StackRadar

CVE-2026-42009

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,770
of 17,792 indexed, latest versions
Container images
1,851
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,770 of 17,792 indexed charts deploy, on 1,851 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+47 more3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9+6 more1,809
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r03.8.13-r042
OSV records
ALPINE-CVE-2026-42009DEBIAN-CVE-2026-42009UBUNTU-CVE-2026-42009
Also known as
USN-8284-1, USN-8502-1

Charts affected

1,770 by stars
ChartLatestAffected imagesRadar Score
kubeseal-webguikubeseal-webgui6.0.41 of 2See more

kubeseal-webgui kubeseal-webgui 6.0.4

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

4,122
kubesendkubesend0.1.91 of 1See more

kubesend kubesend 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
v3xl/kubesend:0.1.06f62ca96be82
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

1,403
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm2

Open the chart page →

7,763
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

2,686
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2

Open the chart page →

12,495
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2

Open the chart page →

114,131
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

4,048
lgtm-stacklgtm-stackVerified publisher0.1.31 of 8See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.10f4434c92b3e
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

5,679
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

35,432
kube-iptables-tailerlifen-chartsVerified publisher0.2.31 of 1See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2

Open the chart page →

4,467
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6

Open the chart page →

7,934
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.14ccf9c2b5e3f2
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm3

Open the chart page →

6,776
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

7,240
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

2,781
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
lumenvox/cloud-assure-identity:2.0.0147854a3c916
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
lumenvox/cloud-audit:2.0.079428add7f38
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
lumenvox/cloud-binary-storage:2.0.053decadc102d
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
lumenvox/cloud-deployment:2.0.0ea8110886d38
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
lumenvox/cloud-management-api:2.0.0b9a23345eabd
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
lumenvox/cloud-voice-verifier:2.0.014170ad34903
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2

Open the chart page →

71,369
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

5,773
magentomagento3.2.32 of 12See more

magento magento 3.2.3

2 of the 12 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
gnutls28@3.6.13-2ubuntu1.11
3.6.13-2ubuntu1.12+esm2
library/rabbitmq:4.1.0-management935b3f84c1e4
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6

Open the chart page →

13,685
mcp-orchestratormagertronVerified publisher3.8.311 of 7See more

mcp-orchestrator magertron 3.8.31

1 of the 7 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
curtismager20/mcp-orchestrator:3.8.312c8bdd49aaee
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

1,707
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2

Open the chart page →

3,026
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm3

Open the chart page →

19,206
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6

Open the chart page →

4,221
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
gnutls28@3.8.9-3ubuntu2
3.8.9-3ubuntu2.2

Open the chart page →

11,106
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

13,819
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.9

Open the chart page →

3,738
clowder2ncsaVerified publisher1.9.75 of 12See more

clowder2 ncsa 1.9.7

5 of the 12 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

37,538
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2

Open the chart page →

14,398
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

5,079
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
gnutls28@3.7.9-2
3.7.9-2+deb12u7
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

14,920
dhcp-serveropencord1.0.21 of 1See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
networkboot/dhcpd:lateste99bbfbd6fb2
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.9

Open the chart page →

4,216
librechatopenshift1.9.02 of 3See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

5,875
opentelemetry-demoopentelemetry-helmVerified publisher0.41.23 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.2

3 of the 34 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
gnutls28@3.7.3-4ubuntu1.9
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6

Open the chart page →

23,064
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

6,960
opikopikOfficialVerified publisher2.2.662 of 13See more

opik opik 2.2.66

2 of the 13 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/zookeeper:3.9.4dfa9ba46d14b
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.9
redis/redis-stack-server:7.2.0-v10e44b2b49d059
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.9

Open the chart page →

14,454
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
gnutls28@3.7.3-4ubuntu1.9
no fix listed
shaowenchen/ops-server:latest315444f703f4
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.9

Open the chart page →

9,214
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4

Open the chart page →

3,735
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
bitnamilegacy/postgresqldigest-pinned926356130b77
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

8,591
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

6,897
fahclientpcktdmp2.6.01 of 2See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
foldingathome/fah-gpu:latest5ef7742d1eb4
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3

Open the chart page →

4,743
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.9

Open the chart page →

7,632
matomopockostVerified publisher1.3.01 of 3See more

matomo pockost 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

5,230
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

32,112
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/mariadb:11.7.2fcc7fcd7114a
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6

Open the chart page →

5,503
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/neo4j:2026.02.25ab4ab0358cf
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4

Open the chart page →

8,367
pzserverpzserver0.1.171 of 2See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
lis314/project-zomboid-docker:latestaa2089c37920
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

3,239
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

24,012
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.9

Open the chart page →

6,914
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6

Open the chart page →

2,838
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.9

Open the chart page →

7,519
redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher1.0.21 of 1See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
promzeus/redis-sentinel-gateway:v182f6d56e280b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

2,683
reportportalreportportal-ioOfficialVerified publisher26.8.122 of 15See more

reportportal reportportal-io 26.8.12

2 of the 15 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
library/rabbitmq:4.3.4-managementeb5295d08332
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

12,026

Container images carrying it

1,851 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/sudo-kraken/jf-pushover-webhook:v1.1.0ee9cf22a39ab
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/suwayomi/suwayomi-server:v2.3.2320d2c3218c7f9f
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
ghcr.io/topolvm/pie:0.18.0aa467443e407
gnutls28@3.7.3-4ubuntu1.9
no fix listed
1
ghcr.io/topolvm/topolvm-with-sidecar:0.41.170548dbe0c6a
gnutls28@3.7.3-4ubuntu1.9
no fix listed
1
ghcr.io/topolvm/topolvm-with-sidecar:0.35.0b354978c440d
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.9
1
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/twigex/cospace:lateste5ecfd607e42
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.9
1
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.9
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.9
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1
ghcr.io/wearefrank/frank-gateway:1.0.05ccf797ccdf1
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6
1
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/wiremind/bitnami/rabbitmq:4.2.2-debian-12-r11572e12bc93c
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/wiremind/bitnami/redis:8.4.0-debian-12-r31f0f7ddc4370
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1
ghcr.io/wmde/wbaas-backup:v0.1.78e6a9516eac0
gnutls28@3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6+esm3
1
ghcr.io/wolveix/satisfactory-server:v1.9.10e0f2f8c97598
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.9
1
ghcr.io/woodenmaiden/relfinderreformedfront:latest344f53763b25
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
ghcr.io/wundergraph/cosmo/cdn:0.14.1d86fcf169f15
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/zazukoians/qlever-server:v0.10.11de7869ab46e
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/zoriya/kyoo_back:4.7.1416e980f76a6
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/zoriya/kyoo_migrations:4.7.1f7e607f24071
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/zystem-io/zymtrace-pub-gateway:26.9.2ae9ae0925ff8
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.9
1
mcr.microsoft.com/azure-application-gateway/kubernetes-ingress:1.6.0bccaa701e2df
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm2
1
mcr.microsoft.com/mssql/server:2017-latest13221ac5f673
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
gnutls28@3.7.3-4ubuntu1.9
no fix listed
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6
1
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:1.66.9138c8b82c398
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
public.ecr.aws/aktosecurity/akto-api-security-database-abstractor:latestf669a6eacf8c
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
public.ecr.aws/aktosecurity/akto-api-security-testing-db-layer:1.74.4_local1ed844ecab29
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
public.ecr.aws/aktosecurity/akto-api-testing:latest97d830d5538a
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
public.ecr.aws/aktosecurity/redis47200b041382
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
public.ecr.aws/datadog/cloudprem:v0.1.33bda08753668d
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
public.ecr.aws/groundcovercom/grafana-groundcover:v0.0.54-grafana11.3.7ee9d973e3952
gnutls28@3.7.3-4ubuntu1.6
3.7.3-4ubuntu1.9
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.