StackRadar

CVE-2026-42013

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,767
of 17,797 indexed, latest versions
Container images
1,848
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,767 of 17,797 indexed charts deploy, on 1,848 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+47 more3.4.10-4ubuntu1.9+esm4, 3.5.18-1ubuntu1.6+esm4, 3.6.13-2ubuntu1.12+esm3, 3.7.3-4ubuntu1.9+6 more1,806
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r03.8.13-r042
OSV records
ALPINE-CVE-2026-42013DEBIAN-CVE-2026-42013UBUNTU-CVE-2026-42013
Also known as
USN-8284-1, USN-8539-1

Charts affected

1,767 by stars
ChartLatestAffected imagesRadar Score
mod-searchfolio-org0.1.351 of 1See more

mod-search folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
folioci/mod-search:latest44d7ee9acdf6
gnutls@3.8.8-r0
3.8.13-r0

Open the chart page →

1,534
mod-user-importfolio-org0.1.341 of 1See more

mod-user-import folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
folioci/mod-user-import:latest1807734472bd
gnutls@3.8.12-r0
3.8.13-r0

Open the chart page →

1,217
mod-users-blfolio-org0.1.351 of 1See more

mod-users-bl folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
folioci/mod-users-bl:latest4e2d96c9340d
gnutls@3.8.12-r0
3.8.13-r0

Open the chart page →

1,324
mod-z3950folio-org0.1.31 of 1See more

mod-z3950 folio-org 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
folioci/mod-z3950:latest2493041ce880
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4

Open the chart page →

2,572
ledgerformance1.2.01 of 1See more

ledger formance 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/formancehq/ledger:v1.9.203c1ddbda33b
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.9

Open the chart page →

4,658
plexfydrah-charts2.2.01 of 1See more

plex fydrah-charts 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
plexinc/pms-docker:1.19.5.3112-b23ab3896b598abb134ad
gnutls28@3.4.10-4ubuntu1.8
3.4.10-4ubuntu1.9+esm4

Open the chart page →

8,984
passboltg0dscookie0.5.21 of 2See more

passbolt g0dscookie 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
library/mariadb:10.79a48ac9f196f
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm3

Open the chart page →

7,994
scanservjsgabe565Verified publisher0.9.21 of 1See more

scanservjs gabe565 0.9.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
sbs20/scanservjs:release-v3.0.3dad1fd6e9a98
gnutls28@3.7.9-2
3.7.9-2+deb12u7

Open the chart page →

13,281
guacamolegabibbo970.3.01 of 3See more

guacamole gabibbo97 0.3.0

1 of the 3 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
gnutls28@3.8.9-3
3.8.9-3+deb13u4

Open the chart page →

6,455
wekan-oldgabisonfire0.1.21 of 1See more

wekan-old gabisonfire 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
wekanteam/wekan:v4.2268a51f0327df
gnutls28@3.6.13-2ubuntu1.2
3.6.13-2ubuntu1.12+esm3

Open the chart page →

6,002
accumulogaffer2.2.12 of 4See more

accumulo gaffer 2.2.1

2 of the 4 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
gchq/accumulo:2.0.1c460bb587d6d
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6
gchq/hdfs:3.3.35ec58edbb2db
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6

Open the chart page →

17,011
gaffer-road-trafficgaffer2.2.11 of 8See more

gaffer-road-traffic gaffer 2.2.1

1 of the 8 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6

Open the chart page →

9,402
lndgaloymoney0.10.61 of 3See more

lnd galoymoney 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
gnutls@3.8.5-r0
3.8.13-r0

Open the chart page →

2,161
lndgaloymoney20.10.61 of 3See more

lnd galoymoney2 0.10.6

1 of the 3 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
lightninglabs/lnd:v0.18.3-betaf86bbec4dfb3
gnutls@3.8.5-r0
3.8.13-r0

Open the chart page →

2,161
garge-apigargeVerified publisher0.1.551 of 1See more

garge-api garge 0.1.55

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
sondresjo/garge-api:v2.12.6f41e452800ff
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

1,086
garge-appgargeVerified publisher0.1.471 of 1See more

garge-app garge 0.1.47

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
sondresjo/garge-app:v1.20.70382ebf9dfc8
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

1,864
garge-operatorgargeVerified publisher0.1.341 of 1See more

garge-operator garge 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
sondresjo/garge-operator:v1.9.416cb6643dae6
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

699
pagesgary-pages1.0.02 of 3See more

pages gary-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
flyway/flyway:6.4.422d97ceb0c47
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm4

Open the chart page →

20,262
airsonicgeek-cookbookVerified publisher6.4.21 of 1See more

airsonic geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
airsonicadvanced/airsonic-advanced:latestf7cbafac2806
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3

Open the chart page →

18,155
apache-musicindexgeek-cookbookVerified publisher2.4.21 of 1See more

apache-musicindex geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

14,716
booksonic-airgeek-cookbookVerified publisher6.4.21 of 1See more

booksonic-air geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
gnutls28@3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6+esm4

Open the chart page →

19,273
calibre-webgeek-cookbookVerified publisher8.4.21 of 1See more

calibre-web geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
linuxserver/calibre-web:version-0.6.12938810eca3d3
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

16,221
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
gnutls28@3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6+esm4

Open the chart page →

13,599
dizquetvgeek-cookbookVerified publisher4.4.21 of 1See more

dizquetv geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
vexorian/dizquetv:1.4.37e2b99844a5c
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4

Open the chart page →

4,898
double-takegeek-cookbookVerified publisher2.3.21 of 1See more

double-take geek-cookbook 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
jakowenko/double-take:1.6.0b858bac9e32a
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

12,349
duplicatigeek-cookbookVerified publisher5.4.21 of 1See more

duplicati geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/duplicati:latesta792931146b4
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

1,793
embygeek-cookbookVerified publisher3.4.21 of 1See more

emby geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3

Open the chart page →

8,597
gapsgeek-cookbookVerified publisher5.4.21 of 1See more

gaps geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
housewrecker/gaps:latestf417dd0a7547
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

8,998
haste-servergeek-cookbookVerified publisher3.4.21 of 1See more

haste-server geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3

Open the chart page →

11,060
jackettgeek-cookbookVerified publisher11.7.21 of 1See more

jackett geek-cookbook 11.7.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

9,749
komgageek-cookbookVerified publisher2.4.21 of 1See more

komga geek-cookbook 2.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
gotson/komga:0.99.49b15ea6bfc30
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4

Open the chart page →

12,602
lancachegeek-cookbookVerified publisher0.6.21 of 1See more

lancache geek-cookbook 0.6.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
lancachenet/monolithic:latest37f28b362c93
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

1,299
lidarrgeek-cookbookVerified publisher14.2.21 of 1See more

lidarr geek-cookbook 14.2.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3

Open the chart page →

14,320
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

13,116
nzbgetgeek-cookbookVerified publisher12.4.21 of 1See more

nzbget geek-cookbook 12.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.9

Open the chart page →

12,150
nzbhydra2geek-cookbookVerified publisher10.4.21 of 1See more

nzbhydra2 geek-cookbook 10.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3

Open the chart page →

17,776
openkmgeek-cookbookVerified publisher4.2.01 of 1See more

openkm geek-cookbook 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
openkm/openkm-ce:6.3.113bc465a7461b
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm3

Open the chart page →

28,054
photoprismgeek-cookbookVerified publisher7.2.01 of 1See more

photoprism geek-cookbook 7.2.0

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
photoprism/photoprism:220629-jammy2954334adbda
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.9

Open the chart page →

19,581
puppeteergeek-cookbookVerified publisher1.2.21 of 1See more

puppeteer geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

15,802
qbittorrentgeek-cookbookVerified publisher13.5.21 of 1See more

qbittorrent geek-cookbook 13.5.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

11,873
radarrgeek-cookbookVerified publisher16.3.21 of 1See more

radarr geek-cookbook 16.3.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.9

Open the chart page →

10,431
readarrgeek-cookbookVerified publisher6.4.21 of 1See more

readarr geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3

Open the chart page →

7,818
resilio-syncgeek-cookbookVerified publisher5.4.21 of 1See more

resilio-sync geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4

Open the chart page →

5,911
satisfactorygeek-cookbookVerified publisher1.2.21 of 1See more

satisfactory geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:lateste103700ae6ae
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.9

Open the chart page →

3,476
sdtdgeek-cookbookVerified publisher0.3.21 of 1See more

sdtd geek-cookbook 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/reitermarkus/7d2d:main39953b387b61
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4

Open the chart page →

2,533
seafilegeek-cookbookVerified publisher3.2.01 of 1See more

seafile geek-cookbook 3.2.0

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:8.0.7ed0fcda5e6a9
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3

Open the chart page →

24,374
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
gnutls28@3.8.9-3
3.8.9-3+deb13u4

Open the chart page →

9,010
teedygeek-cookbookVerified publisher6.2.01 of 1See more

teedy geek-cookbook 6.2.0

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
sismics/docs:v1.10f4b0ef019cf1
gnutls28@3.5.17-1ubuntu1
3.5.18-1ubuntu1.6+esm4

Open the chart page →

27,026
transmissiongeek-cookbookVerified publisher8.4.31 of 1See more

transmission geek-cookbook 8.4.3

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

11,927
xtevegeek-cookbookVerified publisher8.4.21 of 1See more

xteve geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-42013.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

17,985

Container images carrying it

1,848 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

No deployed image carries CVE-2026-42013.

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.