StackRadar

CVE-2026-42012

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,754
of 17,790 indexed, latest versions
Container images
1,836
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,754 of 17,790 indexed charts deploy, on 1,836 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+47 more3.4.10-4ubuntu1.9+esm4, 3.5.18-1ubuntu1.6+esm4, 3.6.13-2ubuntu1.12+esm3, 3.7.3-4ubuntu1.9+6 more1,795
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r03.8.13-r041
OSV records
ALPINE-CVE-2026-42012DEBIAN-CVE-2026-42012UBUNTU-CVE-2026-42012
Also known as
USN-8284-1, USN-8539-1

Charts affected

1,754 by stars
ChartLatestAffected imagesRadar Score
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6

Open the chart page →

2,136
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

2,674
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
gnutls28@3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6+esm4
yandex/clickhouse-server:21.3.204eccfffb01d7
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

9,250
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

7,916

Container images carrying it

1,836 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
flanksource/apm-hub:v0.0.471dacc3195bf9
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.9
1
flanksource/batch-runner:v1.0.44689687a7cf95
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
flanksource/incident-manager-ui:v1.4.318891f21df54fb
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
flashcatcloud/categraf:latest42e6ab16472e
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6
1
fluent/fluent-bit:4.0.4ca08b7d2df5b
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
fluent/fluent-bit:4.0-debuge76397ef3983
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
flyway/flyway:9.1545b5d7cdc75a
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm3
1
fnzv/dump1090:latestb3079b95c336
gnutls28@3.7.3-4ubuntu1.3
3.7.3-4ubuntu1.9
1
foldingathome/fah-gpu:latest5ef7742d1eb4
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4
1
folioci/mod-authtoken:latest995a25a33133
gnutls@3.8.12-r0
3.8.13-r0
1
folioci/mod-courses:latest68ca414f5596
gnutls@3.8.12-r0
3.8.13-r0
1
folioci/mod-eusage-reports:latest15de67587091
gnutls@3.8.12-r0
3.8.13-r0
1
folioci/mod-permissions:latest5363e98c6299
gnutls@3.8.12-r0
3.8.13-r0
1
folioci/mod-search:latest44d7ee9acdf6
gnutls@3.8.8-r0
3.8.13-r0
1
folioci/mod-user-import:latest1807734472bd
gnutls@3.8.12-r0
3.8.13-r0
1
folioci/mod-users-bl:latest4e2d96c9340d
gnutls@3.8.12-r0
3.8.13-r0
1
folioci/mod-z3950:latest2493041ce880
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4
1
frankescobar/allure-docker-service:latestdc171ec796d5
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
free5gmano/nextepc-mongodb:latest36f806935519
gnutls28@3.4.10-4ubuntu1.4
3.4.10-4ubuntu1.9+esm4
1
freedom98/flask:k3.0d7ce1533f297
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.9
1
galaxy/cloudman-server:lateste5c265fe9fcd
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm3
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
gchq/accumulo:2.0.1c460bb587d6d
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6
1
gdrocha/togglr-backend:1.0.0d5ae64e83d4c
gnutls@3.8.8-r0
3.8.13-r0
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm4
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
gnutls28@3.7.3-4ubuntu1.8
3.7.3-4ubuntu1.9
1
geopython/pycsw:3.0.0-beta284662ea6b78b
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
gethue/hue:4.11.011b649636e68
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm3
1
gethue/hue:4.10.05702b2c37ff9
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4
1
gethue/hue:latest7d5c1b9f8a79
gnutls28@3.7.3-4ubuntu1.6
3.7.3-4ubuntu1.9
1
getsentry/relay:24.10.0ba7bf9163219
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghostfolio/ghostfolio:3.7.0e3c6ab53e49b
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
gitea/gitea:1.22.376f516a1a8c2
gnutls@3.8.5-r0
3.8.13-r0
1
gitlab/gitlab-runner:v15.3.0860d4a3fec7a
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
glasskube/operator:0.12.2be5133100d63
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.9
1
gobitfly/eth2-beaconchain-explorer:latest1d08a7986348
gnutls28@3.7.3-4ubuntu1.6
3.7.3-4ubuntu1.9
1
golenski/fibonacci-msg-relay:1.0.0c863dcb0c513
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1
golenski/fibonacci-task-manager:2.0.03a2b36df247b
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1
golenski/fibonacci-worker:2.0.0954caf4aaf6a
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.