CVE-2026-45409

Medium

Advisory

Published 19 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 921; of 17,787 indexed, latest versions
Container images: 979; deployed by those charts
Fix available: 4 of 5; affected packages

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Carried by container images the latest versions of 921 of 17,787 indexed charts deploy, on 979 images.

Affected package	Affected versions	Fixed in	Images
idnapypi	2.4, 2.5, 2.6, 2.7+15 more	3.15	942
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 more	no fix listed	108
python-idnadeb	2.6-1, 2.8-1, 2.8-1ubuntu0.1, 3.3-1+3 more	3.3-1ubuntu0.2, 3.6-2ubuntu0.2	69
python-idnarpm	2.5-5.el8, 2.5-7.el8_10, 2.10-7.el9, 2.10-7.el9_4.1+1 more	0:2.5-8.el8_10, 0:2.10-8.el9_8, 0:3.7-6.el10_2	64
py3-pipapk	25.0.1-r0, 25.2-r0, 26.0.1-r1	26.1.2-r1	3

OSV records: CGA-9qj9-xwv6-6g35 CGA-jxvh-c6v2-m7x3 DEBIAN-CVE-2026-45409 GHSA-65pc-fj4g-8rjx RHSA-2026:54290 RHSA-2026:54481 RHSA-2026:54484 RLSA-2026:54481 UBUNTU-CVE-2026-45409
Also known as: CGA-gpf6-q7mq-4ppj, CGA-qfx6-f9w7-v6f4, PYSEC-2026-215, USN-8549-1

Charts affected

921 by stars

Chart

Latest

Affected images

Radar Score

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
wallarm/ingress-python :4.6.0-1	5cb2ae08b40f	idna@2.6	3.15

Open the chart page →

11,405

wallarm-node-nextwallarm

0.5.3

1 of 2 See more

wallarm-node-next wallarm 0.5.3

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :5.0.2-1	097cadc42336	idna@3.7	3.15

Open the chart page →

2,408

wallarm-oobwallarm

0.23.0

1 of 3 See more

wallarm-oob wallarm 0.23.0

1 of the 3 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :6.10.1	aecd88b24c51	idna@3.7	3.15

Open the chart page →

2,824

wasabi-s3-operatorwasabi-s3-operator

0.2.7

1 of 1 See more

wasabi-s3-operator wasabi-s3-operator 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
kenchrcum/wasabi-s3-operator :0.2.7	ce657c622ce5	idna@3.11	3.15

Open the chart page →

628

wazuhwazuh-helm-eks

1.2.10

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	idna@3.7	3.15

Open the chart page →

5,484

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	idna@2.9	3.15

Open the chart page →

11,119

supersetwbstack

0.1.0

1 of 1 See more

7,085

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	idna@3.3	3.15

Open the chart page →

2,670

ambassadorwenerme

6.9.5

1 of 2 See more

4,086

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	idna@3.7	3.15

Open the chart page →

10,843

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	idna@3.3 python-idna@3.3-1+deb12u1	3.15 no fix listed

Open the chart page →

9,117

ceph-csi-cephfswikimedia

0.1.8

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	idna@2.5	3.15

Open the chart page →

10,285

ceph-csi-rbdwikimedia

0.1.13

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	idna@2.5	3.15

Open the chart page →

11,784

docker-hub-rate-limit-exporterwiremind

0.3.0

1 of 1 See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
viadee/docker-hub-rate-limit-exporter :version-1.5	2e27e3b3ee56	idna@2.10	3.15

Open the chart page →

1,843

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	idna@3.4	3.15

Open the chart page →

5,542

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	idna@2.10	3.15

Open the chart page →

2,643

xkopsxkops

0.1.0

2 of 5 See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	idna@3.10	3.15
hamzaarshad10/querypodpy :1.7	154f38e8668e	idna@3.10	3.15

Open the chart page →

13,677

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	idna@3.4	3.15

Open the chart page →

1,838

zerossl-cert-managerzerossl-cert-manager

0.1.0

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	idna@3.10	3.15

Open the chart page →

570

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	idna@3.3	3.15

Open the chart page →

3,118

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	idna@3.3	3.15

Open the chart page →

1,636

Container images carrying it

979 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
craigwillis/c2metadata-bd :latest	ae317d7e4724	idna@2.10	3.15	1
crazymax/rtorrent-rutorrent :3.10-0.9.8-0.13.8	fb307f5b87bf	idna@3.4	3.15	1
cznic/knot-resolver :v6.4.2	fe71c5214fdc	idna@3.10	3.15	1
danialnabiyan1382/lsdisk :v2.0.8	f96a7ebf1f42	idna@3.10	3.15	1
danuk/telegram-sender :0.0.1	026560388070	idna@3.4	3.15	1
daskdev/dask :1.1.0	4ecd7bc35500	idna@2.7	3.15	1
daskdev/dask-notebook :1.1.0	052630f5ca04	idna@2.8	3.15	1
datadog/agent :7.22.0	8f20e56b5311	idna@2.8	3.15	1
datadog/agent :6	aad9994de6a7	idna@2.10	3.15	1
datamate/seafile-professional :11.0.20	2dd66b722464	idna@3.10 python-pip@22.0.2+dfsg-1ubuntu0.6	3.15 no fix listed	1
datawire/aes :2.0.3-ea	07f8fe4f4f8e	idna@2.7	3.15	1
datawire/aes :1.13.6	2beb65062c8b	idna@2.7	3.15	1
datawire/aes :3.11.1	95ec30b3c732	idna@3.7	3.15	1
datawire/emissary :3.12.2	1f67a1292d2a	idna@3.7	3.15	1
datawire/emissary :2.0.2-ea	9716efbdd24b	idna@2.7	3.15	1
dchesterton/amcrest2mqtt :1.0.9	cc70f2238aa9	idna@3.2	3.15	1
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	idna@3.6	3.15	1
ddosify/selfhosted_alaz_backend :2.3.11	e5be48b37348	idna@3.8	3.15	1
ddosify/selfhosted_backend :3.2.9	3c11e3182652	idna@3.7	3.15	1
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	idna@3.6	3.15	1
ddosify/selfhosted_hammermanager :1.2.4	71b8768f49bc	idna@3.6	3.15	1
ddosify/selfhosted_hammermanager :2.0.2	b796b8c73011	idna@3.7	3.15	1
deconzcommunity/deconz :2.29.2	062de2362641	idna@3.3 python-idna@3.3-1+deb12u1	3.15 no fix listed	1
deconzcommunity/deconz :2.12.06	6541bbb78952	idna@2.6	3.15	1
deepflowce/deepflow-app :v6.2.6.5	a1888d35e787	idna@2.8	3.15	1
devopsgoofy/k8s-platform :latest	ad865312099f	idna@3.10	3.15	1
devopshq/artifactory-cleanup :1.0.18	30e093bffa91	idna@3.10	3.15	1
devopstales/kubedash :3.1.0	8bb837da5aec	idna@3.10	3.15	1
devopstales/kube-openid-connector :1.0	42c40a0e9f1b	idna@3.3	3.15	1
devopstales/trivy-operator :2.5	75136aa7a26e	idna@3.4	3.15	1
djjudas21/alertify :0.1.0	ba22be670c37	idna@3.10	3.15	1
djjudas21/autonodelabel :0.0.6	f17233350c4f	idna@3.4	3.15	1
dockerid31415926/pod-pvc-mapping :v0.1.3	354309669f16	idna@3.3	3.15	1
dockerid31415926/pvc-exporter :v0.1.3	5a1dd17e0e07	idna@3.3	3.15	1
dongjiang1989/lxcfs :v6.0.3	4bf9ae391948	python-pip@20.0.2-5ubuntu1.11	no fix listed	1
douz/helpdesk :latest	4384103d0219	idna@2.10	3.15	1
dpage/pgadmin4 :8.4	18cd5711fc9a	idna@3.6	3.15	1
dpage/pgadmin4 :7.5	37946e4f3e7b	idna@3.4	3.15	1
dpage/pgadmin4 :9.11.0	50700ac17936	idna@3.11	3.15	1
dpage/pgadmin4 :9.2	52cb72a9e3da	idna@3.10	3.15	1
dpage/pgadmin4 :8.13	561c1f8f99f2	idna@3.10	3.15	1
dpage/pgadmin4 :4.22	b1f00b8163cf	idna@2.9	3.15	1
drgrove/mtls-server :v0.14.2	361721759a2b	idna@2.8	3.15	1
dserio83/velero-api :0.3.1	6b3d9115fee2	idna@3.10	3.15	1
dserio83/velero-watchdog :0.1.8	d5deae589229	idna@3.10	3.15	1
dysnix/pritunl :v1.29-r8	19951e3e7a32	idna@2.10	3.15	1
eclipseaerios/aerios-k8s-shim :v1.0.0	d4ed3d8e5db4	idna@3.8	3.15	1
eclipseaerios/hlo-allocator :v3.0.0	3cc1d94cfe96	idna@3.6	3.15	1
eclipseaerios/hlo-data-aggregator :v3.0.0	b433c2b9f5dc	idna@3.6	3.15	1
eclipseaerios/hlo-deployment-engine :v3.0.0	d582d39208c7	idna@3.6	3.15	1