CVE-2026-41989

High

Advisory

Published 23 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.002; 8th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,957; of 17,803 indexed, latest versions
Container images: 2,169; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 1,957 of 17,803 indexed charts deploy, on 2,169 images.

Affected package	Affected versions	Fixed in	Images
libgcryptrpm	1.8.3-2.el8, 1.8.3-4.el8, 1.8.5-4.el8, 1.8.5-6.el8+7 more	0:1.8.5-8.el8_10, 0:1.10.0-13.el9_8, 1.11.0-150700.5.10.1, 1.12.1-160000.3.1	378
libgcrypt20deb	1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+18 more	1.9.4-3ubuntu3.2, 1.10.1-3+deb12u1, 1.10.3-2ubuntu0.1, 1.11.0-7+deb13u1+4 more	1,791

OSV records: RHSA-2026:47117 RHSA-2026:50147 RLSA-2026:47117 RLSA-2026:50147 DEBIAN-CVE-2026-41989 UBUNTU-CVE-2026-41989 ECHO-afba-f32f-e1d7 SUSE-SU-2026:22826-1 SUSE-SU-2026:3182-1
Also known as: RHSA-2026:52950, RHSA-2026:52952, RHSA-2026:52953, RHSA-2026:58977, RHSA-2026:58978, RHSA-2026:58979, USN-8319-1

Charts affected

1,957 by stars

Chart

Latest

Affected images

Radar Score

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1
hamzaarshad10/querypodpy :1.7	154f38e8668e	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1
library/mongo :latest	5211c51171f5	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11
murtazashah46/helmfile :latest	4d11726cf803	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1

Open the chart page →

13,875

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.1

Open the chart page →

2,156

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1

Open the chart page →

2,710

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10

Open the chart page →

6,021

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10

Open the chart page →

3,700

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	libgcrypt20@1.8.1-4ubuntu1.3	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed

Open the chart page →

9,280

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	libgcrypt20@1.9.4-3ubuntu3.2	no fix listed

Open the chart page →

7,949

Container images carrying it

2,169 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/maximilianopizarro/neuralbank-backend :latest	a53899fcfc01	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/maximilianopizarro/neuralbank-frontend :latest	5f4572ef6d6f	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/maximilianopizarro/neuroface-backend :v1.4.1	3194d46df0f9	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/maximilianopizarro/neuroface-backend :latest	cba71dc08c8a	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/maximilianopizarro/neuroface-frontend :v1.4.1	841b70cd1424	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/maximilianopizarro/neuroface-frontend :latest	dcf24040cc77	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/maximilianopizarro/nfl-api-bills :1.0.1	b596a4687bb0	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/maximilianopizarro/nfl-wallet-api-customers :1.0.1	d50c80a85b35	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/maximilianopizarro/nfl-wallet-api-raiders :1.0.1	f9c71dc2bc5f	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/maximilianopizarro/nfl-wallet-webapp :1.0.1	3fead5702be7	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/maximilianopizarro/openshift-integration-operator :v0.8.2	d6fc43ac802e	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/maximilianopizarro/showroom-docs-mcp :latest	1a6eff92827a	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/maximilianopizarro/workshop-pipelines :latest	e383ba3e0966	libgcrypt@1.8.5-6.el8	0:1.8.5-8.el8_10	1
quay.io/mcouliba/quarkus-serverless :1.0	c2851757eca4	libgcrypt@1.8.3-4.el8	0:1.8.5-8.el8_10	1
quay.io/microcks/microcks-operator :0.0.11	96d1054d4a61	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/minio/directpv :v4.0.8	4560083eb77d	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/minio/mc :RELEASE.2022-10-20T23-26-33Z	50ee58bc9770	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/minio/mc :RELEASE.2022-09-16T09-16-47Z	546a8b52d7b0	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/mittwald/brudi-operator :v0.2.3	edb322094359	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/mittwald/kube-httpcache :stable	2169032c5840	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1	1
quay.io/mittwald/kube-mail :latest	04f1099241fc	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1	1
quay.io/mongodb/mongodb-enterprise-operator :1.8.2	a1c3843b03bc	libgcrypt20@1.6.5-2ubuntu0.6	no fix listed	1
quay.io/mongodb/mongodb-enterprise-operator-ubi :1.33.0	b05101723412	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/mongodb/mongodb-kubernetes-operator :0.3.0	107a7c73af59	libgcrypt@1.8.5-4.el8	0:1.8.5-8.el8_10	1
quay.io/mongodb/mongodb-kubernetes-operator :0.9.0	5ee4bd681085	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/netobserv/network-observability-operator :1.12.0-community	b05d21a015b0	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/nmstate/kubernetes-nmstate-operator :v0.87.0	4dce694f01ea	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/ongres/kubectl :v1.25.16-build-6.53	04dada9e4503	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/open-cluster-management/kueue-addon :v0.1.4	7f728514fead	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/open-cluster-management/multicluster-controlplane :latest	9888240f644b	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/openshift/origin-cli :4.6	6722d5041b47	libgcrypt@1.8.3-4.el8	0:1.8.5-8.el8_10	1
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	libgcrypt@1.8.3-4.el8	0:1.8.5-8.el8_10	1
quay.io/openshift/origin-jenkins-agent-base :latest	c241c971aef8	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.1	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	libgcrypt20@1.6.5-2ubuntu0.5	no fix listed	1
quay.io/opsmxpublic/ubi8-gate :isd-spin-2025.10.01-5c720954-202511260810	2b3554029737	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/opsmxpublic/ubi8-oes-audit-client :isd-spin-2025.10.01-cb1bfce-202511261037	32a5b1887eab	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/opsmxpublic/ubi8-oes-autopilot :isd-spin-2025.10.01-af26a30d4-202511261054	58bd0bcf72f9	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/opsmxpublic/ubi8-oes-db :v3.0.0	89ee6493af89	libgcrypt@1.8.5-4.el8	0:1.8.5-8.el8_10	1
quay.io/opsmxpublic/ubi8-oes-platform :isd-spin-2025.10.01-a7c191ec-202511261122	8ed603ab7417	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/opsmxpublic/ubi8-oes-ui :isd-spin-2025.10.01-e6f6f01-202512100640	5d934bb66884	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/projectquay/clair :4.9.0	23329c3368e4	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/redhat-ai-dev/chatbot :latest	59fe607dfdf2	libgcrypt@1.10.0-10.el9_2	0:1.10.0-13.el9_8	1
quay.io/redhat-appstudio/appstudio-utils :dbbdd82734232e6289e8fbae5b4c858481a7c057	7b4202c25b67	libgcrypt@1.10.0-10.el9_2	0:1.10.0-13.el9_8	1
quay.io/redhat-cop/cert-utils-operator :v1.3.12	0290e7b2800a	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/redhat-cop/patch-operator :v0.1.11	030ade9b9428	libgcrypt@1.10.0-10.el9_2	0:1.10.0-13.el9_8	1
quay.io/rht-labs/stack-do500 :3.0.8	6ba82beff18e	libgcrypt@1.8.5-4.el8	0:1.8.5-8.el8_10	1
quay.io/seamware/consent-facade :0.0.14	be844c750c7e	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1