StackRadar

CVE-2026-5260

High

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.007
52nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,718
of 17,797 indexed, latest versions
Container images
1,803
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,718 of 17,797 indexed charts deploy, on 1,803 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.5.17-1ubuntu1, 3.5.18-1ubuntu1, 3.5.18-1ubuntu1.1, 3.5.18-1ubuntu1.2+41 more3.5.18-1ubuntu1.6+esm3, 3.6.13-2ubuntu1.12+esm2, 3.7.3-4ubuntu1.9, 3.7.9-2+deb12u7+5 more1,761
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r03.8.13-r042
OSV records
ALPINE-CVE-2026-5260DEBIAN-CVE-2026-5260UBUNTU-CVE-2026-5260
Also known as
USN-8284-1, USN-8502-1

Charts affected

1,718 by stars
ChartLatestAffected imagesRadar Score
smilencsaVerified publisher1.1.07 of 23See more

smile ncsa 1.1.0

7 of the 23 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
gnutls28@3.6.13-2ubuntu1.8
3.6.13-2ubuntu1.12+esm2
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
gnutls28@3.7.9-2
3.7.9-2+deb12u7
socialmediamacroscope/image_crawler:0.1.2f508216be63c
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
gnutls28@3.7.9-2
3.7.9-2+deb12u7
socialmediamacroscope/preprocessing:0.1.3ca863306314b
gnutls28@3.7.9-2
3.7.9-2+deb12u7
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
gnutls28@3.7.9-2
3.7.9-2+deb12u7

Open the chart page →

110,325
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7

Open the chart page →

30,398
neosyncneosyncVerified publisher0.5.412 of 3See more

neosync neosync 0.5.41

2 of the 3 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

7,260
apineosync-apiVerified publisher0.5.411 of 1See more

api neosync-api 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/api:0.5.41e2abb798f29f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

2,856
workerneosync-workerVerified publisher0.5.411 of 1See more

worker neosync-worker 0.5.41

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
ghcr.io/nucleuscloud/neosync/worker:0.5.4196f42450c5b1
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

2,833
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4

Open the chart page →

3,927
netbirdnetbird1.9.01 of 4See more

netbird netbird 1.9.0

1 of the 4 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
netbirdio/management:0.46.0b0adc4ad4ec6
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6

Open the chart page →

6,441
netris-dpu-agentnetrisai0.1.01 of 1See more

netris-dpu-agent netrisai 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
netrisai/bare-metal-dpu-agent:4.7.0.003c271efe749d0
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6

Open the chart page →

1,584
neurofaceneurofaceVerified publisher1.4.21 of 3See more

neuroface neuroface 1.4.2

1 of the 3 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
openvino/model_server:2025.2.11e7cd1d70cc1
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6

Open the chart page →

7,500
agent-controlnewrelic0.0.921 of 1See more

agent-control newrelic 0.0.92

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
newrelic/newrelic-agent-control-cli:0.48.01a448492b55a
gnutls28@3.8.9-3
3.8.9-3+deb13u4

Open the chart page →

3,874
nginx-samplenginx-sample0.5.01 of 1See more

nginx-sample nginx-sample 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

5,362
nginx-sample-dependentnginx-sample-dependent0.2.01 of 1See more

nginx-sample-dependent nginx-sample-dependent 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
library/nginx:1.27.098f8ec75657d
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

5,362
ciliumnicklasfrahm-ciliumVerified publisher0.7.42 of 6See more

cilium nicklasfrahm-cilium 0.7.4

2 of the 6 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.18.2858f807ea4e2
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
quay.io/cilium/cilium-envoy:v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f77913247932d656b63f
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6

Open the chart page →

7,237
terraform-backendnimbolus0.3.21 of 2See more

terraform-backend nimbolus 0.3.2

1 of the 2 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
library/redis:8.2.24521b581dbdd
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7

Open the chart page →

2,492
redisnineinfra-charts0.7.51 of 1See more

redis nineinfra-charts 0.7.5

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
library/redis:7.2.3a7cee7c8178f
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u7

Open the chart page →

3,950
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

10,296
firehose-corenodeifyVerified publisher1.2.62 of 2See more

firehose-core nodeify 1.2.6

2 of the 2 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
sigp/lighthouse:latest-amd6450f66cfebb6d
gnutls28@3.7.3-4ubuntu1.7
3.7.3-4ubuntu1.9
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6

Open the chart page →

6,586
firehose-ethereumnodeifyVerified publisher1.7.12 of 2See more

firehose-ethereum nodeify 1.7.1

2 of the 2 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
sigp/lighthouse:v8.1.344aa773dcf27
gnutls28@3.7.3-4ubuntu1.8
3.7.3-4ubuntu1.9
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6

Open the chart page →

5,695
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6

Open the chart page →

4,756
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
gnutls28@3.6.13-2ubuntu1.6
3.6.13-2ubuntu1.12+esm2

Open the chart page →

22,795
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
gnutls28@3.7.9-2
3.7.9-2+deb12u7

Open the chart page →

15,210
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
gnutls28@3.7.9-2
3.7.9-2+deb12u7

Open the chart page →

15,282
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
gnutls28@3.7.9-2
3.7.9-2+deb12u7

Open the chart page →

15,266
notifynl-omcnotifynlOfficialVerified publisher0.4.341 of 1See more

notifynl-omc notifynl 0.4.34

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
worthnl/notifynl-omc:2.2.009fca4ed1c71
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

441
example-dev-toolsnoygal0.2.82 of 3See more

example-dev-tools noygal 0.2.8

2 of the 3 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
linuxserver/cloud9:latest45c5fe102ff3
gnutls28@3.5.18-1ubuntu1.5
3.5.18-1ubuntu1.6+esm3
linuxserver/codimd:latestb801bbcf6386
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3

Open the chart page →

27,548
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
gnutls28@3.5.18-1ubuntu1.1
3.5.18-1ubuntu1.6+esm3

Open the chart page →

27,757
firecrawlobeoneVerified publisher3.0.62See more

firecrawl obeone 3.0.6

2 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

—
libretranslateobeoneVerified publisher1.0.71 of 1See more

libretranslate obeone 1.0.7

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
libretranslate/libretranslate:v1.9.61de2d7056bb8
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7

Open the chart page →

2,015
olvid-botobeoneVerified publisher0.3.31 of 1See more

olvid-bot obeone 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
olvid/bot-daemon:2.0.1e0e6b165d879
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6

Open the chart page →

2,103
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
gnutls28@3.8.9-3
3.8.9-3+deb13u4

Open the chart page →

17,161
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
gnutls@3.8.5-r0
3.8.13-r0

Open the chart page →

5,826
mockoidcoidcmockVerified publisher0.0.11 of 1See more

mockoidc oidcmock 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
marcoimme/oidcmock:latestb6035c0721a8
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4

Open the chart page →

2,328
ojp-serverojp0.1.51 of 1See more

ojp-server ojp 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
rrobetti/ojp:0.1.0-beta1141bd88232b
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6

Open the chart page →

2,644
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

5,352
cmsmsoleds-helm-chartsVerified publisher0.1.61 of 1See more

cmsms oleds-helm-charts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:11.4.7-debian-12-r290dc6acb7b2e
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7

Open the chart page →

2,879
db-backupoleds-helm-chartsVerified publisher0.1.01 of 1See more

db-backup oleds-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
oled01/db-backup:0.1.06302fd2b5333
gnutls28@3.7.3-4ubuntu1.1
3.7.3-4ubuntu1.9

Open the chart page →

8,140
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
gnutls28@3.7.3-4ubuntu1.2
3.7.3-4ubuntu1.9

Open the chart page →

9,083
onedevonedev11.9.01 of 1See more

onedev onedev 11.9.0

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
1dev/server:11.9.0cd5b12fe5471
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6

Open the chart page →

6,108
commonground-gatewayopencatalogi1.5.31 of 7See more

commonground-gateway opencatalogi 1.5.3

1 of the 7 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/gateway-ui:stag6a5594b7b32c
gnutls28@3.7.9-2
3.7.9-2+deb12u7

Open the chart page →

9,766
opentickopenchartVerified publisher0.1.01 of 1See more

opentick openchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
library/nginx:1.25.5a484819eb602
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

5,716
bbsimopencord4.8.111 of 1See more

bbsim opencord 4.8.11

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
voltha/bbsim:1.16.7d90403d58016
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3

Open the chart page →

3,915
bbsim-sadis-serveropencord0.3.51 of 1See more

bbsim-sadis-server opencord 0.3.5

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
voltha/bbsim-sadis-server:0.4.0762b272d439e
gnutls28@3.5.18-1ubuntu1.6
3.5.18-1ubuntu1.6+esm3

Open the chart page →

3,729
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
gnutls28@3.5.18-1ubuntu1
3.5.18-1ubuntu1.6+esm3

Open the chart page →

63,509
comac-cuopencord0.1.11 of 4See more

comac-cu opencord 0.1.1

1 of the 4 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
gnutls28@3.5.18-1ubuntu1
3.5.18-1ubuntu1.6+esm3

Open the chart page →

8,065
freeradiusopencord1.0.41 of 1See more

freeradius opencord 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
freeradius/freeradius-server:3.0.2121c8bfa904d8
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm3

Open the chart page →

15,738
mcord-cdn-remoteopencord0.1.61 of 2See more

mcord-cdn-remote opencord 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
woojoong/wowza:latestec230db19652
gnutls28@3.5.18-1ubuntu1
3.5.18-1ubuntu1.6+esm3

Open the chart page →

42,879
mcord-control-planeopencord0.2.21 of 5See more

mcord-control-plane opencord 0.2.2

1 of the 5 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
ngick8stesting/c3po-mmeinit:latest1e764eab77b4
gnutls28@3.5.18-1ubuntu1
3.5.18-1ubuntu1.6+esm3

Open the chart page →

15,684
oaisimopencord0.1.72 of 3See more

oaisim opencord 0.1.7

2 of the 3 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
omecproject/lte-softmodem:1.1.0b5ddd36ec20c
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3
omecproject/lte-uesoftmodem:1.1.0686f8bc37d8c
gnutls28@3.5.18-1ubuntu1.4
3.5.18-1ubuntu1.6+esm3

Open the chart page →

14,574
omec-control-planeopencord0.1.313 of 8See more

omec-control-plane opencord 0.1.31

3 of the 8 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
omecproject/c3po-hssdb:master-latest28a90cc26716
gnutls28@3.6.13-2ubuntu1.3
3.6.13-2ubuntu1.12+esm2
omecproject/mme-exporter:paging-latestbcc5f19fd676
gnutls28@3.5.18-1ubuntu1.2
3.5.18-1ubuntu1.6+esm3
omecproject/ngic-cp:central-cp-multi-upfs-latest24a389a0a4fe
gnutls28@3.5.18-1ubuntu1.3
3.5.18-1ubuntu1.6+esm3

Open the chart page →

40,941
onosopencord3.0.21 of 1See more

onos opencord 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-5260.

Container imageDigestPackageFixed in
onosproject/onos:2.2.144914a8d4b3f
gnutls28@3.5.18-1ubuntu1.2
3.5.18-1ubuntu1.6+esm3

Open the chart page →

12,953

Container images carrying it

1,803 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1

syft 1.42.1 · advisories as of 17 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.