CVE-2026-45409

Medium

Advisory

Published 19 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 914; of 17,781 indexed, latest versions
Container images: 972; deployed by those charts
Fix available: 4 of 5; affected packages

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Carried by container images the latest versions of 914 of 17,781 indexed charts deploy, on 972 images.

Affected package	Affected versions	Fixed in	Images
idnapypi	2.4, 2.5, 2.6, 2.7+15 more	3.15	936
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+22 more	no fix listed	107
python-idnadeb	2.6-1, 2.8-1, 2.8-1ubuntu0.1, 3.3-1+3 more	3.3-1ubuntu0.2, 3.6-2ubuntu0.2	69
python-idnarpm	2.5-5.el8, 2.5-7.el8_10, 2.10-7.el9, 2.10-7.el9_4.1+1 more	0:2.5-8.el8_10, 0:2.10-8.el9_8, 0:3.7-6.el10_2	64
py3-pipapk	25.0.1-r0, 25.2-r0, 26.0.1-r1	26.1.2-r1	3

OSV records: CGA-9qj9-xwv6-6g35 CGA-jxvh-c6v2-m7x3 DEBIAN-CVE-2026-45409 GHSA-65pc-fj4g-8rjx RHSA-2026:54290 RHSA-2026:54481 RHSA-2026:54484 RLSA-2026:54481 UBUNTU-CVE-2026-45409
Also known as: CGA-gpf6-q7mq-4ppj, CGA-qfx6-f9w7-v6f4, PYSEC-2026-215, USN-8549-1

Charts affected

914 by stars

Chart

Latest

Affected images

Radar Score

jx-app-anchorejenkins-x

0.0.4

1 of 2 See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
anchore/anchore-engine :v0.7.1	ed9b3badd17c	idna@2.9	3.15

Open the chart page →

9,854

jx-app-datadogjenkins-x

0.0.10

1 of 2 See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
datadog/agent :6	aad9994de6a7	idna@2.10	3.15

Open the chart page →

3,999

homebridgejespernohr

0.2.0

1 of 1 See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
homebridge/homebridge :latest	77c685a40911	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed

Open the chart page →

2,149

shynetjuniorjpdj

0.1.30

1 of 1 See more

shynet juniorjpdj 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
milesmcc/shynet :v0.13.1	ba54f7797a6b	idna@3.3	3.15

Open the chart page →

2,581

bazarrk8s-home-lab-repo

11.3.2

1 of 1 See more

bazarr k8s-home-lab-repo 11.3.2

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/bazarr :1.5.6	80cb090162b4	idna@3.10	3.15

Open the chart page →

1,794

beetsk8s-home-lab-repo

3.1.1

1 of 1 See more

beets k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
ghcr.io/home-operations/beets :2.3.1	cc4975f1a0be	idna@3.10	3.15

Open the chart page →

2,733

frigatek8s-home-lab-repo

9.1.1

1 of 1 See more

frigate k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
blakeblackshear/frigate :0.11.1	8330b0a265b8	idna@3.4	3.15

Open the chart page →

2,370

paperlessk8s-home-lab-repo

11.0.1

1 of 1 See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
ghcr.io/paperless-ngx/paperless-ngx :2.20.14	b89f83345532	idna@3.10	3.15

Open the chart page →

9,103

youtubedl-materialk8s-home-lab-repo

5.1.1

1 of 1 See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
tzahi12345/youtubedl-material :4.3.2	2f943d584711	python-pip@22.0.2+dfsg-1ubuntu0.2	no fix listed

Open the chart page →

9,783

netio-exporterk8sonlab

0.1.10

1 of 1 See more

netio-exporter k8sonlab 0.1.10

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
tomsajan/netio-exporter :0.0.5	fb61907707b8	idna@3.7	3.15

Open the chart page →

729

authentikkagiso-me

0.1.1

1 of 1 See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
ghcr.io/goauthentik/server :2026.2.1	46a71d75dfd3	idna@3.11	3.15

Open the chart page →

4,568

karbkarb

1.0.3

1 of 1 See more

625

karb-chartkarb

1.0.6

1 of 1 See more

625

music-assistantkarljorgensen

0.1.3

1 of 1 See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
ghcr.io/music-assistant/server :2.8.7	eef3ee7810d0	idna@3.13	3.15

Open the chart page →

7,081

huekatool

1.0.8

1 of 1 See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
gethue/hue :4.11.0	11b649636e68	idna@3.4 python-pip@20.0.2-5ubuntu1.6	3.15 no fix listed

Open the chart page →

16,417

mlflowkelvins

0.4.0

1 of 3 See more

4,156

allurekfirfer

0.1.8

1 of 2 See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	idna@2.10 python-pip@9.0.1-2.3~ubuntu1.18.04.6	3.15 no fix listed

Open the chart page →

12,527

elastalert2kfirfer

2.2.5

1 of 1 See more

elastalert2 kfirfer 2.2.5

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
jertel/elastalert2 :2.2.3	4dcc0ef93efc	idna@3.3	3.15

Open the chart page →

1,598

elasticsearch-cacherkfirfer

0.0.2

1 of 1 See more

elasticsearch-cacher kfirfer 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
kfirfer/elasticsearch-cacher :0.0.1	cf81d0959256	idna@3.10	3.15

Open the chart page →

679

home-assistantkfirfer

0.5.4

1 of 1 See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
homeassistant/home-assistant :2023.10.3	021e2afc6e57	idna@3.4	3.15

Open the chart page →

6,447

kibana-index-pattern-updaterkfirfer

0.0.3

1 of 1 See more

kibana-index-pattern-updater kfirfer 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
kfirfer/kibana-index-pattern-updater :1.0.12	e88cfcec5c93	idna@2.10	3.15

Open the chart page →

3,357

kube-hunterkfirfer

1.0.5

1 of 1 See more

kube-hunter kfirfer 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
aquasec/kube-hunter :0.6.8	e64fe49f059f	idna@3.3	3.15

Open the chart page →

997

scriptskfirfer

0.1.36

1 of 1 See more

2,320

slackgptkfirfer

0.0.6

1 of 1 See more

1,126

graphiti-mcpkiberonlabs

0.1.2

1 of 1 See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
zepai/knowledge-graph-mcp :v0.2.1	6ab0ee79926b	idna@3.10	3.15

Open the chart page →

3,393

kovi-appkovi-charts

0.8.1

1 of 1 See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
kennethreitz/httpbin :latest	599fe5e50731	idna@2.6 python-idna@2.6-1 python-pip@9.0.1-2.3~ubuntu1	3.15 no fix listed no fix listed

Open the chart page →

14,813

kubeflowkromanow94-kubeflow

0.5.1

5 of 30 See more

kubeflow kromanow94-kubeflow 0.5.1

5 of the 30 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
kserve/models-web-app :v0.13.0	73486345a602	idna@3.7	3.15
kubeflownotebookswg/jupyter-web-app :v1.9.2	afb52057c997	idna@3.10	3.15
kubeflownotebookswg/tensorboards-web-app :v1.9.2	77f07f52a84a	idna@3.10	3.15
kubeflownotebookswg/volumes-web-app :v1.9.2	f63c3e550af3	idna@3.10	3.15
gcr.io/ml-pipeline/metadata-writer :2.3.0	9bcfd2abc361	idna@3.4	3.15

Open the chart page →

70,530

lnbitskronkltd

0.1.0

1 of 1 See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
lnbitsdocker/lnbits-legend :latest	26fae6327477	idna@3.6	3.15

Open the chart page →

1,444

mindsdbkronkltd

0.1.0

1 of 1 See more

9,620

specter-desktopkronkltd

0.1.0

1 of 1 See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
lncm/specter-desktop :v0.10.4	bca14d04397d	idna@2.10	3.15

Open the chart page →

1,850

pavkrzwiatrzyk

0.0.3

1 of 1 See more

1,132

aperagkubeblocks

0.0.0-nightly

1 of 3 See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
apecloud/aperag :v0.0.0-nightly	8ac9947a2c84	idna@3.10	3.15

Open the chart page →

8,405

jupyterhubkubeblocks

0.1.0

2 of 7 See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
jupyterhub/k8s-hub :3.0.1-0.dev.git.6287.hbfb05cd6	5a0ceed1300a	idna@3.4	3.15
jupyterhub/k8s-singleuser-sample :3.0.1-0.dev.git.6287.hbfb05cd6	8e4778efec8e	idna@3.4	3.15

Open the chart page →

7,356

lokikubeblocks

5.39.0

1 of 5 See more

loki kubeblocks 5.39.0

1 of the 5 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
kiwigrid/k8s-sidecar :1.24.3	5af76eebbba7	idna@3.4	3.15

Open the chart page →

5,841

smartfs-csi-driverkubeblocks

0.1.2

1 of 6 See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
apecloud/smartfs-csi-driver :0.1.1	ff2858eab9cc	idna@2.5 python-idna@2.5-5.el8	3.15 0:2.5-8.el8_10

Open the chart page →

9,249

kube-infokube-info

0.1.0

1 of 1 See more

kube-info kube-info 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
andreymileshin/kube-info :v0.1.0	f7b300bc9e66	idna@3.10	3.15

Open the chart page →

519

kube-janitorkube-janitor

0.3.3

1 of 1 See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
hjacobs/kube-janitor :23.7.0	fbb303ed463c	idna@3.4	3.15

Open the chart page →

4,293

kube-pod-alertskube-pod-alerts

0.1.8

1 of 1 See more

kube-pod-alerts kube-pod-alerts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
tussanakorndev/kube-pod-alerts :1.0.5	216fdadadf9a	idna@3.11	3.15

Open the chart page →

1,627

flaresolverrkubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
ghcr.io/flaresolverr/flaresolverr :v3.4.6	7962759d99d7	idna@3.11	3.15

Open the chart page →

33,583

pve-exporterkubernetes-homelab-helm-charts

0.1.0

1 of 1 See more

pve-exporter kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
prompve/prometheus-pve-exporter :3.8.2	e3d501a82df5	idna@3.7	3.15

Open the chart page →

994

uptime-kumakubernetes-homelab-helm-charts

0.1.2

1 of 1 See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.2.1-slim	059b49d64739	idna@3.3 python-idna@3.3-1+deb12u1	3.15 no fix listed

Open the chart page →

6,356

deepflowkubesphere-stable

6.2.606

1 of 8 See more

deepflow kubesphere-stable 6.2.606

1 of the 8 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
deepflowce/deepflow-app :v6.2.6.5	a1888d35e787	idna@2.8	3.15

Open the chart page →

18,316

pulsarkubesphere-stable

2.7.13

1 of 3 See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
streamnative/apache-pulsar-grafana-dashboard-k8s :0.0.16	11bceacec8fb	python-pip@20.0.2-5ubuntu1.5	no fix listed

Open the chart page →

14,320

online-boutiquekubesphere-test

0.1.0

2 of 11 See more

online-boutique kubesphere-test 0.1.0

2 of the 11 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
gcr.io/google-samples/microservices-demo/loadgenerator :v0.2.3	360130ab5850	idna@2.10	3.15
gcr.io/google-samples/microservices-demo/recommendationservice :v0.2.3	5f60c4988859	idna@2.10	3.15

Open the chart page →

26,018

sample-bookinfokubesphere-test

1.0.0

1 of 4 See more

sample-bookinfo kubesphere-test 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
kubesphere/examples-bookinfo-productpage-v1 :1.13.0	378f49ec9c44	idna@2.6	3.15

Open the chart page →

9,378

kubiya-runnerkubiya-helm-charts

0.9.4

1 of 9 See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
ghcr.io/kubiyabot/sdk-py :v1.20.0	f108f49570cc	idna@3.10	3.15

Open the chart page →

20,204

kusionkusionstack

0.14.1

1 of 3 See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
kusionstack/kusion :v0.14.0	126c8f0b0976	python-pip@22.0.2+dfsg-1ubuntu0.5	no fix listed

Open the chart page →

6,824

kyso-nbdimekyso

1.0.0

1 of 1 See more

2,765

homebridgelbenicio-community

0.1.15

1 of 1 See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
homebridge/homebridge :latest	77c685a40911	python-pip@24.0+dfsg-1ubuntu1.3	no fix listed

Open the chart page →

2,149

uptime-kumalbenicio-community

0.1.1

1 of 1 See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
louislam/uptime-kuma :2.3.2	9aeb4e51d038	idna@3.3 python-idna@3.3-1+deb12u1	3.15 no fix listed

Open the chart page →

33,242

Container images carrying it

972 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
craigwillis/c2metadata-bd :latest	ae317d7e4724	idna@2.10	3.15	1
crazymax/rtorrent-rutorrent :3.10-0.9.8-0.13.8	fb307f5b87bf	idna@3.4	3.15	1
cznic/knot-resolver :v6.4.2	fe71c5214fdc	idna@3.10	3.15	1
danialnabiyan1382/lsdisk :v2.0.8	f96a7ebf1f42	idna@3.10	3.15	1
danuk/telegram-sender :0.0.1	026560388070	idna@3.4	3.15	1
daskdev/dask :1.1.0	4ecd7bc35500	idna@2.7	3.15	1
daskdev/dask-notebook :1.1.0	052630f5ca04	idna@2.8	3.15	1
datadog/agent :7.22.0	8f20e56b5311	idna@2.8	3.15	1
datadog/agent :6	aad9994de6a7	idna@2.10	3.15	1
datamate/seafile-professional :11.0.20	2dd66b722464	idna@3.10 python-pip@22.0.2+dfsg-1ubuntu0.6	3.15 no fix listed	1
datawire/aes :2.0.3-ea	07f8fe4f4f8e	idna@2.7	3.15	1
datawire/aes :1.13.6	2beb65062c8b	idna@2.7	3.15	1
datawire/aes :3.11.1	95ec30b3c732	idna@3.7	3.15	1
datawire/emissary :3.12.2	1f67a1292d2a	idna@3.7	3.15	1
datawire/emissary :2.0.2-ea	9716efbdd24b	idna@2.7	3.15	1
dchesterton/amcrest2mqtt :1.0.9	cc70f2238aa9	idna@3.2	3.15	1
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	idna@3.6	3.15	1
ddosify/selfhosted_alaz_backend :2.3.11	e5be48b37348	idna@3.8	3.15	1
ddosify/selfhosted_backend :3.2.9	3c11e3182652	idna@3.7	3.15	1
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	idna@3.6	3.15	1
ddosify/selfhosted_hammermanager :1.2.4	71b8768f49bc	idna@3.6	3.15	1
ddosify/selfhosted_hammermanager :2.0.2	b796b8c73011	idna@3.7	3.15	1
deconzcommunity/deconz :2.29.2	062de2362641	idna@3.3 python-idna@3.3-1+deb12u1	3.15 no fix listed	1
deconzcommunity/deconz :2.12.06	6541bbb78952	idna@2.6	3.15	1
deepflowce/deepflow-app :v6.2.6.5	a1888d35e787	idna@2.8	3.15	1
devopsgoofy/k8s-platform :latest	ad865312099f	idna@3.10	3.15	1
devopshq/artifactory-cleanup :1.0.18	30e093bffa91	idna@3.10	3.15	1
devopstales/kubedash :3.1.0	8bb837da5aec	idna@3.10	3.15	1
devopstales/kube-openid-connector :1.0	42c40a0e9f1b	idna@3.3	3.15	1
devopstales/trivy-operator :2.5	75136aa7a26e	idna@3.4	3.15	1
djjudas21/alertify :0.1.0	ba22be670c37	idna@3.10	3.15	1
djjudas21/autonodelabel :0.0.6	f17233350c4f	idna@3.4	3.15	1
dockerid31415926/pod-pvc-mapping :v0.1.3	354309669f16	idna@3.3	3.15	1
dockerid31415926/pvc-exporter :v0.1.3	5a1dd17e0e07	idna@3.3	3.15	1
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	python-pip@20.0.2-5ubuntu1.11	no fix listed	1
douz/helpdesk :latest	4384103d0219	idna@2.10	3.15	1
dpage/pgadmin4 :8.4	18cd5711fc9a	idna@3.6	3.15	1
dpage/pgadmin4 :7.5	37946e4f3e7b	idna@3.4	3.15	1
dpage/pgadmin4 :9.11.0	50700ac17936	idna@3.11	3.15	1
dpage/pgadmin4 :9.2	52cb72a9e3da	idna@3.10	3.15	1
dpage/pgadmin4 :8.13	561c1f8f99f2	idna@3.10	3.15	1
dpage/pgadmin4 :4.22	b1f00b8163cf	idna@2.9	3.15	1
drgrove/mtls-server :v0.14.2	361721759a2b	idna@2.8	3.15	1
dserio83/velero-api :0.3.1	6b3d9115fee2	idna@3.10	3.15	1
dserio83/velero-watchdog :0.1.8	d5deae589229	idna@3.10	3.15	1
dysnix/pritunl :v1.29-r8	19951e3e7a32	idna@2.10	3.15	1
eclipseaerios/aerios-k8s-shim :v1.0.0	d4ed3d8e5db4	idna@3.8	3.15	1
eclipseaerios/hlo-allocator :v3.0.0	3cc1d94cfe96	idna@3.6	3.15	1
eclipseaerios/hlo-data-aggregator :v3.0.0	b433c2b9f5dc	idna@3.6	3.15	1
eclipseaerios/hlo-deployment-engine :v3.0.0	d582d39208c7	idna@3.6	3.15	1