StackRadar

CVE-2026-41989

High

Advisory

Published 23 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,959
of 17,787 indexed, latest versions
Container images
2,170
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 1,959 of 17,787 indexed charts deploy, on 2,170 images.

Affected packageAffected versionsFixed inImages
libgcryptrpm1.8.3-2.el8, 1.8.3-4.el8, 1.8.5-4.el8, 1.8.5-6.el8+7 more0:1.8.5-8.el8_10, 0:1.10.0-13.el9_8, 1.11.0-150700.5.10.1, 1.12.1-160000.3.1379
libgcrypt20deb1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+18 more1.9.4-3ubuntu3.2, 1.10.1-3+deb12u1, 1.10.3-2ubuntu0.1, 1.11.0-7+deb13u1+4 more1,791
OSV records
RHSA-2026:47117RHSA-2026:50147RLSA-2026:47117RLSA-2026:50147DEBIAN-CVE-2026-41989UBUNTU-CVE-2026-41989ECHO-afba-f32f-e1d7SUSE-SU-2026:22826-1SUSE-SU-2026:3182-1
Also known as
RHSA-2026:52950, RHSA-2026:52952, RHSA-2026:52953, RHSA-2026:58977, RHSA-2026:58978, RHSA-2026:58979, USN-8319-1

Charts affected

1,959 by stars
ChartLatestAffected imagesRadar Score
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
vdiogov/glpi-conteiner:latest6945f84f0058
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

12,270
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

2,677
gosmee-clientgosmee-clientVerified publisher0.1.31 of 1See more

gosmee-client gosmee-client 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/chmouel/gosmee:v0.32.060b8db1f68cc
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8

Open the chart page →

246
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

22,565
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

24,360
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
library/cassandra:3.11.65aa8400b4b3b
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

19,291
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2

Open the chart page →

6,075
opentelemetry-demogpg-dev0.33.89 of 27See more

opentelemetry-demo gpg-dev 0.33.8

9 of the 27 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

47,117
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

15,780
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8

Open the chart page →

4,657
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1

Open the chart page →

3,357
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10

Open the chart page →

17,759
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8

Open the chart page →

8,226
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1

Open the chart page →

7,935
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2

Open the chart page →

4,604
grayloggraylogVerified publisher1.0.22 of 4See more

graylog graylog 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
library/mongo:85211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

5,339
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/debian:12.12-slimd5d3f9c23164
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

3,211
routergroundcover1.12.3592 of 7See more

router groundcover 1.12.359

2 of the 7 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
libgcrypt20@1.11.0-7+e4
1.11.0-7+e6

Open the chart page →

6,038
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

2,290
hatchet-hahatchetOfficialVerified publisher0.18.02 of 8See more

hatchet-ha hatchet 0.18.0

2 of the 8 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

7,374
hatchet-stackhatchetOfficialVerified publisher0.18.02 of 8See more

hatchet-stack hatchet 0.18.0

2 of the 8 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

7,374
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2

Open the chart page →

9,151
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

6,747
heliconehelicone0.1.423 of 14See more

helicone helicone 0.1.42

3 of the 14 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

23,472
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

5,287
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

5,851
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
libgcrypt20@1.8.1-4ubuntu1.3
no fix listed

Open the chart page →

10,655
pageshelm-chart-repos-camden1.0.02 of 3See more

pages helm-chart-repos-camden 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libgcrypt20@1.8.5-5ubuntu1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

20,233
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

6,014
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

3,818
ditto-operatorhelm-chartsVerified publisher0.3.01 of 1See more

ditto-operator helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
libgcrypt@1.8.5-6.el8
0:1.8.5-8.el8_10

Open the chart page →

2,673
hawkbit-operatorhelm-chartsVerified publisher0.1.41 of 1See more

hawkbit-operator helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ctron/hawkbit-operator:0.1.48fdea8f76499
libgcrypt@1.8.3-4.el8
0:1.8.5-8.el8_10

Open the chart page →

5,791
iofoghelm-chartsVerified publisher0.1.12 of 3See more

iofog helm-charts 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
iofog/router:2.0.17260cf861479
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10

Open the chart page →

24,174
streamsheetshelm-chartsVerified publisher0.2.35 of 8See more

streamsheets helm-charts 0.2.3

5 of the 8 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10

Open the chart page →

89,949
nginx-charthelm-chart-sample-app0.1.01 of 1See more

nginx-chart helm-chart-sample-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
rraahul/test:latestbfe2c1183bc0
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2

Open the chart page →

4,596
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

3,700
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

2,660
node-problem-detectorhelm-charts-nr2.3.171 of 1See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

2,349
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

8,618
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

7,010
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

7,648
booklorehelmforgeVerified publisher2.0.11 of 3See more

booklore helmforge 2.0.1

1 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,324
castopodhelmforgeVerified publisher1.2.72 of 3See more

castopod helmforge 1.2.7

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1
library/mariadb:12.3.3dd9b303aed4f
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

9,422
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1

Open the chart page →

10,898
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2

Open the chart page →

9,991
clickhousehelmforgeVerified publisher2.0.11 of 1See more

clickhouse helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.8.2fa394da808cc
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed

Open the chart page →

1,735
countlyhelmforgeVerified publisher1.2.62 of 3See more

countly helmforge 1.2.6

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
library/mongo:8.3.85211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

18,923
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5f258365d4882
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed

Open the chart page →

8,598
immichhelmforgeVerified publisher1.2.81 of 5See more

immich helmforge 1.2.8

1 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

11,080
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

5,350

Container images carrying it

2,170 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ddosify/alaz:v0.12.0ea602056d9ce
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
ddosify/selfhosted_backend:3.2.93c11e3182652
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
deconzcommunity/deconz:2.29.2062de2362641
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
deepflowce/clickhouse-server:22.8.6.71bc1882f75c18
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
deepflowce/deepflow-agent:v6.2.6.529332fee7fc2
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
defactops/defactops-backend:1.0.2307b663c0092a
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
dellcloud/category:distributed02fc234353a9
libgcrypt20@1.8.5-5ubuntu1
no fix listed
1
dellcloud/pages:1.04d2eb25b9225
libgcrypt20@1.8.5-5ubuntu1
no fix listed
1
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
dellemc/csm-application-mobility-velero-plugin:v0.1.0660cabd6d929
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
devopsgoofy/k8s-platform:latestad865312099f
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
1
dgraziotin/nginx-webdav-nononsense:1.23.138f2de42bed0
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
diygod/rsshub:2025-11-097a6312cac0d5
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
djjudas21/alertify:0.1.0ba22be670c37
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
dniel/api-posts:master45a667852f2a
libgcrypt20@1.8.1-4ubuntu1.1
no fix listed
1
dobtc/bitcoin:25.1a870f7cb1105
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
domainmod/domainmod:4.23.04017bfe4c597
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
dremio/dremio-oss:24.1.080ed2e3b7c43
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
drorivry4/rego:lateste035d49b15ca
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
drpcorg/dshackle:0.54.08858fae1859d
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
drumsergio/genieacs:1.2.16.028244054e1bf
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
dserio83/velero-api:0.3.16b3d9115fee2
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
dserio83/velero-watchdog:0.1.8d5deae589229
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
duck1123/cert-downloader:latest0e29f19fa67c
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
duck1123/lnd-fileserver:latest9d6fb247b714
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
1
dzikoysk/reposilite:3.6.390de4c8e6c0e
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1
1
eclipseaerios/self-orchestrator:1.2.08b123bec5679
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
elastic/apm-server:7.17.6c7a1c63257d0
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
elastictranscoder/media:627e21dc963ab3858c6b
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
elastictranscoder/media-storage:f6d861a026208b8c2359
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
elastiflow/flow-collector:7.26.0fee67842e16b
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
emqx/ecp-ui:2.5.1e33e9816f147
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
enclavenetworks/enclave:latest0a99759300d1
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
engrmth/bnkr:2.1.06d8464e6f0e8
libgcrypt20@1.8.5-5ubuntu1
no fix listed
1
enix/san-iscsi-csi:v4.0.2f963da81ecf7
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
envoyproxy/envoy:v1.30.92956bd9de830
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
envoyproxy/envoy:v1.38.4447f857a0146
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.