StackRadar

CVE-2026-42015

Medium

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,769
of 17,787 indexed, latest versions
Container images
1,849
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,769 of 17,787 indexed charts deploy, on 1,849 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.4.10-4ubuntu1.3, 3.4.10-4ubuntu1.4, 3.4.10-4ubuntu1.5, 3.4.10-4ubuntu1.7+47 more3.4.10-4ubuntu1.9+esm4, 3.5.18-1ubuntu1.6+esm4, 3.6.13-2ubuntu1.12+esm3, 3.7.3-4ubuntu1.9+6 more1,808
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r03.8.13-r041
OSV records
ALPINE-CVE-2026-42015DEBIAN-CVE-2026-42015UBUNTU-CVE-2026-42015
Also known as
USN-8284-1, USN-8539-1

Charts affected

1,769 by stars
ChartLatestAffected imagesRadar Score
kubesendkubesend0.1.91 of 1See more

kubesend kubesend 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
v3xl/kubesend:0.1.06f62ca96be82
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

1,385
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
apache/iotdb:0.13.3-nodeafa47bf1692a
gnutls28@3.6.13-2ubuntu1.7
3.6.13-2ubuntu1.12+esm3

Open the chart page →

7,749
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

2,668
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

12,477
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3

Open the chart page →

114,025
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
langflowai/langflow-frontend:latest54f67f1961fe
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

4,011
lgtm-stacklgtm-stackVerified publisher0.1.31 of 8See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
grafana/alloy:v1.18.10f4434c92b3e
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

5,614
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

35,058
kube-iptables-tailerlifen-chartsVerified publisher0.2.31 of 1See more

kube-iptables-tailer lifen-charts 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
honestica/kube-iptables-tailer:master-91a393242fb939
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

4,456
litlyxlitlyx0.2.01 of 5See more

litlyx litlyx 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
library/mongo:8.0.11dca8d11fe467
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6

Open the chart page →

7,915
clickhouseliwenhe1.0.11 of 3See more

clickhouse liwenhe 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
yandex/clickhouse-server:19.14ccf9c2b5e3f2
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm4

Open the chart page →

6,766
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

7,216
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

2,763
voice-biometricslumenvox2.0.112 of 26See more

voice-biometrics lumenvox 2.0.1

12 of the 26 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
lumenvox/cloud-assure-identity:2.0.0147854a3c916
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
lumenvox/cloud-audit:2.0.079428add7f38
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
lumenvox/cloud-binary-storage:2.0.053decadc102d
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
lumenvox/cloud-deployment:2.0.0ea8110886d38
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
lumenvox/cloud-management-api:2.0.0b9a23345eabd
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
lumenvox/cloud-voice-verifier:2.0.014170ad34903
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

71,216
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

5,741
magentomagento3.2.32 of 12See more

magento magento 3.2.3

2 of the 12 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
library/mariadb:10.422edfe1c7834
gnutls28@3.6.13-2ubuntu1.11
3.6.13-2ubuntu1.12+esm3
library/rabbitmq:4.1.0-management935b3f84c1e4
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6

Open the chart page →

13,582
mcp-orchestratormagertronVerified publisher3.8.231 of 6See more

mcp-orchestrator magertron 3.8.23

1 of the 6 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
curtismager20/mcp-orchestrator:3.8.231f11a1001dab
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

1,704
maptiler-servermaptilerOfficialVerified publisher1.3.01 of 1See more

maptiler-server maptiler 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
maptiler/server:4.8.07e206140057b
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm3

Open the chart page →

3,014
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
library/mongo:4.2.358b25d51baa1
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm4

Open the chart page →

19,192
mw-kube-agent-v2middleware-labsVerified publisher2.8.61 of 1See more

mw-kube-agent-v2 middleware-labs 2.8.6

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6

Open the chart page →

4,184
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
gnutls28@3.8.9-3ubuntu2
3.8.9-3ubuntu2.2

Open the chart page →

11,108
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

13,763
satisfactorynaj981.1.11 of 1See more

satisfactory naj98 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
wolveix/satisfactory-server:v1.9.1199be1064b18
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.9

Open the chart page →

3,729
clowder2ncsaVerified publisher1.9.75 of 12See more

clowder2 ncsa 1.9.7

5 of the 12 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
bitnamilegacy/os-shell:12-debian-12-r16d24925821dd2
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
clowder/clowder2-backend:2.0.0-beta.411f3d844e4c0
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
clowder/clowder2-heartbeat:2.0.0-beta.414155326c7b9
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
clowder/clowder2-messages:2.0.0-beta.4bf146f1ca24f
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

37,441
helm-composenousefreakVerified publisher0.1.31 of 2See more

helm-compose nousefreak 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
library/mariadb:10.8.2-focal490f01279be1
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3

Open the chart page →

14,324
nginx-s3olopostVerified publisher0.2.11 of 1See more

nginx-s3 olopost 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
ghcr.io/nginxinc/nginx-s3-gateway/nginx-oss-s3-gateway:unprivileged-oss3db8145349a3
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

5,051
opencatalogiopencatalogi1.0.62 of 8See more

opencatalogi opencatalogi 1.0.6

2 of the 8 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
gnutls28@3.7.9-2
3.7.9-2+deb12u7
ghcr.io/opencatalogi/web-app:deva1a7f507f6ae
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

14,862
dhcp-serveropencord1.0.21 of 1See more

dhcp-server opencord 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
networkboot/dhcpd:lateste99bbfbd6fb2
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.9

Open the chart page →

4,205
librechatopenshift1.9.02 of 3See more

librechat openshift 1.9.0

2 of the 3 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
library/mongo:8.0.20098862b1339f
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

5,833
opentelemetry-demoopentelemetry-helmVerified publisher0.41.13 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

3 of the 34 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-frontend-proxy1c53bfb59697
gnutls28@3.7.3-4ubuntu1.9
no fix listed
ghcr.io/open-telemetry/demo:3.0.0-accounting74c490f862da
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
ghcr.io/open-telemetry/demo:3.0.0-ade6c593fe75eb
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6

Open the chart page →

22,678
openvaultopenvaultVerified publisher0.8.11 of 2See more

openvault openvault 0.8.1

1 of the 2 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/ov-wag:v1.1.06df27f944fe8
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

6,899
opikopikOfficialVerified publisher2.2.612 of 13See more

opik opik 2.2.61

2 of the 13 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
library/zookeeper:3.9.4dfa9ba46d14b
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.9
redis/redis-stack-server:7.2.0-v10e44b2b49d059
gnutls28@3.7.3-4ubuntu1.4
3.7.3-4ubuntu1.9

Open the chart page →

14,422
opsopsVerified publisher1.2.02 of 2See more

ops ops 1.2.0

2 of the 2 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
shaowenchen/ops-controller-manager:latest26da43bb5b66
gnutls28@3.7.3-4ubuntu1.9
no fix listed
shaowenchen/ops-server:latest315444f703f4
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.9

Open the chart page →

9,049
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4

Open the chart page →

3,694
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
bitnamilegacy/postgresqldigest-pinned926356130b77
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

8,510
uptime-kumapascaliskeVerified publisher3.0.01 of 1See more

uptime-kuma pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

6,890
fahclientpcktdmp2.6.01 of 2See more

fahclient pcktdmp 2.6.0

1 of the 2 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
foldingathome/fah-gpu:latest5ef7742d1eb4
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm4

Open the chart page →

4,732
spring-boot-api-apppiominVerified publisher0.3.111 of 1See more

spring-boot-api-app piomin 0.3.11

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
piomin/sample-spring-kotlin-microservice:1.1871f784dd6bc
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.9

Open the chart page →

7,616
matomopockostVerified publisher1.3.01 of 3See more

matomo pockost 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
library/mariadb:12.3.3dd9b303aed4f
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

5,102
portraitportraitVerified publisher0.2.132 of 8See more

portrait portrait 0.2.13

2 of the 8 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

31,949
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
library/mariadb:11.7.2fcc7fcd7114a
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6

Open the chart page →

5,483
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
library/neo4j:2026.02.25ab4ab0358cf
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4

Open the chart page →

8,203
pzserverpzserver0.1.171 of 2See more

pzserver pzserver 0.1.17

1 of the 2 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
lis314/project-zomboid-docker:latestaa2089c37920
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

3,022
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

24,038
minecraft-serverqumine0.1.15001 of 1See more

minecraft-server qumine 0.1.1500

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
qumine/minecraft-server:v0.1.15c0b650d51132
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.9

Open the chart page →

6,835
rabbitmqrabbitmq-magefleet1.2.01 of 1See more

rabbitmq rabbitmq-magefleet 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
library/rabbitmq:4.1.0-management935b3f84c1e4
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6

Open the chart page →

2,809
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
gnutls28@3.7.3-4ubuntu1.5
3.7.3-4ubuntu1.9

Open the chart page →

7,466
redis-sentinel-gatewayredis-sentinel-gatewayVerified publisher1.0.21 of 1See more

redis-sentinel-gateway redis-sentinel-gateway 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
promzeus/redis-sentinel-gateway:v182f6d56e280b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

2,665
reportportalreportportal-ioOfficialVerified publisher26.8.122 of 15See more

reportportal reportportal-io 26.8.12

2 of the 15 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.7.23-debian-12-r08935e75fa5d1
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
library/rabbitmq:4.3.4-managementeb5295d08332
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

11,943
resurfaceresurfaceioVerified publisher3.9.01 of 3See more

resurface resurfaceio 3.9.0

1 of the 3 container images this version deploys carry CVE-2026-42015.

Container imageDigestPackageFixed in
resurfaceio/resurface:3.7.84d5cda2f64109
gnutls28@3.7.3-4ubuntu1.6
3.7.3-4ubuntu1.9

Open the chart page →

7,487

Container images carrying it

1,849 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
gnutls28@3.8.9-3+deb13u1
3.8.9-3+deb13u4
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/icegatetech/icegate-ingest:0.1.1bae3c441894a
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/icegatetech/icegate-maintain:0.1.193e85b2b76ee
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/icegatetech/icegate-query:0.1.17542b4e7fff2
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
gnutls28@3.8.9-3
3.8.9-3+deb13u4
1
ghcr.io/interlink-hq/interlink/virtual-kubelet-inttw:latest0e05a7b49c33
gnutls28@3.7.3-4ubuntu1.9
no fix listed
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/it-at-m/appswitcher-server:1.3.010006bc0f309
gnutls28@3.7.3-4ubuntu1.6
3.7.3-4ubuntu1.9
1
ghcr.io/itzg/minecraft-server:latestc1a267d9ed6d
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm4
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/jr0dd/puppeteer:v13.3.26047599cd78e
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/justarchinet/archisteamfarm:6.3.10.107286b8b41a1
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/k8s-at-home/apache-musicindex:v1.4.1-2c9bd82dc5fda
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/emby:v4.6.1.05c6b8f91f1c4
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/haste-server:latest827aa2f2389d
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/jackett:v0.20.13163a4715b46aa2
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/lidarr:v1.0.0.225554ebc1f90963
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/nzbget:v21.1e5571acd10ce
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.9
1
ghcr.io/k8s-at-home/nzbhydra2:v3.14.2ef3670f7e0a8
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/plex:v1.28.0.5999-97678ded3ef756c7d784b
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/qbittorrent:v4.4.261deadd1ec78
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/radarr:v4.1.0.61754273dfaf0295
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.9
1
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/sonarr:v3.0.8.15070eb230e2381a
gnutls28@3.7.3-4ubuntu1
3.7.3-4ubuntu1.9
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/transmission:v3.006011182e3946
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-at-home/xteve:v2.2.0.200292b3614670f
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/k8s-home-lab/wireguard:v1.0.20210914779858b5e11d
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/kamu-data/kamu-api-server:0.89.04ed7a896dd2b
gnutls28@3.6.13-2ubuntu1.12
3.6.13-2ubuntu1.12+esm3
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
gnutls@3.8.8-r0
3.8.13-r0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
gnutls@3.8.8-r0
3.8.13-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.