StackRadar

CVE-2026-33936

Medium

Advisory

Published 27 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.005
40th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
44
of 17,781 indexed, latest versions
Container images
49
deployed by those charts
Fix available
1 of 2
affected packages

python-ecdsa: Denial of Service via improper DER length validation in crafted private keys

Carried by container images the latest versions of 44 of 17,781 indexed charts deploy, on 49 images.

Affected packageAffected versionsFixed inImages
ecdsapypi0.13, 0.13.2, 0.13.3, 0.14.1+6 more0.19.249
python-ecdsadeb0.18.0-3no fix listed1
OSV records
DEBIAN-CVE-2026-33936GHSA-9f5j-8jwj-x28g
Also known as
PYSEC-2026-2467

Charts affected

44 by stars
ChartLatestAffected imagesRadar Score
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
ecdsa@0.18.0
0.19.2

Open the chart page →

9,145
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
ecdsa@0.17.0
0.19.2

Open the chart page →

7,705
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
ecdsa@0.18.0
0.19.2

Open the chart page →

6,041
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
ecdsa@0.16.1
0.19.2

Open the chart page →

3,717
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
ecdsa@0.17.0
0.19.2

Open the chart page →

7,579
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
ecdsa@0.19.1
0.19.2

Open the chart page →

4,634
kobotoolboxone-acre-fundVerified publisher0.7.41 of 9See more

kobotoolbox one-acre-fund 0.7.4

1 of the 9 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
ecdsa@0.17.0
0.19.2

Open the chart page →

18,517
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
ecdsa@0.16.1
0.19.2

Open the chart page →

10,730
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
ecdsa@0.19.1
0.19.2

Open the chart page →

9,971
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
ecdsa@0.18.0
0.19.2

Open the chart page →

1,944
backendikusi-bk-chart1.0.32 of 3See more

backend ikusi-bk-chart 1.0.3

2 of the 3 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
ecdsa@0.19.1
0.19.2
kyovint/kyoimgusers:1.0.080084149156e
ecdsa@0.19.1
0.19.2

Open the chart page →

5,940
jessejesse-chartVerified publisher0.0.461 of 6See more

jesse jesse-chart 0.0.46

1 of the 6 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
salehmir/jesse:1.10.101afa95f979e9
ecdsa@0.19.1
0.19.2

Open the chart page →

3,421
clowder2ncsaVerified publisher1.9.73 of 12See more

clowder2 ncsa 1.9.7

3 of the 12 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
ecdsa@0.19.0
0.19.2
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
ecdsa@0.19.0
0.19.2
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
ecdsa@0.19.0
0.19.2

Open the chart page →

37,373
vuiseriohub1.0.61 of 3See more

vui seriohub 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
dserio83/velero-api:0.3.16b3d9115fee2
ecdsa@0.19.0
0.19.2

Open the chart page →

11,532
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
ecdsa@0.19.0
0.19.2

Open the chart page →

6,324
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
ecdsa@0.19.1
0.19.2

Open the chart page →

5,558
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
ecdsa@0.18.0
0.19.2

Open the chart page →

18,277
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
ecdsa@0.18.0
0.19.2

Open the chart page →

9,412
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
ecdsa@0.15
0.19.2

Open the chart page →

3,891
galaxy-stablecloudve2.0.01 of 5See more

galaxy-stable cloudve 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
ecdsa@0.13
0.19.2

Open the chart page →

70,895
web3-prometheus-exportercoinpri-helm-chartsVerified publisher0.1.31 of 1See more

web3-prometheus-exporter coinpri-helm-charts 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
ecdsa@0.19.0
0.19.2

Open the chart page →

3,378
csghubcsghubVerified publisher2.4.31 of 34See more

csghub csghub 2.4.3

1 of the 34 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6-52f03fead54db
ecdsa@0.19.1
0.19.2

Open the chart page →

58,897
wazuhcsic-charts0.1.01 of 4See more

wazuh csic-charts 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.4.121994f40e0da
ecdsa@0.16.1
0.19.2

Open the chart page →

13,852
home-assistantdamounVerified publisher1.1.01 of 1See more

home-assistant damoun 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
ecdsa@0.18.0
0.19.2

Open the chart page →

6,179
datacubedatacube-charts0.18.21 of 1See more

datacube datacube-charts 0.18.2

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
opendatacube/wms:latest1b90cdf68831
ecdsa@0.13.2
0.19.2

Open the chart page →

27,728
restcubedatacube-charts0.2.91 of 1See more

restcube datacube-charts 0.2.9

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
opendatacube/restcube:latest91870111837c
ecdsa@0.13.2
0.19.2

Open the chart page →

24,335
codecovdoubanVerified publisher0.2.42 of 8See more

codecov douban 0.2.4

2 of the 8 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
codecov/self-hosted-api:24.4.10475cb1c3136
ecdsa@0.18.0
0.19.2
codecov/self-hosted-worker:24.4.1837f546b479b
ecdsa@0.19.0
0.19.2

Open the chart page →

24,917
spectergaloymoney0.3.11 of 1See more

specter galoymoney 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
ecdsa@0.17.0
0.19.2

Open the chart page →

1,691
spectergaloymoney20.3.11 of 1See more

specter galoymoney2 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
lncm/specter-desktop:v1.10.536eaa06f99f4
ecdsa@0.17.0
0.19.2

Open the chart page →

1,691
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
ecdsa@0.19.1
0.19.2

Open the chart page →

6,008
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
ecdsa@0.19.0
0.19.2

Open the chart page →

4,647
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
ecdsa@0.18.0
0.19.2

Open the chart page →

6,447
lnbitskronkltdVerified publisher0.1.01 of 1See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:latest26fae6327477
ecdsa@0.18.0
0.19.2

Open the chart page →

1,444
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
ecdsa@0.13.3
0.19.2

Open the chart page →

1,850
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
ecdsa@0.18.0
0.19.2

Open the chart page →

1,949
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
ecdsa@0.14.1
0.19.2
lsstsqre/sciplat-hub:latest5e0ade6bed1c
ecdsa@0.14.1
0.19.2
lsstsqre/wfdispatcher:lateste9feb99f524d
ecdsa@0.14.1
0.19.2

Open the chart page →

5,786
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
ecdsa@0.19.1
0.19.2

Open the chart page →

2,298
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.01 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

1 of the 40 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
ecdsa@0.19.1
0.19.2

Open the chart page →

71,208
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
ecdsa@0.19.1
0.19.2

Open the chart page →

4,749
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
ecdsa@0.18.0
0.19.2

Open the chart page →

7,431
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
ecdsa@0.18.0
python-ecdsa@0.18.0-3
0.19.2
no fix listed

Open the chart page →

15,591
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
ecdsa@0.15
0.19.2

Open the chart page →

8,694
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
ecdsa@0.18.0
0.19.2

Open the chart page →

5,565
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-33936.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
ecdsa@0.16.1
0.19.2

Open the chart page →

11,119

Container images carrying it

49 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
lncm/specter-desktop:v1.10.536eaa06f99f4
ecdsa@0.17.0
0.19.2
2
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
ecdsa@0.16.1
0.19.2
1
assistiot/open_api_backend:1.1.230812ba93555
ecdsa@0.18.0
0.19.2
1
bnjbvr/kresus:0.22.137e216b182c8
ecdsa@0.18.0
python-ecdsa@0.18.0-3
0.19.2
no fix listed
1
camptocamp/ekorre:0.1.035c91d5fda04
ecdsa@0.15
0.19.2
1
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
ecdsa@0.19.0
0.19.2
1
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
ecdsa@0.19.0
0.19.2
1
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
ecdsa@0.19.0
0.19.2
1
codecov/self-hosted-api:24.4.10475cb1c3136
ecdsa@0.18.0
0.19.2
1
codecov/self-hosted-worker:24.4.1837f546b479b
ecdsa@0.19.0
0.19.2
1
dserio83/velero-api:0.3.16b3d9115fee2
ecdsa@0.19.0
0.19.2
1
esphome/esphome:1.18.03f51ec10e823
ecdsa@0.16.1
0.19.2
1
esphome/esphome:2024.3.09ab8cc88b28c
ecdsa@0.18.0
0.19.2
1
esphome/esphome:2024.12.2b2c6322700ac
ecdsa@0.19.0
0.19.2
1
esphome/esphome:2025.3.0def8b6e4f517
ecdsa@0.19.1
0.19.2
1
galaxy/galaxy-init:v18.010267bad550e6
ecdsa@0.13
0.19.2
1
guillh/web3-prometheus-exporter:0.3.04fb99dbc32b2
ecdsa@0.19.0
0.19.2
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
ecdsa@0.17.0
0.19.2
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
ecdsa@0.18.0
0.19.2
1
homeassistant/home-assistant:2023.12.48d000332b09b
ecdsa@0.18.0
0.19.2
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
ecdsa@0.16.1
0.19.2
1
kobotoolbox/kobocat:2.022.24ab15679454415
ecdsa@0.17.0
0.19.2
1
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
ecdsa@0.19.1
0.19.2
1
kyovint/kyoimgusers:1.0.080084149156e
ecdsa@0.19.1
0.19.2
1
lnbitsdocker/lnbits-legend:latest26fae6327477
ecdsa@0.18.0
0.19.2
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
ecdsa@0.18.0
0.19.2
1
lncm/specter-desktop:v0.10.4bca14d04397d
ecdsa@0.13.3
0.19.2
1
localstack/localstack:3.19d278167f2b7
ecdsa@0.18.0
0.19.2
1
lsstsqre/prepuller:latest19c2dfc4e4ff
ecdsa@0.14.1
0.19.2
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
ecdsa@0.14.1
0.19.2
1
lsstsqre/wfdispatcher:lateste9feb99f524d
ecdsa@0.14.1
0.19.2
1
marcoimme/oidcmock:latestb6035c0721a8
ecdsa@0.19.1
0.19.2
1
netboxcommunity/netbox:v3.2.83d652dca5351
ecdsa@0.18.0
0.19.2
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
ecdsa@0.19.1
0.19.2
1
opendatacube/restcube:latest91870111837c
ecdsa@0.13.2
0.19.2
1
opendatacube/wms:latest1b90cdf68831
ecdsa@0.13.2
0.19.2
1
salehmir/jesse:1.10.101afa95f979e9
ecdsa@0.19.1
0.19.2
1
wazuh/wazuh-manager:4.4.121994f40e0da
ecdsa@0.16.1
0.19.2
1
weblate/weblate:3.11.3-182848df56ecd
ecdsa@0.15
0.19.2
1
zurdi15/romm:2.3.12db88fe44c89
ecdsa@0.18.0
0.19.2
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
ecdsa@0.19.0
0.19.2
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
ecdsa@0.19.1
0.19.2
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
ecdsa@0.17.0
0.19.2
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
ecdsa@0.18.0
0.19.2
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
ecdsa@0.19.1
0.19.2
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
ecdsa@0.19.1
0.19.2
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
ecdsa@0.18.0
0.19.2
1
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
ecdsa@0.19.1
0.19.2
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
ecdsa@0.19.1
0.19.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.