CVE-2026-45409

Medium

Advisory

Published 19 May 2026In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.004; 34th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 921; of 17,787 indexed, latest versions
Container images: 979; deployed by those charts
Fix available: 4 of 5; affected packages

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Carried by container images the latest versions of 921 of 17,787 indexed charts deploy, on 979 images.

Affected package	Affected versions	Fixed in	Images
idnapypi	2.4, 2.5, 2.6, 2.7+15 more	3.15	942
python-pipdeb	1.5.4-1ubuntu4, 8.1.1-2ubuntu0.4, 9.0.1-2.3~ubuntu1, 9.0.1-2.3~ubuntu1.18.04.1+23 more	no fix listed	108
python-idnadeb	2.6-1, 2.8-1, 2.8-1ubuntu0.1, 3.3-1+3 more	3.3-1ubuntu0.2, 3.6-2ubuntu0.2	69
python-idnarpm	2.5-5.el8, 2.5-7.el8_10, 2.10-7.el9, 2.10-7.el9_4.1+1 more	0:2.5-8.el8_10, 0:2.10-8.el9_8, 0:3.7-6.el10_2	64
py3-pipapk	25.0.1-r0, 25.2-r0, 26.0.1-r1	26.1.2-r1	3

OSV records: CGA-9qj9-xwv6-6g35 CGA-jxvh-c6v2-m7x3 DEBIAN-CVE-2026-45409 GHSA-65pc-fj4g-8rjx RHSA-2026:54290 RHSA-2026:54481 RHSA-2026:54484 RLSA-2026:54481 UBUNTU-CVE-2026-45409
Also known as: CGA-gpf6-q7mq-4ppj, CGA-qfx6-f9w7-v6f4, PYSEC-2026-215, USN-8549-1

Charts affected

921 by stars

Chart

Latest

Affected images

Radar Score

kongwallarm

4.6.3

1 of 7 See more

kong wallarm 4.6.3

1 of the 7 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
wallarm/ingress-python :4.6.0-1	5cb2ae08b40f	idna@2.6	3.15

Open the chart page →

11,444

wallarm-node-nextwallarm

0.5.3

1 of 2 See more

wallarm-node-next wallarm 0.5.3

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :5.0.2-1	097cadc42336	idna@3.7	3.15

Open the chart page →

2,408

wallarm-oobwallarm

0.23.0

1 of 3 See more

wallarm-oob wallarm 0.23.0

1 of the 3 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
wallarm/node-helpers :6.10.1	aecd88b24c51	idna@3.7	3.15

Open the chart page →

2,824

wasabi-s3-operatorwasabi-s3-operator

0.2.7

1 of 1 See more

wasabi-s3-operator wasabi-s3-operator 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
kenchrcum/wasabi-s3-operator :0.2.7	ce657c622ce5	idna@3.11	3.15

Open the chart page →

629

wazuhwazuh-helm-eks

1.2.10

1 of 6 See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
wazuh/wazuh-manager :4.14.4	5a065930682d	idna@3.7	3.15

Open the chart page →

5,484

wazuh-manager-filebeatwazuh-manager-filebeat

0.1.0-gamma

1 of 1 See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
iosifache/wazuh-manager-filebeat :latest	85df3f04b5da	idna@2.9	3.15

Open the chart page →

11,167

supersetwbstack

0.1.0

1 of 1 See more

6,540

weather-chartweather-web-app

0.1.0

1 of 1 See more

weather-chart weather-web-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
zohardocker12/weather_app_flask :latest	b86d60dbb68d	idna@3.3	3.15

Open the chart page →

2,671

ambassadorwenerme

6.9.5

1 of 2 See more

4,086

emissary-ingresswenerme

8.12.2

1 of 2 See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
datawire/emissary :3.12.2	1f67a1292d2a	idna@3.7	3.15

Open the chart page →

10,857

juicefs-csi-driverwenerme

0.32.5

1 of 5 See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
juicedata/juicefs-csi-driver :v0.32.5	95008ba63318	idna@3.3 python-idna@3.3-1+deb12u1	3.15 no fix listed

Open the chart page →

8,824

ceph-csi-cephfswikimedia

0.1.8

1 of 5 See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	idna@2.5	3.15

Open the chart page →

10,286

ceph-csi-rbdwikimedia

0.1.13

1 of 6 See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
quay.io/cephcsi/cephcsi :v3.7.2	f7f8228f17cc	idna@2.5	3.15

Open the chart page →

11,785

docker-hub-rate-limit-exporterwiremind

0.3.0

1 of 1 See more

docker-hub-rate-limit-exporter wiremind 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
viadee/docker-hub-rate-limit-exporter :version-1.5	2e27e3b3ee56	idna@2.10	3.15

Open the chart page →

1,843

marge-botwiremind

1.4.4

1 of 1 See more

marge-bot wiremind 1.4.4

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
hiboxsystems/marge-bot :0.14.0	dcffb926e563	idna@3.4	3.15

Open the chart page →

5,548

powerdnsadminwitcom-gmbh

0.3.4

1 of 1 See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
ngoduykhanh/powerdns-admin :v0.2.4	ba36ab196d3d	idna@2.10	3.15

Open the chart page →

2,643

xkopsxkops

0.1.0

2 of 5 See more

xkops xkops 0.1.0

2 of the 5 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	idna@3.10	3.15
hamzaarshad10/querypodpy :1.7	154f38e8668e	idna@3.10	3.15

Open the chart page →

13,197

enterprise-gatewayzeet

3.2.2

1 of 2 See more

enterprise-gateway zeet 3.2.2

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
elyra/kernel-image-puller :3.2.2	c922f1f1646a	idna@3.4	3.15

Open the chart page →

1,838

zerossl-cert-managerzerossl-cert-manager

0.1.0

1 of 2 See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
andreymileshin/zerossl-issuer :v1.0.0	e0825acc9e48	idna@3.10	3.15

Open the chart page →

569

alertmanager-matrix-forwarderzloi-space

1.0.1

1 of 2 See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	idna@3.3	3.15

Open the chart page →

3,118

grafana-matrix-forwarderzloi-space

1.0.0

1 of 2 See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-45409.

Container image	Digest	Package	Fixed in
matrixdotorg/pantalaimon :v0.10.4	ba6a587fa508	idna@3.3	3.15

Open the chart page →

1,636

Container images carrying it

979 by charts deploying them

A fixed version is listed for 4 of the 5 affected packages.

Container image	Digest	Package	Fixed in	Used by
eclipseaerios/hlo-fe-engine :v3.0.0	8ed2df4ca692	idna@3.6	3.15	1
eclipseaerios/iota-messages-api :latest	e7f5ba0bc64d	idna@3.11	3.15	1
eclipseaerios/self-awareness-hardware-info :1.4.4	34b72f45b46a	idna@3.11	3.15	1
eclipseaerios/self-awareness-power-consumption :1.3.3	c8af377c709f	idna@3.11	3.15	1
eclipseaerios/trust-manager :1.0.0	f55442e2c0ed	idna@3.11	3.15	1
elastichq/elasticsearch-hq :latest	bb3bd22c2b87	idna@2.8	3.15	1
elautoestopista/aeneabot :4.2.1	125ba620d528	idna@3.11	3.15	1
elautoestopista/raponchi :0.3.0	b6f74db9fc81	idna@3.7	3.15	1
elyra/kernel-image-puller :3.2.2	c922f1f1646a	idna@3.4	3.15	1
erenozcan17/flask_analytics :v3.1	c9b6f0dfbffc	idna@3.10	3.15	1
erlangsolutions/wombatoam :4.1.28	4680c990147a	idna@2.10	3.15	1
errbotio/errbot :6.1.9	00ee4e0953ab	idna@3.3	3.15	1
esphome/esphome :1.18.0	3f51ec10e823	idna@2.10	3.15	1
esphome/esphome :2024.3.0	9ab8cc88b28c	idna@3.6	3.15	1
esphome/esphome :2024.12.2	b2c6322700ac	idna@3.10	3.15	1
esphome/esphome :2025.3.0	def8b6e4f517	idna@3.10	3.15	1
evgkrsk/postgres-controller :0.6.2	37f0e1f435c3	idna@3.4	3.15	1
evk02/mlflow :2.2.1	ef6ff257ef35	idna@3.4	3.15	1
factly/hunting :0.2.0-stagv1.2	ca5bc71d1d5c	idna@3.4	3.15	1
fiware/bae-activation-service :v0.0.3	3e3ec88d59ed	idna@2.10	3.15	1
fiware/biz-ecosystem-charging-backend :11.7.0	29456835bb2c	idna@2.8 python-idna@2.8-1ubuntu0.1 python-pip@20.0.2-5ubuntu1.11	3.15 no fix listed no fix listed	1
fiware/orion-ld :1.10.0	3c490a746f65	idna@2.5 python-idna@2.5-7.el8_10	3.15 0:2.5-8.el8_10	1
flag5/clustersecret :0.0.9	4ad5748bfcc6	idna@3.3	3.15	1
flagsmith/flagsmith-api :v2.6.0	fd58556339a4	idna@2.10	3.15	1
flanksource/batch-runner :v1.0.44	689687a7cf95	idna@3.7	3.15	1
flashcatcloud/nightingale :8.5.1	421acb36181b	idna@3.11	3.15	1
flyway/flyway :9.15	45b5d7cdc75a	python-pip@20.0.2-5ubuntu1.8	no fix listed	1
fossology/fossology :4.2.1	8bd1f22ba7bb	idna@2.6	3.15	1
frankescobar/allure-docker-service :2.21.0	8a4d7e9308de	idna@2.10 python-pip@9.0.1-2.3~ubuntu1.18.04.6	3.15 no fix listed	1
frankescobar/allure-docker-service :2.19.0	cafa03b94dac	idna@2.10 python-pip@9.0.1-2.3~ubuntu1.18.04.5	3.15 no fix listed	1
freeipa/freeipa-server :fedora-37-4.10.1	c87d77342bf5	idna@3.3	3.15	1
galaxy/cloudman-server :latest	e5c265fe9fcd	idna@3.4 python-pip@20.0.2-5ubuntu1.6	3.15 no fix listed	1
galaxy/galaxy-init :v18.01	0267bad550e6	idna@2.6 python-pip@1.5.4-1ubuntu4	3.15 no fix listed	1
galaxy/galaxy-stable :v18.01	8e577a626dfd	idna@2.6 python-pip@1.5.4-1ubuntu4	3.15 no fix listed	1
galaxy/pulsar-kubernetes :0.15.7	e50a890e24c9	idna@3.10	3.15	1
geonode/geoserver :2.28.4-latest	81b1d431b7e9	python-pip@22.0.2+dfsg-1ubuntu0.7	no fix listed	1
geopython/pycsw :3.0.0-beta2	84662ea6b78b	idna@3.11	3.15	1
geoscienceaustralia/dea-k8s-data :latest	f4039b45572a	idna@2.10 python-pip@9.0.1-2.3~ubuntu1.18.04.2	3.15 no fix listed	1
gethue/hue :4.11.0	11b649636e68	idna@3.4 python-pip@20.0.2-5ubuntu1.6	3.15 no fix listed	1
gethue/hue :4.10.0	5702b2c37ff9	idna@2.6 python-idna@2.6-1 python-pip@9.0.1-2.3~ubuntu1.18.04.5	3.15 no fix listed no fix listed	1
gethue/hue :latest	7d5c1b9f8a79	idna@3.11 python-pip@22.0.2+dfsg-1ubuntu0.6	3.15 no fix listed	1
getsentry/sentry-kubernetes :latest	6ac37974fd2a	idna@2.8	3.15	1
gluufederation/opendj :4.3.0_01	1a1128b28b95	idna@3.2	3.15	1
gmaas2/github-api :latest	148fc2d9afe9	idna@3.4	3.15	1
gmelillo/registry :0.1.8	c599d608a2f7	idna@3.3	3.15	1
goofball222/pritunl :1.30.3070.59	43c0743701d4	idna@3.3	3.15	1
goofball222/pritunl :1.32.3602.80	7bf26032dfce	idna@3.4	3.15	1
gpappsoft/privacyidea-docker :3.12.2	af7841adad26	idna@3.10	3.15	1
grafana/oncall :v1.16.5	499851658393	idna@3.7	3.15	1
graphiteapp/graphite-statsd :1.1.7-6	04a0037cc2ae	idna@2.10	3.15	1