StackRadar

CVE-2026-42012

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.1
base score, highest
EPSS
0.004
29th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,769
of 17,790 indexed, latest versions
Container images
1,850
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,769 of 17,790 indexed charts deploy, on 1,850 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+47 more3.4.10-4ubuntu1.9+esm4, 3.5.18-1ubuntu1.6+esm4, 3.6.13-2ubuntu1.12+esm3, 3.7.3-4ubuntu1.9+6 more1,809
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r03.8.13-r041
OSV records
ALPINE-CVE-2026-42012DEBIAN-CVE-2026-42012UBUNTU-CVE-2026-42012
Also known as
USN-8284-1, USN-8539-1

Charts affected

1,769 by stars
ChartLatestAffected imagesRadar Score
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
gnutls28@3.5.18-1ubuntu1.1
3.5.18-1ubuntu1.6+esm4

Open the chart page →

27,684
firecrawlobeoneVerified publisher3.0.42 of 5See more

firecrawl obeone 3.0.4

2 of the 5 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

10,060
libretranslateobeoneVerified publisher1.0.71 of 1See more

libretranslate obeone 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
libretranslate/libretranslate:v1.9.61de2d7056bb8
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7

Open the chart page →

2,008
olvid-botobeoneVerified publisher0.3.31 of 1See more

olvid-bot obeone 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
olvid/bot-daemon:2.0.1e0e6b165d879
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6

Open the chart page →

2,093
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
gnutls28@3.8.9-3
3.8.9-3+deb13u4

Open the chart page →

17,134
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
gnutls@3.8.5-r0
3.8.13-r0

Open the chart page →

5,826
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4

Open the chart page →

2,321
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6

Open the chart page →

2,631
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

5,360
cmsmsoleds-helm-chartsVerified publisher0.1.61 of 1See more

cmsms oleds-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

2,861
db-backupoleds-helm-chartsVerified publisher0.1.01 of 1See more

db-backup oleds-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
oled01/db-backup:0.1.06302fd2b5333
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.9

Open the chart page →

8,133
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.9

Open the chart page →

9,062
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6

Open the chart page →

6,096
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
gnutls28@3.7.9-2
3.7.9-2+deb12u7

Open the chart page →

9,747
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

5,699
bbsimopencord4.8.111 of 1See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
voltha/bbsim:1.16.7d90403d58016
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm4

Open the chart page →

3,908
bbsim-sadis-serveropencord0.3.51 of 1See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
voltha/bbsim-sadis-server:0.4.0762b272d439e
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm4

Open the chart page →

3,722
cdn-remoteopencord0.2.42 of 3See more

cdn-remote opencord 0.2.4

2 of the 3 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
gnutls28@3.5.18-1ubuntu1
3.5.18-1ubuntu1.6+esm4
omecproject/cdn-video-repo:1.0.0d59ccb138ffb
gnutls28@3.4.10-4ubuntu1.4
3.4.10-4ubuntu1.9+esm4

Open the chart page →

63,280
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
gnutls28@3.4.10-4ubuntu1.4
3.4.10-4ubuntu1.9+esm4
omecproject/onos-progran:1.0.05715e5648aa0
gnutls28@3.4.10-4ubuntu1.4
3.4.10-4ubuntu1.9+esm4
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
gnutls28@3.4.10-4ubuntu1.4
3.4.10-4ubuntu1.9+esm4

Open the chart page →

88,653
comac-cuopencord0.1.11 of 4See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
gnutls28@3.5.18-1ubuntu1
3.5.18-1ubuntu1.6+esm4

Open the chart page →

8,056
comac-platformopencord0.0.171 of 11See more

comac-platform opencord 0.0.17

1 of the 11 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
gnutls28@3.4.10-4ubuntu1.4
3.4.10-4ubuntu1.9+esm4

Open the chart page →

26,246
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm4

Open the chart page →

15,718
mcord-cdn-remoteopencord0.1.62 of 2See more

mcord-cdn-remote opencord 0.1.6

2 of the 2 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
gnutls28@3.4.10-4ubuntu1.4
3.4.10-4ubuntu1.9+esm4
woojoong/wowza:latestec230db19652
gnutls28@3.5.18-1ubuntu1
3.5.18-1ubuntu1.6+esm4

Open the chart page →

42,655
mcord-cdn-remote-freeopencord0.1.31 of 1See more

mcord-cdn-remote-free opencord 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
omecproject/cdn-video-repo:remote-v3d59ccb138ffb
gnutls28@3.4.10-4ubuntu1.4
3.4.10-4ubuntu1.9+esm4

Open the chart page →

29,156
mcord-control-planeopencord0.2.21 of 5See more

mcord-control-plane opencord 0.2.2

1 of the 5 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
gnutls28@3.5.18-1ubuntu1
3.5.18-1ubuntu1.6+esm4

Open the chart page →

15,666
oaisimopencord0.1.72 of 3See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4

Open the chart page →

14,556
omec-control-planeopencord0.1.315 of 8See more

omec-control-plane opencord 0.1.31

5 of the 8 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
omecproject/c3po-hss:master-latest638671ef4842
gnutls28@3.4.10-4ubuntu1.9
3.4.10-4ubuntu1.9+esm4
omecproject/c3po-hssdb:master-latest28a90cc26716
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
omecproject/mme-exporter:paging-latestbcc5f19fd676
gnutls28@3.5.18-1ubuntu1.2
3.5.18-1ubuntu1.6+esm4
omecproject/ngic-cp:central-cp-multi-upfs-latest24a389a0a4fe
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm4
omecproject/openmme:master-latest64776cb9edb3
gnutls28@3.4.10-4ubuntu1.8
3.4.10-4ubuntu1.9+esm4

Open the chart page →

40,825
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
gnutls28@3.5.18-1ubuntu1.2
3.5.18-1ubuntu1.6+esm4

Open the chart page →

12,942
onos-progranopencord1.2.71 of 2See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
muluder/prograncontrollermcord:0.1.843b597a93da7
gnutls28@3.4.10-4ubuntu1.4
3.4.10-4ubuntu1.9+esm4

Open the chart page →

38,902
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
gnutls28@3.4.10-4ubuntu1.5
3.4.10-4ubuntu1.9+esm4

Open the chart page →

12,626
sebaopencord1.0.01 of 17See more

seba opencord 1.0.0

1 of the 17 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
tpdock/freeradius:2.2.93da600c95a49
gnutls28@3.4.10-4ubuntu1.4
3.4.10-4ubuntu1.9+esm4

Open the chart page →

93,946
voltha-infraopencord2.14.03 of 10See more

voltha-infra opencord 2.14.0

3 of the 10 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm4
voltha/bbsim-sadis-server:0.3.5259fc3a03f4e
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm4
voltha/voltha-onos:5.1.8e038acb950d3
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4

Open the chart page →

41,101
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

11,051
dokuopenlit0.1.41 of 3See more

doku openlit 0.1.4

1 of the 3 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:latestfa394da808cc
gnutls28@3.7.3-4ubuntu1.9
no fix listed

Open the chart page →

1,737
openlitopenlit1.24.01 of 3See more

openlit openlit 1.24.0

1 of the 3 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:24.4.12e6587b81a26
gnutls28@3.6.13-2ubuntu1.11
3.6.13-2ubuntu1.12+esm3

Open the chart page →

5,068
openpanelopenpanel0.9.01 of 6See more

openpanel openpanel 0.9.0

1 of the 6 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:25.10.2.65e019438e1e05
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.9

Open the chart page →

3,465
llm-stackopenproject-helm-chartsVerified publisher1.1.01 of 2See more

llm-stack openproject-helm-charts 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
apache/apisix:3.16.0-ubuntu5e47692cac00
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6

Open the chart page →

1,992
fineractopenshift0.1.11 of 4See more

fineract openshift 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
library/mariadb:11.4611a2fcc5fa7
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

7,866
open-vpnopenvpn0.0.11 of 1See more

open-vpn openvpn 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4

Open the chart page →

15,602
openvscode-serveropenvscode-server-helmVerified publisher2.7.371 of 2See more

openvscode-server openvscode-server-helm 2.7.37

1 of the 2 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
antiantiops/vscode-browser-docker:1.137.0eeff80a99d92
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

4,298
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
openwhisk/ow-utils:1.0.0c80dba0de3aa
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4

Open the chart page →

36,252
hiveopstty0.1.91 of 4See more

hive opstty 0.1.9

1 of the 4 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:16233f361c5819
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

4,550
grrosdfir-infrastructureVerified publisher1.0.32 of 5See more

grr osdfir-infrastructure 1.0.3

2 of the 5 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
library/mariadb:11.3.2e101f9db3191
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.9
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

11,021
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.020 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

20 of the 40 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
bitnamilegacy/git:latest4b08d0c5af8d
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
library/mariadb:11.3.2e101f9db3191
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.9
ghcr.io/google/fleetspeak:v0.1.17cd264d33efd4
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
ghcr.io/openrelik/openrelik-metrics:latest3d0f1ddeebf5
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-capa:latest71323a4f3fc5
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-chromecreds:latest76d4fbcc6ff0
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-cloud-logs:latesta5d7e3cf71d3
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-dfindexeddb:latest31966a825782
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-floss:latest7a331eb83c6a
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-grep:latest470ff3529746
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-strings:latest6e05055b701f
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/openrelik/openrelik-worker-yara:latestbd7fbf4505b5
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

72,547
automatap2p-avs0.1.01 of 2See more

automata p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
gnutls28@3.7.3-4ubuntu1.8
3.7.3-4ubuntu1.9

Open the chart page →

3,670
avap2p-avs0.1.01 of 1See more

ava p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
avaprotocol/ap-avs:1.2.0c430ea5c37d6
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

3,327
k3p2p-avs0.1.51 of 2See more

k3 p2p-avs 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
gnutls28@3.7.3-4ubuntu1.8
3.7.3-4ubuntu1.9

Open the chart page →

2,342
mishtip2p-avs0.1.01 of 2See more

mishti p2p-avs 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
gnutls28@3.7.3-4ubuntu1.8
3.7.3-4ubuntu1.9

Open the chart page →

4,041
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u7

Open the chart page →

12,440
ungatep2p-avs0.1.03 of 3See more

ungate p2p-avs 0.1.0

3 of the 3 container images this version deploys carry CVE-2026-42012.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
ghcr.io/foundry-rs/foundry:latest0c00cb0bda1a
gnutls28@3.7.3-4ubuntu1.8
3.7.3-4ubuntu1.9

Open the chart page →

27,597

Container images carrying it

1,850 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
gnutls@3.8.8-r0
3.8.13-r0
1
ghcr.io/kenchrcum/tika:3.3.0-full708446bc6783
gnutls@3.8.11-r0
3.8.13-r0
1
ghcr.io/kokuwaio/gcloud-mysql:v3.2.1963098135c550
gnutls@3.8.12-r0
3.8.13-r0
1
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm4
1
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/kubelauncher/openldap8978aa002bc0
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
ghcr.io/kubelauncher/rabbitmqff5a36a457f1
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
gnutls28@3.8.9-3
3.8.9-3+deb13u4
1
ghcr.io/kubiyabot/kubernetes:1.32.0b5ade0d9cc6b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/lambdaclass/ethrex:latest0c7896f060d6
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
gnutls28@3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6+esm4
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/linuxserver/duplicati:latesta792931146b4
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/linuxserver/ombi:4.53.50caadf03b804
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6
1
ghcr.io/linuxserver/ombi:4.16.124c1b67cf39af
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.9
1
ghcr.io/linuxserver/plex:version-1.41.4.9463-630c9f557e6d2775e77ec
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4
1
ghcr.io/loft-sh/vnode-runtime:0.3.3b065ec5a5239
gnutls28@3.7.3-4ubuntu1.9
no fix listed
1
ghcr.io/loxilb-io/kube-loxilb:latest6f65e53e252d
gnutls28@3.7.3-4ubuntu1.9
no fix listed
1
ghcr.io/loxilb-io/loxilb:latestc7ede1bab641
gnutls28@3.7.3-4ubuntu1.9
no fix listed
1
ghcr.io/m9sweeper/trawler:1.6.0df917c5a7e54
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
gnutls28@3.8.9-3
3.8.9-3+deb13u4
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.0ff23f452813a
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1
ghcr.io/monicahq/monica-next:main8be69156acbb
gnutls28@3.8.9-3
3.8.9-3+deb13u4
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.9
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.