StackRadar

CVE-2026-41990

Medium

Advisory

Published 23 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
339
of 17,787 indexed, latest versions
Container images
316
deployed by those charts
Fix available
2 of 2
affected packages

Security update for libgcrypt

Carried by container images the latest versions of 339 of 17,787 indexed charts deploy, on 316 images.

Affected packageAffected versionsFixed inImages
libgcrypt20deb1.10.3-2build1, 1.10.3-2ubuntu0.1, 1.10.3-2ubuntu0.2, 1.12.0-21.12.0-2ubuntu0.1, 1.12.0-2ubuntu0.1~Fips1~rc11313
libgcryptrpm1.11.1-160000.2.2, 1.12.1-160000.1.11.12.1-160000.2.13
OSV records
UBUNTU-CVE-2026-41990SUSE-SU-2026:22355-1
Also known as
USN-8319-1

Charts affected

339 by stars
ChartLatestAffected imagesRadar Score
cleanuparrmedia-servarrVerified publisher0.18.01 of 1See more

cleanuparr media-servarr 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/cleanuparr/cleanuparr:2.10.5c7cd53ad559a
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

1,789
msmmedia-streaming-meshVerified publisher0.1.175 of 6See more

msm media-streaming-mesh 0.1.17

5 of the 6 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

11,286
istio-helm-cnimesosphere1.25.11 of 1See more

istio-helm-cni mesosphere 1.25.1

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
istio/install-cni:1.29.0ce27c9ce43c8
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,533
istio-helm-istiodmesosphere1.25.11 of 2See more

istio-helm-istiod mesosphere 1.25.1

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
istio/pilot:1.29.0325156535773
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

3,777
istio-helm-cnimesosphere-stable1.23.61 of 1See more

istio-helm-cni mesosphere-stable 1.23.6

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
istio/install-cni:1.23.6ab34c4740f44
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

3,283
istio-helm-istiodmesosphere-stable1.23.61 of 2See more

istio-helm-istiod mesosphere-stable 1.23.6

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
istio/pilot:1.23.69c3d6a218181
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

4,603
mw-kube-agent-v3middleware-labsVerified publisher1.8.51 of 2See more

mw-kube-agent-v3 middleware-labs 1.8.5

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,012
folding-at-homemidokura-communityVerified publisher0.0.31 of 1See more

folding-at-home midokura-community 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
linuxserver/foldingathome:7.6.219a997426d71e
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,899
helmmirasys-chart0.1.01 of 4See more

helm mirasys-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

4,292
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
atlassian/crowd:5.2.2ebf761c7d437
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

5,663
myweatherhelmmyweather1.3.111 of 7See more

myweatherhelm myweather 1.3.11

1 of the 7 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

17,929
fahncsaVerified publisher1.1.11 of 1See more

fah ncsa 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
linuxserver/foldingathome:8.5.67477f6455f47
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

1,044
netris-dpu-agentnetrisai0.1.01 of 1See more

netris-dpu-agent netrisai 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
netrisai/bare-metal-dpu-agent:4.7.0.003c271efe749d0
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

1,523
neurofaceneurofaceVerified publisher1.4.21 of 3See more

neuroface neuroface 1.4.2

1 of the 3 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
openvino/model_server:2025.2.11e7cd1d70cc1
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

7,310
ciliumnicklasfrahm-ciliumVerified publisher0.7.42 of 6See more

cilium nicklasfrahm-cilium 0.7.4

2 of the 6 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.18.2858f807ea4e2
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

7,092
firehose-corenodeifyVerified publisher1.2.61 of 2See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

6,455
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

5,565
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

4,674
notifynl-omcnotifynlOfficialVerified publisher0.4.341 of 1See more

notifynl-omc notifynl 0.4.34

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
worthnl/notifynl-omc:2.2.009fca4ed1c71
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

388
olvid-botobeoneVerified publisher0.3.31 of 1See more

olvid-bot obeone 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
olvid/bot-daemon:2.0.1e0e6b165d879
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,049
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,587
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

6,037
llm-stackopenproject-helm-chartsVerified publisher1.1.01 of 2See more

llm-stack openproject-helm-charts 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
apache/apisix:3.16.0-ubuntu5e47692cac00
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

1,926
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/mariadb:11.4611a2fcc5fa7
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

7,792
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
antiantiops/vscode-browser-docker:1.137.0eeff80a99d92
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

4,237
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.016 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

16 of the 40 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

71,208
istio-cniparticuleio1.1.01 of 1See more

istio-cni particuleio 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
gcr.io/istio-testing/install-cni:latestec6f9ea5757b
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

809
istio-operatorparticuleio1.7.01 of 1See more

istio-operator particuleio 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
gcr.io/istio-testing/operator:latest8d4576f7b98f
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

4,120
minecraftpaul1365972-mc3.0.11 of 1See more

minecraft paul1365972-mc 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
itzg/minecraft-server:latest8672e335dbef
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

4,253
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

16,196
firehose-ethereumpinaxVerified publisher0.3.21 of 2See more

firehose-ethereum pinax 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.4-gethd7bdfa7b41da
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

7,062
substreams-tier-2pinaxVerified publisher0.0.81 of 1See more

substreams-tier-2 pinax 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.12.489969b78fb07
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

4,889
planectlplanectlVerified publisher0.7.01 of 10See more

planectl planectl 0.7.0

1 of the 10 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

25,934
plex-media-serverplex-media-server1.9.01 of 1See more

plex-media-server plex-media-server 1.9.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.43.3.10896-cb3ebc72d83a425ae9e13
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

931
game-serverpvillaverdeVerified publisher1.0.51 of 1See more

game-server pvillaverde 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

4,253
app-configradar-baseVerified publisher1.7.21 of 1See more

app-config radar-base 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-app-config/radar-app-config:0.6.24431db7b486b
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,036
catalog-serverradar-baseVerified publisher0.9.31 of 1See more

catalog-server radar-base 0.9.3

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-schemas/radar-schemas-tools:0.8.16c442e8bfe6b4
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,418
data-dashboard-backendradar-baseVerified publisher0.6.21 of 1See more

data-dashboard-backend radar-base 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-data-dashboard-backend/radar-data-dashboard-backend:0.2.4d1e55350923c
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,019
management-portalradar-baseVerified publisher1.7.01 of 1See more

management-portal radar-base 1.7.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/managementportal/management-portal:3.0.0c1b37e821f72
libgcrypt20@1.12.0-2
1.12.0-2ubuntu0.1

Open the chart page →

3,182
radar-gatewayradar-baseVerified publisher1.9.01 of 2See more

radar-gateway radar-base 1.9.0

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-gateway/radar-gateway:0.9.4219d894aa7a6
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,284
radar-integrationradar-baseVerified publisher0.9.01 of 1See more

radar-integration radar-base 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
radarbase/radar-redcapintegration:1.0.6fcd973d4796d
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,855
radar-outputradar-baseVerified publisher1.2.101 of 1See more

radar-output radar-base 1.2.10

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-output-restructure/radar-output-restructure:3.0.67fb9c70e96a4
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,465
radar-push-endpointradar-baseVerified publisher0.6.81 of 2See more

radar-push-endpoint radar-base 0.6.8

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
radarbase/radar-push-endpoint:0.4.0e1758508e033
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

3,018
radar-upload-connect-backendradar-baseVerified publisher0.9.11 of 1See more

radar-upload-connect-backend radar-base 0.9.1

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/radar-base/radar-upload-source-connector/radar-upload-connect-backend:0.6.46a04b43b8d9a
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,532
s3-proxyradar-baseVerified publisher0.6.01 of 1See more

s3-proxy radar-base 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
andrewgaul/s3proxy:sha-85b0f987dc1d34174a5
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,737
sqpreadyset-sqp-nightly0.1.0-nightly.202604302 of 3See more

sqp readyset-sqp-nightly 0.1.0-nightly.20260430

2 of the 3 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
readysettech/sqp:latest588f3507280e
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
readysettech/sqp-duckdb:latest67a83203ce60
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

3,436
otbrretsamedocVerified publisher26.9.01 of 1See more

otbr retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
openthread/border-router:v2026.09.07616b9d514de
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

589
harvester-csi-driverrke2-charts0.1.31001 of 6See more

harvester-csi-driver rke2-charts 0.1.3100

1 of the 6 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
rancher/harvester-csi-driver:v0.2.9f9099b5ef8cb
libgcrypt@1.12.1-160000.1.1
1.12.1-160000.2.1

Open the chart page →

2,688
devtron-enterpriseromholdings48.0.04 of 28See more

devtron-enterprise romholdings 48.0.0

4 of the 28 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
quay.io/devtron/casbin:172ef62b-9450794d-464-394225bf041aacadd
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
quay.io/devtron/chart-sync:94237c18-1021-3941960566529446a
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
quay.io/devtron/devtron:9450794d-930-394159795f3f9f031
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
quay.io/devtron/kubelink:94237c18-314-394179d25865295af
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

68,240
devtron-operatorromholdings0.23.33 of 11See more

devtron-operator romholdings 0.23.3

3 of the 11 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

32,902

Container images carrying it

316 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
public.ecr.aws/aktosecurity/akto-api-testing:latest97d830d5538a
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
public.ecr.aws/datadog/cloudprem:v0.1.33bda08753668d
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.