StackRadar

CVE-2026-41989

High

Advisory

Published 23 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,959
of 17,787 indexed, latest versions
Container images
2,170
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 1,959 of 17,787 indexed charts deploy, on 2,170 images.

Affected packageAffected versionsFixed inImages
libgcryptrpm1.8.3-2.el8, 1.8.3-4.el8, 1.8.5-4.el8, 1.8.5-6.el8+7 more0:1.8.5-8.el8_10, 0:1.10.0-13.el9_8, 1.11.0-150700.5.10.1, 1.12.1-160000.3.1379
libgcrypt20deb1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+18 more1.9.4-3ubuntu3.2, 1.10.1-3+deb12u1, 1.10.3-2ubuntu0.1, 1.11.0-7+deb13u1+4 more1,791
OSV records
RHSA-2026:47117RHSA-2026:50147RLSA-2026:47117RLSA-2026:50147DEBIAN-CVE-2026-41989UBUNTU-CVE-2026-41989ECHO-afba-f32f-e1d7SUSE-SU-2026:22826-1SUSE-SU-2026:3182-1
Also known as
RHSA-2026:52950, RHSA-2026:52952, RHSA-2026:52953, RHSA-2026:58977, RHSA-2026:58978, RHSA-2026:58979, USN-8319-1

Charts affected

1,959 by stars
ChartLatestAffected imagesRadar Score
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/mariadb:latestdd9b303aed4f
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
vdiogov/glpi-conteiner:latest6945f84f0058
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

12,270
platformgoofy-chart0.1.01 of 1See more

platform goofy-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
devopsgoofy/k8s-platform:latestad865312099f
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

2,677
gosmee-clientgosmee-clientVerified publisher0.1.31 of 1See more

gosmee-client gosmee-client 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/chmouel/gosmee:v0.32.060b8db1f68cc
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8

Open the chart page →

246
Governify-Bluejaygovernify0.1.01 of 12See more

Governify-Bluejay governify 0.1.0

1 of the 12 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

22,565
Governify-Falcongovernify0.1.01 of 10See more

Governify-Falcon governify 0.1.0

1 of the 10 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

24,360
jaegergpg-dev3.3.32 of 5See more

jaeger gpg-dev 3.3.3

2 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
library/cassandra:3.11.65aa8400b4b3b
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

19,291
kubernetes-dashboardgpg-dev7.5.01 of 5See more

kubernetes-dashboard gpg-dev 7.5.0

1 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/kong:3.6a42d2b4503e7
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2

Open the chart page →

6,075
opentelemetry-demogpg-dev0.33.89 of 27See more

opentelemetry-demo gpg-dev 0.33.8

9 of the 27 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-imageprovider4e322858fe56
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-accountingservice6d051840bb29
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-frontendproxy9fdec1be03e4
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
ghcr.io/open-telemetry/demo:1.12.0-emailservicea1f5cebb5240
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-shippingservicea3ca4c02a5df
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
ghcr.io/open-telemetry/demo:1.12.0-adservicea59e5eead495
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
ghcr.io/open-telemetry/demo:1.12.0-recommendationserviceb294a4278407
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

47,117
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

15,780
grafana-cloud-onboardinggrafana0.4.71 of 5See more

grafana-cloud-onboarding grafana 0.4.7

1 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.8.1ae85d68749c7
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8

Open the chart page →

4,657
grafana-samplinggrafana1.1.71 of 2See more

grafana-sampling grafana 1.1.7

1 of the 2 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
grafana/alloy:v1.11.38c7256f412fe
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1

Open the chart page →

3,357
mimir-openshift-experimentalgrafana2.1.02 of 4See more

mimir-openshift-experimental grafana 2.1.0

2 of the 4 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10

Open the chart page →

17,759
pyroscope-monitoringgrafana0.1.11 of 6See more

pyroscope-monitoring grafana 0.1.1

1 of the 6 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/grafana/alloy-operator:1.3.02088dcb22aaa
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8

Open the chart page →

8,226
grapple-installergrapple-installer0.3.221 of 1See more

grapple-installer grapple-installer 0.3.22

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
grpl/grapple-cli:0.2.127c00aafee6629
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1

Open the chart page →

7,935
gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server1.3.111 of 1See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
apache/gravitino-iceberg-rest:1.3.080136ae753ee
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2

Open the chart page →

4,604
grayloggraylogVerified publisher1.0.22 of 4See more

graylog graylog 1.0.2

2 of the 4 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
graylog/graylog:6.1.1019de1aff48c2
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
library/mongo:85211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

5,339
gridgain9gridgainVerified publisher1.1.101 of 2See more

gridgain9 gridgain 1.1.10

1 of the 2 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/debian:12.12-slimd5d3f9c23164
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

3,211
routergroundcover1.12.3592 of 7See more

router groundcover 1.12.359

2 of the 7 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
public.ecr.aws/groundcovercom/postgres:18.1-20260208b7d7910c0bb0
libgcrypt20@1.11.0-7+e4
1.11.0-7+e6

Open the chart page →

6,038
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

2,290
hatchet-hahatchetOfficialVerified publisher0.18.02 of 8See more

hatchet-ha hatchet 0.18.0

2 of the 8 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

7,374
hatchet-stackhatchetOfficialVerified publisher0.18.02 of 8See more

hatchet-stack hatchet 0.18.0

2 of the 8 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
bitnamilegacy/rabbitmq:4.1.3-debian-12-r19e635efba431
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

7,374
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2

Open the chart page →

9,151
hdx-oss-v2hdx-oss-v20.8.41 of 5See more

hdx-oss-v2 hdx-oss-v2 0.8.4

1 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/mongo:5.0.14-focal50cae5081ab4
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

6,747
heliconehelicone0.1.423 of 14See more

helicone helicone 0.1.42

3 of the 14 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:23.4.2.11dc5658853ce1
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

23,472
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

5,287
hello-worldhello-world-pponyVerified publisher0.3.01 of 1See more

hello-world hello-world-ppony 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/nginx:1.25.49ff236ed47fe
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

5,851
7dtdhelm-7dtd0.1.01 of 1See more

7dtd helm-7dtd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
vinanrra/7dtd-server:v0.4.4f9534490bd2b
libgcrypt20@1.8.1-4ubuntu1.3
no fix listed

Open the chart page →

10,655
pageshelm-chart-repos-camden1.0.02 of 3See more

pages helm-chart-repos-camden 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
libgcrypt20@1.8.5-5ubuntu1
no fix listed
flyway/flyway:6.4.422d97ceb0c47
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed

Open the chart page →

20,233
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

6,014
home-assistant-matter-hubhelm-chart-roeiVerified publisher3.0.21 of 1See more

home-assistant-matter-hub helm-chart-roei 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
luligu/matterbridge:3.0.28f97884bebc2
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

3,818
ditto-operatorhelm-chartsVerified publisher0.3.01 of 1See more

ditto-operator helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/ctron/ditto-operator:0.4.061a9bb81b85c
libgcrypt@1.8.5-6.el8
0:1.8.5-8.el8_10

Open the chart page →

2,673
hawkbit-operatorhelm-chartsVerified publisher0.1.41 of 1See more

hawkbit-operator helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ctron/hawkbit-operator:0.1.48fdea8f76499
libgcrypt@1.8.3-4.el8
0:1.8.5-8.el8_10

Open the chart page →

5,791
iofoghelm-chartsVerified publisher0.1.12 of 3See more

iofog helm-charts 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
iofog/router:2.0.17260cf861479
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
quay.io/ctrontesting/iofog-controller:latest10df27bc5560
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10

Open the chart page →

24,174
streamsheetshelm-chartsVerified publisher0.2.35 of 8See more

streamsheets helm-charts 0.2.3

5 of the 8 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10

Open the chart page →

89,949
nginx-charthelm-chart-sample-app0.1.01 of 1See more

nginx-chart helm-chart-sample-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
rraahul/test:latestbfe2c1183bc0
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2

Open the chart page →

4,596
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

3,700
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

2,660
node-problem-detectorhelm-charts-nr2.3.171 of 1See more

node-problem-detector helm-charts-nr 2.3.17

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

2,349
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
dannielkil/book-frontend:latest937993927694
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

8,618
appwritehelmforgeVerified publisher1.3.41 of 5See more

appwrite helmforge 1.3.4

1 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

7,010
archiveboxhelmforgeVerified publisher1.1.121 of 1See more

archivebox helmforge 1.1.12

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
archivebox/archivebox:0.7.41a5a37331091
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

7,648
booklorehelmforgeVerified publisher2.0.11 of 3See more

booklore helmforge 2.0.1

1 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,324
castopodhelmforgeVerified publisher1.2.72 of 3See more

castopod helmforge 1.2.7

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1
library/mariadb:12.3.3dd9b303aed4f
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

9,422
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1

Open the chart page →

10,898
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ckan/ckan-solr:2.11-solr9ef8e5d3e6be1
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2

Open the chart page →

9,991
clickhousehelmforgeVerified publisher2.0.11 of 1See more

clickhouse helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.8.2fa394da808cc
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed

Open the chart page →

1,735
countlyhelmforgeVerified publisher1.2.62 of 3See more

countly helmforge 1.2.6

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
library/mongo:8.3.85211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

18,923
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
library/zookeeper:3.9.5f258365d4882
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed

Open the chart page →

8,598
immichhelmforgeVerified publisher1.2.81 of 5See more

immich helmforge 1.2.8

1 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

11,080
jupyterhubhelmforgeVerified publisher1.0.61 of 3See more

jupyterhub helmforge 1.0.6

1 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

5,350

Container images carrying it

2,170 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
kurento/kurento-media-server:latest03c0d34d0828
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
2
langgenius/dify-sandbox:0.2.009b7e8705673
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
library/cassandra:3.11.65aa8400b4b3b
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
2
library/cassandra:4.1.37cbcec0086ac
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
2
library/elasticsearch:7.17.35e6ac15bf6a5
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
2
library/elasticsearch:8.19.1289729a95066a
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
2
library/influxdb:2.7b8d940ca9376
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
library/mariadb:10.8.30abf60f81588
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
2
library/mariadb:10.10334b315c10e5
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
2
library/mariadb:12.0.2:12.0-noble607835cd628b
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
2
library/mariadb:11.4611a2fcc5fa7
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
2
library/mariadb:10.692e50059ea0a
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed
2
library/mariadb:12.3.3ab1c3dd38194
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
2
library/mariadb:11.3.2e101f9db3191
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
2
library/mongo:8.0.20098862b1339f
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
2
library/mongo:7.0-jammy:7-jammy406a4fdca9fc
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed
2
library/mongo:5.041108d183e97
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed
2
library/mongo:4.2.358b25d51baa1
libgcrypt20@1.8.1-4ubuntu1.2
no fix listed
2
library/mongo:8.3.981a1c8842a09
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
2
library/mongo:7b096b4cb9269
libgcrypt20@1.9.4-3ubuntu3.3
no fix listed
2
library/mongo:7.0b6421fd6d1c5
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed
2
library/nginx:latest6e23479198b9
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1
2
library/nginx:1.27.098f8ec75657d
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
library/nginx:1.29.49dd288848f44
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1
2
library/phpmyadmin:5.2.16e75aa8f767c
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
library/postgres:16.109f23e02d766
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
library/postgres:18.11090bc3a8ccf
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1
2
library/postgres:16.24aea012537ed
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
library/postgres:18.06f3e42ad37de
libgcrypt20@1.11.0-7
1.11.0-7+deb13u1
2
library/postgres:16.4e62fbf9d3e2b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
library/python:3.7eedf63967cdb
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
library/rabbitmq:4.1.0-management935b3f84c1e4
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1
2
library/rabbitmq:3.12.1-managementf020c06da226
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
2
library/redis:7.2.3a7cee7c8178f
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
library/redis:8.2.2f0957bcaa75f
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
library/ubuntu:16.04:xenial1f1a2d56de1d
libgcrypt20@1.6.5-2ubuntu0.6
no fix listed
2
library/zookeeper:3.9.5f258365d4882
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed
2
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
libgcrypt20@1.6.5-2ubuntu0.5
no fix listed
2
locustio/locust:2.32.2a0d4b88e42c1
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
louislam/uptime-kuma:2.5.4917318f9d7be
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
louislam/uptime-kuma:2.3.29aeb4e51d038
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
louislam/uptime-kuma:2.5.0a8610b3b4c38
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
mbentley/omada-controller:4.3f4e682274bed
libgcrypt20@1.8.1-4ubuntu1.3
no fix listed
2
memgraph/memgraph:3.13.1bd3fe13228f4
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
2
mesosphere/kubeaddons-catalog:v0.11.4073db43d0b8b
libgcrypt20@1.8.5-5ubuntu1
no fix listed
2
minio/operator:v4.3.754393e03f3b2
libgcrypt@1.8.5-6.el8
0:1.8.5-8.el8_10
2
moreillon/group-manager-front:v3.3.1c9f85db3baa5
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
moreillon/user-manager:v5.0.2e1c9bfab5c16
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
moreillon/user-manager-front:v5.0.3b067dbbbb6af
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
2
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
libgcrypt20@1.8.1-4ubuntu1
no fix listed
2

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.