StackRadar

CVE-2026-41989

High

Advisory

Published 23 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,955
of 17,797 indexed, latest versions
Container images
2,167
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 1,955 of 17,797 indexed charts deploy, on 2,167 images.

Affected packageAffected versionsFixed inImages
libgcryptrpm1.8.3-2.el8, 1.8.3-4.el8, 1.8.5-4.el8, 1.8.5-6.el8+7 more0:1.8.5-8.el8_10, 0:1.10.0-13.el9_8, 1.11.0-150700.5.10.1, 1.12.1-160000.3.1378
libgcrypt20deb1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+18 more1.9.4-3ubuntu3.2, 1.10.1-3+deb12u1, 1.10.3-2ubuntu0.1, 1.11.0-7+deb13u1+4 more1,789
OSV records
RHSA-2026:47117RHSA-2026:50147RLSA-2026:47117RLSA-2026:50147DEBIAN-CVE-2026-41989UBUNTU-CVE-2026-41989ECHO-afba-f32f-e1d7SUSE-SU-2026:22826-1SUSE-SU-2026:3182-1
Also known as
RHSA-2026:52950, RHSA-2026:52952, RHSA-2026:52953, RHSA-2026:58977, RHSA-2026:58978, RHSA-2026:58979, USN-8319-1

Charts affected

1,955 by stars
ChartLatestAffected imagesRadar Score
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

2,692
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10

Open the chart page →

6,017
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10

Open the chart page →

3,697
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
libgcrypt20@1.8.1-4ubuntu1.3
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

9,272
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed

Open the chart page →

7,936

Container images carrying it

2,167 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
makemake1337/blutgang:latest8a55174fc830
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
makersquad/harp-proxy:0.8.1a40dd258c527
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
maksymhencha/educative-helm-bookapp:0.0.27f096a681192
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
maptiler/server:4.8.07e206140057b
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
mariadb/maxscale:23.02.256c5e0908148
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
martinhelmich/typo3:12.4c83a4f3fd7ae
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
matterlabs/external-node:9734bf2-17870579939295dadc06bdf3b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
matterlabs/external-node:v24.0.06cbfea4c694a
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
mbround18/valheim:3.1.070bd4da591cd
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
mediagis/nominatim:5.3.27923a8e67197
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
1
mediagis/nominatim:3.7c15e941485ef
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
mediagis/nominatim:4.2d0eae7b51374
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
merlos/zookeeper:3.9.3a38fc7e09ed7
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
middlewareeng/middleware:0.3.1747d880812f1
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
milvusdb/etcd:3.5.25-r1fededb2f2d63
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
milvusdb/milvus:v2.2.13a3a55e1c1497
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
mindsdb/mindsdb:latest163011c09299
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1
1
minio/kes:v0.22.255f3aef5803e
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
1
minio/mc:RELEASE.2022-05-09T04-08-26Z4b415310d8d0
libgcrypt@1.8.5-6.el8
0:1.8.5-8.el8_10
1
minio/mc:RELEASE.2023-02-28T00-12-59Zc631532a394e
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
libgcrypt@1.8.5-6.el8
0:1.8.5-8.el8_10
1
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
minio/operator:v5.0.9170b154d2c61
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
minio/operator:v4.1.02adc5be088f5
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
1
mintproject/graphql-engine:305c0dbeba1878eafe348f21fc300fbfc017d9dc83aade2c1855
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
miqm/session-scaler:0.1.0c5c211717d9b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
mlikiowa/napcat-docker:latest1336a777f9a4
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
moreillon/api-proxy:latestd7d4a5463525
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
moreillon/camera-viewer:lateste418cc694bd5
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
moreillon/food-manager:lateste8fd856e593d
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
moreillon/group-manager:latest3caa8f710ee0
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
moreillon/group-manager-front:latest5f0a38498271
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1
1
moreillon/user-manager-front:v5.1.06597e6b98d21
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
mshanley80/httpbin2022:latest5b189a70c0fb
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
muhammedgamal/fp23:latest74b4cd69b6fa
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
muluder/prograncontrollermcord:0.1.843b597a93da7
libgcrypt20@1.6.5-2ubuntu0.3
no fix listed
1
murtazashah46/helmfile:latest4d11726cf803
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
mvance/unbound:1.20.04bf67b567f39
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
mvance/unbound:1.22.076906da36d18
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
nelssec/qualys-agent-bootstrapper:v2.1.05e471f0cdeaa
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
netbirdio/management:0.45.10c9994b393ea
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
1
netbirdio/management:0.60.252682e5f48f9
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.