StackRadar

CVE-2026-44431

High

Advisory

Published 11 May 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.003
26th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,035
of 17,787 indexed, latest versions
Container images
974
deployed by those charts
Fix available
4 of 5
affected packages

Red Hat Security Advisory: python-urllib3 security update

Carried by container images the latest versions of 1,035 of 17,787 indexed charts deploy, on 974 images.

Affected packageAffected versionsFixed inImages
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r126.1.2-r13
python-urllib3rpm1.24.2-4.el8, 1.24.2-5.el8, 1.24.2-5.el8_6.1, 1.24.2-5.el8_9.2+2 more0:1.24.2-10.el8_1043
urllib3pypi1.23, 1.24, 1.24.1, 1.24.2+47 more2.7.0917
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 moreno fix listed108
python-urllib3deb1.7.1-1build1, 1.7.1-1ubuntu4, 1.13.1-2ubuntu0.16.04.1, 1.13.1-2ubuntu0.16.04.2+14 more1.26.5-1~exp1ubuntu0.7, 1.26.12-1+deb12u4, 2.0.7-1ubuntu0.7, 2.3.0-3+deb13u265
OSV records
CGA-36hp-r4x4-75wjCGA-m6w2-x26r-3r44DEBIAN-CVE-2026-44431GHSA-qccp-gfcp-xxvcRHSA-2026:36732UBUNTU-CVE-2026-44431
Also known as
CGA-r2h3-92r9-9fw6, CGA-rw9r-pxcj-mmj5, PYSEC-2026-141, USN-8379-1

Charts affected

1,035 by stars
ChartLatestAffected imagesRadar Score
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
urllib3@1.26.7
2.7.0

Open the chart page →

10,101
openapiassist-iot-open-api-management0.2.21 of 6See more

openapi assist-iot-open-api-management 0.2.2

1 of the 6 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
assistiot/open_api_backend:1.1.230812ba93555
python-pip@22.0.2+dfsg-1ubuntu0.4
urllib3@2.1.0
no fix listed
2.7.0

Open the chart page →

18,331
resource-provisioningassist-iot-resource-provisioning1.0.03 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

3 of the 7 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
assistiot/resource-provisioning_api:1.0.044a37b00d4f8
urllib3@1.26.18
2.7.0
assistiot/resource-provisioning_im:1.0.0a942dc14030a
urllib3@1.26.18
2.7.0
assistiot/resource-provisioning_prc:1.0.08b5d118bdf0e
urllib3@1.26.16
2.7.0

Open the chart page →

8,042
smartorchestratorassist-iot-smart-orchestrator4.0.03 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

3 of the 14 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
urllib3@2.2.1
2.7.0
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
urllib3@2.2.1
2.7.0
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
urllib3@1.26.18
2.7.0

Open the chart page →

42,460
traffic-classificationassist-iot-traffic-classification2.0.01 of 2See more

traffic-classification assist-iot-traffic-classification 2.0.0

1 of the 2 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
assistiot/traffic-classification_api:2.0.0e32b87786142
urllib3@1.26.18
2.7.0

Open the chart page →

1,165
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
python-pip@20.0.2-5ubuntu1.8
python-urllib3@1.25.8-2ubuntu0.2
urllib3@1.25.8
no fix listed
no fix listed
2.7.0

Open the chart page →

13,986
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
python-urllib3@1.26.5-1~exp1
urllib3@1.26.5
1.26.5-1~exp1ubuntu0.7
2.7.0

Open the chart page →

31,807
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
urllib3@2.0.7
2.7.0

Open the chart page →

8,555
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
urllib3@1.26.7
2.7.0

Open the chart page →

5,507
botkubeaveshaVerified publisher1.0.01 of 2See more

botkube avesha 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
ghcr.io/kubeshop/k8s-sidecar:ignore-initial-events7f583a36a764
urllib3@1.26.12
2.7.0

Open the chart page →

5,074
aws-ecr-credentialaws-ecr-credentialVerified publisher1.5.21 of 1See more

aws-ecr-credential aws-ecr-credential 1.5.2

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
architectminds/aws-kubectl:1.19735e59a1085
urllib3@1.25.3
2.7.0

Open the chart page →

1,437
ecr-exporteraws-exportersVerified publisher0.2.41 of 1See more

ecr-exporter aws-exporters 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
ghcr.io/aws-exporters/prometheus-ecr-exporter:0.1.442b0c87470d6
urllib3@1.26.7
2.7.0

Open the chart page →

1,622
inspector-exporteraws-exportersVerified publisher0.0.21 of 1See more

inspector-exporter aws-exporters 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
ghcr.io/aws-exporters/prometheus-inspector-exporter:0.0.29c7c11293b3c
urllib3@1.26.7
2.7.0

Open the chart page →

1,622
aws-secrets-synchronizeraws-secrets-synchronizer0.2.11 of 1See more

aws-secrets-synchronizer aws-secrets-synchronizer 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
ghcr.io/reezogit/aws-secrets-synchronizer:0.2.1111ed7cf7b39
urllib3@1.26.18
2.7.0

Open the chart page →

955
axosyslog-collectoraxosyslogVerified publisher0.8.11 of 1See more

axosyslog-collector axosyslog 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
ghcr.io/axoflow/axosyslog:4.5.0aa7831e207cd
urllib3@1.26.18
2.7.0

Open the chart page →

1,515
azure-advanced-backupazure-advanced-backup0.4.11 of 1See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
urllib3@1.26.7
2.7.0

Open the chart page →

4,568
azure-app-exporterazure-app-exporterVerified publisher0.4.21 of 2See more

azure-app-exporter azure-app-exporter 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
urllib3@2.2.2
2.7.0

Open the chart page →

1,790
azurefile-csi-driverazurefile-csi-driverVerified publisher1.35.71 of 7See more

azurefile-csi-driver azurefile-csi-driver 1.35.7

1 of the 7 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.76e43ba0bd009
urllib3@2.0.7
2.7.0

Open the chart page →

1,112
ambassadorazureorkestra6.7.91 of 2See more

ambassador azureorkestra 6.7.9

1 of the 2 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
datawire/aes:1.13.62beb65062c8b
urllib3@1.26.3
2.7.0

Open the chart page →

5,521
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
urllib3@2.6.3
2.7.0

Open the chart page →

2,750
pvc-exporterbalihb-pvc-exporterVerified publisher0.2.41 of 2See more

pvc-exporter balihb-pvc-exporter 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
balihb/pod-pvc-mapping:0.2.4ee48e79f5d76
urllib3@1.26.8
2.7.0

Open the chart page →

2,765
bookinfobasictechno0.1.01 of 6See more

bookinfo basictechno 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.17.06668bcf42ef0
urllib3@1.26.5
2.7.0

Open the chart page →

20,785
helm-samplebehnambm-helm-chart1.0.11 of 3See more

helm-sample behnambm-helm-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
urllib3@2.6.3
2.7.0

Open the chart page →

2,738
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
urllib3@2.6.3
2.7.0

Open the chart page →

20,233
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
python-pip@20.0.2-5ubuntu1.6
no fix listed

Open the chart page →

8,004
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
python-pip@9.0.1-2.3~ubuntu1.18.04.5
urllib3@1.26.5
no fix listed
2.7.0

Open the chart page →

22,916
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
urllib3@1.26.18
2.7.0

Open the chart page →

10,171
istio-bookinfobookinfo1.2.21 of 6See more

istio-bookinfo bookinfo 1.2.2

1 of the 6 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.15.00a5eb4795952
urllib3@1.24.2
2.7.0

Open the chart page →

18,998
jenkinsbook-k8sinfra-v25.1.121 of 2See more

jenkins book-k8sinfra-v2 5.1.12

1 of the 2 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.26.2e271016441af
urllib3@2.2.1
2.7.0

Open the chart page →

7,627
kube-prometheus-stackbook-k8sinfra-v265.5.11 of 6See more

kube-prometheus-stack book-k8sinfra-v2 65.5.1

1 of the 6 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.28.04166a019eeaf
urllib3@2.2.3
2.7.0

Open the chart page →

6,035
puppetboardbootcVerified publisher0.1.41 of 1See more

puppetboard bootc 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
bootc/puppetboard:1.1.0f1383295e7be
urllib3@1.25.8
2.7.0

Open the chart page →

1,292
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
urllib3@2.6.3
2.7.0

Open the chart page →

20,233
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
urllib3@2.6.3
2.7.0

Open the chart page →

20,233
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
urllib3@2.6.3
2.7.0

Open the chart page →

20,233
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
urllib3@1.25.7
2.7.0

Open the chart page →

2,018
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
urllib3@1.25.9
2.7.0

Open the chart page →

2,505
frigatebryopsida0.2.11 of 2See more

frigate bryopsida 0.2.1

1 of the 2 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.11.18330b0a265b8
urllib3@1.26.12
2.7.0

Open the chart page →

2,573
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
urllib3@2.6.3
2.7.0

Open the chart page →

20,233
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
urllib3@1.26.15
2.7.0

Open the chart page →

2,507
bucket-clonercamptocamp31.0.41 of 1See more

bucket-cloner camptocamp3 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
camptocamp/bucket-cloner:latestacfafc308d88
urllib3@1.26.6
2.7.0

Open the chart page →

4,518
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
urllib3@1.25.8
2.7.0

Open the chart page →

3,891
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
urllib3@1.24.1
2.7.0

Open the chart page →

2,813
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
urllib3@1.24.1
2.7.0

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
urllib3@1.24.1
2.7.0

Open the chart page →

1,310
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
urllib3@2.3.0
2.7.0

Open the chart page →

10,318
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
urllib3@2.6.3
2.7.0

Open the chart page →

20,233
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
urllib3@2.6.3
2.7.0

Open the chart page →

20,233
castai-hibernatecastaiVerified publisher0.2.121 of 1See more

castai-hibernate castai 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
castai/hibernate:v0.14da62858c8381
urllib3@2.6.3
2.7.0

Open the chart page →

1,158
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
urllib3@2.3.0
2.7.0

Open the chart page →

14,865
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-44431.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
urllib3@2.2.3
2.7.0

Open the chart page →

14,964

Container images carrying it

974 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/ortelius/ms-dep-pkg-cud:main-v10.0.1670-g9abe110c0c881b509a
urllib3@2.6.2
2.7.0
1
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
urllib3@2.6.2
2.7.0
1
quay.io/ortelius/ms-sbom-export:main-v10.0.933-g2e222ef43bdaa51598
urllib3@2.6.2
2.7.0
1
quay.io/ortelius/ms-scorecard:main-v10.0.1276-g966a8a43337e52fdd4
urllib3@2.6.2
2.7.0
1
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
urllib3@2.6.2
2.7.0
1
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
urllib3@2.6.2
2.7.0
1
quay.io/redhat-ai-dev/chatbot:latest59fe607dfdf2
urllib3@2.2.1
2.7.0
1
quay.io/redhat-appstudio/appstudio-utils:dbbdd82734232e6289e8fbae5b4c858481a7c0577b4202c25b67
urllib3@1.26.5
2.7.0
1
quay.io/rhdh/rhdh-hub-rhel9:latest0b26358f5793
urllib3@2.2.2
2.7.0
1
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
python-urllib3@1.24.2-5.el8
urllib3@1.24.2
0:1.24.2-10.el8_10
2.7.0
1
quay.io/stackgres/operator:1.19.1f241b0b20326
urllib3@2.2.3
2.7.0
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
python-pip@24.0+dfsg-1ubuntu1.3
no fix listed
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
urllib3@2.6.3
2.7.0
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/mongodb:4.4.5cf72810d33f5
python-urllib3@1.24.2-5.el8
urllib3@1.24.2
0:1.24.2-10.el8_10
2.7.0
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
python-pip@20.0.2-5ubuntu1.1
no fix listed
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
urllib3@1.26.7
2.7.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
urllib3@1.26.7
2.7.0
1
registry.gitlab.com/radiology/infrastructure/study-governor:8.0.04e7faf6f8d5f
urllib3@2.1.0
2.7.0
1
registry.gitlab.com/xrow-public/ci-tools/tools:main9b9d1ed86b6a
urllib3@1.26.19
2.7.0
1
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
urllib3@1.26.5
2.7.0
1
registry.gitlab.com/xrow-public/helm-mssql/mssql:1.10.3f923d842bc47
urllib3@1.26.19
2.7.0
1
registry.gitlab.com/xrow-public/helm-openclaw/openclaw:1.91.3ed44d81a65de
urllib3@1.26.19
2.7.0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
urllib3@2.6.2
2.7.0
1
registry.gitlab.com/xrow-public/velero-client/velero-client:1.4.203015f863a3e
urllib3@1.26.19
2.7.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.