StackRadar

CVE-2026-34073

Medium

Advisory

Published 27 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
605
of 17,781 indexed, latest versions
Container images
492
deployed by those charts
Fix available
2 of 3
affected packages

cryptography has incomplete DNS name constraint enforcement on peer names

Carried by container images the latest versions of 605 of 17,781 indexed charts deploy, on 492 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+69 more46.0.6492
python-cryptographydeb38.0.4-3, 38.0.4-3+deb12u1, 43.0.0-3+deb13u1no fix listed14
py3-cryptographyapk46.0.5-r046.0.7-r01
OSV records
ALPINE-CVE-2026-34073DEBIAN-CVE-2026-34073GHSA-m959-cc7f-wv43
Also known as
PYSEC-2026-35

Charts affected

605 by stars
ChartLatestAffected imagesRadar Score
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
cryptography@2.6.1
46.0.6

Open the chart page →

3,555
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
cryptography@2.6.1
46.0.6

Open the chart page →

3,717
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
cryptography@37.0.2
46.0.6

Open the chart page →

7,579
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher1.1.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
cryptography@46.0.5
46.0.6

Open the chart page →

1,447
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.90.101b59e1c905c9
cryptography@3.3.2
46.0.6

Open the chart page →

2,962
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
cryptography@43.0.3
46.0.6

Open the chart page →

4,477
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
cryptography@46.0.5
46.0.6

Open the chart page →

4,634
mysql-clusterkfirfer0.0.41 of 1See more

mysql-cluster kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
mysql/mysql-cluster:8.0.20e4ea36622cdd
cryptography@2.8
46.0.6

Open the chart page →

416
kiali-operatorkiali2.31.01 of 1See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
cryptography@44.0.2
46.0.6

Open the chart page →

1,157
mysqldumpkokuwa7.0.31 of 1See more

mysqldump kokuwa 7.0.3

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/kokuwaio/gcloud-mysql:v3.2.1963098135c550
cryptography@42.0.7
46.0.6

Open the chart page →

847
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
library/mysql:8.0.303c1aab708f6e
cryptography@3.4.7
46.0.6

Open the chart page →

14,204
netscaler-cpx-with-ingress-controllernetscalerOfficialVerified publisher4.1.171 of 2See more

netscaler-cpx-with-ingress-controller netscaler 4.1.17

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
quay.io/netscaler/netscaler-k8s-ingress-controller:4.1.1755b12c2a8440
cryptography@43.0.1
46.0.6

Open the chart page →

394
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
cryptography@36.0.2
46.0.6
kobotoolbox/kpi:2.022.24dbcacc01bccd4
cryptography@36.0.2
46.0.6

Open the chart page →

18,517
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
cryptography@3.4.8
46.0.6

Open the chart page →

4,045
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
cryptography@44.0.3
46.0.6

Open the chart page →

2,866
plecopleco0.24.01 of 1See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
cryptography@43.0.1
46.0.6

Open the chart page →

1,346
plausiblesinextraVerified publisher1.1.21 of 1See more

plausible sinextra 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
cryptography@44.0.3
46.0.6

Open the chart page →

859
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
cryptography@46.0.3
46.0.6

Open the chart page →

3,804
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
cryptography@44.0.3
46.0.6

Open the chart page →

12,037
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
cryptography@37.0.2
46.0.6

Open the chart page →

12,046
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
cryptography@43.0.1
46.0.6

Open the chart page →

2,388
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
cryptography@42.0.8
46.0.6
ddosify/selfhosted_backend:3.2.93c11e3182652
cryptography@42.0.8
46.0.6

Open the chart page →

22,202
tikaapache-tika3.2.21 of 1See more

tika apache-tika 3.2.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
apache/tika:3.2.2.0-fullffab324253ed
cryptography@43.0.0
46.0.6

Open the chart page →

437
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
cryptography@3.3.2
46.0.6

Open the chart page →

10,730
deployautoml0.1.01 of 3See more

deploy automl 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
amd64/mysql:5.7e20a653e0f51
cryptography@3.2.1
46.0.6

Open the chart page →

2,947
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
cryptography@3.3.2
46.0.6

Open the chart page →

2,042
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
cryptography@45.0.2
46.0.6

Open the chart page →

9,971
syncstorage-rschristianhuthVerified publisher6.1.11 of 2See more

syncstorage-rs christianhuth 6.1.1

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
cryptography@43.0.1
46.0.6

Open the chart page →

693
pgbenchcloudnative-pgVerified publisher0.1.01 of 1See more

pgbench cloudnative-pg 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
cryptography@38.0.3
46.0.6

Open the chart page →

2,713
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
cryptography@42.0.5
46.0.6

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
cryptography@43.0.1
46.0.6

Open the chart page →

13,761
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
cryptography@41.0.6
46.0.6

Open the chart page →

1,944
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
cryptography@2.8
46.0.6

Open the chart page →

4,568
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
46.0.6

Open the chart page →

7,984
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
cryptography@44.0.1
46.0.6

Open the chart page →

9,205
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
cryptography@39.0.0
46.0.6

Open the chart page →

5,598
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
cryptography@39.0.1
46.0.6

Open the chart page →

8,823
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
cryptography@38.0.1
46.0.6

Open the chart page →

5,853
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
cryptography@43.0.0
46.0.6

Open the chart page →

10,858
copypartyernail-copyparty2.0.01 of 1See more

copyparty ernail-copyparty 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
copyparty/ac:1.19.200a0a8605062c
cryptography@44.0.3
46.0.6

Open the chart page →

1,685
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
cryptography@46.0.3
46.0.6

Open the chart page →

8,496
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
cryptography@2.9.2
46.0.6

Open the chart page →

2,034
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
cryptography@44.0.0
46.0.6

Open the chart page →

1,965
appdaemongeek-cookbookVerified publisher8.4.21 of 1See more

appdaemon geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
acockburn/appdaemon:4.0.83a93281d7e94
cryptography@3.4.7
46.0.6

Open the chart page →

3,461
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
cryptography@3.3.2
46.0.6

Open the chart page →

35,305
healthchecksgeek-cookbookVerified publisher4.4.21 of 1See more

healthchecks geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
linuxserver/healthchecks:version-v1.20.050792a72fc71
cryptography@3.4.7
46.0.6

Open the chart page →

1,667
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
cryptography@2.9.2
46.0.6

Open the chart page →

1,848
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
cryptography@2.1.4
46.0.6

Open the chart page →

11,662
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
cryptography@37.0.4
46.0.6

Open the chart page →

3,924
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
cryptography@2.9.2
46.0.6

Open the chart page →

7,801

Container images carrying it

492 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
amundsendev/amundsen-frontend:2.1.169e7915e61c1
cryptography@2.9
46.0.6
1
anchore/anchore-engine:v0.10.0bde9eedf639d
cryptography@3.3.2
46.0.6
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
cryptography@2.9.2
46.0.6
1
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
cryptography@41.0.7
46.0.6
1
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
cryptography@44.0.2
46.0.6
1
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
cryptography@3.3.2
46.0.6
1
apache/airflow:2.8.4-python3.964e58748b6b9
cryptography@41.0.7
46.0.6
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
cryptography@42.0.8
46.0.6
1
apache/airflow:2.8.1e5560ad0b86e
cryptography@41.0.7
46.0.6
1
apache/hertzbeat:1.8.075d48a62748f
cryptography@41.0.7
46.0.6
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
cryptography@41.0.7
46.0.6
1
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
cryptography@3.4.7
46.0.6
1
apache/superset:4.0.1ab9467fd712c
cryptography@42.0.4
46.0.6
1
apache/tika:latest-full80072bb73dd3
cryptography@46.0.5
46.0.6
1
apache/tika:3.2.2.0-fullffab324253ed
cryptography@43.0.0
46.0.6
1
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
cryptography@41.0.7
46.0.6
1
appwrite/appwrite:1.9.01aaa70127114
cryptography@46.0.5
py3-cryptography@46.0.5-r0
46.0.6
46.0.7-r0
1
arconixforge/mongodb-secure-backup:v1.1c08d7c438966
cryptography@39.0.2
46.0.6
1
aristidetm/basic-notebook:3.6.5469dbc951224
cryptography@42.0.8
46.0.6
1
aristidetm/k8s-hub:3.3.7ccb516cb8474
cryptography@42.0.5
46.0.6
1
assistiot/authorization_db:latestc3adbab6a3e7
cryptography@41.0.3
46.0.6
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
cryptography@3.3.2
46.0.6
1
baserow/backend:1.31.1e0b3c8130b91
cryptography@42.0.8
46.0.6
1
baserow/baserow:1.30.1df0c42eb67e8
cryptography@42.0.8
46.0.6
1
behnambm/docker-sample:v1bd3ad88afff9
cryptography@41.0.7
46.0.6
1
benbusby/whoogle-search:0.5.4f77f7e6e4ad2
cryptography@3.3.2
46.0.6
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
cryptography@43.0.3
46.0.6
1
bmeares/meerschaum:2.8.48e9c5bacaa82
cryptography@44.0.0
46.0.6
1
bnjbvr/kresus:0.22.137e216b182c8
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
46.0.6
no fix listed
1
boky/postfix:5.1.0aafc77238423
cryptography@46.0.3
46.0.6
1
camerahub/camerahub:0.36.23a5af37dd6e1b
cryptography@40.0.2
46.0.6
1
camptocamp/ekorre:0.1.035c91d5fda04
cryptography@2.8
46.0.6
1
camptocamp/pghoard:10bff736b15623
cryptography@2.3.1
46.0.6
1
camptocamp/snow-webhook:latest2924b43dbf40
cryptography@2.6.1
46.0.6
1
castai/hibernate:v0.14da62858c8381
cryptography@43.0.3
46.0.6
1
cdignam/kodiak:v0.54.05a6a55b39cee
cryptography@3.4.8
46.0.6
1
ceph/daemon:latest-nautilus90f30824a96e
cryptography@1.7.2
46.0.6
1
ceticasbl/pg-ldap-sync:latest6c0aa7567145
cryptography@2.6.1
46.0.6
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
cryptography@46.0.5
46.0.6
1
chorss/docker-pgadmin4:4.115c549cacb8ab
cryptography@2.7
46.0.6
1
cleveritcz/opencve:1.5.0c75c1636e0b7
cryptography@42.0.5
46.0.6
1
cloudve/janis-terminal:latestaf56e77ca587
cryptography@2.1.4
46.0.6
1
cloudve/ttyd:latestd79c1c5881c0
cryptography@2.9.2
46.0.6
1
codecov/self-hosted-api:24.4.10475cb1c3136
cryptography@42.0.0
46.0.6
1
codecov/self-hosted-worker:24.4.1837f546b479b
cryptography@42.0.5
46.0.6
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
cryptography@3.3.1
46.0.6
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
cryptography@3.3.1
46.0.6
1
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
cryptography@3.4.8
46.0.6
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
cryptography@41.0.7
46.0.6
1
confluentinc/cp-kafka:7.5.1dc9b972db002
cryptography@41.0.4
46.0.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.