CVE-2026-42009

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.013; 70th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,754; of 17,790 indexed, latest versions
Container images: 1,836; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,754 of 17,790 indexed charts deploy, on 1,836 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+47 more	3.4.10-4ubuntu1.9+esm3, 3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9+6 more	1,795
gnutlsapk	3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r0	3.8.13-r0	41

OSV records: ALPINE-CVE-2026-42009 DEBIAN-CVE-2026-42009 UBUNTU-CVE-2026-42009
Also known as: USN-8284-1, USN-8502-1

Charts affected

1,754 by stars

Chart

Latest

Affected images

Radar Score

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	gnutls28@3.8.3-1.1ubuntu3.1	3.8.3-1.1ubuntu3.6

Open the chart page →

2,136

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42009.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7

Open the chart page →

2,674

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-42009.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6+esm3
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2

Open the chart page →

9,250

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-42009.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	gnutls28@3.7.3-4ubuntu1.9	no fix listed

Open the chart page →

7,916

Container images carrying it

1,836 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
quickwit/quickwit :v0.8.2	363ff56ce456	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	2
rajnandan1/kener :3.2.19	30407afca731	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	2
redis/redis-stack :7.2.0-v9	1c5f43fddcdd	gnutls28@3.7.3-4ubuntu1.4	3.7.3-4ubuntu1.9	2
redis/redis-stack-server :7.4.0 :7.4.0-v1	72035434f455	gnutls28@3.7.3-4ubuntu1.5	3.7.3-4ubuntu1.9	2
redis/redis-stack-server :7.2.0-v10	e44b2b49d059	gnutls28@3.7.3-4ubuntu1.4	3.7.3-4ubuntu1.9	2
requarks/wiki :2 :latest	68f0d1848261	gnutls@3.8.12-r0	3.8.13-r0	2
sigp/lighthouse :v8.1.3	44aa773dcf27	gnutls28@3.7.3-4ubuntu1.8	3.7.3-4ubuntu1.9	2
sigp/lighthouse :latest	9a62bb870545	gnutls28@3.7.3-4ubuntu1.9	no fix listed	2
smartedge/generic-multi-access-network-virtualization :1.0	4cd63c22ce36	gnutls28@3.6.13-2ubuntu1.7	3.6.13-2ubuntu1.12+esm2	2
speckle/speckle-preview-service :2.18.11-branch.testing2.88634-335d469 :2.18.12-branch.testing3.88744-f55b341	4bd113093583	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	2
streamnative/apache-pulsar-grafana-dashboard-k8s :0.1.2	0e6d7aa3ef32	gnutls28@3.6.13-2ubuntu1.11	3.6.13-2ubuntu1.12+esm2	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.9	2
technitium/dns-server :15.4.0	df7d90ef0f7b	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	2
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.9	2
uffizzi/controller :latest	0344805f267b	gnutls28@3.7.9-2+deb12u1	3.7.9-2+deb12u7	2
vdiogov/glpi-conteiner :latest	6945f84f0058	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	2
wolveix/satisfactory-server :latest :v1.9.10	e103700ae6ae	gnutls28@3.7.3-4ubuntu1.7	3.7.3-4ubuntu1.9	2
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6	2
gcr.io/google_containers/kubernetes-dashboard-init-amd64 :v1.0.0	fbe12aa24de6	gnutls28@3.4.10-4ubuntu1.3	3.4.10-4ubuntu1.9+esm3	2
ghcr.io/appscode/inbox-server :latest :postgres-latest	536358d7b17e	gnutls28@3.7.3-4ubuntu1.7	3.7.3-4ubuntu1.9	2
ghcr.io/astriaorg/conductor :latest	3ea8164b0eae	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	2
ghcr.io/browserless/chromium :v2.56.7	b1ba7b054af2	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.6	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.9	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.9	2
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	2
ghcr.io/flyteorg/flyte-connectors :py3.12-v2.3.6	896fc7b18b1b	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	2
ghcr.io/games-on-whales/pulseaudio :1.0.0	f34f98405c10	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.12+esm2	2
ghcr.io/games-on-whales/retroarch :1.0.0	103fbcec2314	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.12+esm2	2
ghcr.io/games-on-whales/steam :1.0.0	9b6105be7ad0	gnutls28@3.6.13-2ubuntu1.3	3.6.13-2ubuntu1.12+esm2	2
ghcr.io/google/fleetspeak :v0.1.17	cd264d33efd4	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	2
ghcr.io/immich-app/postgres :14-vectorchord0.4.3-pgvectors0.2.0	bcf63357191b	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	2
ghcr.io/linuxserver/openvpn-as :version-2.8.6-916f8e7d-ubuntu18	4ee0764310e7	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm3	2
ghcr.io/mumble-voip/mumble-server :v1.6.870	02fd613b6a35	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	2
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway :unprivileged-oss :unprivileged-oss-20250331	3db8145349a3	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	2
ghcr.io/nucleuscloud/neosync/api :0.5.41	e2abb798f29f	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	2
ghcr.io/nucleuscloud/neosync/worker :0.5.41	96f42450c5b1	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	2
ghcr.io/openunison/openunison-kubernetes-operator :1.0.13	92bd6c526c50	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	2
ghcr.io/postgresml/pgcat :main	245f9d2f5f5b	gnutls28@3.7.9-2+deb12u1	3.7.9-2+deb12u7	2
ghcr.io/rss3-network/agentdata :0.1.0	fd8d3e6e4cdf	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.9	2
ghcr.io/smarter-project/home-ha-mock :main	95ee018cf558	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	2
ghcr.io/smarter-project/hydra/isolated-vm :main	4457b79b24cd	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	2
mcr.microsoft.com/azure-sql-edge :latest	902628a8be89	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm2	2
public.ecr.aws/aktosecurity/akto-api-security-dashboard :1.69.2 :latest	b53a854bd7c1	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	2
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.6	2
1dev/server :11.9.0	cd5b12fe5471	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.6	1
48n6e/camellia-redis-proxy :1.4.0-jdk-21-0.0.1	a6ed886fddfc	gnutls28@3.7.9-2	3.7.9-2+deb12u7	1
5200710/hadoop :3.2.3-java8	092d3088a5fb	gnutls28@3.6.13-2ubuntu1.9	3.6.13-2ubuntu1.12+esm2	1
a10networks/acos-prometheus-exporter :latest	8dc58d434d71	gnutls28@3.5.18-1ubuntu1	3.5.18-1ubuntu1.6+esm3	1