CVE-2026-42014

Medium

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.6; base score, highest
EPSS: 0.002; 5th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,621; of 17,790 indexed, latest versions
Container images: 1,687; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,621 of 17,790 indexed charts deploy, on 1,687 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.6.13-2ubuntu1.2, 3.6.13-2ubuntu1.3, 3.6.13-2ubuntu1.6, 3.6.13-2ubuntu1.7+33 more	3.6.13-2ubuntu1.12+esm3, 3.7.3-4ubuntu1.9, 3.7.9-2+deb12u7, 3.8.3-1.1ubuntu3.6+4 more	1,646
gnutlsapk	3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r0	3.8.13-r0	41

OSV records: ALPINE-CVE-2026-42014 DEBIAN-CVE-2026-42014 UBUNTU-CVE-2026-42014
Also known as: USN-8284-1, USN-8539-1

Charts affected

1,621 by stars

Chart

Latest

Affected images

Radar Score

openebswenerme

3.10.0

2 of 3 See more

openebs wenerme 3.10.0

2 of the 3 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
openebs/node-disk-manager :2.1.0	f6c18b0f8c8a	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.9
openebs/node-disk-operator :2.1.0	6afe2123c457	gnutls28@3.7.3-4ubuntu1.1	3.7.3-4ubuntu1.9

Open the chart page →

10,587

reflectorwenerme

10.0.65

1 of 1 See more

reflector wenerme 10.0.65

1 of the 1 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
emberstack/kubernetes-reflector :10.0.65	51dbd5880929	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

700

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
qdrant/qdrant :v1.7.4	5f2a56b95266	gnutls28@3.7.9-2+deb12u1	3.7.9-2+deb12u7

Open the chart page →

15,044

wikiwikijs

3.0.0

1 of 2 See more

5,483

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	gnutls28@3.7.3-4ubuntu1.3	3.7.3-4ubuntu1.9

Open the chart page →

9,320

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6

Open the chart page →

2,235

keycloakwiremind

25.3.1

2 of 2 See more

keycloak wiremind 25.3.1

2 of the 2 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
bitnamilegacy/postgresql :17.6.0-debian-12-r4	926356130b77	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7
ghcr.io/wiremind/bitnami/keycloak :26.5.0-debian-12-r3	8622ea9e43c0	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7

Open the chart page →

7,664

kibanawiremind

8.5.23

1 of 2 See more

kibana wiremind 8.5.23

1 of the 2 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
library/kibana :8.18.0	04c0fc150f3a	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm3

Open the chart page →

6,326

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	gnutls28@3.7.9-2+deb12u1	3.7.9-2+deb12u7

Open the chart page →

5,559

rabbitmqwiremind

16.0.17

1 of 1 See more

rabbitmq wiremind 16.0.17

1 of the 1 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/rabbitmq :4.2.2-debian-12-r1	1572e12bc93c	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7

Open the chart page →

2,496

rediswiremind

23.0.6

1 of 1 See more

redis wiremind 23.0.6

1 of the 1 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/bitnami/redis :8.4.0-debian-12-r3	1f0f7ddc4370	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7

Open the chart page →

2,136

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	628f228f0fd5	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

4,063

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
library/mariadb :lts	dd9b303aed4f	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

5,676

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	gnutls28@3.7.3-4ubuntu1.5	3.7.3-4ubuntu1.9

Open the chart page →

14,173

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7

Open the chart page →

11,603

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7

Open the chart page →

7,697

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
hamzaarshad10/querypodpy :1.7	154f38e8668e	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
library/mongo :latest	5211c51171f5	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
murtazashah46/helmfile :latest	4d11726cf803	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7

Open the chart page →

13,783

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	gnutls28@3.8.3-1.1ubuntu3.1	3.8.3-1.1ubuntu3.6

Open the chart page →

2,142

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7

Open the chart page →

2,684

clickhousezloi-space

1.2.0

1 of 3 See more

clickhouse zloi-space 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3

Open the chart page →

9,256

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-42014.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	gnutls28@3.7.3-4ubuntu1.9	no fix listed

Open the chart page →

7,929

Container images carrying it

1,687 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/ondrejsika/counter-frontend :latest	c4166d2eb8eb	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
ghcr.io/opencatalogi/web-app :dev	a1a7f507f6ae	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
ghcr.io/openclaw/openclaw :2026.6.10	af7ea052cf21	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	1
ghcr.io/openclaw/openclaw :2026.5.22	dcfd14877740	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
ghcr.io/openrelik/openrelik-metrics :latest	3d0f1ddeebf5	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	1
ghcr.io/openrelik/openrelik-worker-analyzer-config :latest	1269d3d8d2c2	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-analyzer-logs :latest	b175cc61959a	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-bulkextractor :latest	67498ee2e639	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-capa :latest	71323a4f3fc5	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-chromecreds :latest	76d4fbcc6ff0	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-cloud-logs :latest	a5d7e3cf71d3	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-containers :latest	a6d5abe94706	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-dfindexeddb :latest	31966a825782	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-extraction :latest	ec9fc5864cd5	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-floss :latest	7a331eb83c6a	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-grep :latest	470ff3529746	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-os-creds :latest	7fc7ec101f08	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-plaso :latest	75537ea8c851	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-strings :latest	6e05055b701f	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-timesketch :latest	4cb88b603cdc	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openrelik/openrelik-worker-yara :latest	bd7fbf4505b5	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/open-telemetry/demo :3.0.0-frontend-proxy	1c53bfb59697	gnutls28@3.7.3-4ubuntu1.9	no fix listed	1
ghcr.io/open-telemetry/demo :1.12.0-imageprovider	4e322858fe56	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
ghcr.io/open-telemetry/demo :1.12.0-accountingservice	6d051840bb29	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
ghcr.io/open-telemetry/demo :3.0.0-accounting	74c490f862da	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/open-telemetry/demo :1.12.0-loadgenerator	85c9935ff31b	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
ghcr.io/open-telemetry/demo :1.12.0-quoteservice	87eb325d306f	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
ghcr.io/open-telemetry/demo :1.12.0-frontendproxy	9fdec1be03e4	gnutls28@3.7.3-4ubuntu1.5	3.7.3-4ubuntu1.9	1
ghcr.io/open-telemetry/demo :1.12.0-emailservice	a1f5cebb5240	gnutls28@3.7.9-2+deb12u1	3.7.9-2+deb12u7	1
ghcr.io/open-telemetry/demo :1.12.0-shippingservice	a3ca4c02a5df	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
ghcr.io/open-telemetry/demo :1.12.0-adservice	a59e5eead495	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6	1
ghcr.io/open-telemetry/demo :1.12.0-recommendationservice	b294a4278407	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
ghcr.io/open-telemetry/demo :3.0.0-ad	e6c593fe75eb	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
ghcr.io/openunison/openunison-k8s :1.0.51	128081dae281	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/openunison/openunison-k8s-react :1.0.2	afb3e9282952	gnutls28@3.7.3-4ubuntu1.7	3.7.3-4ubuntu1.9	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm3	1
ghcr.io/pabloromeo/clusterplex_orchestrator :1.4.16	0fe80de2d22c	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
ghcr.io/paperless-ngx/paperless-ngx :2.13.1	0642357c5dbd	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.13	4b05bcd28e69	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.3	57ad9565bff3	gnutls28@3.8.9-3	3.8.9-3+deb13u4	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.5	665f2f5cc548	gnutls28@3.8.9-3	3.8.9-3+deb13u4	1
ghcr.io/paperless-ngx/paperless-ngx :2.0.1	ab255bea133e	gnutls28@3.7.9-2	3.7.9-2+deb12u7	1
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
ghcr.io/paradigmxyz/reth :v1.3.12	1e5290e8b743	gnutls28@3.7.3-4ubuntu1.6	3.7.3-4ubuntu1.9	1
ghcr.io/paradigmxyz/reth :v2.2.0	505fca5e87d6	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	1
ghcr.io/paradigmxyz/reth :latest	68e76b32ad9a	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ghcr.io/parmincloud/haproxy-redis-sentinel :1.0.0	40a00a6456ae	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
ghcr.io/postgresml/pgcat :v1.2.0	627761f6dcbc	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
ghcr.io/privacyengineering/hawk-service :latest	bfedf47bb5e0	gnutls28@3.7.3-4ubuntu1.4	3.7.3-4ubuntu1.9	1