StackRadar

CVE-2026-5419

Low

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,057
of 17,790 indexed, latest versions
Container images
1,140
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,057 of 17,790 indexed charts deploy, on 1,140 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.7.9-2, 3.7.9-2+deb12u1, 3.7.9-2+deb12u2, 3.7.9-2+deb12u3+14 more3.7.9-2+deb12u7, 3.8.3-1.1ubuntu3.6, 3.8.3-1.1ubuntu3.6+Fips1.2, 3.8.9-3+deb13u4+2 more1,099
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r03.8.13-r041
OSV records
ALPINE-CVE-2026-5419DEBIAN-CVE-2026-5419UBUNTU-CVE-2026-5419
Also known as
USN-8284-1

Charts affected

1,057 by stars
ChartLatestAffected imagesRadar Score
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

4,063
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
library/mariadb:ltsdd9b303aed4f
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

5,676
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

11,603
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

7,697
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
hamzaarshad10/querypodpy:1.7154f38e8668e
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
library/mongo:latest5211c51171f5
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
murtazashah46/helmfile:latest4d11726cf803
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

13,783
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6

Open the chart page →

2,142
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

2,684

Container images carrying it

1,140 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
gnutls28@3.8.9-3
3.8.9-3+deb13u4
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u7
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u7
1
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
gnutls28@3.8.3-1.1ubuntu3.3
3.8.3-1.1ubuntu3.6
1
ghcr.io/egos-tech/smtp:1.2.2b5451793ad91
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/enderdash-com/enderdash-agent:latest8525a1a67958
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u7
1
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/flanksource/mission-control-ai-assistant:1.0.1229a635cbeeb5
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/formancehq/console:console-on.v1.1.1a4d32c2f68b3
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
ghcr.io/grycap/im:latest06a16d4f279f
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
gnutls@3.8.8-r0
3.8.13-r0
1
ghcr.io/home-operations/plex:1.43.1a9c3723cb31c
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
gnutls28@3.8.9-3+deb13u1
3.8.9-3+deb13u4
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.666db77d7856c
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/huggingface/text-embeddings-inference:cpu-1.9.3ad950d30878e
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/huscker/townsquare-backend:2.15.2e106681e7673
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/hypolia/kanri:0.1.2-rc4fa7d5cc7fb7d
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
ghcr.io/icegatetech/icegate-ingest:0.1.1bae3c441894a
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/icegatetech/icegate-maintain:0.1.193e85b2b76ee
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/icegatetech/icegate-query:0.1.17542b4e7fff2
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/ignisda/ryot:v10.5.0a752b6aee537
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/iisas/domino-frontend:k8s8e53861be292
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/imgproxy/imgproxy:v3.30.074c1bee92e04
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
gnutls28@3.8.9-3
3.8.9-3+deb13u4
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ghcr.io/itzg/minecraft-server:latest46919d151d39
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/jaydee94/kubeseal-webgui/api:4.5.33cceb9462ae1
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/jespernohr/dayz-dedicated-server:0.1.1ec01d3ac7887
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
gnutls28@3.8.3-1.1ubuntu3.2
3.8.3-1.1ubuntu3.6
1
ghcr.io/jmberesford/retrom-service:retrom-v0.7.144d763d58f11d
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/juicerescue/juicepassproxy:0.5.1984dc4f19162
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
ghcr.io/justarchinet/archisteamfarm:6.3.10.107286b8b41a1
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
gnutls@3.8.8-r0
3.8.13-r0
1

syft 1.42.1 · advisories as of 16 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.