StackRadar

CVE-2026-5419

Low

Advisory

Published 30 Apr 2026In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
3.7
base score, highest
EPSS
0.004
31st percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,057
of 17,787 indexed, latest versions
Container images
1,141
deployed by those charts
Fix available
2 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 1,057 of 17,787 indexed charts deploy, on 1,141 images.

Affected packageAffected versionsFixed inImages
gnutls28deb3.7.9-2, 3.7.9-2+deb12u1, 3.7.9-2+deb12u2, 3.7.9-2+deb12u3+14 more3.7.9-2+deb12u7, 3.8.3-1.1ubuntu3.6, 3.8.3-1.1ubuntu3.6+Fips1.2, 3.8.9-3+deb13u4+2 more1,100
gnutlsapk3.8.5-r0, 3.8.8-r0, 3.8.11-r0, 3.8.12-r03.8.13-r041
OSV records
ALPINE-CVE-2026-5419DEBIAN-CVE-2026-5419UBUNTU-CVE-2026-5419
Also known as
USN-8284-1

Charts affected

1,057 by stars
ChartLatestAffected imagesRadar Score
wordpress-alpinewordpress-alpine1.5.181 of 6See more

wordpress-alpine wordpress-alpine 1.5.18

1 of the 6 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
library/mariadb:12.3.2628f228f0fd5
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

4,032
Wordpresswordpress-mariadb1.0.21 of 2See more

Wordpress wordpress-mariadb 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
library/mariadb:ltsdd9b303aed4f
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2

Open the chart page →

5,635
workshop-pipelinesworkshop-pipelines0.1.61 of 2See more

workshop-pipelines workshop-pipelines 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
ghcr.io/bat-bs/bitnami-pgvector:pg1619ebe07b4daf
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

11,592
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
library/nginx:1.25a484819eb602
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

7,685
xkopsxkops0.1.04 of 5See more

xkops xkops 0.1.0

4 of the 5 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
hamzaarshad10/querybackend:1.6.22c1c3b86a8e7
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
hamzaarshad10/querypodpy:1.7154f38e8668e
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
library/mongo:latest5211c51171f5
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
murtazashah46/helmfile:latest4d11726cf803
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7

Open the chart page →

13,197
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
gnutls28@3.8.3-1.1ubuntu3.1
3.8.3-1.1ubuntu3.6

Open the chart page →

2,136
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-5419.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7

Open the chart page →

2,674

Container images carrying it

1,141 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
deluan/navidrome:0.61.29fa40b3d8dec
gnutls@3.8.12-r0
3.8.13-r0
1
dependencytrack/apiserver:4.14.21ba4f004e1ec
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4
1
devopsgoofy/k8s-platform:latestad865312099f
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
devopshq/artifactory-cleanup:1.0.1830e093bffa91
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
dgraph/dgraph:v24.1.4b57fa31f9b7f
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
diygod/rsshub:2025-11-097a6312cac0d5
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
djjudas21/alertify:0.1.0ba22be670c37
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
dobtc/bitcoin:25.1a870f7cb1105
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
gnutls28@3.8.9-3
3.8.9-3+deb13u4
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
domainmod/domainmod:4.23.04017bfe4c597
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
dragonflyoss/client:v0.1.82edf3e921f4e0
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
drorivry4/rego:lateste035d49b15ca
gnutls28@3.7.9-2+deb12u2
3.7.9-2+deb12u7
1
drumsergio/genieacs:1.2.16.028244054e1bf
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
dserio83/velero-api:0.3.16b3d9115fee2
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
dserio83/velero-watchdog:0.1.8d5deae589229
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
dzikoysk/reposilite:3.5.264128c2d7a6ba
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
dzikoysk/reposilite:3.6.390de4c8e6c0e
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
gnutls@3.8.11-r0
3.8.13-r0
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
gnutls28@3.8.9-3
3.8.9-3+deb13u4
1
eclipseaerios/management-portal-backend:1.2.215fba526a4f8
gnutls@3.8.11-r0
3.8.13-r0
1
eclipseaerios/self-orchestrator:1.2.08b123bec5679
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
elastiflow/flow-collector:7.26.0fee67842e16b
gnutls28@3.8.3-1.1ubuntu3.6
3.8.3-1.1ubuntu3.6+Fips1.2
1
emqx/ecp-ui:2.5.1e33e9816f147
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
emqx/emqx:5.8.935b46f7aa7a0
gnutls28@3.8.9-3
3.8.9-3+deb13u4
1
erigontech/erigon:v2.61.288706754b627
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
erlangsolutions/mongooseim:6.6.0cc5bf032931f
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6
1
escaping/core-keeper-dedicated:latest87fa79255962
gnutls28@3.8.9-3+deb13u2
3.8.9-3+deb13u4
1
esphome/esphome:2024.3.09ab8cc88b28c
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1
esphome/esphome:2024.12.2b2c6322700ac
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1
esphome/esphome:2025.3.0def8b6e4f517
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1
ethersphere/bee:2.2.0a884fd84b72f
gnutls28@3.7.9-2+deb12u1
3.7.9-2+deb12u7
1
ethersphere/beekeeper:lateste4cda693ed63
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
ethpandaops/eleel:mainb8f1b707aee0
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6
1
ethpandaops/observoor:masterc7e5055defcb
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
factoriotools/factorio:2.0.67-rootlessf7909f7361d6
gnutls28@3.8.9-3
3.8.9-3+deb13u4
1
falcosecurity/event-generator:latest932956d86c99
gnutls28@3.7.9-2+deb12u6
3.7.9-2+deb12u7
1
featurehub/dacha2:1.9.1c8d5551b5e40
gnutls@3.8.8-r0
3.8.13-r0
1
featurehub/edge:1.9.198ad426737f6
gnutls@3.8.8-r0
3.8.13-r0
1
featurehub/mr:1.9.1477d8bf771a9
gnutls@3.8.8-r0
3.8.13-r0
1
federid/webhook:0.1.0fbfb7c6510a7
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
felipecs8/app-db-connection-test:v129e06c9c6385
gnutls28@3.7.9-2+deb12u3
3.7.9-2+deb12u7
1
firefart/requesttracker:5.0.40d6249906d8c
gnutls28@3.7.9-2
3.7.9-2+deb12u7
1
flanksource/batch-runner:v1.0.44689687a7cf95
gnutls28@3.8.3-1.1ubuntu3.4
3.8.3-1.1ubuntu3.6
1
flanksource/canary-checker-ui:v1.4.281764c84e550db
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
flanksource/incident-manager-ui:v1.4.318891f21df54fb
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
flashcatcloud/categraf:latest42e6ab16472e
gnutls28@3.8.3-1.1ubuntu3.5
3.8.3-1.1ubuntu3.6
1
fluent/fluent-bit:4.0.4ca08b7d2df5b
gnutls28@3.7.9-2+deb12u4
3.7.9-2+deb12u7
1
fluent/fluent-bit:4.0-debuge76397ef3983
gnutls28@3.7.9-2+deb12u5
3.7.9-2+deb12u7
1
folioci/mod-authtoken:latest995a25a33133
gnutls@3.8.12-r0
3.8.13-r0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.