StackRadar

CVE-2026-41989

High

Advisory

Published 23 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,955
of 17,797 indexed, latest versions
Container images
2,167
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 1,955 of 17,797 indexed charts deploy, on 2,167 images.

Affected packageAffected versionsFixed inImages
libgcryptrpm1.8.3-2.el8, 1.8.3-4.el8, 1.8.5-4.el8, 1.8.5-6.el8+7 more0:1.8.5-8.el8_10, 0:1.10.0-13.el9_8, 1.11.0-150700.5.10.1, 1.12.1-160000.3.1378
libgcrypt20deb1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+18 more1.9.4-3ubuntu3.2, 1.10.1-3+deb12u1, 1.10.3-2ubuntu0.1, 1.11.0-7+deb13u1+4 more1,789
OSV records
RHSA-2026:47117RHSA-2026:50147RLSA-2026:47117RLSA-2026:50147DEBIAN-CVE-2026-41989UBUNTU-CVE-2026-41989ECHO-afba-f32f-e1d7SUSE-SU-2026:22826-1SUSE-SU-2026:3182-1
Also known as
RHSA-2026:52950, RHSA-2026:52952, RHSA-2026:52953, RHSA-2026:58977, RHSA-2026:58978, RHSA-2026:58979, USN-8319-1

Charts affected

1,955 by stars
ChartLatestAffected imagesRadar Score
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

2,692
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10

Open the chart page →

6,017
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10

Open the chart page →

3,697
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
libgcrypt20@1.8.1-4ubuntu1.3
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

9,272
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed

Open the chart page →

7,936

Container images carrying it

2,167 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
netbirdio/management:0.46.0b0adc4ad4ec6
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
1
netbirdio/netbird-server:0.78.13086534361a1
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
netbirdio/netbird-server:0.77.1e71f39cefcd9
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
netboxcommunity/netbox:v3.2.83d652dca5351
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
nethermind/nethermind:1.14.615517708c3b6
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
nethermind/nethermind:1.31.893e57917371a
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
1
nethermind/nethermind:1.31.9aeca3b55bda5
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
1
netrisai/bare-metal-dpu-agent:4.7.0.003c271efe749d0
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
1
netrisai/controller-grpc:4.6.0.00753178bf173c2
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
netrisai/controller-telescope:4.6.0.00414d82948a8b2
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
netrisai/controller-telescope-notifier:3.0.455e826ef9a5d
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
netrisai/controller-web-session-generator:0.2.0a030a31289f4
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
1
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed
1
networkboot/dhcpd:lateste99bbfbd6fb2
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1
1
ngick8stesting/c3po-mme:mwca-mme-debug8dd6dea45be4
libgcrypt20@1.6.5-2ubuntu0.5
no fix listed
1
nginxinc/nginx-unprivileged:1.29.5c5b989ebc150
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1
1
nirmalnaveen/supermario:latest8541a39162f3
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
libgcrypt20@1.8.5-5ubuntu1
no fix listed
1
nvidia/k8s-device-plugin:v0.9.0964847cc3fd8
libgcrypt20@1.6.5-2ubuntu0.6
no fix listed
1
obolnetwork/helios:e10e753cb7e97d39d46
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
oled01/automx2:2025.1.105d3e398e675
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
oled01/db-backup:0.1.06302fd2b5333
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
olvid/bot-daemon:2.0.1e0e6b165d879
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
1
omecproject/c3po-hss:master-latest638671ef4842
libgcrypt20@1.6.5-2ubuntu0.6
no fix listed
1
omecproject/c3po-hssdb:master-latest28a90cc26716
libgcrypt20@1.8.5-5ubuntu1
no fix listed
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
libgcrypt20@1.8.1-4ubuntu1.1
no fix listed
1
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
libgcrypt20@1.8.1-4ubuntu1.1
no fix listed
1
omecproject/ngic-cp:central-cp-multi-upfs-latest24a389a0a4fe
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
1
omecproject/onos-progran:1.0.05715e5648aa0
libgcrypt20@1.6.5-2ubuntu0.3
no fix listed
1
omecproject/openmme:master-latest64776cb9edb3
libgcrypt20@1.6.5-2ubuntu0.6
no fix listed
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
libgcrypt20@1.6.5-2ubuntu0.5
no fix listed
1
omkara25/simple-microservice-app-order-service:v2.18327546c7aac
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
omkara25/simple-microservice-app-payment-service:v2afff40172b6b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
omkara25/simple-microservice-app-user-service:v2d62cba548580
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
onosproject/onos:2.2.144914a8d4b3f
libgcrypt20@1.8.1-4ubuntu1.1
no fix listed
1
oomk8s/ubuntu-init:1.0.03adf3d21ad3b
libgcrypt20@1.6.5-2ubuntu0.2
no fix listed
1
opea/asr:1.025dd26d9cd09
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
opea/chatqna:1.038c51b791efa
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
opea/codegen:1.058f91683892d
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
opea/codegen-ui:1.02bee4eb66f3e
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
opea/codetrans:1.0e2436483b73d
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
opea/codetrans-ui:1.03ef121f34610
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
opea/docsum:1.03eaa91849512
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
opea/docsum-ui:1.07f854e9bffaf
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
opea/guardrails-tgi:1.0262c6048aab8
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.