StackRadar

CVE-2026-45409

Medium

Advisory

Published 19 May 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.3
base score, highest
EPSS
0.004
34th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
910
of 17,787 indexed, latest versions
Container images
969
deployed by those charts
Fix available
4 of 5
affected packages

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Carried by container images the latest versions of 910 of 17,787 indexed charts deploy, on 969 images.

Affected packageAffected versionsFixed inImages
idnapypi2.4, 2.5, 2.6, 2.7+15 more3.15934
python-pipdeb1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+22 moreno fix listed106
python-idnadeb2.6-1, 2.8-1, 2.8-1ubuntu0.1, 3.3-1+3 more3.3-1ubuntu0.2, 3.6-2ubuntu0.269
python-idnarpm2.5-5.el8, 2.5-7.el8_10, 2.10-7.el9, 2.10-7.el9_4.1+1 more0:2.5-8.el8_10, 0:2.10-8.el9_8, 0:3.7-6.el10_264
py3-pipapk25.0.1-r0, 25.2-r0, 26.0.1-r126.1.2-r13
OSV records
CGA-9qj9-xwv6-6g35CGA-jxvh-c6v2-m7x3DEBIAN-CVE-2026-45409GHSA-65pc-fj4g-8rjxRHSA-2026:54290RHSA-2026:54481RHSA-2026:54484RLSA-2026:54481UBUNTU-CVE-2026-45409
Also known as
CGA-gpf6-q7mq-4ppj, CGA-qfx6-f9w7-v6f4, PYSEC-2026-215, USN-8549-1

Charts affected

910 by stars
ChartLatestAffected imagesRadar Score
stackrox-chartredhat-cop0.0.101 of 1See more

stackrox-chart redhat-cop 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
quay.io/rht-labs/stack-do500:3.0.86ba82beff18e
idna@2.5
python-idna@2.5-5.el8
3.15
0:2.5-8.el8_10

Open the chart page →

29,227
remla23-team17remla23-team171.0.02 of 2See more

remla23-team17 remla23-team17 1.0.0

2 of the 2 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
ghcr.io/remla23-team17/app:1.0.05816dbddf47d
idna@3.4
3.15
ghcr.io/remla23-team17/model-service:1.0.0aa59fe2c4f6a
idna@3.4
3.15

Open the chart page →

4,447
reportportalreportportal5.7.22 of 8See more

reportportal reportportal 5.7.2

2 of the 8 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
reportportal/service-auto-analyzer:5.7.295ada4a216ce
idna@2.8
3.15
reportportal/service-metrics-gatherer:1.1.202a0e6dc11161
idna@2.8
3.15

Open the chart page →

25,737
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
idna@3.2
3.15

Open the chart page →

2,201
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
idna@3.6
3.15

Open the chart page →

7,431
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
idna@3.7
3.15

Open the chart page →

5,790
bookinforgnu1.0.01 of 7See more

bookinfo rgnu 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
idna@2.8
3.15

Open the chart page →

20,462
httpbinrgnu1.0.01 of 1See more

httpbin rgnu 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
citizenstig/httpbin:latestb81c818ccb86
python-pip@8.1.1-2ubuntu0.4
no fix listed

Open the chart page →

11,422
istio-bookinforgnu1.0.21 of 7See more

istio-bookinfo rgnu 1.0.2

1 of the 7 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
istio/examples-bookinfo-productpage-v1:1.14.022a0410f35a8
idna@2.8
3.15

Open the chart page →

20,462
istio-helloworldrgnu1.0.12 of 2See more

istio-helloworld rgnu 1.0.1

2 of the 2 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
istio/examples-helloworld-v1:latest328b237e4fb1
idna@3.6
3.15
istio/examples-helloworld-v2:latest0a7f02b2c7c9
idna@3.6
3.15

Open the chart page →

9,418
rhbk-neurofacerhbk-neurofaceVerified publisher1.0.02 of 4See more

rhbk-neuroface rhbk-neuroface 1.0.0

2 of the 4 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
idna@2.10
python-idna@2.10-7.el9_4.1
3.15
0:2.10-8.el9_8
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
idna@2.10
python-idna@2.10-7.el9_4.1
3.15
0:2.10-8.el9_8

Open the chart page →

3,781
gristrlex0.1.01 of 1See more

grist rlex 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
gristlabs/grist:0.7.96e71b1914a7e
idna@3.3
3.15

Open the chart page →

5,215
kube-web-viewrlex0.5.01 of 1See more

kube-web-view rlex 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:23.8.0431f1bf013d0
idna@3.4
3.15

Open the chart page →

4,908
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
idna@3.10
3.15

Open the chart page →

15,591
olivetinrm3lVerified publisher0.2.01 of 1See more

olivetin rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
idna@3.7
3.15

Open the chart page →

1,370
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
idna@3.10
3.15

Open the chart page →

9,256
monitoringrocketchat-server0.0.171 of 9See more

monitoring rocketchat-server 0.0.17

1 of the 9 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.30.98c06e1ba643a
idna@3.10
3.15

Open the chart page →

6,859
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
idna@3.10
3.15

Open the chart page →

9,607
kube-prometheus-stackromholdings19.3.01 of 6See more

kube-prometheus-stack romholdings 19.3.0

1 of the 6 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.14.235654389f8a9
idna@2.10
3.15

Open the chart page →

8,645
rommromm-helm-chartVerified publisher1.5.51 of 3See more

romm romm-helm-chart 1.5.5

1 of the 3 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
rommapp/romm:5.2.03512f2ca4557
idna@3.10
3.15

Open the chart page →

3,370
imgtagrotationalVerified publisher0.2.01 of 1See more

imgtag rotational 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
idna@3.10
3.15

Open the chart page →

3,312
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
idna@3.10
3.15

Open the chart page →

3,512
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
idna@3.10
3.15

Open the chart page →

4,718
paperless-ngxrtomik-helm-chartsVerified publisher0.0.51 of 1See more

paperless-ngx rtomik-helm-charts 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
idna@3.10
3.15

Open the chart page →

10,605
tandoorrtomik-helm-chartsVerified publisher0.0.11 of 1See more

tandoor rtomik-helm-charts 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
vabene1111/recipes:2.3.50f8d061895e9
idna@3.11
3.15

Open the chart page →

4,499
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
idna@3.3
python-idna@3.3-1+deb12u1
3.15
no fix listed

Open the chart page →

30,219
test-helm-app1saam-helm-test0.1.01 of 1See more

test-helm-app1 saam-helm-test 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
hamidyousefi93/saam-test:latestc34f071f6ed0
idna@3.4
3.15

Open the chart page →

3,887
evsantisbon0.2.01 of 5See more

ev santisbon 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
santisbon/evwatcher:latestc4e994ca4540
idna@3.4
3.15

Open the chart page →

14,179
uptime-kumasarab97Verified publisher0.1.51 of 1See more

uptime-kuma sarab97 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.22.10b55bcb83a1c
idna@2.6
3.15

Open the chart page →

4,744
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
idna@3.6
3.15

Open the chart page →

10,209
pgadminsb-helm-charts0.3.01 of 1See more

pgadmin sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
dpage/pgadmin4:8.13561c1f8f99f2
idna@3.10
3.15

Open the chart page →

1,713
scapyscapy-containerised0.3.41 of 2See more

scapy scapy-containerised 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
saidsef/scapy-containerised:v2025.02f17f7c435891
idna@3.10
3.15

Open the chart page →

2,817
photonschichtelVerified publisher0.2.01 of 1See more

photon schichtel 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
rtuszik/photon-docker:2.4.021549c60f9e6
idna@3.10
3.15

Open the chart page →

2,816
syncstorageschichtelVerified publisher0.1.11 of 1See more

syncstorage schichtel 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
mozilla/syncstorage-rs:0.15.893752877dced
idna@3.7
3.15

Open the chart page →

1,318
seldon-core-analyticsseldon1.17.11 of 8See more

seldon-core-analytics seldon 1.17.1

1 of the 8 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.1517b98eecdf6d1
idna@2.8
3.15

Open the chart page →

10,733
seldon-core-loadtestingseldon0.2.01 of 1See more

seldon-core-loadtesting seldon 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
seldonio/locust-core:0.81d0da98a2d76
idna@2.8
python-pip@8.1.1-2ubuntu0.4
3.15
no fix listed

Open the chart page →

23,007
seldon-deployseldon1.4.01 of 2See more

seldon-deploy seldon 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
seldonio/seldon-request-logger:1.11.24e985d2006a8
idna@2.5
python-idna@2.5-5.el8
3.15
0:2.5-8.el8_10

Open the chart page →

21,997
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
idna@3.4
3.15

Open the chart page →

3,337
ccx-monitoringseveralnines0.6.211 of 7See more

ccx-monitoring severalnines 0.6.21

1 of the 7 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
idna@3.11
3.15

Open the chart page →

7,708
first-chartshashkist-test0.1.01 of 3See more

first-chart shashkist-test 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
shashkist/flask-contacts-app:latest581de1fd6084
idna@3.10
3.15

Open the chart page →

3,045
showroom-docs-mcpshowroom-docs-mcpVerified publisher2.1.01 of 4See more

showroom-docs-mcp showroom-docs-mcp 2.1.0

1 of the 4 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
litellm/litellm-non_root:v1.82.3-stable09b217802ded
idna@3.11
py3-pip@26.0.1-r1
3.15
26.1.2-r1

Open the chart page →

5,201
sibylsibyl0.2.01 of 1See more

sibyl sibyl 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
ghcr.io/bensoer/sibyl:v0.2.06dca4455fde3
idna@3.11
3.15

Open the chart page →

1,020
digdagskyoo20030.5.21 of 4See more

digdag skyoo2003 0.5.2

1 of the 4 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
ghcr.io/skyoo2003/digdag:0.0.1821fd6a6f2cd
idna@3.1
3.15

Open the chart page →

6,949
docker-registryslamdev0.0.41 of 2See more

docker-registry slamdev 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
hcguersoy/cleanreg:v0.8.063b76fdcfbe1
idna@3.3
3.15

Open the chart page →

1,949
marge-botslamdev0.0.11 of 1See more

marge-bot slamdev 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
hiboxsystems/marge-bot:0.11.07235809b43b3
idna@2.10
3.15

Open the chart page →

1,426
weblateslamdev0.0.111 of 2See more

weblate slamdev 0.0.11

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
weblate/weblate:3.11.3-182848df56ecd
idna@2.9
3.15

Open the chart page →

8,694
frigatesmarthallVerified publisher1.0.61 of 1See more

frigate smarthall 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.12.0c862771e38e8
idna@3.4
3.15

Open the chart page →

2,243
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
idna@3.4
3.15

Open the chart page →

5,565
aafsmo-helm-chart6.0.01 of 14See more

aaf smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
idna@2.8
python-pip@8.1.1-2ubuntu0.4
3.15
no fix listed

Open the chart page →

25,769
aaismo-helm-chart6.0.01 of 14See more

aai smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2026-45409.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
idna@2.8
python-pip@8.1.1-2ubuntu0.4
3.15
no fix listed

Open the chart page →

25,803

Container images carrying it

969 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container imageDigestPackageFixed inUsed by
crazymax/rtorrent-rutorrent:3.10-0.9.8-0.13.8fb307f5b87bf
idna@3.4
3.15
1
cznic/knot-resolver:v6.4.2fe71c5214fdc
idna@3.10
3.15
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
idna@3.10
3.15
1
danuk/telegram-sender:0.0.1026560388070
idna@3.4
3.15
1
daskdev/dask:1.1.04ecd7bc35500
idna@2.7
3.15
1
daskdev/dask-notebook:1.1.0052630f5ca04
idna@2.8
3.15
1
datadog/agent:7.22.08f20e56b5311
idna@2.8
3.15
1
datadog/agent:6aad9994de6a7
idna@2.10
3.15
1
datamate/seafile-professional:11.0.202dd66b722464
idna@3.10
python-pip@22.0.2+dfsg-1ubuntu0.6
3.15
no fix listed
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
idna@2.7
3.15
1
datawire/aes:1.13.62beb65062c8b
idna@2.7
3.15
1
datawire/aes:3.11.195ec30b3c732
idna@3.7
3.15
1
datawire/emissary:3.12.21f67a1292d2a
idna@3.7
3.15
1
datawire/emissary:2.0.2-ea9716efbdd24b
idna@2.7
3.15
1
dchesterton/amcrest2mqtt:1.0.9cc70f2238aa9
idna@3.2
3.15
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
idna@3.6
3.15
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
idna@3.8
3.15
1
ddosify/selfhosted_backend:3.2.93c11e3182652
idna@3.7
3.15
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
idna@3.6
3.15
1
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
idna@3.6
3.15
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
idna@3.7
3.15
1
deconzcommunity/deconz:2.29.2062de2362641
idna@3.3
python-idna@3.3-1+deb12u1
3.15
no fix listed
1
deconzcommunity/deconz:2.12.066541bbb78952
idna@2.6
3.15
1
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
idna@2.8
3.15
1
devopsgoofy/k8s-platform:latestad865312099f
idna@3.10
3.15
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
idna@3.10
3.15
1
devopstales/kubedash:3.1.08bb837da5aec
idna@3.10
3.15
1
devopstales/kube-openid-connector:1.042c40a0e9f1b
idna@3.3
3.15
1
devopstales/trivy-operator:2.575136aa7a26e
idna@3.4
3.15
1
djjudas21/alertify:0.1.0ba22be670c37
idna@3.10
3.15
1
djjudas21/autonodelabel:0.0.6f17233350c4f
idna@3.4
3.15
1
dockerid31415926/pod-pvc-mapping:v0.1.3354309669f16
idna@3.3
3.15
1
dockerid31415926/pvc-exporter:v0.1.35a1dd17e0e07
idna@3.3
3.15
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
python-pip@20.0.2-5ubuntu1.11
no fix listed
1
douz/helpdesk:latest4384103d0219
idna@2.10
3.15
1
dpage/pgadmin4:8.418cd5711fc9a
idna@3.6
3.15
1
dpage/pgadmin4:7.537946e4f3e7b
idna@3.4
3.15
1
dpage/pgadmin4:9.11.050700ac17936
idna@3.11
3.15
1
dpage/pgadmin4:9.252cb72a9e3da
idna@3.10
3.15
1
dpage/pgadmin4:8.13561c1f8f99f2
idna@3.10
3.15
1
dpage/pgadmin4:4.22b1f00b8163cf
idna@2.9
3.15
1
drgrove/mtls-server:v0.14.2361721759a2b
idna@2.8
3.15
1
dserio83/velero-api:0.3.16b3d9115fee2
idna@3.10
3.15
1
dserio83/velero-watchdog:0.1.8d5deae589229
idna@3.10
3.15
1
dysnix/pritunl:v1.29-r819951e3e7a32
idna@2.10
3.15
1
eclipseaerios/aerios-k8s-shim:v1.0.0d4ed3d8e5db4
idna@3.8
3.15
1
eclipseaerios/hlo-allocator:v3.0.03cc1d94cfe96
idna@3.6
3.15
1
eclipseaerios/hlo-data-aggregator:v3.0.0b433c2b9f5dc
idna@3.6
3.15
1
eclipseaerios/hlo-deployment-engine:v3.0.0d582d39208c7
idna@3.6
3.15
1
eclipseaerios/hlo-fe-engine:v3.0.08ed2df4ca692
idna@3.6
3.15
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.