StackRadar

CVE-2026-42009

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.013
70th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,769
of 17,803 indexed, latest versions
Container images
1,850
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,769 of 17,803 indexed charts deploy, on 1,850 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+47 more3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9+6 more1,808
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r03.8.13-r042
OSV records
ALPINE-CVE-2026-42009DEBIAN-CVE-2026-42009UBUNTU-CVE-2026-42009
Also known as
USN-8284-1, USN-8502-1

Charts affected

1,769 by stars
ChartLatestAffected imagesRadar Score
chaos-meshethereum-helm-chartsVerified publisher0.0.32 of 4See more

chaos-mesh ethereum-helm-charts 0.0.3

2 of the 4 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

12,464
eleelethereum-helm-chartsVerified publisher0.1.71 of 1See more

eleel ethereum-helm-charts 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ethpandaops/eleel:mainb8f1b707aee0
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6

Open the chart page →

1,086
ethrexethereum-helm-chartsVerified publisher0.1.31 of 2See more

ethrex ethereum-helm-charts 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/lambdaclass/ethrex:latest0c7896f060d6
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

692
grandineethereum-helm-chartsVerified publisher0.2.21 of 2See more

grandine ethereum-helm-charts 0.2.2

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
sifrai/grandine:unstable59ef4c0d4d7f
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

625
observoorethereum-helm-chartsVerified publisher0.0.31 of 1See more

observoor ethereum-helm-charts 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ethpandaops/observoor:masterc7e5055defcb
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7

Open the chart page →

1,556
powfaucetethereum-helm-chartsVerified publisher1.2.11 of 1See more

powfaucet ethereum-helm-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
pk910/powfaucet:v2-stable3dcae6a62896
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

4,454
smart-contract-verifier-httpethereum-helm-chartsVerified publisher0.1.41 of 1See more

smart-contract-verifier-http ethereum-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/blockscout/smart-contract-verifier:main9a43f0cc5797
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

625
tekuethereum-helm-chartsVerified publisher1.2.11 of 2See more

teku ethereum-helm-charts 1.2.1

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
consensys/teku:latest3a4f5761ae1c
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

1,032
beeethersphereVerified publisher0.17.41 of 1See more

bee ethersphere 0.17.4

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ethersphere/bee:2.2.0a884fd84b72f
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u7

Open the chart page →

3,509
beekeeperethersphereVerified publisher0.4.141 of 1See more

beekeeper ethersphere 0.4.14

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ethersphere/beekeeper:lateste4cda693ed63
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7

Open the chart page →

1,652
nethermindethersphereVerified publisher0.2.11 of 1See more

nethermind ethersphere 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
nethermind/nethermind:1.14.615517708c3b6
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.9

Open the chart page →

84,388
supportpalevilgn0me0.1.61 of 1See more

supportpal evilgn0me 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2

Open the chart page →

20,981
evobotevobotVerified publisher0.1.11 of 1See more

evobot evobot 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u7

Open the chart page →

3,037
spring-boot-adminevryfs-ossVerified publisher0.1.101 of 1See more

spring-boot-admin evryfs-oss 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
quay.io/evryfs/spring-boot-admin:2.7.1060950ef63764
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.9

Open the chart page →

6,053
express-ts-app-helm-chartsexpress-ts-app-helm-chartsVerified publisher1.0.01 of 4See more

express-ts-app-helm-charts express-ts-app-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
grafana/promtail:3.5.165bfae480b57
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6

Open the chart page →

5,831
faasnetfaasnet0.0.41 of 5See more

faasnet faasnet 0.0.4

1 of the 5 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

7,730
datadog-apmfairwinds-incubator2.0.01 of 1See more

datadog-apm fairwinds-incubator 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6

Open the chart page →

2,882
event-generatorfalcosecurity0.4.01 of 1See more

event-generator falcosecurity 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
falcosecurity/event-generator:latest932956d86c99
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7

Open the chart page →

3,832
farm-observabilityfarm-observabilityOfficialVerified publisher0.27.22 of 18See more

farm-observability farm-observability 0.27.2

2 of the 18 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
grafana/alloy:v1.16.384b76d56c594
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
grafana/alloy:v1.12.2f94b1c82957a
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6

Open the chart page →

13,583
activityrelayfedihost0.1.41 of 2See more

activityrelay fedihost 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.4.115b6701d8fb31
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.9

Open the chart page →

13,529
rospoferama0.4.31 of 1See more

rospo ferama 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u7

Open the chart page →

6,229
vipienferama0.2.81 of 1See more

vipien ferama 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2

Open the chart page →

7,536
azure-pipelines-agentfermosit0.0.11 of 1See more

azure-pipelines-agent fermosit 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
jmferrer/azure-devops-agent:latest030f68ec6998
gnutls28@3.4.10-4ubuntu1.7
3.4.10-4ubuntu1.9+esm3

Open the chart page →

14,719
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

10,840
fibfibonacci-cluster-appsVerified publisher1.0.03 of 5See more

fib fibonacci-cluster-apps 1.0.0

3 of the 5 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
gnutls28@3.7.9-2
3.7.9-2+deb12u7
golenski/fibonacci-task-manager:2.0.03a2b36df247b
gnutls28@3.7.9-2
3.7.9-2+deb12u7
golenski/fibonacci-worker:2.0.0954caf4aaf6a
gnutls28@3.7.9-2
3.7.9-2+deb12u7

Open the chart page →

17,045
infrafibonacci-cluster-infraVerified publisher1.0.03 of 4See more

infra fibonacci-cluster-infra 1.0.0

3 of the 4 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
apache/activemq-artemis:2.37.0bae523439ee3
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6
library/postgres:16.4e62fbf9d3e2b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
library/redis:7.4.1bb142a9c18ac
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

12,617
fineractfineract-openshift0.1.11 of 4See more

fineract fineract-openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/mariadb:11.4611a2fcc5fa7
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

7,889
firefly-iiifirefly-iii1.10.11 of 1See more

firefly-iii firefly-iii 1.10.1

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4

Open the chart page →

5,241
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4
fireflyiii/data-importer:version-2.2.3ab52bf932546
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4

Open the chart page →

10,664
importerfirefly-iii1.6.01 of 1See more

importer firefly-iii 1.6.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.2.3ab52bf932546
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4

Open the chart page →

5,031
firefox-browserfirefox-browserVerified publisher1.1.01 of 1See more

firefox-browser firefox-browser 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
jlesage/firefox:v25.03.1055c28defe31
gnutls@3.8.8-r0
3.8.13-r0

Open the chart page →

1,542
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

5,860
business-api-ecosystemfiware1.1.01 of 4See more

business-api-ecosystem fiware 1.1.0

1 of the 4 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm2

Open the chart page →

108,383
apm-hubflanksourceVerified publisher0.0.471 of 2See more

apm-hub flanksource 0.0.47

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
flanksource/apm-hub:v0.0.471dacc3195bf9
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.9

Open the chart page →

6,198
batchrunnerflanksourceVerified publisher1.0.441 of 1See more

batchrunner flanksource 1.0.44

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
flanksource/batch-runner:v1.0.44689687a7cf95
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6

Open the chart page →

5,534
canary-checkerflanksourceVerified publisher1.2.01 of 2See more

canary-checker flanksource 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
flanksource/canary-checker-ui:v1.4.281764c84e550db
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

4,702
flanksource-uiflanksourceVerified publisher1.4.3181 of 1See more

flanksource-ui flanksource 1.4.318

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
flanksource/incident-manager-ui:v1.4.318891f21df54fb
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

2,607
mission-controlflanksourceVerified publisher0.1.3382 of 8See more

mission-control flanksource 0.1.338

2 of the 8 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
public.ecr.aws/flanksource/incident-manager-ui:v1.4.317fea799d4fb2f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

9,006
mission-control-ai-assistantflanksourceVerified publisher1.0.121 of 1See more

mission-control-ai-assistant flanksource 1.0.12

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/flanksource/mission-control-ai-assistant:1.0.1229a635cbeeb5
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

1,340
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

5,860
flask-appflask-mysqlVerified publisher1.0.11 of 2See more

flask-app flask-mysql 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
jjorozco20/flask-mysql-app:1.0.0b5e44e3ba09c
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

4,115
flinkflink0.5.11 of 1See more

flink flink 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/flink:1.14.6-scala_2.122461f02672b3
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.9

Open the chart page →

5,707
floating-serverfloating-server1.6.31 of 2See more

floating-server floating-server 1.6.3

1 of the 2 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
censedata/floating-server:v1.6.3ebfffb9dd4c0
gnutls@3.8.8-r0
3.8.13-r0

Open the chart page →

1,596
floriapp-mongodbfloriapp1.0.01 of 1See more

floriapp-mongodb floriapp 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
library/mongo:4.4.66efa05203990
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3

Open the chart page →

8,060
fluxcd-helm-upgraderfluxcd-helm-upgraderVerified publisher0.7.71 of 1See more

fluxcd-helm-upgrader fluxcd-helm-upgrader 0.7.7

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
gnutls@3.8.12-r0
3.8.13-r0

Open the chart page →

2,448
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7

Open the chart page →

3,567
dump1090fnzv0.2.81 of 1See more

dump1090 fnzv 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
fnzv/dump1090:latestb3079b95c336
gnutls28@3.7.3-4ubuntu1.3
3.7.3-4ubuntu1.9

Open the chart page →

4,141
mod-authtokenfolio-org0.1.351 of 1See more

mod-authtoken folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
folioci/mod-authtoken:latest995a25a33133
gnutls@3.8.12-r0
3.8.13-r0

Open the chart page →

1,561
mod-coursesfolio-org0.1.341 of 1See more

mod-courses folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
folioci/mod-courses:latest68ca414f5596
gnutls@3.8.12-r0
3.8.13-r0

Open the chart page →

1,536
mod-eusage-reportsfolio-org0.1.21 of 1See more

mod-eusage-reports folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container imageDigestPackageFixed in
folioci/mod-eusage-reports:latest15de67587091
gnutls@3.8.12-r0
3.8.13-r0

Open the chart page →

1,227

Container images carrying it

1,850 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-42009.

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.