CVE-2026-41990

Medium

Advisory

Published 23 Apr 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 4.0; base score, highest
EPSS: 0.002; 7th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 351; of 17,781 indexed, latest versions
Container images: 326; deployed by those charts
Fix available: 2 of 2; affected packages

Security update for libgcrypt

Carried by container images the latest versions of 351 of 17,781 indexed charts deploy, on 326 images.

Affected package	Affected versions	Fixed in	Images
libgcrypt20deb	1.10.3-2build1, 1.10.3-2ubuntu0.1, 1.10.3-2ubuntu0.2, 1.12.0-2	1.12.0-2ubuntu0.1, 1.12.0-2ubuntu0.1~Fips1~rc11	323
libgcryptrpm	1.11.1-160000.2.2, 1.12.1-160000.1.1	1.12.1-160000.2.1	3

OSV records: UBUNTU-CVE-2026-41990 SUSE-SU-2026:22355-1
Also known as: USN-8319-1

Charts affected

351 by stars

Chart

Latest

Affected images

Radar Score

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-41990.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11

Open the chart page →

2,097

Container images carrying it

326 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/mariadb :12.3.3 :latest :lts	dd9b303aed4f	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	12
library/mongo :8 :8.3.8 :latest	5211c51171f5	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	12
library/rabbitmq :3.13-management :3-management	e582c0bc7766	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	8
library/kong :3.9 :latest	2a8cf3b110cd	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	5
gchq/hdfs :3.3.3	5ec58edbb2db	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	3
guacamole/guacamole :1.6.0	f344085e618b	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	3
library/rabbitmq :4.3.5-management :4-management :management	ffd1b50c522a	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	3
library/ubuntu :24.04	33ceb71981b6	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	3
ghcr.io/tremolosecurity/kube-oidc-proxy :1.0.12	d7747f308042	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	3
quay.io/devtron/casbin :172ef62b-9450794d-464-39422	5bf041aacadd	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	3
quay.io/devtron/chart-sync :94237c18-1021-39419	60566529446a	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	3
quay.io/devtron/chart-sync :3b3d6d0e-836-39296	721b5c9634d4	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	3
quay.io/devtron/devtron :9450794d-930-39415	9795f3f9f031	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	3
quay.io/devtron/hyperion :0874dcaf-280-39287	01d5d8c4cecb	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	3
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	3
quay.io/devtron/kubelink :09867a9c-564-39289	ea6dd1e4ce71	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	3
alazidis/kube-netlag :1.1.0	0e8c84152201	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
apache/apisix :3.18.0-ubuntu	9ee5df1611f9	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	2
apache/rocketmq :5.4.0	319cd8a81ed1	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
cribl/cribl :4.19.2	044f9a5fac9a	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	2
emberstack/kubernetes-reflector :10.0.65	51dbd5880929	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	2
grafana/alloy :v1.8.1	7790f6f7fbd8	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
grafana/alloy :v1.12.2	f94b1c82957a	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
homebridge/homebridge :latest	77c685a40911	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu0.1~Fips1~rc11	2
kurento/kurento-media-server :latest	03c0d34d0828	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
library/elasticsearch :8.19.12	89729a95066a	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
library/mariadb :11.4	611a2fcc5fa7	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	2
library/mariadb :12.3.3	ab1c3dd38194	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu0.1~Fips1~rc11	2
library/mongo :8.0.20	098862b1339f	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
library/mongo :8.3.9	81a1c8842a09	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu0.1~Fips1~rc11	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
memgraph/memgraph :3.13.0	a1dc375774ed	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	2
opendatacube/ows :latest	668cbb41473c	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
technitium/dns-server :15.4.0	df7d90ef0f7b	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	2
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
ghcr.io/browserless/chromium :v2.56.7	b1ba7b054af2	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu0.1~Fips1~rc11	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
ghcr.io/mumble-voip/mumble-server :v1.6.870	02fd613b6a35	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	2
ghcr.io/openunison/openunison-kubernetes-operator :1.0.11	f4feb3323a29	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
public.ecr.aws/aktosecurity/akto-api-security-dashboard :1.69.2 :latest	b53a854bd7c1	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	2
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	2
quay.io/cilium/cilium-envoy :v1.37.5-1786810558-766ccfb37260a43e9d228837aa84ce3faf9f64e7	75b8094c7127	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	2
1dev/server :11.9.0	cd5b12fe5471	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	1
adorsys/keycloak-config-cli :6.3.0-26.1.0	85be7a45a94c	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	1
adorsys/keycloak-config-cli :6.1.6-25.0.1	eb49a2dcbbb8	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	1
akeyless/base :latest	759e4289fae8	libgcrypt20@1.10.3-2build1	1.12.0-2ubuntu0.1~Fips1~rc11	1
akeyless/gateway :5.3.1	3d2e7dce5eb9	libgcrypt20@1.10.3-2ubuntu0.2	1.12.0-2ubuntu0.1~Fips1~rc11	1
aktosecurity/akto-api-security-dashboard :latest	3aeaee66bc66	libgcrypt20@1.10.3-2ubuntu0.1	1.12.0-2ubuntu0.1~Fips1~rc11	1