StackRadar

CVE-2026-41990

Medium

Advisory

Published 23 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
339
of 17,787 indexed, latest versions
Container images
316
deployed by those charts
Fix available
2 of 2
affected packages

Security update for libgcrypt

Carried by container images the latest versions of 339 of 17,787 indexed charts deploy, on 316 images.

Affected packageAffected versionsFixed inImages
libgcrypt20deb1.10.3-2build1, 1.10.3-2ubuntu0.1, 1.10.3-2ubuntu0.2, 1.12.0-21.12.0-2ubuntu0.1, 1.12.0-2ubuntu0.1~Fips1~rc11313
libgcryptrpm1.11.1-160000.2.2, 1.12.1-160000.1.11.12.1-160000.2.13
OSV records
UBUNTU-CVE-2026-41990SUSE-SU-2026:22355-1
Also known as
USN-8319-1

Charts affected

339 by stars
ChartLatestAffected imagesRadar Score
rommromm-helm-chartVerified publisher1.5.51 of 3See more

romm romm-helm-chart 1.5.5

1 of the 3 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/mariadb:112439dcd7d140
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

3,370
stirling-pdfrubxkubeVerified publisher0.1.21 of 1See more

stirling-pdf rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

6,207
suwayomirubxkubeVerified publisher0.1.21 of 1See more

suwayomi rubxkube 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

1,610
samplesample0.1.01 of 2See more

sample sample 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/mongo:noble6ede2806c78e
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,309
promtailsb-helm-charts0.4.01 of 1See more

promtail sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
grafana/promtail:3.6.18dcfdf466da0
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,202
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,816
snipeitschmitzis6.1.01 of 2See more

snipeit schmitzis 6.1.0

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
snipe/snipe-it:v8.3.1141ebf2386fe
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

6,094
service-exampleservice-example-10.1.01 of 7See more

service-example service-example-1 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

9,022
serviceexampleserviceexample-chart0.3.01 of 4See more

serviceexample serviceexample-chart 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

3,928
serviceexampleservice-example-helm-chart0.1.01 of 4See more

serviceexample service-example-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,225
mongosyncsinextraVerified publisher0.4.01 of 1See more

mongosync sinextra 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongosync:1.15.0fa99ed475f03
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,815
bootzookasoftwaremillVerified publisher0.2.11 of 2See more

bootzooka softwaremill 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
softwaremill/bootzooka:latest845b5e8f8056
libgcrypt20@1.12.0-2
1.12.0-2ubuntu0.1

Open the chart page →

3,003
datadogspartan0.1.01 of 1See more

datadog spartan 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

3,232
ocean-network-clientspot1.1.61 of 1See more

ocean-network-client spot 1.1.6

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,220
nethermindstakewise2.8.21 of 3See more

nethermind stakewise 2.8.2

1 of the 3 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
nethermind/nethermind:1.31.893e57917371a
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,031
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

3,153
kurento_webrtc_demostunner0.1.01 of 2See more

kurento_webrtc_demo stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

12,460
stunner-kurento-one2one-callstunner0.1.01 of 2See more

stunner-kurento-one2one-call stunner 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
kurento/kurento-media-server:latest03c0d34d0828
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

12,460
group-challengesubshell-labVerified publisher2.1.01 of 2See more

group-challenge subshell-lab 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.29.17d12c7c8fc66
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,540
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/substra/substra-backend:1.0.121967f54ec86
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

4,731
stash-boxswuuper-githubVerified publisher0.1.11 of 2See more

stash-box swuuper-github 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
stashapp/stash-box:latesta534c8afdf39
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

8,193
supabaseteochenglim0.1.22 of 13See more

supabase teochenglim 0.1.2

2 of the 13 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
darthsim/imgproxy:latestf247c72df1d7
libgcrypt20@1.10.3-2ubuntu0.2
1.12.0-2ubuntu0.1~Fips1~rc11
library/kong:latest2a8cf3b110cd
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

9,556
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

7,248
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

45,239
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

4,305
bugsinkvictorlane0.3.71 of 2See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/mariadb:12.0-noble607835cd628b
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

4,054
calibre-webvista0.1.31 of 1See more

calibre-web vista 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
linuxserver/calibre-web:0.6.24241009026e6f
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

7,628
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

4,046
frank-gatewaywearefrank0.3.01 of 1See more

frank-gateway wearefrank 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

1,074
myweatherhelmwebapp11.3.501 of 8See more

myweatherhelm webapp1 1.3.50

1 of the 8 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

9,130
myweatherhelm-schedulingwebapp11.3.921 of 9See more

myweatherhelm-scheduling webapp1 1.3.92

1 of the 9 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

9,130
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
apache/apisix:3.18.0-ubuntu9ee5df1611f9
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

3,045
kubernetes-dashboardwenerme7.14.01 of 5See more

kubernetes-dashboard wenerme 7.14.0

1 of the 5 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/kong:3.92a8cf3b110cd
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

3,478
reflectorwenerme10.0.651 of 1See more

reflector wenerme 10.0.65

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
emberstack/kubernetes-reflector:10.0.6551dbd5880929
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

656
elasticsearchwiremindVerified publisher8.19.01 of 1See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,191
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

3,990
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/mariadb:ltsdd9b303aed4f
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

5,560
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
library/mongo:latest5211c51171f5
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

13,677
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,097

Container images carrying it

316 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
public.ecr.aws/aktosecurity/akto-api-testing:latest97d830d5538a
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
public.ecr.aws/datadog/cloudprem:v0.1.33bda08753668d
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
public.ecr.aws/spotinst/spot-network-client:1.0.1486380a01587d
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/cilium/cilium:v1.18.2858f807ea4e2
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/cilium/cilium-envoy:v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be60031f396695
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/go-skynet/local-ai:latestd78cd113b2bc
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
libgcrypt20@1.10.3-2build1
1.12.0-2ubuntu0.1~Fips1~rc11
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
libgcrypt20@1.10.3-2ubuntu0.1
1.12.0-2ubuntu0.1~Fips1~rc11
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.