CVE-2026-5260

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 8.2; base score, highest
EPSS: 0.007; 52nd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,705; of 17,790 indexed, latest versions
Container images: 1,791; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,705 of 17,790 indexed charts deploy, on 1,791 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+41 more	3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9, 3.7.9-2+deb12u7+5 more	1,750
gnutlsapk	3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r0	3.8.13-r0	41

OSV records: ALPINE-CVE-2026-5260 DEBIAN-CVE-2026-5260 UBUNTU-CVE-2026-5260
Also known as: USN-8284-1, USN-8502-1

Charts affected

1,705 by stars

Chart

Latest

Affected images

Radar Score

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-5260.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
hamzaarshad10/querypodpy :1.7	154f38e8668e	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
library/mongo :latest	5211c51171f5	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
murtazashah46/helmfile :latest	4d11726cf803	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7

Open the chart page →

13,197

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	gnutls28@3.8.3-1.1ubuntu3.1	3.8.3-1.1ubuntu3.6

Open the chart page →

2,136

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7

Open the chart page →

2,674

clickhousezloi-space

1.2.0

2 of 3 See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-5260.

Container image	Digest	Package	Fixed in
yandex/clickhouse-client :21.3	863f94a0f607	gnutls28@3.5.18-1ubuntu1.5	3.5.18-1ubuntu1.6+esm3
yandex/clickhouse-server :21.3.20	4eccfffb01d7	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2

Open the chart page →

9,250

zoo-project-druzoo-project

0.10.4

1 of 6 See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-5260.

Container image	Digest	Package	Fixed in
zooproject/zoo-project :dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a	9a507cb7e2dd	gnutls28@3.7.3-4ubuntu1.9	no fix listed

Open the chart page →

7,916

Container images carrying it

1,791 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
eqalpha/keydb :latest	6537505c4235	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm2	2
eqalpha/keydb :x86_64_v6.3.4	eceb1806730c	gnutls28@3.6.13-2ubuntu1.8	3.6.13-2ubuntu1.12+esm2	2
fireflyiii/core :version-6.5.9	fe4ecec4c2ba	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	2
fireflyiii/data-importer :version-2.2.3	ab52bf932546	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	2
freeradius/freeradius-server :3.0.21	21c8bfa904d8	gnutls28@3.5.18-1ubuntu1.3	3.5.18-1ubuntu1.6+esm3	2
geoservercloud/geoserver-cloud-gateway :1.0-RC3	756559ee788a	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2	2
geoservercloud/geoserver-cloud-rest :1.0-RC3	99540eef78ad	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2	2
geoservercloud/geoserver-cloud-wcs :1.0-RC3	5c254c53a357	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2	2
geoservercloud/geoserver-cloud-webui :1.0-RC3	c687b1cbc891	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2	2
geoservercloud/geoserver-cloud-wfs :1.0-RC3	5288f320cf36	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2	2
geoservercloud/geoserver-cloud-wms :1.0-RC3	a30a60ac6cd0	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2	2
gjeanmart/safe-ganache-node :latest	926264c8f2d1	gnutls28@3.7.9-2	3.7.9-2+deb12u7	2
gradiant/ueransim :3.2.6	015b30d5fa0f	gnutls28@3.7.3-4ubuntu1.5	3.7.3-4ubuntu1.9	2
grafana/alloy :v1.8.1	7790f6f7fbd8	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.6	2
grafana/alloy :v1.12.2	f94b1c82957a	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	2
hjacobs/kube-downscaler :23.2.0-6-gc9b88e8	4b2147f47425	gnutls28@3.7.9-2	3.7.9-2+deb12u7	2
homebridge/homebridge :latest	77c685a40911	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	2
honestica/kube-iptables-tailer :master-91	a393242fb939	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2	2
hookiesolutions/webhookie :latest	0629694246ba	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2	2
hyperledger/besu :22.4-openjdk-latest	a674d35eec9a	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2	2
ilum/marquez :0.54.0	6e1d709d41f8	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	2
interlayhq/interbtc :latest	a66d0e35e70f	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm2	2
interlayhq/interbtc-clients :vault-master	c3e311de67da	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2	2
iomesh/node-disk-exporter :1.8.0	f03148764f38	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2	2
istio/kubectl :1.5.10	dbb7726d1bf0	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm3	2
istio/proxyv2 :1.18.0	757d28c24100	gnutls28@3.7.3-4ubuntu1.2	3.7.3-4ubuntu1.9	2
istio/proxyv2 :1.10.3	a78b7a165744	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm3	2
jenkins/jenkins :2.426.1-jdk11	b470bcdc4ecd	gnutls28@3.7.9-2	3.7.9-2+deb12u7	2
jenkins/jenkins :2.541.3-jdk21	c4098086090c	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	2
jlesage/jdownloader-2 :v26.03.1	3d6cb102bd9b	gnutls@3.8.12-r0	3.8.13-r0	2
kurento/kurento-media-server :latest	03c0d34d0828	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	2
langgenius/dify-sandbox :0.2.0	09b7e8705673	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	2
library/cassandra :3.11.6	5aa8400b4b3b	gnutls28@3.5.18-1ubuntu1.4	3.5.18-1ubuntu1.6+esm3	2
library/cassandra :4.1.3	7cbcec0086ac	gnutls28@3.7.3-4ubuntu1.4	3.7.3-4ubuntu1.9	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	gnutls28@3.6.13-2ubuntu1.6	3.6.13-2ubuntu1.12+esm2	2
library/elasticsearch :8.19.12	89729a95066a	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	2
library/influxdb :2.7	b8d940ca9376	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	2
library/mariadb :10.8.3	0abf60f81588	gnutls28@3.7.3-4ubuntu1	3.7.3-4ubuntu1.9	2
library/mariadb :10.10	334b315c10e5	gnutls28@3.7.3-4ubuntu1.4	3.7.3-4ubuntu1.9	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	2
library/mariadb :11.4	611a2fcc5fa7	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	2
library/mariadb :10.6	92e50059ea0a	gnutls28@3.7.3-4ubuntu1.9	no fix listed	2
library/mariadb :11.3.2	e101f9db3191	gnutls28@3.7.3-4ubuntu1.5	3.7.3-4ubuntu1.9	2
library/mongo :8.0.20	098862b1339f	gnutls28@3.8.3-1.1ubuntu3.5	3.8.3-1.1ubuntu3.6	2
library/mongo :5.0	41108d183e97	gnutls28@3.6.13-2ubuntu1.12	3.6.13-2ubuntu1.12+esm2	2
library/mongo :4.2.3	58b25d51baa1	gnutls28@3.5.18-1ubuntu1.3	3.5.18-1ubuntu1.6+esm3	2
library/mongo :7	b096b4cb9269	gnutls28@3.7.3-4ubuntu1.9	no fix listed	2
library/mongo :7.0	b6421fd6d1c5	gnutls28@3.7.3-4ubuntu1.9	no fix listed	2
library/nginx :latest	6e23479198b9	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	2
library/nginx :1.27.0	98f8ec75657d	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	2