CVE-2026-42012

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.1; base score, highest
EPSS: 0.004; 29th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,769; of 17,790 indexed, latest versions
Container images: 1,850; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,769 of 17,790 indexed charts deploy, on 1,850 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+47 more	3.4.10-4ubuntu1.9+esm4, 3.5.18-1ubuntu1.6+esm4, 3.6.13-2ubuntu1.12+esm3, 3.7.3-4ubuntu1.9+6 more	1,809
gnutlsapk	3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r0	3.8.13-r0	41

OSV records: ALPINE-CVE-2026-42012 DEBIAN-CVE-2026-42012 UBUNTU-CVE-2026-42012
Also known as: USN-8284-1, USN-8539-1

Charts affected

1,769 by stars

Chart

Latest

Affected images

Radar Score

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	gnutls28@3.7.9-2+deb12u1	3.7.9-2+deb12u7

Open the chart page →

15,044

wikiwikijs

3.0.0

1 of 2 See more

5,483

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	gnutls28@3.7.3-4ubuntu1.3	3.7.3-4ubuntu1.9

Open the chart page →

9,320

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6

Open the chart page →

2,235

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7

Open the chart page →

7,664

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm3

Open the chart page →

6,326

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	gnutls28@3.7.9-2+deb12u1	3.7.9-2+deb12u7

Open the chart page →

5,559

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7

Open the chart page →

2,496

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7

Open the chart page →

2,136

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	628f228f0fd5	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

4,063

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
library/mariadb :lts	dd9b303aed4f	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

5,676

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	gnutls28@3.7.3-4ubuntu1.5	3.7.3-4ubuntu1.9

Open the chart page →

14,173

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7

Open the chart page →

11,603

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7

Open the chart page →

7,697

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
hamzaarshad10/querypodpy :1.7	154f38e8668e	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
library/mongo :latest	5211c51171f5	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
murtazashah46/helmfile :latest	4d11726cf803	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7

Open the chart page →

13,783

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	gnutls28@3.8.3-1.1ubuntu3.1	3.8.3-1.1ubuntu3.6

Open the chart page →

2,142

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7

Open the chart page →

2,684

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6+esm4
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3

Open the chart page →

9,256

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-42012.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	gnutls28@3.7.3-4ubuntu1.9	no fix listed

Open the chart page →

7,929

Container images carrying it

1,850 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
sigp/siren :v3.0.4	2c219b04758e	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
sirrend/helmup-engine :0.1.13	699e79e3d4e2	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
sirrend/helmup-github-scraper :0.1.4	7ca688c7abf5	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
sirrend/helmup-notifications-service :0.1.3	997866417011	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
sismics/docs :v1.10	f4b0ef019cf1	gnutls28@3.5.17-1ubuntu1	3.5.18-1ubuntu1.6+esm4	1
sissbruecker/linkding :1.35.0	0c5dddf0b37c	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
sissbruecker/linkding :1.41.0-plus	a222fb777e1f	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
slagattollas/weatherservice-practica :latest	68e7f56393fc	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm4	1
snipe/snipe-it :v8.3.1	141ebf2386fe	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
snipe/snipe-it :v6.0.14	55fb7636a98c	gnutls28@3.6.13-2ubuntu1.7	3.6.13-2ubuntu1.12+esm3	1
socialmediamacroscope/autophrase :0.1.5	70fb11d4f531	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm3	1
socialmediamacroscope/collect_reddit_comment :0.1.2	19d3d26d53ee	gnutls28@3.5.18-1ubuntu1.6	3.5.18-1ubuntu1.6+esm4	1
socialmediamacroscope/histogram :0.1.2	6418f9bdb4d2	gnutls28@3.7.9-2	3.7.9-2+deb12u7	1
socialmediamacroscope/image_crawler :0.1.2	f508216be63c	gnutls28@3.5.18-1ubuntu1.6	3.5.18-1ubuntu1.6+esm4	1
socialmediamacroscope/network_analysis :0.1.3	b351c21422e6	gnutls28@3.7.9-2	3.7.9-2+deb12u7	1
socialmediamacroscope/preprocessing :0.1.3	ca863306314b	gnutls28@3.7.9-2	3.7.9-2+deb12u7	1
socialmediamacroscope/topic_modeling :0.1.3	fa490acac2f8	gnutls28@3.7.9-2	3.7.9-2+deb12u7	1
softwaremill/bootzooka :latest	845b5e8f8056	gnutls28@3.8.12-2ubuntu1	3.8.12-2ubuntu1.1	1
solarwinds/solarwinds-otel-collector :0.152.3-k8s	3c1110e8bdfb	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	1
soldevelo/pgpool :4.6.3-debian-12-r0	044d16a65129	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	1
someblackmagic/k8s-testing-multitool :v0.1.0	6eca64b6b440	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3	1
somnathmore/custom-nginx :v2	bdfc06cad4ec	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
sondresjo/altinnendata-api :v1.8.0	148f173dfd9b	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
sondresjo/altinnendata-app :v1.9.1	c2707839d8a3	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
sondresjo/bobby-api :latest	fe534731909a	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
sondresjo/garge-api :v2.12.6	f41e452800ff	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
sondresjo/garge-app :v1.20.7	0382ebf9dfc8	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
sondresjo/garge-operator :v1.9.4	16cb6643dae6	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
sondresjo/nstuning-api :v1.6.11	d32750053baa	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
sondresjo/nstuning-app :v1.6.11	3a6795bf36da	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
sonroyaalmerol/docker-sogo :5.12.4	3f60f3abe990	gnutls28@3.8.9-3+deb13u1	3.8.9-3+deb13u4	1
speckle/speckle-preview-service :2.26.3	092384dba45d	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
speckle/speckle-preview-service :2.20.2-branch.testing4.134160-9fad4b2	1f897ca906ea	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
speckle/speckle-preview-service :2.21.3-branch.testing5.219631-2153bef	52cad5e3293e	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
speckle/speckle-preview-service :2.23.14-branch.testing6.334655-b4e04ee	6dee853ba74a	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
speckle/speckle-preview-service :2.25.10-branch.testing6.645-b125c1e	787adcb20a3a	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
speckle/speckle-preview-service :2.17.14-branch.testing.72707.921a5f8	84fc39bca0c8	gnutls28@3.7.9-2+deb12u1	3.7.9-2+deb12u7	1
speckle/speckle-preview-service :2.20.6-branch.testing1.154030-9b09114	8f3c1ea153ba	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
speckle/speckle-preview-service :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	c102b087481a	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
speckle/speckle-preview-service :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	d3da0a84de98	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
speckle/speckle-server :2.17.14-branch.testing.72707.921a5f8	49d10dcdfb91	gnutls28@3.7.9-2+deb12u1	3.7.9-2+deb12u7	1
speckle/speckle-server :2.19.2-branch.hotfix-2.19.1.124125-665e7e1	4b6a0750d5aa	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
speckle/speckle-server :2.20.3-branch.hotfix-2.20.2.149555-37ea0cb	52f8eabf5cea	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
speckle/speckle-server :2.20.2-branch.testing4.134160-9fad4b2	687f43ab16f3	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
speckle/speckle-server :2.18.12-branch.testing3.88744-f55b341	89a5872375f9	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
speckle/speckle-server :2.18.11-branch.testing2.88634-335d469	bf6a501b2210	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
speckle/speckle-server :2.20.6-branch.testing1.154030-9b09114	e8413f57b327	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
spy86/rabbitmq-stomp :latest	ea649101b9fb	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm3	1
stackstorm/st2actionrunner :3.8	88235ba70cad	gnutls28@3.6.13-2ubuntu1.9	3.6.13-2ubuntu1.12+esm3	1
stackstorm/st2api :3.8	6f56d239d280	gnutls28@3.6.13-2ubuntu1.9	3.6.13-2ubuntu1.12+esm3	1