StackRadar

CVE-2026-34073

Medium

Advisory

Published 27 Mar 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.002
5th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
605
of 17,781 indexed, latest versions
Container images
492
deployed by those charts
Fix available
2 of 3
affected packages

cryptography has incomplete DNS name constraint enforcement on peer names

Carried by container images the latest versions of 605 of 17,781 indexed charts deploy, on 492 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+69 more46.0.6492
python-cryptographydeb38.0.4-3, 38.0.4-3+deb12u1, 43.0.0-3+deb13u1no fix listed14
py3-cryptographyapk46.0.5-r046.0.7-r01
OSV records
ALPINE-CVE-2026-34073DEBIAN-CVE-2026-34073GHSA-m959-cc7f-wv43
Also known as
PYSEC-2026-35

Charts affected

605 by stars
ChartLatestAffected imagesRadar Score
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
cryptography@2.6.1
46.0.6

Open the chart page →

3,555
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
cryptography@2.6.1
46.0.6

Open the chart page →

3,717
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
cryptography@37.0.2
46.0.6

Open the chart page →

7,579
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher1.1.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
cryptography@46.0.5
46.0.6

Open the chart page →

1,447
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.90.101b59e1c905c9
cryptography@3.3.2
46.0.6

Open the chart page →

2,962
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
cryptography@43.0.3
46.0.6

Open the chart page →

4,477
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
cryptography@46.0.5
46.0.6

Open the chart page →

4,634
mysql-clusterkfirfer0.0.41 of 1See more

mysql-cluster kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
mysql/mysql-cluster:8.0.20e4ea36622cdd
cryptography@2.8
46.0.6

Open the chart page →

416
kiali-operatorkiali2.31.01 of 1See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
cryptography@44.0.2
46.0.6

Open the chart page →

1,157
mysqldumpkokuwa7.0.31 of 1See more

mysqldump kokuwa 7.0.3

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/kokuwaio/gcloud-mysql:v3.2.1963098135c550
cryptography@42.0.7
46.0.6

Open the chart page →

847
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
library/mysql:8.0.303c1aab708f6e
cryptography@3.4.7
46.0.6

Open the chart page →

14,204
netscaler-cpx-with-ingress-controllernetscalerOfficialVerified publisher4.1.171 of 2See more

netscaler-cpx-with-ingress-controller netscaler 4.1.17

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
quay.io/netscaler/netscaler-k8s-ingress-controller:4.1.1755b12c2a8440
cryptography@43.0.1
46.0.6

Open the chart page →

394
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
cryptography@36.0.2
46.0.6
kobotoolbox/kpi:2.022.24dbcacc01bccd4
cryptography@36.0.2
46.0.6

Open the chart page →

18,517
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
cryptography@3.4.8
46.0.6

Open the chart page →

4,045
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
cryptography@44.0.3
46.0.6

Open the chart page →

2,866
plecopleco0.24.01 of 1See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
cryptography@43.0.1
46.0.6

Open the chart page →

1,346
plausiblesinextraVerified publisher1.1.21 of 1See more

plausible sinextra 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
cryptography@44.0.3
46.0.6

Open the chart page →

859
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
cryptography@46.0.3
46.0.6

Open the chart page →

3,804
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
cryptography@44.0.3
46.0.6

Open the chart page →

12,037
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
cryptography@37.0.2
46.0.6

Open the chart page →

12,046
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
cryptography@43.0.1
46.0.6

Open the chart page →

2,388
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
cryptography@42.0.8
46.0.6
ddosify/selfhosted_backend:3.2.93c11e3182652
cryptography@42.0.8
46.0.6

Open the chart page →

22,202
tikaapache-tika3.2.21 of 1See more

tika apache-tika 3.2.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
apache/tika:3.2.2.0-fullffab324253ed
cryptography@43.0.0
46.0.6

Open the chart page →

437
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
cryptography@3.3.2
46.0.6

Open the chart page →

10,730
deployautoml0.1.01 of 3See more

deploy automl 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
amd64/mysql:5.7e20a653e0f51
cryptography@3.2.1
46.0.6

Open the chart page →

2,947
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
cryptography@3.3.2
46.0.6

Open the chart page →

2,042
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
cryptography@45.0.2
46.0.6

Open the chart page →

9,971
syncstorage-rschristianhuthVerified publisher6.1.11 of 2See more

syncstorage-rs christianhuth 6.1.1

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
cryptography@43.0.1
46.0.6

Open the chart page →

693
pgbenchcloudnative-pgVerified publisher0.1.01 of 1See more

pgbench cloudnative-pg 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
cryptography@38.0.3
46.0.6

Open the chart page →

2,713
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
cryptography@42.0.5
46.0.6

Open the chart page →

11,205
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
cryptography@43.0.1
46.0.6

Open the chart page →

13,761
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
cryptography@41.0.6
46.0.6

Open the chart page →

1,944
datadogdatadog-test2.4.231 of 2See more

datadog datadog-test 2.4.23

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
datadog/agent:7.22.08f20e56b5311
cryptography@2.8
46.0.6

Open the chart page →

4,568
weblatedeliveryheroVerified publisher0.3.21 of 3See more

weblate deliveryhero 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
cryptography@3.1
46.0.6

Open the chart page →

7,984
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
cryptography@44.0.1
46.0.6

Open the chart page →

9,205
trivy-operatordevopstalesVerified publisher2.5.01 of 1See more

trivy-operator devopstales 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
devopstales/trivy-operator:2.575136aa7a26e
cryptography@39.0.0
46.0.6

Open the chart page →

5,598
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
cryptography@39.0.1
46.0.6

Open the chart page →

8,823
archerydoubanVerified publisher0.4.31 of 6See more

archery douban 0.4.3

1 of the 6 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
hhyo/archery:v1.9.11aa41843419e
cryptography@38.0.1
46.0.6

Open the chart page →

5,853
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
cryptography@43.0.0
46.0.6

Open the chart page →

10,858
copypartyernail-copyparty2.0.01 of 1See more

copyparty ernail-copyparty 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
copyparty/ac:1.19.200a0a8605062c
cryptography@44.0.3
46.0.6

Open the chart page →

1,685
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
cryptography@46.0.3
46.0.6

Open the chart page →

8,496
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
cryptography@2.9.2
46.0.6

Open the chart page →

2,034
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
cryptography@44.0.0
46.0.6

Open the chart page →

1,965
appdaemongeek-cookbookVerified publisher8.4.21 of 1See more

appdaemon geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
acockburn/appdaemon:4.0.83a93281d7e94
cryptography@3.4.7
46.0.6

Open the chart page →

3,461
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
cryptography@3.3.2
46.0.6

Open the chart page →

35,305
healthchecksgeek-cookbookVerified publisher4.4.21 of 1See more

healthchecks geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
linuxserver/healthchecks:version-v1.20.050792a72fc71
cryptography@3.4.7
46.0.6

Open the chart page →

1,667
kube-ops-viewgeek-cookbookVerified publisher1.2.21 of 1See more

kube-ops-view geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
hjacobs/kube-ops-view:20.4.058221b57d4d2
cryptography@2.9.2
46.0.6

Open the chart page →

1,848
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
cryptography@2.1.4
46.0.6

Open the chart page →

11,662
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
cryptography@37.0.4
46.0.6

Open the chart page →

3,924
recipesgeek-cookbookVerified publisher6.6.21 of 2See more

recipes geek-cookbook 6.6.2

1 of the 2 container images this version deploys carry CVE-2026-34073.

Container imageDigestPackageFixed in
vabene1111/recipes:1.0.5.2ec4e9e2905b0
cryptography@2.9.2
46.0.6

Open the chart page →

7,801

Container images carrying it

492 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
pyaephyohein/mysql2s3bk:alphafdee05f2d441
cryptography@41.0.3
46.0.6
1
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
cryptography@41.0.7
46.0.6
1
qonstrukt/php:8.4-v8-apache089af7925aa1
cryptography@41.0.7
46.0.6
1
redash/redash:25.8.000d813437db5
cryptography@45.0.5
46.0.6
1
redash/redash:10.0.0.b503639392753c0376
cryptography@2.8
46.0.6
1
redash/redash:26.3.0c5c9148f5c38
cryptography@46.0.5
46.0.6
1
redislabs/redisinsight:1.14.0b03ab1426d0d
cryptography@39.0.1
46.0.6
1
rommapp/romm:4.4.1b909e95d1aab
cryptography@45.0.5
46.0.6
1
rook/ceph:v1.20.72f970c425617
cryptography@36.0.1
46.0.6
1
rook/ceph:v1.19.2944a1dd70496
cryptography@36.0.1
46.0.6
1
saidsef/scapy-containerised:v2025.02f17f7c435891
cryptography@44.0.1
46.0.6
1
salehmir/jesse:1.10.101afa95f979e9
cryptography@42.0.8
46.0.6
1
saltstack/salt:3006.3e9c7906b7a5c
cryptography@41.0.3
46.0.6
1
samueldg/snappass:latest3987195edbe6
cryptography@2.8
46.0.6
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
cryptography@44.0.0
46.0.6
1
seafileltd/seafile-mc:9.0.106693911bcc40
cryptography@38.0.4
46.0.6
1
seafileltd/seafile-mc:10.0.170628f29c663
cryptography@41.0.1
46.0.6
1
seafileltd/seafile-mc:9.0.97ac833196f60
cryptography@38.0.1
46.0.6
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
cryptography@43.0.0
46.0.6
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
cryptography@3.4
46.0.6
1
semaphoreui/semaphore:v2.9.645b50bc11833f
cryptography@41.0.3
46.0.6
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
cryptography@43.0.0
46.0.6
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
cryptography@43.0.0
46.0.6
1
sissbruecker/linkding:1.35.00c5dddf0b37c
cryptography@43.0.1
46.0.6
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
cryptography@43.0.1
46.0.6
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
cryptography@2.1.4
46.0.6
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
cryptography@2.1.4
46.0.6
1
softonic/gar-exporter:0.2.1a64d6c0e0ae5
cryptography@3.2.1
46.0.6
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
cryptography@2.8
46.0.6
1
sruthitanneru/pi-sample:ui-lateste565ea454ffd
cryptography@44.0.0
46.0.6
1
stackstorm/st2actionrunner:3.888235ba70cad
cryptography@39.0.1
46.0.6
1
stackstorm/st2api:3.86f56d239d280
cryptography@39.0.1
46.0.6
1
stackstorm/st2auth:3.833ecfda16608
cryptography@39.0.1
46.0.6
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
cryptography@39.0.1
46.0.6
1
stackstorm/st2notifier:3.8f190a6212195
cryptography@39.0.1
46.0.6
1
stackstorm/st2rulesengine:3.8259503496ff9
cryptography@39.0.1
46.0.6
1
stackstorm/st2scheduler:3.8b1de2055c362
cryptography@39.0.1
46.0.6
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
cryptography@39.0.1
46.0.6
1
stackstorm/st2stream:3.81c8904a3bf67
cryptography@39.0.1
46.0.6
1
stackstorm/st2timersengine:3.81bf35bfaf00c
cryptography@39.0.1
46.0.6
1
stackstorm/st2workflowengine:3.819fdfffdbba8
cryptography@39.0.1
46.0.6
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
cryptography@2.6.1
46.0.6
1
substratusai/verba:v0.4.0-baseURL261695be635eb
cryptography@42.0.7
46.0.6
1
supabase/realtime:v2.102.3aa1c92c0cf32
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
46.0.6
no fix listed
1
supabase/realtime:latestd3aa0c86c7b3
cryptography@43.0.0
python-cryptography@43.0.0-3+deb13u1
46.0.6
no fix listed
1
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
cryptography@40.0.2
46.0.6
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cryptography@2.5
46.0.6
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
cryptography@39.0.1
46.0.6
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
cryptography@36.0.0
46.0.6
1
taigaio/taiga-back:6.4.29f97323cc150
cryptography@3.4.7
46.0.6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.