StackRadar

CVE-2026-41989

High

Advisory

Published 23 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,957
of 17,803 indexed, latest versions
Container images
2,169
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 1,957 of 17,803 indexed charts deploy, on 2,169 images.

Affected packageAffected versionsFixed inImages
libgcryptrpm1.8.3-2.el8, 1.8.3-4.el8, 1.8.5-4.el8, 1.8.5-6.el8+7 more0:1.8.5-8.el8_10, 0:1.10.0-13.el9_8, 1.11.0-150700.5.10.1, 1.12.1-160000.3.1378
libgcrypt20deb1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+18 more1.9.4-3ubuntu3.2, 1.10.1-3+deb12u1, 1.10.3-2ubuntu0.1, 1.11.0-7+deb13u1+4 more1,791
OSV records
RHSA-2026:47117RHSA-2026:50147RLSA-2026:47117RLSA-2026:50147DEBIAN-CVE-2026-41989UBUNTU-CVE-2026-41989ECHO-afba-f32f-e1d7SUSE-SU-2026:22826-1SUSE-SU-2026:3182-1
Also known as
RHSA-2026:52950, RHSA-2026:52952, RHSA-2026:52953, RHSA-2026:58977, RHSA-2026:58978, RHSA-2026:58979, USN-8319-1

Charts affected

1,957 by stars
ChartLatestAffected imagesRadar Score
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
hamzaarshad10/querypodpy:1.7154f38e8668e
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
library/mongo:latest5211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
murtazashah46/helmfile:latest4d11726cf803
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

13,875
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
libgcrypt20@1.10.3-2build1
1.10.3-2ubuntu0.1

Open the chart page →

2,156
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1

Open the chart page →

2,710
keycloakxzaks2.2.01 of 1See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10

Open the chart page →

6,021
posthogzeet0.23.21 of 9See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
altinity/clickhouse-operator:0.19.07a85f522c5bc
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10

Open the chart page →

3,700
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
libgcrypt20@1.8.1-4ubuntu1.3
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
libgcrypt20@1.8.5-5ubuntu1.1
no fix listed

Open the chart page →

9,280
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-41989.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
libgcrypt20@1.9.4-3ubuntu3.2
no fix listed

Open the chart page →

7,949

Container images carrying it

2,169 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/fiware/tmforum-service-inventory:1.18.04be54e8cb5c0
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/fiware/tmforum-service-order-management:1.18.0d2091785d544
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/fiware/tmforum-software-management:1.18.01b74a2f7ba67
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/fiware/tmforum-usage-management:1.18.042f190c42926
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/fiware/trusted-issuers-list:0.9.13c886ce5c056
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
libgcrypt@1.8.5-6.el8
0:1.8.5-8.el8_10
1
quay.io/fiware/waltid:1.14.1-SNAPSHOT93889c3d8a34
libgcrypt20@1.9.4-3ubuntu3
1.9.4-3ubuntu3.2
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/flomesh/fsm-bootstrap-ubi8:0.1.8-ubi.6e6d7afb1a4bf
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/flomesh/fsm-ingress-pipy-ubi8:0.1.8-ubi.6fce990dece01
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/flomesh/fsm-manager-ubi8:0.1.8-ubi.63590af73f65a
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/flomesh/osm-edge-bootstrap-ubi8:1.2.1e048bc7a17c2
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/flomesh/osm-edge-controller-ubi8:1.2.1674f45865af1
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/flomesh/osm-edge-crds-ubi8:1.2.1c3bc5e7a70e6
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/flomesh/osm-edge-injector-ubi8:1.2.18e9c39c34e89
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/flomesh/osm-edge-preinstall-ubi8:1.2.1f94282a9cfec
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/flomesh/toolbox-ubi8:1.2.01f5e3161cb84
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
libgcrypt@1.10.0-10.el9_2
0:1.10.0-13.el9_8
1
quay.io/galexrt/dellhw_exporter:v2.0.0b3a5806d73b5
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/harikube/vcluster-pro:0.32.1b741efae8d31
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/hpestorage/cosi-driver:v2.0.0a4d2667f2b6e
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/hpestorage/csi-driver:v3.2.0ef7f4e1544fa
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/hpestorage/csi-extensions:v1.2.1189146672a7ac
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/hpestorage/filex-csi-init:2.6.42d867eefb233
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/hpestorage/volume-group-provisioner:v1.0.107bf9d8f16a5d
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/hpestorage/volume-group-snapshotter:v1.0.10caeaaffe7e2b
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/hpestorage/volume-mutator:v1.3.109e98b2e697bd
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
libgcrypt@1.8.3-4.el8
0:1.8.5-8.el8_10
1
quay.io/icdh/core-dump-handler:v9.0.0cc79b9e2a1c8
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
libgcrypt20@1.10.1-3
1.10.1-3+deb12u1
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
libgcrypt@1.8.5-4.el8
0:1.8.5-8.el8_10
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/keycloak/keycloak-operator:19.0.3-legacy09d52508fee9
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/keycloak/keycloak-operator:19.0.2-legacy15fa0ed662b1
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/keycloak/keycloak-operator:18.0.0-legacy36ce77526145
libgcrypt@1.8.5-6.el8
0:1.8.5-8.el8_10
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/konveyor/move2kube-ui:latestec6ab507c5da
libgcrypt@1.8.5-7.el8_6
0:1.8.5-8.el8_10
1
quay.io/kuadrant/authorino-operator:v0.26.003b2acc469f4
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/kubev2v/forklift-operator:release-2.1268657c36c086
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/kubevirt/kubemacpool:v0.45.0eebb65b8a12c
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/manusa/kubernetes_mcp_server:v0.0.47150f76e844d9
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/maximilianopizarro/custom-rhcl-console:dns-prober-v0.1.21a592ee6651a
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
libgcrypt@1.10.0-11.el9
0:1.10.0-13.el9_8
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.