.23.192356da09704
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/postgres-exporter:0.17.1-debian-12-r20cca9d93a617
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:16.4.0-debian-12-r1102e2f47a405e
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:16.3.0-debian-12-r43332e81afb4f
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:16.4.03ba6e6f11388
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:17.5.0-debian-12-r16687034f33da6
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:17.5.0-debian-12-r1285198aae0aed
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:16.2.0-debian-12-r890fda44bfa42
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:16.3.0-debian-12-r14cc55da2fa366
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:17.2.0-debian-12-r5cf63048c9209
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:17.0.0-debian-12-r9d885ac277163
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:17.2.0-debian-12-r2e6fa49bb0347
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:16.2.0-debian-12-r6ea55532b6f75
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:17.4.0-debian-12-r11fb3806e823c2
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:16.3.0-debian-12-r15fdc6979dbc53
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/prometheus:2.54.1-debian-12-r408b1b7cb6a5b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/rabbitmq:4.1.2-debian-12-r074a3d7c747eb
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/rabbitmq:3.13.7-debian-12-r2cd593809e359
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/redis:8.0.3-debian-12-r1189aae381e7f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/redis:7.2.5-debian-12-r05261cae9e407
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/redis:7.4.2-debian-12-r66a5b1d0b5942
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/redis:7.2.4-debian-12-r1670cafc5a71e8
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/redis:7.2.4-debian-12-r139c6fecd24bf3
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/redis:8.0.2-debian-12-r4cdc2efa9c306
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/redis-cluster:7.4.3-debian-12-r0a53d023fdfaf
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/redis-exporter:1.69.0-debian-12-r1a006df1fd47e
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/redis-sentinel:8.2.1-debian-12-r00ca3ea1d2f82
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/seaweedfs:3.87.0-debian-12-r10cb31d0fc356
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.