StackRadarChart IndexLive demo

CVE-2026-43869

High

Advisory

Published 5 May 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.3; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 80; of 17,781 indexed, latest versions
Container images: 62; deployed by those charts
Fix available: 1 of 1; affected package

Apache Thrift has an Improper Validation of Certificate with Host Mismatch Vulnerability

Carried by container images the latest versions of 80 of 17,781 indexed charts deploy, on 62 images.

Affected package	Affected versions	Fixed in	Images
libthriftmaven	0.9.0, 0.9.1, 0.9.2, 0.9.3+10 more	0.23.0	62

OSV records: GHSA-7pwc-h2j2-rjgj
Also known as: BIT-thrift-2026-43869

Charts affected

80 by stars

Chart

Latest

Affected images

Radar Score

opentsdbgradiant-bigdata

1 of 6 See more

opentsdb gradiant-bigdata 0.1.7

1 of the 6 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
gradiant/hbase-base :2.0.1	a1ee6de94c04	libthrift@0.9.3	0.23.0

Open the chart page →

17,511

spark-standalonegradiant-bigdata

1 of 2 See more

spark-standalone gradiant-bigdata 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
gradiant/spark :2.4.4-python-alpine	97657d56e927	libthrift@0.9.3	0.23.0

Open the chart page →

6,147

gravitino-iceberg-rest-server-helmgravitino-iceberg-rest-server

1 of 1 See more

gravitino-iceberg-rest-server-helm gravitino-iceberg-rest-server 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
apache/gravitino-iceberg-rest :1.3.0	80136ae753ee	libthrift@0.12.0	0.23.0

Open the chart page →

4,556

hbasehbase

1 of 4 See more

hbase hbase 0.1.7

1 of the 4 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
ghcr.io/fleeksoft/hbase/hbase-base :2.4.13.2	c144bdd688d7	libthrift@0.14.1	0.23.0

Open the chart page →

10,540

ckanhelmforge

1 of 6 See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
ckan/ckan-solr :2.11-solr9	ef8e5d3e6be1	libthrift@0.15.0	0.23.0

Open the chart page →

9,920

druidhelmforge

1 of 4 See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
apache/druid :37.0.0	0116fb802786	libthrift@0.13.0	0.23.0

Open the chart page →

8,541

skywalking-v1huangchengwu-helm-chart

1 of 4 See more

skywalking-v1 huangchengwu-helm-chart 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
apache/skywalking-oap-server :8.9.1	b4ec8c18d079	libthrift@0.14.1	0.23.0

Open the chart page →

20,650

ikigaiikigai-chart

1 of 58 See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
dremio/dremio-oss :24.1.0	80ed2e3b7c43	libthrift@0.13.0	0.23.0

Open the chart page →

37,671

openrefineinseefrlab

1 of 1 See more

openrefine inseefrlab 3.5.0

1 of the 1 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
easypi/openrefine :3.7.0	d2950a36a576	libthrift@0.16.0	0.23.0

Open the chart page →

1,754

MINTmint

1 of 15 See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
mintproject/model-catalog-endpoint :29256555a6fbaefae4729d5cd259564708a4ab04	ffbb13f20465	libthrift@0.10.0	0.23.0

Open the chart page →

43,341

dependency-tracknovum-rgi-charts

1 of 2 See more

dependency-track novum-rgi-charts 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
owasp/dependency-track :3.8.0	efc65e702ee1	libthrift@0.13.0	0.23.0

Open the chart page →

3,633

hive-metastoreolehrgf

1 of 1 See more

hive-metastore olehrgf 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	libthrift@0.9.3	0.23.0

Open the chart page →

8,540

comacopencord

1 of 9 See more

comac opencord 1.0.0

1 of the 9 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
omecproject/onos-progran :1.0.0	5715e5648aa0	libthrift@0.9.3	0.23.0

Open the chart page →

88,546

omec-control-planeopencord

2 of 8 See more

omec-control-plane opencord 0.1.31

2 of the 8 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
library/cassandra :2.1.20	cb079c0d7a57	libthrift@0.9.2	0.23.0
omecproject/c3po-hssdb :master-latest	28a90cc26716	libthrift@0.9.2	0.23.0

Open the chart page →

40,715

onos-progranopencord

1 of 2 See more

onos-progran opencord 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
muluder/prograncontrollermcord :0.1.8	43b597a93da7	libthrift@0.9.3	0.23.0

Open the chart page →

38,865

hive-metastorepresto-loadbalancer

1 of 1 See more

hive-metastore presto-loadbalancer 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
datappeal/hive-metastore :latest	e38c085a3567	libthrift@0.9.3	0.23.0

Open the chart page →

9,606

rada-platformrada-platform

1 of 7 See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
trinodb/trino :450	38c6f24ab1a4	libthrift@0.20.0	0.23.0

Open the chart page →

21,211

archivaslamdev

1 of 2 See more

archiva slamdev 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
xetusoss/archiva :v2.2.5	88f25242b9ee	libthrift@0.9.1	0.23.0

Open the chart page →

6,907

atlassian-confluencesomeblackmagic

1 of 1 See more

atlassian-confluence someblackmagic 3.4.1

1 of the 1 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
atlassian/confluence-server :7.10.0	3b9222ab32ef	libthrift@0.9.0	0.23.0

Open the chart page →

13,605

fdi-dotstatsuite-sfs-solrstatcan

1 of 4 See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
library/solr :8.11.1	8c5f7881cebb	libthrift@0.14.1	0.23.0

Open the chart page →

6,065

solrstatcan

1 of 3 See more

solr statcan 1.5.10

1 of the 3 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
library/solr :8.11.1	8c5f7881cebb	libthrift@0.14.1	0.23.0

Open the chart page →

8,806

trinostatcan

1 of 2 See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
trinodb/trino :405	ee80ab5eeab2	libthrift@0.9.3-1	0.23.0

Open the chart page →

13,767

sn-consolestreamnative

1 of 1 See more

sn-console streamnative 1.13.0

1 of the 1 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
streamnative/private-cloud-console :v2.3.27-all	91e54375e154	libthrift@0.14.2	0.23.0

Open the chart page →

1,827

1 of 1 See more

zipkin-gcp t3n 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
openzipkin/zipkin-gcp :0.15.2	b5d51d1144e2	libthrift@0.12.0	0.23.0

Open the chart page →

4,538

temporaltemporal

1 of 13 See more

temporal temporal 0.28.9

1 of the 13 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
library/cassandra :3.11.3	ce85468c5bad	libthrift@0.9.2	0.23.0

Open the chart page →

21,005

queryservicewbstack

1 of 1 See more

queryservice wbstack 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
ghcr.io/wbstack/queryservice :0.3.6_0.6	b83b5b81d4b6	libthrift@0.10.0	0.23.0

Open the chart page →

4,649

drillwearefrank

1 of 3 See more

drill wearefrank 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
apache/drill :1.21.1	1f96558fd292	libthrift@0.14.0	0.23.0

Open the chart page →

9,397

webhookie-allwebhookie

1 of 3 See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	libthrift@0.13.0	0.23.0

Open the chart page →

28,605

cadencewenerme

1 of 5 See more

cadence wenerme 0.23.0

1 of the 5 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
library/cassandra :3.11.3	ce85468c5bad	libthrift@0.9.2	0.23.0

Open the chart page →

10,127

temporalwenerme

1 of 13 See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2026-43869.

Container image	Digest	Package	Fixed in
library/cassandra :3.11.3	ce85468c5bad	libthrift@0.9.2	0.23.0

Open the chart page →

22,665

Container images carrying it

62 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
snowplow/scala-stream-collector-pubsub :2.2.0	41d318841516	libthrift@0.13.0	0.23.0	1
sslhep/hive-metastore :3.1.3	9e80af083079	libthrift@0.9.3	0.23.0	1
streamnative/private-cloud-console :v2.3.27-all	91e54375e154	libthrift@0.14.2	0.23.0	1
trinodb/trino :450	38c6f24ab1a4	libthrift@0.20.0	0.23.0	1
trinodb/trino :405	ee80ab5eeab2	libthrift@0.9.3-1	0.23.0	1
xetusoss/archiva :v2.2.5	88f25242b9ee	libthrift@0.9.1	0.23.0	1
ghcr.io/fleeksoft/hbase/hbase-base :2.4.13.2	c144bdd688d7	libthrift@0.14.1	0.23.0	1
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	libthrift@0.12.0	0.23.0	1
ghcr.io/melodyyangaws/hive-metastore :3.0.0	e949b0f733f0	libthrift@0.9.3	0.23.0	1
ghcr.io/wbstack/queryservice :0.3.6_0.6	b83b5b81d4b6	libthrift@0.10.0	0.23.0	1
public.ecr.aws/v0r6c2e2/hive-metastore :latest	794b3bff9510	libthrift@0.9.3	0.23.0	1
quay.io/keycloak/keycloak :14.0.0	3029dc0f1d38	libthrift@0.13.0	0.23.0	1