StackRadar

CVE-2026-33896

High

Advisory

Published 26 Mar 2026In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.4
base score, highest
EPSS
0.003
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
134
of 17,781 indexed, latest versions
Container images
129
deployed by those charts
Fix available
1 of 1
affected package

Forge has a basicConstraints bypass in its certificate chain verification (RFC 5280 violation)

Carried by container images the latest versions of 134 of 17,781 indexed charts deploy, on 129 images.

Affected packageAffected versionsFixed inImages
node-forgenpm0.7.1, 0.7.6, 0.8.0, 0.8.5+8 more1.4.0129
OSV records
GHSA-2328-f5f3-gj25

Charts affected

134 by stars
ChartLatestAffected imagesRadar Score
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
node-forge@0.9.0
1.4.0

Open the chart page →

25,456
coderstudio-strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

coderstudio-strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
node-forge@1.3.1
1.4.0

Open the chart page →

5,141
docker-composecoderstudio-strapi-devVerified publisher0.0.11 of 3See more

docker-compose coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
node-forge@1.3.1
1.4.0

Open the chart page →

5,141
strapi-devcoderstudio-strapi-devVerified publisher0.0.11 of 3See more

strapi-dev coderstudio-strapi-dev 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
rcdelacruz/my-strapi-app:js-amd6438007f358355
node-forge@1.3.1
1.4.0

Open the chart page →

5,141
conduction-uiconduction-ui0.1.01 of 6See more

conduction-ui conduction-ui 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
conduction/conduction-ui-app:devd591f5e6f2a9
node-forge@0.10.0
1.4.0

Open the chart page →

12,907
containers-security-chartscontainers-security0.1.01 of 7See more

containers-security-charts containers-security 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
coldatom/containers-security-front:latest7c2fbbb41bcf
node-forge@1.3.1
1.4.0

Open the chart page →

9,146
authfcryptexlabsVerified publisher0.12.131 of 4See more

authf cryptexlabs 0.12.13

1 of the 4 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
cryptexlabs/authf:0.12.11189c07411d7c
node-forge@1.3.1
1.4.0

Open the chart page →

3,769
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
wazuh/wazuh-dashboard:4.4.11787550d2358
node-forge@1.3.1
1.4.0

Open the chart page →

13,852
directusdirectusVerified publisher0.9.101 of 4See more

directus directus 0.9.10

1 of the 4 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
directus/directus:11.1.0e3c8bb975350
node-forge@1.3.1
1.4.0

Open the chart page →

4,551
frontend-charteks-3-tier-app-chart0.1.01 of 1See more

frontend-chart eks-3-tier-app-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
arfath29/3-tier-app-frontend:latest384b3e377f47
node-forge@0.10.0
1.4.0

Open the chart page →

3,744
keyrockfiware0.8.71 of 1See more

keyrock fiware 0.8.7

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
fiware/idm:8.3.3a1b6ed4ae84f
node-forge@1.3.1
1.4.0

Open the chart page →

3,159
nightscoutgeek-cookbookVerified publisher1.2.21 of 1See more

nightscout geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
node-forge@0.7.6
1.4.0

Open the chart page →

4,043
shinobigeek-cookbookVerified publisher1.2.21 of 1See more

shinobi geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
shinobisystems/shinobi:dev3ca746937856
node-forge@0.10.0
1.4.0

Open the chart page →

4,591
theloungegeek-cookbookVerified publisher3.4.21 of 1See more

thelounge geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
thelounge/thelounge:4.2.0-alpine639978459c3a
node-forge@0.9.1
1.4.0

Open the chart page →

2,689
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
library/kibana:7.17.150172f1c538e7
node-forge@1.3.1
1.4.0

Open the chart page →

34,754
ghostghostVerified publisher0.1.01 of 4See more

ghost ghost 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
library/ghost:5.79.083f7bf209844
node-forge@1.3.1
1.4.0

Open the chart page →

9,019
theloungehalkeye4.3.11 of 1See more

thelounge halkeye 4.3.1

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
thelounge/thelounge:4.3.0-alpine0037aa258261
node-forge@0.10.0
1.4.0

Open the chart page →

1,938
backstagehelm-charts-nr0.1.151 of 2See more

backstage helm-charts-nr 0.1.15

1 of the 2 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
martinaif/backstage-k8s-demo-backend:test143bc40a3da0e
node-forge@0.9.0
1.4.0

Open the chart page →

8,213
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
node-forge@1.3.1
1.4.0

Open the chart page →

18,813
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
node-forge@0.10.0
1.4.0

Open the chart page →

4,253
townsquarehuscker-chartsVerified publisher1.0.41 of 2See more

townsquare huscker-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
node-forge@1.3.1
1.4.0

Open the chart page →

3,407
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
node-forge@1.3.1
1.4.0

Open the chart page →

11,812
backstageirembo-backstage-helmVerified publisher1.0.51 of 3See more

backstage irembo-backstage-helm 1.0.5

1 of the 3 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
roadiehq/community-backstage-image:latestef355bf5b639
node-forge@0.8.5
1.4.0

Open the chart page →

7,232
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
node-forge@1.3.1
1.4.0

Open the chart page →

5,826
shinobik8s-home-lab-repo2.1.11 of 1See more

shinobi k8s-home-lab-repo 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
shinobisystems/shinobi:latestc2f5ce2e1067
node-forge@0.10.0
1.4.0

Open the chart page →

4,667
zwave-js-uik8sonlabVerified publisher0.7.121 of 1See more

zwave-js-ui k8sonlab 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
zwavejs/zwave-js-ui:11.22.314d018bb689e
node-forge@1.3.2
1.4.0

Open the chart page →

973
kubeflowkromanow94-kubeflow0.5.11 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

1 of the 30 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
kubeflownotebookswg/centraldashboard:v1.9.2af55c22ef5de
node-forge@0.10.0
1.4.0

Open the chart page →

70,530
sqlpadkronkltdVerified publisher0.1.01 of 1See more

sqlpad kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
sqlpad/sqlpad:6.7d3d2f430dffd
node-forge@0.10.0
1.4.0

Open the chart page →

3,397
tooljetkrzwiatrzyk1.1.11 of 2See more

tooljet krzwiatrzyk 1.1.1

1 of the 2 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
tooljet/tooljet-ce:v1.18.0c85a4720e42e
node-forge@1.2.1
1.4.0

Open the chart page →

5,410
online-boutiquekubesphere-testVerified publisher0.1.02 of 11See more

online-boutique kubesphere-test 0.1.0

2 of the 11 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/currencyservice:v0.2.349d458a3650f
node-forge@0.10.0
1.4.0
gcr.io/google-samples/microservices-demo/paymentservice:v0.2.36eb201217a8f
node-forge@0.10.0
1.4.0

Open the chart page →

26,018
jellyseerrlbenicio-communityVerified publisher0.1.01 of 1See more

jellyseerr lbenicio-community 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
fallenbagel/jellyseerr:latest4538137bc5af
node-forge@1.3.1
1.4.0

Open the chart page →

3,555
kubevismario-fVerified publisher2.0.11 of 1See more

kubevis mario-f 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
ghcr.io/mario-f/kubevis:v1.4.0763daf9caf8e
node-forge@0.10.0
1.4.0

Open the chart page →

5,287
maxcrm-chartsmaxcrm-chartsVerified publisher1.1.2011 of 4See more

maxcrm-charts maxcrm-charts 1.1.201

1 of the 4 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
chatwoot/chatwoot:v3.1.0d530ab8c1753
node-forge@0.10.0
1.4.0

Open the chart page →

5,940
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
node-forge@1.3.2
1.4.0

Open the chart page →

9,668
aws-api-gateway-operatormintel0.1.21 of 11See more

aws-api-gateway-operator mintel 0.1.2

1 of the 11 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
node-forge@0.10.0
1.4.0

Open the chart page →

10,603
standard-application-stackmintel11.4.01 of 12See more

standard-application-stack mintel 11.4.0

1 of the 12 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
opensearchproject/opensearch-dashboards:1.0.039695180364b
node-forge@0.10.0
1.4.0

Open the chart page →

10,603
sample-appmongodb-helm-charts0.1.01 of 2See more

sample-app mongodb-helm-charts 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
quay.io/mongodb/farm-intro-frontend:0.199ccdfd543e1
node-forge@0.10.0
1.4.0

Open the chart page →

6,438
sentence-collectormozilla0.1.21 of 2See more

sentence-collector mozilla 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
mozilla/sentencecollector:2.0.91da6ff5c4895
node-forge@0.7.6
1.4.0

Open the chart page →

6,684
ghostmt1905028.25.11 of 3See more

ghost mt190502 8.25.1

1 of the 3 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
library/ghost:6.25.12654b1e90413
node-forge@1.3.1
1.4.0

Open the chart page →

4,960
nightscoutmt1905021.1.01 of 3See more

nightscout mt190502 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
node-forge@1.3.0
1.4.0

Open the chart page →

6,608
myawesomeappmyawesomapp-mitchxxx0.1.11 of 1See more

myawesomeapp myawesomapp-mitchxxx 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
mitchxxx/amazon:214e72480ec63a
node-forge@1.3.1
1.4.0

Open the chart page →

2,116
myawesomeapp14myawesomeapp140.1.11 of 1See more

myawesomeapp14 myawesomeapp14 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
ccjacobs14/amazon:59a9b14a6f09e
node-forge@1.3.1
1.4.0

Open the chart page →

2,116
myawesomeapp-janmyawesomeapp-jan0.1.11 of 1See more

myawesomeapp-jan myawesomeapp-jan 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
ooghenekaro/amazon:latest03394ba1d6d8
node-forge@1.3.1
1.4.0

Open the chart page →

2,144
myawesomeapp-marmyawesomeapp-mar0.1.11 of 1See more

myawesomeapp-mar myawesomeapp-mar 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
winfred008/amazon:910a68de5b398
node-forge@1.3.1
1.4.0

Open the chart page →

2,116
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
hecrom/myweatherprocessingreactclient:1.3.115454b54d5b28
node-forge@1.3.1
1.4.0

Open the chart page →

17,929
dashynas-helm-chartsVerified publisher1.0.41 of 1See more

dashy nas-helm-charts 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
lissy93/dashy:2.0.51991f7be5ed0
node-forge@0.10.0
1.4.0

Open the chart page →

3,269
smilencsaVerified publisher1.1.01 of 23See more

smile ncsa 1.1.0

1 of the 23 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
socialmediamacroscope/smile_server:0.3.31a528c794270
node-forge@0.7.6
1.4.0

Open the chart page →

109,294
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
node-forge@1.3.3
1.4.0

Open the chart page →

3,798
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
node-forge@1.3.1
1.4.0

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33896.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
node-forge@1.3.1
1.4.0

Open the chart page →

15,206

Container images carrying it

129 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
linuxserver/codimd:latestb801bbcf6386
node-forge@0.10.0
1.4.0
1
lissy93/dashy:2.0.51991f7be5ed0
node-forge@0.10.0
1.4.0
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
node-forge@1.3.1
1.4.0
1
misskey/misskey:12.110.1e08b7c478093
node-forge@0.9.0
1.4.0
1
mitchxxx/amazon:214e72480ec63a
node-forge@1.3.1
1.4.0
1
mozilla/sentencecollector:2.0.91da6ff5c4895
node-forge@0.7.6
1.4.0
1
n8nio/n8n:1.86.08b39ed5a2de9
node-forge@1.3.1
1.4.0
1
n8nio/n8n:1.33.1dd171d45102a
node-forge@1.3.1
1.4.0
1
nightscout/cgm-remote-monitor:14.2.500c3b4833f1b
node-forge@0.7.6
1.4.0
1
nightscout/cgm-remote-monitor:15.0.2ad29ca7a4de6
node-forge@1.3.0
1.4.0
1
nightscout/cgm-remote-monitor:15.0.3f604dc4c03ca
node-forge@1.3.0
1.4.0
1
nocodb/nocodb:0.301.5d9516f0bf546
node-forge@1.3.3
1.4.0
1
obolnetwork/charon-dkg-sidecar:maine263be0a7440
node-forge@0.10.0
1.4.0
1
ooghenekaro/amazon:latest03394ba1d6d8
node-forge@1.3.1
1.4.0
1
openhab/openhab-cloud:a8138a329dd2bac8c4b
node-forge@1.3.1
1.4.0
1
opensearchproject/opensearch-dashboards:2.18.00ecd8444add2
node-forge@1.3.1
1.4.0
1
opensearchproject/opensearch-dashboards:2.10.0485a0019e5d6
node-forge@1.3.1
1.4.0
1
opensearchproject/opensearch-dashboards:2.15.0b7c26c60bfaf
node-forge@1.3.1
1.4.0
1
phntom/codimd:2.4.31b9aafbb62e6
node-forge@0.7.6
1.4.0
1
requarks/wiki:canary-2.5.2438b5865a7386c
node-forge@0.10.0
1.4.0
1
roadiehq/community-backstage-image:latestef355bf5b639
node-forge@0.8.5
1.4.0
1
samajh/alprfrontend:latest05ef4fddbb75
node-forge@0.10.0
1.4.0
1
shinobisystems/shinobi:dev3ca746937856
node-forge@0.10.0
1.4.0
1
shinobisystems/shinobi:latestc2f5ce2e1067
node-forge@0.10.0
1.4.0
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
node-forge@0.10.0
1.4.0
1
socialmediamacroscope/smile_server:0.3.31a528c794270
node-forge@0.7.6
1.4.0
1
speckle/speckle-server:2.17.14-branch.testing.72707.921a5f849d10dcdfb91
node-forge@1.3.1
1.4.0
1
speckle/speckle-server:2.19.2-branch.hotfix-2.19.1.124125-665e7e14b6a0750d5aa
node-forge@1.3.1
1.4.0
1
speckle/speckle-server:2.20.3-branch.hotfix-2.20.2.149555-37ea0cb52f8eabf5cea
node-forge@1.3.1
1.4.0
1
speckle/speckle-server:2.20.2-branch.testing4.134160-9fad4b2687f43ab16f3
node-forge@1.3.1
1.4.0
1
speckle/speckle-server:2.25.10-branch.testing6.645-b125c1e75cdf256067b
node-forge@1.3.1
1.4.0
1
speckle/speckle-server:2.26.379f14a2bf931
node-forge@1.3.1
1.4.0
1
speckle/speckle-server:2.18.12-branch.testing3.88744-f55b34189a5872375f9
node-forge@1.3.1
1.4.0
1
speckle/speckle-server:2.21.3-branch.testing5.219631-2153bef8fd157733393
node-forge@1.3.1
1.4.0
1
speckle/speckle-server:2.18.11-branch.testing2.88634-335d469bf6a501b2210
node-forge@1.3.1
1.4.0
1
speckle/speckle-server:2.20.6-branch.testing1.154030-9b09114e8413f57b327
node-forge@1.3.1
1.4.0
1
sqlpad/sqlpad:6.7d3d2f430dffd
node-forge@0.10.0
1.4.0
1
testhubio/testhub-frontend:on-preme86c2db53be8
node-forge@0.9.0
1.4.0
1
thelounge/thelounge:4.3.0-alpine0037aa258261
node-forge@0.10.0
1.4.0
1
thelounge/thelounge:4.2.0-alpine639978459c3a
node-forge@0.9.1
1.4.0
1
thingsboard/tb-js-executor:3.4.113e1eadf8ace
node-forge@1.3.1
1.4.0
1
tooljet/tooljet-ce:v1.18.0c85a4720e42e
node-forge@1.2.1
1.4.0
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
node-forge@1.3.1
1.4.0
1
unleashorg/unleash-enterprise:7.5.0245aeba40053
node-forge@1.3.3
1.4.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
node-forge@0.10.0
1.4.0
1
vlebediantsev/notes-admin-front:latest007c6670ff48
node-forge@1.3.1
1.4.0
1
vlebediantsev/notes-project-front:latest945675fd2636
node-forge@1.3.1
1.4.0
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
node-forge@1.3.1
1.4.0
1
wazuh/wazuh-dashboard:4.11.10c58e7b47bb6
node-forge@1.3.1
1.4.0
1
wazuh/wazuh-dashboard:4.4.11787550d2358
node-forge@1.3.1
1.4.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.