CVE-2026-3832

Low

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.007; 53rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 778; of 17,787 indexed, latest versions
Container images: 724; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 778 of 17,787 indexed charts deploy, on 724 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.7.3-4ubuntu1, 3.7.3-4ubuntu1.1, 3.7.3-4ubuntu1.2, 3.7.3-4ubuntu1.3+17 more	3.7.3-4ubuntu1.9, 3.8.3-1.1ubuntu3.6, 3.8.3-1.1ubuntu3.6+Fips1.2, 3.8.9-3+deb13u4+2 more	683
gnutlsapk	3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r0	3.8.13-r0	41

OSV records: ALPINE-CVE-2026-3832 DEBIAN-CVE-2026-3832 UBUNTU-CVE-2026-3832
Also known as: USN-8284-1

Charts affected

778 by stars

Chart

Latest

Affected images

Radar Score

twentytwenty-crm

0.1.11

1 of 4 See more

twenty twenty-crm 0.1.11

1 of the 4 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	gnutls28@3.7.3-4ubuntu1.4	3.7.3-4ubuntu1.9

Open the chart page →

5,599

opencloudunxwares

0.2.3

1 of 13 See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
apache/tika :2.9.2.1-full	ae0b86d3c4d0	gnutls28@3.8.3-1.1ubuntu3.1	3.8.3-1.1ubuntu3.6

Open the chart page →

45,392

velocityvelocity

1.0.0

1 of 2 See more

velocity velocity 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
unitbuilds/velocity-workflow :1.0.0	f85a34f5bb28	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

967

unmanicvhdirk

0.1.4

1 of 1 See more

unmanic vhdirk 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
josh5/unmanic :0.2.6	4d49c4816260	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.9

Open the chart page →

9,396

browserlessvictorlane

0.2.0

1 of 1 See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.43.0	853e6f105b51	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6

Open the chart page →

4,360

bugsinkvictorlane

0.3.7

1 of 2 See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
library/mariadb :12.0-noble	607835cd628b	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6

Open the chart page →

4,097

twenty-crmvictorlane

0.0.1

2 of 3 See more

twenty-crm victorlane 0.0.1

2 of the 3 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
redis/redis-stack-server :latest	798ab84d9f26	gnutls28@3.7.3-4ubuntu1.7	3.7.3-4ubuntu1.9
twentycrm/twenty-postgres-spilo :latest	2f78405a78be	gnutls28@3.7.3-4ubuntu1.4	3.7.3-4ubuntu1.9

Open the chart page →

13,563

calibre-webvista

0.1.3

1 of 1 See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
linuxserver/calibre-web :0.6.24	241009026e6f	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6

Open the chart page →

7,696

ciliumvks-helm-charts

1.17.14

2 of 3 See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
quay.io/cilium/cilium :v1.17.14	cdcfab5b4466	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6
quay.io/cilium/cilium-envoy :v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be	60031f396695	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6

Open the chart page →

4,124

eth-validatorwateim

1.4.5

2 of 3 See more

eth-validator wateim 1.4.5

2 of the 3 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
sigp/lighthouse :latest	9a62bb870545	gnutls28@3.7.3-4ubuntu1.9	no fix listed
wateim/lighthouse-launch :latest	2520149ee574	gnutls28@3.7.3-4ubuntu1.5	3.7.3-4ubuntu1.9

Open the chart page →

5,077

istio-service-meshwbstack

0.0.1

1 of 1 See more

istio-service-mesh wbstack 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
istio/pilot :1.17.1	ce9d87606701	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.9

Open the chart page →

6,272

frank-gatewaywearefrank

0.3.0

1 of 1 See more

frank-gateway wearefrank 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
ghcr.io/wearefrank/frank-gateway :1.0.0	5ccf797ccdf1	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6

Open the chart page →

1,113

myweatherhelmwebapp1

1.3.50

1 of 8 See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6

Open the chart page →

9,225

myweatherhelm-schedulingwebapp1

1.3.92

1 of 9 See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
library/rabbitmq :3-management	e582c0bc7766	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6

Open the chart page →

9,225

web-dvwaweb-dvwa

1.16.0

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
library/mariadb :10	ce66c7be32a0	gnutls28@3.7.3-4ubuntu1.9	no fix listed

Open the chart page →

8,858

apisixwenerme

2.17.0

1 of 3 See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
apache/apisix :3.18.0-ubuntu	9ee5df1611f9	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

3,096

kubernetes-dashboardwenerme

7.14.0

1 of 5 See more

kubernetes-dashboard wenerme 7.14.0

1 of the 5 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
library/kong :3.9	2a8cf3b110cd	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

3,517

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.9
openebs/node-disk-operator :2.1.0	6afe2123c457	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.9

Open the chart page →

10,568

reflectorwenerme

10.0.65

1 of 1 See more

reflector wenerme 10.0.65

1 of the 1 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
emberstack/kubernetes-reflector :10.0.65	51dbd5880929	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

695

wikiwikijs

3.0.0

1 of 2 See more

5,472

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	gnutls28@3.7.3-4ubuntu1.3	3.7.3-4ubuntu1.9

Open the chart page →

9,296

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6

Open the chart page →

2,229

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	628f228f0fd5	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

4,032

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
library/mariadb :lts	dd9b303aed4f	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

5,635

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	gnutls28@3.7.3-4ubuntu1.5	3.7.3-4ubuntu1.9

Open the chart page →

14,172

xkopsxkops

0.1.0

1 of 5 See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
library/mongo :latest	5211c51171f5	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

13,197

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	gnutls28@3.8.3-1.1ubuntu3.1	3.8.3-1.1ubuntu3.6

Open the chart page →

2,136

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-3832.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	gnutls28@3.7.3-4ubuntu1.9	no fix listed

Open the chart page →

7,916

Container images carrying it

724 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	gnutls28@3.8.9-3	3.8.9-3+deb13u4	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	gnutls28@3.8.9-3	3.8.9-3+deb13u4	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
ghcr.io/paradigmxyz/reth :v1.3.12	1e5290e8b743	gnutls28@3.7.3-4ubuntu1.6	3.7.3-4ubuntu1.9	1
ghcr.io/paradigmxyz/reth :v2.2.0	505fca5e87d6	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	1
ghcr.io/paradigmxyz/reth :latest	68e76b32ad9a	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	gnutls28@3.7.3-4ubuntu1.4	3.7.3-4ubuntu1.9	1
ghcr.io/radar-base/managementportal/management-portal :3.0.0	c1b37e821f72	gnutls28@3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	1
ghcr.io/radar-base/radar-app-config/radar-app-config :0.6.2	4431db7b486b	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	1
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend :0.2.4	d1e55350923c	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	1
ghcr.io/radar-base/radar-gateway/radar-gateway :0.9.4	219d894aa7a6	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	1
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure :3.0.6	7fb9c70e96a4	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	1
ghcr.io/radar-base/radar-schemas/radar-schemas-tools :0.8.16	c442e8bfe6b4	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	1
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend :0.6.4	6a04b43b8d9a	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
ghcr.io/reitermarkus/7d2d :main	39953b387b61	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
ghcr.io/sergelogvinov/mongosqld :2.14.23	0b826375ed42	gnutls28@3.7.3-4ubuntu1.6	3.7.3-4ubuntu1.9	1
ghcr.io/sergelogvinov/mongosync :1.15.0	fa99ed475f03	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
ghcr.io/sissbruecker/linkding :1.45.0	61b2eb9eed8e	gnutls28@3.8.9-3	3.8.9-3+deb13u4	1
ghcr.io/slskd/slskd :0.25.1	ab9ed50e028b	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	1
ghcr.io/spidernet-io/egressgateway-agent :v0.6.9	a8ec2f74c9d0	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.6	1
ghcr.io/spidernet-io/egressgateway-controller :v0.6.9	9deda7b68c34	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.6	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
ghcr.io/streamvisor/streamvisor :4.1.4	0bc598b2ac9a	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	1
ghcr.io/substra/substra-backend :1.0.1	21967f54ec86	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6	1
ghcr.io/suwayomi/suwayomi-server :v2.3.2320	d2c3218c7f9f	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/topolvm/pie :0.18.0	aa467443e407	gnutls28@3.7.3-4ubuntu1.9	no fix listed	1
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	gnutls28@3.7.3-4ubuntu1.9	no fix listed	1
ghcr.io/topolvm/topolvm-with-sidecar :0.35.0	b354978c440d	gnutls28@3.7.3-4ubuntu1.5	3.7.3-4ubuntu1.9	1
ghcr.io/turbot/guardrails-agent-kubernetes :0.3.0	9d01bf9c9224	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	gnutls28@3.7.3-4ubuntu1.4	3.7.3-4ubuntu1.9	1
ghcr.io/voxpupuli/container-puppetserver :7.17.0-v1.5.0	916746209ac5	gnutls28@3.7.3-4ubuntu1.4	3.7.3-4ubuntu1.9	1
ghcr.io/voxpupuli/puppetserver :8.7.0-main	63873f3f698e	gnutls28@3.7.3-4ubuntu1.5	3.7.3-4ubuntu1.9	1
ghcr.io/wearefrank/frank-gateway :1.0.0	5ccf797ccdf1	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	1
ghcr.io/wolveix/satisfactory-server :v1.9.10	e0f2f8c97598	gnutls28@3.7.3-4ubuntu1.7	3.7.3-4ubuntu1.9	1
ghcr.io/zazukoians/qlever-server :v0.10.0	f10fd24b2290	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/zystem-io/zymtrace-pub-gateway :26.9.1	da0b5eb7721a	gnutls28@3.7.3-4ubuntu1.7	3.7.3-4ubuntu1.9	1
mcr.microsoft.com/mssql/server :latest	4bab24f36c1e	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
mcr.microsoft.com/mssql/server :2022-latest	ba4c8329f48f	gnutls28@3.7.3-4ubuntu1.9	no fix listed	1
mcr.microsoft.com/mssql/server :2025-CU5-ubuntu-24.04	cee0f4db03b5	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor :1.66.9	138c8b82c398	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor :latest	f669a6eacf8c	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer :1.74.4_local	1ed844ecab29	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
public.ecr.aws/aktosecurity/akto-api-testing :latest	97d830d5538a	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
public.ecr.aws/datadog/agent :7.73.0	f4925b15ce94	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1