StackRadar

CVE-2026-34073

Medium

Advisory

Published 27 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
605
of 17,781 indexed, latest versions
Container images
492
deployed by those charts
Fix available
2 of 3
affected packages

cryptography has incomplete DNS name constraint enforcement on peer names

Carried by container images the latest versions of 605 of 17,781 indexed charts deploy, on 492 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+69 more46.0.6492
python-cryptographydeb38.0.4-3, 38.0.4-3+deb12u1, 43.0.0-3+deb13u1no fix listed14
py3-cryptographyapk46.0.5-r046.0.7-r01
OSV records
ALPINE-CVE-2026-34073DEBIAN-CVE-2026-34073GHSA-m959-cc7f-wv43
Also known as
PYSEC-2026-35

Charts affected

605 by stars
ChartLatestAffected imagesRadar Score
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
cryptography@2.6.1
46.0.6

Open the chart page →

3,555
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
cryptography@2.6.1
46.0.6

Open the chart page →

3,717
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
cryptography@37.0.2
46.0.6

Open the chart page →

7,579
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher1.1.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
cryptography@46.0.5
46.0.6

Open the chart page →

1,447
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.90.101b59e1c905c9
cryptography@3.3.2
46.0.6

Open the chart page →

2,962
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
cryptography@43.0.3
46.0.6

Open the chart page →

4,477
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
cryptography@46.0.5
46.0.6

Open the chart page →

4,634
mysql-clusterkfirfer0.0.41 of 1See more

mysql-cluster kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
mysql/mysql-cluster:8.0.20e4ea36622cdd
cryptography@2.8
46.0.6

Open the chart page →

416
kiali-operatorkiali2.31.01 of 1See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
cryptography@44.0.2
46.0.6

Open the chart page →

1,157
mysqldumpkokuwa7.0.31 of 1See more

mysqldump kokuwa 7.0.3

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/kokuwaio/gcloud-mysql:v3.2.1963098135c550
cryptography@42.0.7
46.0.6

Open the chart page →

847
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
library/mysql:8.0.303c1aab708f6e
cryptography@3.4.7
46.0.6

Open the chart page →

14,204
netscaler-cpx-with-ingress-controllernetscalerOfficialVerified publisher4.1.171 of 2See more

netscaler-cpx-with-ingress-controller netscaler 4.1.17

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
quay.io/netscaler/netscaler-k8s-ingress-controller:4.1.1755b12c2a8440
cryptography@43.0.1
46.0.6

Open the chart page →

394
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
cryptography@36.0.2
46.0.6
kobotoolbox/kpi:2.022.24dbcacc01bccd4
cryptography@36.0.2
46.0.6

Open the chart page →

18,517
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
cryptography@3.4.8
46.0.6

Open the chart page →

4,045
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
cryptography@44.0.3
46.0.6

Open the chart page →

2,866
plecopleco0.24.01 of 1See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
cryptography@43.0.1
46.0.6

Open the chart page →

1,346
plausiblesinextraVerified publisher1.1.21 of 1See more

plausible sinextra 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
cryptography@44.0.3
46.0.6

Open the chart page →

859
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
cryptography@46.0.3
46.0.6

Open the chart page →

3,804
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
cryptography@44.0.3
46.0.6

Open the chart page →

12,037
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
cryptography@37.0.2
46.0.6

Open the chart page →

12,046
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
cryptography@43.0.1
46.0.6

Open the chart page →

2,388
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
cryptography@42.0.8
46.0.6
ddosify/selfhosted_backend:3.2.93c11e3182652
cryptography@42.0.8
46.0.6

Open the chart page →

22,202
tikaapache-tika3.2.21 of 1See more

tika apache-tika 3.2.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
apache/tika:3.2.2.0-fullffab324253ed
cryptography@43.0.0
46.0.6

Open the chart page →

437
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
cryptography@3.3.2
46.0.6

Open the chart page →

10,730
deployautoml0.1.01 of 3See more

deploy automl 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
amd64/mysql:5.7e20a653e0f51
cryptography@3.2.1
46.0.6

Open the chart page →

2,947
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
cryptography@3.3.2
46.0.6

Open the chart page →

2,042
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
cryptography@45.0.2
46.0.6

Open the chart page →

9,971
syncstorage-rschristianhuthVerified publisher6.1.11 of 2See more

syncstorage-rs christianhuth 6.1.1

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
cryptography@43.0.1
46.0.6

Open the chart page →

693
pgbenchcloudnative-pgVerified publisher0.1.01 of 1See more

pgbench cloudnative-pg 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
cryptography@38.0.3
46.0.6

Open the chart page →

2,713
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
cryptography@42.0.5
46.0.6

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
cryptography@43.0.1
46.0.6

Open the chart page →

13,761
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
cryptography@41.0.6
46.0.6

Open the chart page →

1,944
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
cryptography@2.8
46.0.6

Open the chart page →

4,568
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
46.0.6

Open the chart page →

7,984
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
cryptography@44.0.1
46.0.6

Open the chart page →

9,205
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
cryptography@39.0.0
46.0.6

Open the chart page →

5,598
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
cryptography@39.0.1
46.0.6

Open the chart page →

8,823
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
cryptography@38.0.1
46.0.6

Open the chart page →

5,853
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
cryptography@43.0.0
46.0.6

Open the chart page →

10,858
copypartyernail-copyparty2.0.01 of 1See more

copyparty ernail-copyparty 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
copyparty/ac:1.19.200a0a8605062c
cryptography@44.0.3
46.0.6

Open the chart page →

1,685
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
cryptography@46.0.3
46.0.6

Open the chart page →

8,496
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
cryptography@2.9.2
46.0.6

Open the chart page →

2,034
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
cryptography@44.0.0
46.0.6

Open the chart page →

1,965
appdaemongeek-cookbookVerified publisher8.4.21 of 1See more

appdaemon geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
acockburn/appdaemon:4.0.83a93281d7e94
cryptography@3.4.7
46.0.6

Open the chart page →

3,461
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
cryptography@3.3.2
46.0.6

Open the chart page →

35,305
healthchecksgeek-cookbookVerified publisher4.4.21 of 1See more

healthchecks geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
linuxserver/healthchecks:version-v1.20.050792a72fc71
cryptography@3.4.7
46.0.6

Open the chart page →

1,667
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
cryptography@2.9.2
46.0.6

Open the chart page →

1,848
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
cryptography@2.1.4
46.0.6

Open the chart page →

11,662
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
cryptography@37.0.4
46.0.6

Open the chart page →

3,924
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
cryptography@2.9.2
46.0.6

Open the chart page →

7,801

Container images carrying it

492 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
cryptography@3.3.1
46.0.6
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
cryptography@3.3.1
46.0.6
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
cryptography@41.0.7
46.0.6
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
cryptography@3.3.1
46.0.6
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
cryptography@3.3.1
46.0.6
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
cryptography@41.0.4
46.0.6
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
cryptography@3.3.1
46.0.6
1
copyparty/ac:1.19.200a0a8605062c
cryptography@44.0.3
46.0.6
1
dannielkil/book-db:latest433290c5c1db
cryptography@42.0.7
46.0.6
1
daskdev/dask:1.1.04ecd7bc35500
cryptography@2.3.1
46.0.6
1
daskdev/dask-notebook:1.1.0052630f5ca04
cryptography@2.3.1
46.0.6
1
datadog/agent:7.22.08f20e56b5311
cryptography@2.8
46.0.6
1
datadog/agent:6aad9994de6a7
cryptography@3.3.2
46.0.6
1
datamate/seafile-professional:11.0.202dd66b722464
cryptography@45.0.6
46.0.6
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
cryptography@42.0.5
46.0.6
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
cryptography@42.0.8
46.0.6
1
ddosify/selfhosted_backend:3.2.93c11e3182652
cryptography@42.0.8
46.0.6
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
cryptography@42.0.5
46.0.6
1
deconzcommunity/deconz:2.29.2062de2362641
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
46.0.6
no fix listed
1
deconzcommunity/deconz:2.12.066541bbb78952
cryptography@2.6.1
46.0.6
1
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
cryptography@3.4.6
46.0.6
1
deepflowce/mysql:8.0.313d7ae561cf60
cryptography@3.4.7
46.0.6
1
devopstales/kubedash:3.1.08bb837da5aec
cryptography@44.0.1
46.0.6
1
devopstales/trivy-operator:2.575136aa7a26e
cryptography@39.0.0
46.0.6
1
djjudas21/autonodelabel:0.0.6f17233350c4f
cryptography@41.0.3
46.0.6
1
dnationcloud/kubernetes-linter:0.2.1dee6376560f5
cryptography@2.6.1
46.0.6
1
douz/helpdesk:latest4384103d0219
cryptography@2.8
46.0.6
1
dpage/pgadmin4:8.418cd5711fc9a
cryptography@42.0.5
46.0.6
1
dpage/pgadmin4:7.537946e4f3e7b
cryptography@41.0.2
46.0.6
1
dpage/pgadmin4:9.11.050700ac17936
cryptography@46.0.3
46.0.6
1
dpage/pgadmin4:9.252cb72a9e3da
cryptography@44.0.2
46.0.6
1
dpage/pgadmin4:8.13561c1f8f99f2
cryptography@43.0.3
46.0.6
1
dpage/pgadmin4:4.5a5a656e1d5fd
cryptography@2.6.1
46.0.6
1
dpage/pgadmin4:4.22b1f00b8163cf
cryptography@2.9.2
46.0.6
1
drgrove/mtls-server:v0.14.2361721759a2b
cryptography@2.4.2
46.0.6
1
dysnix/pritunl:v1.29-r819951e3e7a32
cryptography@2.8
46.0.6
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
cryptography@2.8
46.0.6
1
errbotio/errbot:6.1.900ee4e0953ab
cryptography@37.0.2
46.0.6
1
esphome/esphome:1.18.03f51ec10e823
cryptography@2.6.1
46.0.6
1
esphome/esphome:2024.3.09ab8cc88b28c
cryptography@42.0.2
46.0.6
1
esphome/esphome:2024.12.2b2c6322700ac
cryptography@43.0.0
46.0.6
1
esphome/esphome:2025.3.0def8b6e4f517
cryptography@44.0.2
46.0.6
1
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
46.0.6
1
evk02/mlflow:2.2.1ef6ff257ef35
cryptography@39.0.2
46.0.6
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
cryptography@39.0.0
46.0.6
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cryptography@2.8
46.0.6
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
cryptography@37.0.4
46.0.6
1
flanksource/batch-runner:v1.0.44689687a7cf95
cryptography@44.0.1
46.0.6
1
fossology/fossology:4.2.18bd1f22ba7bb
cryptography@38.0.3
46.0.6
1
freedom98/flask:k3.0d7ce1533f297
cryptography@45.0.4
46.0.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.