StackRadar

CVE-2026-5419

Low

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,057
of 17,790 indexed, latest versions
Container images
1,140
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,057 of 17,790 indexed charts deploy, on 1,140 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.7.9-2, 3.7.9-2+deb12u1, 3.7.9-2+deb12u2, 3.7.9-2+deb12u3+14 more3.7.9-2+deb12u7, 3.8.3-1.1ubuntu3.6, 3.8.3-1.1ubuntu3.6+Fips1.2, 3.8.9-3+deb13u4+2 more1,099
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r03.8.13-r041
OSV records
ALPINE-CVE-2026-5419DEBIAN-CVE-2026-5419UBUNTU-CVE-2026-5419
Also known as
USN-8284-1

Charts affected

1,057 by stars
ChartLatestAffected imagesRadar Score
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

4,063
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
library/mariadb:ltsdd9b303aed4f
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

5,676
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

11,603
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

7,697
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
hamzaarshad10/querypodpy:1.7154f38e8668e
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
library/mongo:latest5211c51171f5
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
murtazashah46/helmfile:latest4d11726cf803
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

13,783
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6

Open the chart page →

2,142
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

2,684

Container images carrying it

1,140 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/abcdesktopio/mongo:safe8.0c4c1938a973b
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/aetrius/msockperf-client/msockperf-client:main820af919c5e2
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6
1
ghcr.io/aetrius/msockperf-server/msockperf-server:main46ae4ea003e0
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6
1
ghcr.io/alethic/auth0-operator-image:1.4.122468990a8521
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/alexmorbo/dell_idrac_fan_controller:v0.1.6-1d110504d551d
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/almarklein/timetagger:v26.1.3-nonroot18a81afcb249
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/alpineworks/katalog-migrations:v1.0.562c44a384e13
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/analogj/scrutiny:master-omnibus18689773150d
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/analogj/scrutiny:v0.9.2-web71be54e99608
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4
1
ghcr.io/angelscloud/prometheus-optimizer:latest744bc929a579
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
ghcr.io/appscode/csi-driver-cacerts:v0.5.0b6bf1888f9d5
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
gnutls28@3.8.9-3
3.8.9-3+deb13u4
1
ghcr.io/argoproj-labs/mcp-for-argocd:v0.9.0dffc6c719d86
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/astradns/astradns-agent:v0.2.9-unbound6ba69487f1b0
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/astriaorg/account-monitor:latest4c8b42890035
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/astriaorg/auctioneer:pr-18391386b7b5e555
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/astriaorg/conductor:1.1.01f97d131b1d1
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/astriaorg/evm-bridge-withdrawer:1.0.29c88e1aff357
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/astriaorg/hermes:0.5.04f33a0a9f75e
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/astriaorg/sequencer:latest44f82ee0b24c
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/astriaorg/sequencer-relayer:latest5f6c74993f08
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/atuinsh/atuin:18.12.0e953fa9e36ef
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/blockscout/smart-contract-verifier:main9a43f0cc5797
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/botify-labs/airbyte_exporter:2.3.02105b1f33013
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u7
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/caninehq/canine:latesta058034ca006
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/chaos-mesh/chaos-daemon:v2.8.0fb609bc264d9
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.7.211cdbbc479b3
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/chaos-mesh/chaos-dashboard:v2.8.0e7f9e8f1d565
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/cleanuparr/cleanuparr:2.10.68136c3beda7a
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/cosmicrocks/datum:v0.4.0beta76771c3cc8c3
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
gnutls28@3.8.9-3+deb13u1
3.8.9-3+deb13u4
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
gnutls28@3.8.9-3
3.8.9-3+deb13u4
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.