CVE-2026-5419

Low

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.004; 31st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,045; of 17,790 indexed, latest versions
Container images: 1,129; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,045 of 17,790 indexed charts deploy, on 1,129 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.7.9-2, 3.7.9-2+deb12u1, 3.7.9-2+deb12u2, 3.7.9-2+deb12u3+14 more	3.7.9-2+deb12u7, 3.8.3-1.1ubuntu3.6, 3.8.3-1.1ubuntu3.6+Fips1.2, 3.8.9-3+deb13u4+2 more	1,088
gnutlsapk	3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r0	3.8.13-r0	41

OSV records: ALPINE-CVE-2026-5419 DEBIAN-CVE-2026-5419 UBUNTU-CVE-2026-5419
Also known as: USN-8284-1

Charts affected

1,045 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

1,129 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
library/neo4j :2026.02.2	5ab4ab0358cf	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
library/nextcloud :31.0.6-apache	588609d76b21	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
library/nextcloud :31.0.10-apache	b7faa1653c39	gnutls28@3.8.9-3	3.8.9-3+deb13u4	1
library/nginx :1.27.4	09369da6b103	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
library/nginx :1.29	1881968aff6f	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
library/nginx :1.27	6784fb0834aa	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
library/nginx :1.25.1	67f9a4f10d14	gnutls28@3.7.9-2	3.7.9-2+deb12u7	1
library/nginx :1.25.4	9ff236ed47fe	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
library/nginx :1.27.3	fb197595ebe7	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
library/node :20	8f693eaa7e0a	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	1
library/postgres :18.0	073e7c8b84e2	gnutls28@3.8.9-3	3.8.9-3+deb13u4	1
library/postgres :17.4	304ab8135187	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
library/postgres :16.11	468e1f126ca5	gnutls28@3.8.9-3+deb13u1	3.8.9-3+deb13u4	1
library/postgres :16.6	557fea37a744	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
library/postgres :18.3	69e8582b781c	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
library/postgres :15.3	8775adb39f0d	gnutls28@3.7.9-2	3.7.9-2+deb12u7	1
library/postgres :18.3	a9abf4275f9e	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
library/postgres :17.5	aadf2c0696f5	gnutls28@3.8.9-3	3.8.9-3+deb13u4	1
library/postgres :13.12	ced3ba927f4c	gnutls28@3.7.9-2	3.7.9-2+deb12u7	1
library/postgres :14.22	eba8ddbdd837	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
library/postgres :17.5-bookworm	fbcea1bd13b6	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
library/python :3.8	d41127070014	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
library/python :3.9	da5aee29682d	gnutls28@3.8.9-3	3.8.9-3+deb13u4	1
library/rabbitmq :4.3.5	1773ab33af6a	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
library/rabbitmq :4.3.5-management	57bddb6fbc34	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
library/rabbitmq :4.2.8	7561d672fae4	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
library/rabbitmq :4.3.4-management	eb5295d08332	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
library/redis :8.4.0	3906b477e4b6	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
library/redis :8.2.2	4521b581dbdd	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
library/redis :8.2.1	5fa2edb1e408	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
library/redis	83edc2b8e9ff	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
library/redis :8.0.2	b43d2dcbbdb1	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
library/redis :7.4.1	bb142a9c18ac	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
library/redis :8.0.3	be0a135f1955	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
library/redis :8.2.3	d31852005202	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
library/telegraf :1.27	507a3eecf809	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
library/tomcat :11.0.25-jdk17-temurin-noble	9e1d2afa6898	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
library/varnish :7.5.0	4d0bb287d87b	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
library/wordpress :6.4.3-apache	8ae66efb09a2	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
library/wordpress :php8.1-apache	f73396626d2f	gnutls28@3.8.9-3	3.8.9-3+deb13u4	1
library/xwiki :lts-postgres-tomcat	56490ac14a31	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
libretranslate/libretranslate :v1.9.6	1de2d7056bb8	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	1
linuxserver/calibre-web :0.6.24	241009026e6f	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
linuxserver/foldingathome :8.5.6	7477f6455f47	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
linuxserver/foldingathome :7.6.21	9a997426d71e	gnutls28@3.8.3-1.1ubuntu3.1	3.8.3-1.1ubuntu3.6	1
linuxserver/plex :1.43.2	2785a6ad64d3	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
lis314/project-zomboid-docker :latest	aa2089c37920	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
localstack/localstack :3.1	9d278167f2b7	gnutls28@3.7.9-2+deb12u1	3.7.9-2+deb12u7	1
locustio/locust :2.24.1	51d866285170	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
logiqai/flash :v3.10.2	65b996bc7bdc	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1