CVE-2026-45409

Medium

Advisory

Published 19 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 921; of 17,787 indexed, latest versions
Container images: 979; deployed by those charts
Fix available: 4 of 5; affected packages

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Carried by container images the latest versions of 921 of 17,787 indexed charts deploy, on 979 images.

Affected package	Affected versions	Fixed in	Images
idnapypi	2.4, 2.5, 2.6, 2.7+15 more	3.15	942
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 more	no fix listed	108
python-idnadeb	2.6-1, 2.8-1, 2.8-1ubuntu0.1, 3.3-1+3 more	3.3-1ubuntu0.2, 3.6-2ubuntu0.2	69
python-idnarpm	2.5-5.el8, 2.5-7.el8_10, 2.10-7.el9, 2.10-7.el9_4.1+1 more	0:2.5-8.el8_10, 0:2.10-8.el9_8, 0:3.7-6.el10_2	64
py3-pipapk	25.0.1-r0, 25.2-r0, 26.0.1-r1	26.1.2-r1	3

OSV records: CGA-9qj9-xwv6-6g35 CGA-jxvh-c6v2-m7x3 DEBIAN-CVE-2026-45409 GHSA-65pc-fj4g-8rjx RHSA-2026:54290 RHSA-2026:54481 RHSA-2026:54484 RLSA-2026:54481 UBUNTU-CVE-2026-45409
Also known as: CGA-gpf6-q7mq-4ppj, CGA-qfx6-f9w7-v6f4, PYSEC-2026-215, USN-8549-1

Charts affected

921 by stars

Chart

Latest

Affected images

Radar Score

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
wallarm/ingress-python :4.6.0-1	5cb2ae08b40f	idna@2.6	3.15

Open the chart page →

11,444

wallarm-node-nextwallarm

0.5.3

1 of 2 See more

wallarm-node-next wallarm 0.5.3

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :5.0.2-1	097cadc42336	idna@3.7	3.15

Open the chart page →

2,408

wallarm-oobwallarm

0.23.0

1 of 3 See more

wallarm-oob wallarm 0.23.0

1 of the 3 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :6.10.1	aecd88b24c51	idna@3.7	3.15

Open the chart page →

2,824

wasabi-s3-operatorwasabi-s3-operator

0.2.7

1 of 1 See more

wasabi-s3-operator wasabi-s3-operator 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
kenchrcum/wasabi-s3-operator :0.2.7	ce657c622ce5	idna@3.11	3.15

Open the chart page →

629

wazuhwazuh-helm-eks

1.2.10

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	idna@3.7	3.15

Open the chart page →

5,484

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	idna@2.9	3.15

Open the chart page →

11,167

supersetwbstack

0.1.0

1 of 1 See more

6,540

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	idna@3.3	3.15

Open the chart page →

2,671

ambassadorwenerme

6.9.5

1 of 2 See more

4,086

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	idna@3.7	3.15

Open the chart page →

10,857

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	idna@3.3 python-idna@3.3-1+deb12u1	3.15 no fix listed

Open the chart page →

8,824

ceph-csi-cephfswikimedia

0.1.8

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	idna@2.5	3.15

Open the chart page →

10,286

ceph-csi-rbdwikimedia

0.1.13

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	idna@2.5	3.15

Open the chart page →

11,785

docker-hub-rate-limit-exporterwiremind

0.3.0

1 of 1 See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
viadee/docker-hub-rate-limit-exporter :version-1.5	2e27e3b3ee56	idna@2.10	3.15

Open the chart page →

1,843

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	idna@3.4	3.15

Open the chart page →

5,548

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	idna@2.10	3.15

Open the chart page →

2,643

xkopsxkops

0.1.0

2 of 5 See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	idna@3.10	3.15
hamzaarshad10/querypodpy :1.7	154f38e8668e	idna@3.10	3.15

Open the chart page →

13,197

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	idna@3.4	3.15

Open the chart page →

1,838

zerossl-cert-managerzerossl-cert-manager

0.1.0

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	idna@3.10	3.15

Open the chart page →

569

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	idna@3.3	3.15

Open the chart page →

3,118

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	idna@3.3	3.15

Open the chart page →

1,636

Container images carrying it

979 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
louislam/uptime-kuma :2.0.2	4c364ef96aad	idna@3.3 python-idna@3.3-1+deb12u1	3.15 no fix listed	1
louislam/uptime-kuma :2.4.0	91e963bfda56	idna@3.3 python-idna@3.3-1+deb12u1	3.15 no fix listed	1
louislam/uptime-kuma :1.23.13	96510915e6be	idna@2.6	3.15	1
louislam/uptime-kuma :2.0.2-slim-rootless	9865163f92c1	idna@3.3 python-idna@3.3-1+deb12u1	3.15 no fix listed	1
louislam/uptime-kuma :1.17.1	a4eab252e5a2	idna@2.6	3.15	1
louislam/uptime-kuma :1.18.5	a84767d7934f	idna@2.6	3.15	1
louislam/uptime-kuma :1.23.12	bc6f244ecf27	idna@2.6	3.15	1
lsstdm/lsst_alert_packet :tickets-DM-32743	74c97a490940	idna@3.3	3.15	1
lsstsqre/exposurelog :0.8.0	79b00fb67a65	idna@3.3	3.15	1
lsstsqre/kafkaaggregator :master	be1b21060854	idna@2.10	3.15	1
lsstsqre/kafkaconnect :0.9.3	4143c7cd705e	idna@3.3	3.15	1
lsstsqre/narrativelog :0.1.0	ce01de04ce21	idna@3.3	3.15	1
lsstsqre/nublado2 :2.0.1	b75bf8aaafa4	idna@3.3 python-pip@20.0.2-5ubuntu1.6	3.15 no fix listed	1
lsstsqre/prepuller :latest	19c2dfc4e4ff	idna@2.10	3.15	1
lsstsqre/sciplat-hub :latest	5e0ade6bed1c	idna@2.10	3.15	1
lsstsqre/squash-api :0.5.3	4879415ec6ac	idna@2.10	3.15	1
lsstsqre/strimzi-registry-operator :0.4.1	e139fde946d7	idna@3.3	3.15	1
lsstsqre/wfdispatcher :latest	e9feb99f524d	idna@2.10	3.15	1
makersquad/harp-proxy :0.8.1	a40dd258c527	idna@3.3 python-idna@3.3-1+deb12u1	3.15 no fix listed	1
marcoimme/oidcmock :latest	b6035c0721a8	idna@3.11	3.15	1
matrixdotorg/synapse :v1.127.1	c3c4a9de2a0b	idna@3.10	3.15	1
matrixdotorg/synapse :v1.53.0	cb89c0f17ba1	idna@3.3	3.15	1
matrixdotorg/synapse :v1.78.0	def97fd537d8	idna@3.4	3.15	1
mawad98/backstage-pyactions :demo	99422c56a274	idna@3.11	3.15	1
mediagis/nominatim :5.3.2	7923a8e67197	idna@3.6 python-idna@3.6-2ubuntu0.1 python-pip@24.0+dfsg-1ubuntu1.3	3.15 3.6-2ubuntu0.2 no fix listed	1
mediagis/nominatim :3.7	c15e941485ef	idna@3.3 python-pip@20.0.2-5ubuntu1.6	3.15 no fix listed	1
mediagis/nominatim :4.2	d0eae7b51374	idna@3.6 python-pip@22.0.2+dfsg-1ubuntu0.4	3.15 no fix listed	1
memgraph/mcp-memgraph :0.1.13	ecdf7faea3f7	idna@3.14	3.15	1
milesmcc/shynet :v0.13.1	ba54f7797a6b	idna@3.3	3.15	1
milesmcc/shynet :v0.12.0	e821e31140f7	idna@3.3	3.15	1
mindsdb/mindsdb :latest	163011c09299	idna@3.12	3.15	1
mintproject/data-catalog :9be70359feabe03ed55bfdbf92c20a7e43ab928b	67d2f2103085	idna@2.10	3.15	1
mintproject/model-catalog-fastapi :7dd88dc5bf1fe6a6d4703ea0a077afee45cb2561	02260d20a21f	idna@3.4	3.15	1
mondata/mlflow :v2.3.0.s3.gc	6f94c6caf8bf	idna@3.4	3.15	1
moonrailgun/tianji :1.11.2	b528c8f8fcc4	idna@3.7	3.15	1
moreillon/face-recognition-fastapi :x86	bacb2ddd8394	idna@3.3	3.15	1
mozilla/syncserver :latest	016162bf39d8	idna@2.8	3.15	1
mozilla/syncstorage-rs :0.15.8	93752877dced	idna@3.7	3.15	1
mshanley80/httpbin2022 :latest	5b189a70c0fb	python-pip@20.0.2-5ubuntu1.6	no fix listed	1
mvitale1989/docker-taiga :20191031-4.2.14	1504ccda06df	idna@2.8	3.15	1
nathanielvarona/pritunl-slack-app :0.1.10	b746a34e5597	idna@3.7	3.15	1
ncsapolyglot/converters-ebook-convert :latest	438d82cdbdb5	idna@2.6	3.15	1
neilpeterson/chart-tweet :latest	64fd8dab075f	idna@2.6	3.15	1
neilpeterson/get-tweet :v2	8b645ac1a23e	idna@2.6	3.15	1
neilpeterson/osba-container-instances-demo :latest	6527b05d5d03	idna@2.6	3.15	1
neilpeterson/osba-storage-demo :latest	29d229ab446e	idna@2.6	3.15	1
neilpeterson/osba-text-analytics-demo :latest	969af3cb8466	idna@2.6	3.15	1
neilpeterson/process-tweet :latest	39ce9f92e899	idna@2.6	3.15	1
netbirdio/dashboard :v2.22.2	15a3aab9a345	idna@3.2	3.15	1
netbirdio/dashboard :v2.90.10	1b59e1c905c9	idna@3.2	3.15	1