StackRadar

CVE-2026-41990

Medium

Advisory

Published 23 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
339
of 17,787 indexed, latest versions
Container images
316
deployed by those charts
Fix available
2 of 2
affected packages

Security update for libgcrypt

Carried by container images the latest versions of 339 of 17,787 indexed charts deploy, on 316 images.

Affected packageAffected versionsFixed inImages
libgcrypt20deb1.10.3-2build1, 1.10.3-2ubuntu0.1, 1.10.3-2ubuntu0.2, 1.12.0-21.12.0-2ubuntu0.1, 1.12.0-2ubuntu0.1~Fips1~rc11313
libgcryptrpm1.11.1-160000.2.2, 1.12.1-160000.1.11.12.1-160000.2.13
OSV records
UBUNTU-CVE-2026-41990SUSE-SU-2026:22355-1
Also known as
USN-8319-1

Charts affected

339 by stars
ChartLatestAffected imagesRadar Score

Container images carrying it

316 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
antiantiops/vscode-browser-docker:1.137.0eeff80a99d92
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
1
antrea/antrea-agent-ubuntu:v2.7.0c10bc45c6272
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
antrea/antrea-controller-ubuntu:v2.7.0f1373d39217c
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
antrea/flow-aggregator:v2.7.0065193e7572f
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
apache/activemq-artemis:2.44.00305c26f19ed
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
apache/activemq-artemis:2.37.0bae523439ee3
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
apache/apisix:3.16.0-ubuntu5e47692cac00
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
apache/hertzbeat:1.8.075d48a62748f
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
apache/hertzbeat-collector:1.8.0a2bab1be574c
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
apache/rocketmq:5.3.0434d8398f996
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
apache/tika:3.3.1.090b7fa1dc018
libgcrypt20@1.12.0-2
1.12.0-2ubuntu0.1
1
arunvelsriram/utils:latest655ad18fd8d6
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
atlassian/bamboo:12.1.114af4bb6c8d46
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
1
atlassian/bamboo-agent-base:12.1.1151c2d7274eef
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
1
atlassian/bitbucket:10.2.705933f2b1cfd
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
1
atlassian/crowd:7.2.3c81cc7d6bc9e
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
1
atlassian/crowd:5.2.2ebf761c7d437
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
1
atlassian/jira-software:9.7.264a75aa4ec4e
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
atlassian/jira-software:11.3.11e5548cd4eea8
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
1
camptocamp/mapserver:latestbf2e8e118c9b
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
1
castlemock/castlemock:latestb7f3f1527ba9
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
consensys/teku:latest3a4f5761ae1c
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
consensys/teku:25.4.1bf6ecd2ea716
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
darthsim/imgproxy:v3.30.13b709e4a0e5e
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
darthsim/imgproxy:v3.26476cb08c816a
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
darthsim/imgproxy:v3.29.17d12c7c8fc66
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
darthsim/imgproxy:latestf247c72df1d7
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
1
datadog/agent:6aad9994de6a7
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
dbeaver/cloudbeaver:26.1.287ab86d00f8c
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
dzikoysk/reposilite:3.6.390de4c8e6c0e
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
elastiflow/flow-collector:7.26.0fee67842e16b
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
erlangsolutions/mongooseim:6.6.0cc5bf032931f
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
ethpandaops/eleel:mainb8f1b707aee0
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
flanksource/batch-runner:v1.0.44689687a7cf95
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
flashcatcloud/categraf:latest42e6ab16472e
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
frankescobar/allure-docker-service:latestdc171ec796d5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
gchq/accumulo:2.0.1c460bb587d6d
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
gradiant/open5gs-dbctl:0.10.3332031245fce
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
grafana/agent:v0.44.23364714a2f64
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
grafana/alloy:v1.5.101a63f4e032c
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
grafana/alloy:v1.4.306bdcbb51fc2
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
grafana/alloy:v1.18.10f4434c92b3e
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
grafana/alloy:v1.18.0491b0578c049
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
grafana/alloy:v1.16.384b76d56c594
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
grafana/alloy:v1.11.38c7256f412fe
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
grafana/alloy:v1.19.2b8ec653c4423
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
grafana/alloy:v1.14.0f50931848bd8
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.