CVE-2026-41989
HighAdvisory
Published 23 Apr 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.002
- 8th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 1,938
- of 17,787 indexed, latest versions
- Container images
- 2,151
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Red Hat Security Advisory: libgcrypt security update
Carried by container images the latest versions of 1,938 of 17,787 indexed charts deploy, on 2,151 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| libgcryptrpm | 1.8.3-2.el8, 1.8.3-4.el8, 1.8.5-4.el8, 1.8.5-6.el8+7 more | 0:1.8.5-8.el8_10, 0:1.10.0-13.el9_8, 1.11.0-150700.5.10.1, 1.12.1-160000.3.1 | 378 |
| libgcrypt20deb | 1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+18 more | 1.9.4-3ubuntu3.2, 1.10.1-3+deb12u1, 1.10.3-2ubuntu0.1, 1.11.0-7+deb13u1+4 more | 1,773 |
- OSV records
- RHSA-2026:47117RHSA-2026:50147RLSA-2026:47117RLSA-2026:50147DEBIAN-CVE-2026-41989UBUNTU-CVE-2026-41989ECHO-afba-f32f-e1d7SUSE-SU-2026:22826-1SUSE-SU-2026:3182-1
- Also known as
- RHSA-2026:52950, RHSA-2026:52952, RHSA-2026:52953, RHSA-2026:58977, RHSA-2026:58978, RHSA-2026:58979, USN-8319-1
Charts affected
1,938 by stars
Container images carrying it
2,151 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | 99b408c15272 | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| bitnamilegacy/ | 33ce23601fc9 | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| bitnamilegacy/ | d3bf3910f148 | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| bitnamilegacy/ | 94bc968141e7 | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| bitnamilegacy/ | f12387ec882b | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| bitnamilegacy/ | 5927ff3702df | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| bitnamilegacy/ | 32869e769b7e | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| blockstack/ | f79944317326 | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| cfssl/ | c9018c2ddf0b | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| clickhouse/ | ed9640bfff07 | libgcrypt20 | no fix listed | 2 |
| clickhouse/ | fa394da808cc | libgcrypt20 | no fix listed | 2 |
| confluentinc/ | ac776fad95a5 | libgcrypt | 0:1.8.5-8.el8_10 | 2 |
| confluentinc/ | 7610a50b13e7 | libgcrypt | 0:1.8.5-8.el8_10 | 2 |
| confluentinc/ | cae577096489 | libgcrypt | 0:1.8.5-8.el8_10 | 2 |
| cribl/ | 044f9a5fac9a | libgcrypt20 | 1.12.0-2ubuntu0.1~Fips1~rc11 | 2 |
| datagrok/ | f5876d3aebb8 | libgcrypt20 | no fix listed | 2 |
| emberstack/ | 51dbd5880929 | libgcrypt20 | 1.12.0-2ubuntu0.1~Fips1~rc11 | 2 |
| eqalpha/ | 6537505c4235 | libgcrypt20 | no fix listed | 2 |
| eqalpha/ | eceb1806730c | libgcrypt20 | no fix listed | 2 |
| freeradius/ | 21c8bfa904d8 | libgcrypt20 | no fix listed | 2 |
| geoservercloud/ | 756559ee788a | libgcrypt20 | no fix listed | 2 |
| geoservercloud/ | 99540eef78ad | libgcrypt20 | no fix listed | 2 |
| geoservercloud/ | 5c254c53a357 | libgcrypt20 | no fix listed | 2 |
| geoservercloud/ | c687b1cbc891 | libgcrypt20 | no fix listed | 2 |
| geoservercloud/ | 5288f320cf36 | libgcrypt20 | no fix listed | 2 |
| geoservercloud/ | a30a60ac6cd0 | libgcrypt20 | no fix listed | 2 |
| gjeanmart/ | 926264c8f2d1 | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| gradiant/ | 015b30d5fa0f | libgcrypt20 | 1.9.4-3ubuntu3.2 | 2 |
| grafana/ | 7790f6f7fbd8 | libgcrypt20 | 1.10.3-2ubuntu0.1 | 2 |
| grafana/ | f94b1c82957a | libgcrypt20 | 1.10.3-2ubuntu0.1 | 2 |
| hjacobs/ | 4b2147f47425 | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| homebridge/ | 77c685a40911 | libgcrypt20 | 1.12.0-2ubuntu0.1~Fips1~rc11 | 2 |
| honestica/ | a393242fb939 | libgcrypt20 | no fix listed | 2 |
| hookiesolutions/ | 0629694246ba | libgcrypt20 | no fix listed | 2 |
| hyperledger/ | a674d35eec9a | libgcrypt20 | no fix listed | 2 |
| ilum/ | 6e1d709d41f8 | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| interlayhq/ | a66d0e35e70f | libgcrypt20 | no fix listed | 2 |
| interlayhq/ | c3e311de67da | libgcrypt20 | no fix listed | 2 |
| iomesh/ | f03148764f38 | libgcrypt20 | no fix listed | 2 |
| istio/ | 40e8aba77c1b | libgcrypt20 | no fix listed | 2 |
| istio/ | ee156b8aefd6 | libgcrypt20 | no fix listed | 2 |
| istio/ | e86d247b7ac2 | libgcrypt20 | no fix listed | 2 |
| istio/ | eab80bcd2132 | libgcrypt20 | no fix listed | 2 |
| istio/ | 1e37fca43550 | libgcrypt20 | no fix listed | 2 |
| istio/ | e454cab754cf | libgcrypt20 | no fix listed | 2 |
| istio/ | dbb7726d1bf0 | libgcrypt20 | no fix listed | 2 |
| istio/ | 757d28c24100 | libgcrypt20 | 1.9.4-3ubuntu3.2 | 2 |
| istio/ | a78b7a165744 | libgcrypt20 | no fix listed | 2 |
| jenkins/ | b470bcdc4ecd | libgcrypt20 | 1.10.1-3+deb12u1 | 2 |
| kurento/ | 03c0d34d0828 | libgcrypt20 | 1.10.3-2ubuntu0.1 | 2 |