CVE-2026-41989

High

Advisory

Published 23 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.002; 8th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,957; of 17,803 indexed, latest versions
Container images: 2,169; deployed by those charts
Fix available: 2 of 2; affected packages

Red Hat Security Advisory: libgcrypt security update

Carried by container images the latest versions of 1,957 of 17,803 indexed charts deploy, on 2,169 images.

Affected package	Affected versions	Fixed in	Images
libgcryptrpm	1.8.3-2.el8, 1.8.3-4.el8, 1.8.5-4.el8, 1.8.5-6.el8+7 more	0:1.8.5-8.el8_10, 0:1.10.0-13.el9_8, 1.11.0-150700.5.10.1, 1.12.1-160000.3.1	378
libgcrypt20deb	1.6.5-2ubuntu0.2, 1.6.5-2ubuntu0.3, 1.6.5-2ubuntu0.4, 1.6.5-2ubuntu0.5+18 more	1.9.4-3ubuntu3.2, 1.10.1-3+deb12u1, 1.10.3-2ubuntu0.1, 1.11.0-7+deb13u1+4 more	1,791

OSV records: RHSA-2026:47117 RHSA-2026:50147 RLSA-2026:47117 RLSA-2026:50147 DEBIAN-CVE-2026-41989 UBUNTU-CVE-2026-41989 ECHO-afba-f32f-e1d7 SUSE-SU-2026:22826-1 SUSE-SU-2026:3182-1
Also known as: RHSA-2026:52950, RHSA-2026:52952, RHSA-2026:52953, RHSA-2026:58977, RHSA-2026:58978, RHSA-2026:58979, USN-8319-1

Charts affected

1,957 by stars

Chart

Latest

Affected images

Radar Score

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1
hamzaarshad10/querypodpy :1.7	154f38e8668e	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1
library/mongo :latest	5211c51171f5	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11
murtazashah46/helmfile :latest	4d11726cf803	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1

Open the chart page →

13,875

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	libgcrypt20@1.10.3-2build1	1.10.3-2ubuntu0.1

Open the chart page →

2,156

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1

Open the chart page →

2,710

keycloakxzaks

2.2.0

1 of 1 See more

keycloakx zaks 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :20.0.3	b8f2a453a17a	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10

Open the chart page →

6,021

posthogzeet

0.23.2

1 of 9 See more

posthog zeet 0.23.2

1 of the 9 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
altinity/clickhouse-operator :0.19.0	7a85f522c5bc	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10

Open the chart page →

3,700

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	libgcrypt20@1.8.1-4ubuntu1.3	no fix listed
yandex/clickhouse-server :21.3.20	4eccfffb01d7	libgcrypt20@1.8.5-5ubuntu1.1	no fix listed

Open the chart page →

9,280

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-41989.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	libgcrypt20@1.9.4-3ubuntu3.2	no fix listed

Open the chart page →

7,949

Container images carrying it

2,169 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quay.io/sshaaf/keycloak-mcp-server :0.4.0	b7e9cba72f8a	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/strimzi/operator :0.45.1	58c727cd2e68	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
quay.io/strimzi/operator :0.36.1	e9e03b31007c	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/wi_stefan/dss-validation-service :0.0.1	8e928db29ee1	libgcrypt@1.8.5-7.el8_6	0:1.8.5-8.el8_10	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1	1
registry.gitlab.com/crafty-controller/crafty-4 :latest	166a06f73d8c	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-frontend :1.0.31	66353ce9bf98	libgcrypt20@1.11.0-7	1.11.0-7+deb13u1	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer :1.0.31	0e3cd8c7776d	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb :4.4.5	cf72810d33f5	libgcrypt@1.8.5-4.el8	0:1.8.5-8.el8_10	1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/rabbitmq :3.12.14	5a9334f371f3	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1	1
registry.gitlab.com/gitlab-org/cloud-native/gitlab-operator :0.5.1	36b19b72120e	libgcrypt@1.8.5-6.el8	0:1.8.5-8.el8_10	1
registry.gitlab.com/infinitydon/registry/open5gs-aio :v2.2.2	f6385712935f	libgcrypt20@1.8.5-5ubuntu1	no fix listed	1
registry.gitlab.com/purelb/purelb/allocator :v0.0.0-106-ipv6-lbip-052cedab	9d1fcb78f529	libgcrypt@1.8.5-6.el8	0:1.8.5-8.el8_10	1
registry.gitlab.com/xrow-public/developer-operator/developer-operator-controller :2.1.2	301847adfe16	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
registry.gitlab.com/xrow-public/helm-iframely/iframely :2.3.5	fcf07d5ff7e2	libgcrypt@1.10.0-11.el9	0:1.10.0-13.el9_8	1
registry.k8s.io/node-problem-detector/node-problem-detector :v0.8.20	52f0618e9bc2	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1	1
registry.k8s.io/node-problem-detector/node-problem-detector :v1.35.1	c380751accc5	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1	1
registry.k8s.io/sig-storage/local-volume-provisioner :v2.8.0	3e2bf2eaef9f	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1	1
registry.k8s.io/sig-storage/nfsplugin :v4.11.0	ce5b5ccd5eb0	libgcrypt20@1.10.1-3	1.10.1-3+deb12u1	1