StackRadar

CVE-2026-33846

High

Advisory

Published 4 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
68th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,757
of 17,790 indexed, latest versions
Container images
1,838
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,757 of 17,790 indexed charts deploy, on 1,838 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+47 more3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9+6 more1,797
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r03.8.13-r041
OSV records
ALPINE-CVE-2026-33846DEBIAN-CVE-2026-33846UBUNTU-CVE-2026-33846
Also known as
USN-8284-1, USN-8502-1

Charts affected

1,757 by stars
ChartLatestAffected imagesRadar Score
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-33846.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

11,592
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-33846.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

7,685
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-33846.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
hamzaarshad10/querypodpy:1.7154f38e8668e
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
library/mongo:latest5211c51171f5
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
murtazashah46/helmfile:latest4d11726cf803
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

13,197
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33846.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6

Open the chart page →

2,136
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33846.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

2,674
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-33846.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
gnutls28@3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6+esm3
yandex/clickhouse-server:21.3.204eccfffb01d7
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2

Open the chart page →

9,250
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-33846.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

7,916

Container images carrying it

1,838 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/clickhouse:24.6.2-debian-12-r3dcc172c6c55f
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/consul:1.21.4-debian-12-r133ae872fc99d
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/git:latest4b08d0c5af8d
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/grafana:11.4.0-debian-12-r0cb8ab5515676
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/kubectl:1.301249fc292e84
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/kubectl:1.3164614ef8290f
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/kubectl:1.29.3f5fc0d561d9e
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/kube-state-metrics:204a3044b384b
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/mariadb:11.3.2-debian-12-r9320c70dfd914
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/mariadb:11.2.6-debian-12-r0373c3c260571
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/mariadb:11.4.3-debian-12-r08b3778160e34
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/mariadb:11.4.5-debian-12-r128bc50a0961a7
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/mariadb:latestbbd4e17f1ef8
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/mariadb-galera:11.3.2-debian-12-r9aee9c668098f
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/mariadb-galera:11.4.3-debian-12-r0cb8beb6dbb58
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/matomo:5.3.2-debian-12-r13f02c000c54b1
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/memcached:1.6.24-debian-12-r01d80b6a96f00
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/memcached:1.6.29-debian-12-r4ff0e7239c17c
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2024.8.3-debian-12-r15501c419f42e
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2025.7.23-debian-12-r56dabb4a2088c
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2024.7.4-debian-12-r0952f86d1116c
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2024.12.18-debian-12-r1c0ede65eb88e
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2024.12.18-debian-12-r0cce234b4381a
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/minio:2025.4.22-debian-12-r1d7cd0e172c4c
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/mongodb:7.0.14-debian-12-r321e8f8baa432
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/mongodb:7.0.8-debian-12-r23163c3842bfd
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/mongodb:latestb0652af9c8d0
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/mysql:8.4.5-debian-12-r07089d796fc9b
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/mysqld-exporter:0.15.1-debian-12-r2611a5f0b79e79
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/nginx:1.27.1934d1acd5ca8
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/nginx:1.28.0-debian-12-r0eaf9066e86f6
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/os-shell:12-debian-12-r3217444b4b2c96
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/os-shell:12-debian-12-r439ba5d16f9c64
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
bitnamilegacy/os-shell:12-debian-12-r50e328cff6e450
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
bitnamilegacy/pgbouncer:1.23.192356da09704
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/postgres-exporter:0.17.1-debian-12-r20cca9d93a617
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
bitnamilegacy/postgres-exporter:0.15.0-debian-12-r44e7e1b3a90682
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
bitnamilegacy/postgresql:16.4.0-debian-12-r1102e2f47a405e
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.