CVE-2026-5419

Low

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026

Severity: Low; worst across findings
CVSS: 3.7; base score, highest
EPSS: 0.004; 31st percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 1,057; of 17,787 indexed, latest versions
Container images: 1,141; deployed by those charts
Fix available: 2 of 2; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,057 of 17,787 indexed charts deploy, on 1,141 images.

Affected package	Affected versions	Fixed in	Images
gnutls28deb	3.7.9-2, 3.7.9-2+deb12u1, 3.7.9-2+deb12u2, 3.7.9-2+deb12u3+14 more	3.7.9-2+deb12u7, 3.8.3-1.1ubuntu3.6, 3.8.3-1.1ubuntu3.6+Fips1.2, 3.8.9-3+deb13u4+2 more	1,100
gnutlsapk	3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r0	3.8.13-r0	41

OSV records: ALPINE-CVE-2026-5419 DEBIAN-CVE-2026-5419 UBUNTU-CVE-2026-5419
Also known as: USN-8284-1

Charts affected

1,057 by stars

Chart

Latest

Affected images

Radar Score

wordpress-alpinewordpress-alpine

1.5.18

1 of 6 See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-5419.

Container image	Digest	Package	Fixed in
library/mariadb :12.3.2	628f228f0fd5	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

4,032

Wordpresswordpress-mariadb

1.0.2

1 of 2 See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-5419.

Container image	Digest	Package	Fixed in
library/mariadb :lts	dd9b303aed4f	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

5,635

workshop-pipelinesworkshop-pipelines

0.1.6

1 of 2 See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-5419.

Container image	Digest	Package	Fixed in
ghcr.io/bat-bs/bitnami-pgvector :pg16	19ebe07b4daf	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7

Open the chart page →

11,592

tabbyxd

1.0.6

1 of 2 See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-5419.

Container image	Digest	Package	Fixed in
library/nginx :1.25	a484819eb602	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7

Open the chart page →

7,685

xkopsxkops

0.1.0

4 of 5 See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-5419.

Container image	Digest	Package	Fixed in
hamzaarshad10/querybackend :1.6.2	2c1c3b86a8e7	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
hamzaarshad10/querypodpy :1.7	154f38e8668e	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7
library/mongo :latest	5211c51171f5	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2
murtazashah46/helmfile :latest	4d11726cf803	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7

Open the chart page →

13,197

xlinexline

0.0.1

1 of 1 See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5419.

Container image	Digest	Package	Fixed in
ghcr.io/liangyuanpeng/xline :latest	3d2eceb44a3b	gnutls28@3.8.3-1.1ubuntu3.1	3.8.3-1.1ubuntu3.6

Open the chart page →

2,136

api-snapyoukadev

0.1.1

1 of 1 See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5419.

Container image	Digest	Package	Fixed in
youkadev/api-snap :0.1.1	4db0f9428e67	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7

Open the chart page →

2,674

Container images carrying it

1,141 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container image	Digest	Package	Fixed in	Used by
boky/postfix :4.4.0	f3f247fd4252	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
btcpayserver/tor :0.4.8.10	e9585b68dc6b	gnutls28@3.7.9-2	3.7.9-2+deb12u7	1
budibase/database :2.1.0	d90f656261c9	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	1
calltelemetry/web :0.8.1-rc72	05d13269e350	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
camptocamp/mapserver :latest	bf2e8e118c9b	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
carlosmz87/test_helm_backend :latest	8ffa63aa995d	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
castlemock/castlemock :latest	b7f3f1527ba9	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6	1
castopod/castopod :1.12.10	1fd37280cbb2	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
castopod/castopod :1.15.5	4e4f0440520f	gnutls28@3.8.9-3+deb13u1	3.8.9-3+deb13u4	1
cbioportal/cbioportal :6.4.1-web-shenandoah	08debbd2dbf9	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
censedata/floating-server :v1.6.3	ebfffb9dd4c0	gnutls@3.8.8-r0	3.8.13-r0	1
chainsafe/lodestar :v1.27.0	7b9fe4aa8073	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
chiefonboarding/chiefonboarding :v2.4.1	59bc7aa60fe7	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
ckulka/baikal :0.10.1-nginx	434bdd162247	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
clowder/clowder2-backend :2.0.0-beta.4	11f3d844e4c0	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
clowder/clowder2-heartbeat :2.0.0-beta.4	14155326c7b9	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
clowder/clowder2-messages :2.0.0-beta.4	bf146f1ca24f	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
cm2network/squad :latest	8cba47f53df5	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
collabora/code :24.04.13.2.1	01dc4ab83977	gnutls28@3.7.9-2+deb12u4	3.7.9-2+deb12u7	1
collabora/code :23.05.10.1.1	05299b452f7f	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
consensys/teku :latest	3a4f5761ae1c	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
consensys/teku :25.4.1	bf6ecd2ea716	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.6	1
contentsquareplatform/chproxy :v1.26.5	24555f22d4be	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
cortezaproject/corteza-server-corredor :2024.9.4	4ea78dfe5364	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
coturn/coturn :4.10.0-r1	f4c2af06c3c5	gnutls28@3.8.9-3+deb13u2	3.8.9-3+deb13u4	1
cspconsole/config-provider :1.0.36	5524a26a6c23	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	1
cspconsole/csp-control-center :1.0.10	46dda4a31bd6	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	1
cspconsole/report-collector :1.0.158	39750248193b	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	1
cspconsole/report-processor :1.0.27	9a2d8840bfdf	gnutls28@3.7.9-2+deb12u6	3.7.9-2+deb12u7	1
cubejs/cubestore :v1.5.3	34ac523a9bab	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
curtismager20/mcp-orchestrator :3.8.23	1f11a1001dab	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
cybrarist/discount-bandit :v4.0.4	e9e2447ac666	gnutls28@3.8.9-3	3.8.9-3+deb13u4	1
dachichang/basic-auth-s3-nginx :1.0.0	7ccac90a935e	gnutls28@3.7.9-2	3.7.9-2+deb12u7	1
danialnabiyan1382/lsdisk :v2.0.8	f96a7ebf1f42	gnutls28@3.7.9-2+deb12u5	3.7.9-2+deb12u7	1
dannielkil/book-frontend :latest	937993927694	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
darthsim/imgproxy :v3.30.1	3b709e4a0e5e	gnutls28@3.8.3-1.1ubuntu3.4	3.8.3-1.1ubuntu3.6	1
darthsim/imgproxy :v3.26	476cb08c816a	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6	1
darthsim/imgproxy :v3.29.1	7d12c7c8fc66	gnutls28@3.8.3-1.1ubuntu3.3	3.8.3-1.1ubuntu3.6	1
darthsim/imgproxy :latest	f247c72df1d7	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
datadog/agent :6	aad9994de6a7	gnutls28@3.8.3-1.1ubuntu3.2	3.8.3-1.1ubuntu3.6	1
datafuselabs/databend-meta :v1.2.279	ba877ee6cb4d	gnutls28@3.7.9-2+deb12u1	3.7.9-2+deb12u7	1
datafuselabs/databend-query :v1.2.279	a936843b85b4	gnutls28@3.7.9-2+deb12u1	3.7.9-2+deb12u7	1
dbeaver/cloudbeaver :26.1.2	87ab86d00f8c	gnutls28@3.8.3-1.1ubuntu3.6	3.8.3-1.1ubuntu3.6+Fips1.2	1
ddosify/alaz :v0.12.0	ea602056d9ce	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
ddosify/selfhosted_alaz_backend :1.0.6	a43c5155fa1c	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
ddosify/selfhosted_backend :3.2.9	3c11e3182652	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
ddosify/selfhosted_backend :2.6.11	ac323d52bfb4	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
ddosify/selfhosted_hammermanager :2.0.2	b796b8c73011	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1
deconzcommunity/deconz :2.29.2	062de2362641	gnutls28@3.7.9-2+deb12u3	3.7.9-2+deb12u7	1
defactops/defactops-backend :1.0.23	07b663c0092a	gnutls28@3.7.9-2+deb12u2	3.7.9-2+deb12u7	1