StackRadarChart IndexLive demo

CVE-2026-4601

High

Advisory

Published 23 Mar 2026In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 8.7; base score, highest
EPSS: 0.005; 38th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 9; of 17,985 indexed, latest versions
Container images: 7; deployed by those charts
Fix available: 1 of 1; affected package

jsrsasign: Missing cryptographic validation during DSA signing enables private key extraction

Carried by container images the latest versions of 9 of 17,985 indexed charts deploy, on 7 images.

Affected package	Affected versions	Fixed in	Images
jsrsasignnpm	8.0.12, 8.0.20, 10.5.27, 10.9.0+1 more	11.1.1	7

OSV records: GHSA-w8q8-93cx-6h7r

Charts affected

9 by stars

Chart

Latest

Affected images

Radar Score

1 of 1 See more

misskey alyti 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-4601.

Container image	Digest	Package	Fixed in
misskey/misskey :12.110.1	e08b7c478093	jsrsasign@8.0.20	11.1.1

Open the chart page →

5,502

dltbrokerassist-iot-distributed-broker

1 of 9 See more

dltbroker assist-iot-distributed-broker 0.2.0

1 of the 9 container images this version deploys carry CVE-2026-4601.

Container image	Digest	Package	Fixed in
assistiot/dlt_api :2.0.0	e36a8922fa0c	jsrsasign@10.5.27	11.1.1

Open the chart page →

195,118

dltloggingassist-iot-logging-auditing

1 of 9 See more

dltlogging assist-iot-logging-auditing 0.2.0

1 of the 9 container images this version deploys carry CVE-2026-4601.

Container image	Digest	Package	Fixed in
assistiot/dlt_api :2.0.0	e36a8922fa0c	jsrsasign@10.5.27	11.1.1

Open the chart page →

195,099

dltkvassist-iot-data-integrity-verification

1 of 9 See more

dltkv assist-iot-data-integrity-verification 0.2.0

1 of the 9 container images this version deploys carry CVE-2026-4601.

Container image	Digest	Package	Fixed in
assistiot/dlt_api :2.0.0	e36a8922fa0c	jsrsasign@10.5.27	11.1.1

Open the chart page →

195,118

dltflassist-iot-dlt-based-fl

1 of 9 See more

dltfl assist-iot-dlt-based-fl 0.2.0

1 of the 9 container images this version deploys carry CVE-2026-4601.

Container image	Digest	Package	Fixed in
assistiot/dlt_api :2.1.0	c8a170683be7	jsrsasign@10.5.27	11.1.1

Open the chart page →

195,118

yapijoelee2012

1 of 1 See more

yapi joelee2012 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-4601.

Container image	Digest	Package	Fixed in
jayfong/yapi :1.10.2	163e5d621910	jsrsasign@8.0.12	11.1.1

Open the chart page →

6,722

console-apiovrclk-2

1 of 1 See more

console-api ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-4601.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/console-api :2.64.0	ba359097329d	jsrsasign@11.1.0	11.1.1

Open the chart page →

3,971

console-webovrclk-2

1 of 1 See more

console-web ovrclk-2 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-4601.

Container image	Digest	Package	Fixed in
ghcr.io/akash-network/deploy-web :2.46.0	ac540172c120	jsrsasign@11.1.0	11.1.1

Open the chart page →

3,047

rsshubsb-helm-charts

1 of 1 See more

rsshub sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-4601.

Container image	Digest	Package	Fixed in
diygod/rsshub :2025-11-09	7a6312cac0d5	jsrsasign@10.9.0	11.1.1

Open the chart page →

5,210

Container images carrying it

7 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
assistiot/dlt_api :2.0.0	e36a8922fa0c	jsrsasign@10.5.27	11.1.1	3
assistiot/dlt_api :2.1.0	c8a170683be7	jsrsasign@10.5.27	11.1.1	1
diygod/rsshub :2025-11-09	7a6312cac0d5	jsrsasign@10.9.0	11.1.1	1
jayfong/yapi :1.10.2	163e5d621910	jsrsasign@8.0.12	11.1.1	1
misskey/misskey :12.110.1	e08b7c478093	jsrsasign@8.0.20	11.1.1	1
ghcr.io/akash-network/console-api :2.64.0	ba359097329d	jsrsasign@11.1.0	11.1.1	1
ghcr.io/akash-network/deploy-web :2.46.0	ac540172c120	jsrsasign@11.1.0	11.1.1	1