StackRadar

CVE-2026-69247

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
344
of 17,781 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 2
affected packages

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

Carried by container images the latest versions of 344 of 17,781 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
cryptographypypi44.0.0, 44.0.1, 44.0.2, 44.0.3+18 more50.0.0237
python-cryptographydeb46.0.5-1ubuntu2no fix listed1
OSV records
GHSA-g6cj-pr64-35w5UBUNTU-CVE-2026-69247
Also known as
PYSEC-2026-3552

Charts affected

344 by stars
ChartLatestAffected imagesRadar Score
pgadmin4runixVerified publisher1.66.01 of 1See more

pgadmin4 runix 1.66.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.172f4ce946ddf8
cryptography@49.0.0
50.0.0

Open the chart page →

398
argocd-image-updaterargoOfficialVerified publisher1.3.11 of 1See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
cryptography@47.0.0
50.0.0

Open the chart page →

718
victoria-metrics-k8s-stackvictoriametricsVerified publisher0.92.11 of 7See more

victoria-metrics-k8s-stack victoriametrics 0.92.1

1 of the 7 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
cryptography@49.0.0
50.0.0

Open the chart page →

1,889
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
cryptography@46.0.3
50.0.0

Open the chart page →

5,366
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
cryptography@44.0.0
50.0.0

Open the chart page →

10,622
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
cryptography@48.0.0
50.0.0

Open the chart page →

2,221
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.11 of 2See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
quay.io/stackgres/operator:1.19.1f241b0b20326
cryptography@49.0.0
50.0.0

Open the chart page →

2,119
difydify-helmVerified publisher0.38.02 of 11See more

dify dify-helm 0.38.0

2 of the 11 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
langgenius/dify-agent-backend:1.16.1097d3fd27a7b
cryptography@46.0.7
50.0.0
langgenius/dify-api:1.16.1dcefa5f7c47c
cryptography@49.0.0
50.0.0

Open the chart page →

22,002
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
cryptography@44.0.1
50.0.0

Open the chart page →

16,251
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
cryptography@44.0.1
50.0.0

Open the chart page →

11,384
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
google/cloud-sdk:alpinef7d3e6d6d4f4
cryptography@46.0.7
50.0.0

Open the chart page →

8,364
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
cryptography@45.0.5
50.0.0

Open the chart page →

5,987
ilumilumOfficialVerified publisher6.7.31 of 19See more

ilum ilum 6.7.3

1 of the 19 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ilum/api:6.7.3624fd09528c8
cryptography@49.0.0
50.0.0

Open the chart page →

23,228
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
cryptography@46.0.7
50.0.0

Open the chart page →

4,332
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
cryptography@44.0.1
50.0.0

Open the chart page →

17,245
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
cryptography@48.0.1
50.0.0

Open the chart page →

2,133
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
cryptography@48.0.1
50.0.0

Open the chart page →

2,133
gluugluuOfficialVerified publisher1.8.521 of 5See more

gluu gluu 1.8.52

1 of the 5 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
cryptography@47.0.0
50.0.0

Open the chart page →

227
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
cryptography@46.0.5
50.0.0

Open the chart page →

4,148
lightrun-helm-chartlightrun-helm-chartOfficialVerified publisher3.51.01 of 9See more

lightrun-helm-chart lightrun-helm-chart 3.51.0

1 of the 9 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:8.4.108dbcf531a03a
cryptography@46.0.5
50.0.0

Open the chart page →

463
py-kube-downscalerpy-kube-downscalerVerified publisher0.3.121 of 1See more

py-kube-downscaler py-kube-downscaler 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
cryptography@46.0.7
50.0.0

Open the chart page →

731
abcdesktopabcdesktopOfficialVerified publisher4.4.121 of 9See more

abcdesktop abcdesktop 4.4.12

1 of the 9 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/abcdesktopio/route:4.449c972229c6b
cryptography@46.0.7
50.0.0

Open the chart page →

768
openvpn-asas-helm-chartOfficialVerified publisher0.2.11 of 1See more

openvpn-as as-helm-chart 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
openvpn/openvpn-as:latest2253c10ec652
cryptography@46.0.6
50.0.0

Open the chart page →

2,668
baserowbaserow-chartVerified publisher1.0.561 of 6See more

baserow baserow-chart 1.0.56

1 of the 6 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
baserow/backend:2.3.37c00549b3a6f
cryptography@49.0.0
50.0.0

Open the chart page →

17,263
pgadmincetic0.1.121 of 1See more

pgadmin cetic 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
dpage/pgadmin4:latest2f4ce946ddf8
cryptography@49.0.0
50.0.0

Open the chart page →

398
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
cryptography@45.0.6
50.0.0

Open the chart page →

27,267
dolibarrhelmforgeVerified publisher1.2.181 of 3See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
cryptography@46.0.5
50.0.0

Open the chart page →

4,109
matrixzekker6Verified publisher3.30.01 of 4See more

matrix zekker6 3.30.0

1 of the 4 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.160.078de1d10bef0
cryptography@46.0.7
50.0.0

Open the chart page →

5,557
changedetectionalekcVerified publisher0.14.21 of 1See more

changedetection alekc 0.14.2

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
cryptography@44.0.0
50.0.0

Open the chart page →

2,595
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
hayk96/alerta-web:9.0.486377705e9e3
cryptography@44.0.0
50.0.0

Open the chart page →

3,569
dns-exporterchristianhuthVerified publisher2.6.11 of 1See more

dns-exporter christianhuth 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
tykling/dns_exporter:1.2.3cd6d650c01c1
cryptography@48.0.0
50.0.0

Open the chart page →

458
dumpscriptcloudscriptVerified publisher1.8.31 of 1See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
cryptography@46.0.7
50.0.0

Open the chart page →

2,125
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
cryptography@46.0.5
50.0.0

Open the chart page →

9,316
bscdysnixVerified publisher0.6.591 of 4See more

bsc dysnix 0.6.59

1 of the 4 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine6d35276c2562
cryptography@46.0.7
50.0.0

Open the chart page →

2,012
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
cryptography@48.0.0
50.0.0

Open the chart page →

4,641
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
cryptography@44.0.3
50.0.0

Open the chart page →

2,286
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher1.1.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
cryptography@46.0.5
50.0.0

Open the chart page →

1,447
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
cryptography@48.0.1
50.0.0

Open the chart page →

2,331
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
cryptography@46.0.5
50.0.0

Open the chart page →

4,634
kiali-operatorkiali2.31.01 of 1See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
cryptography@44.0.2
50.0.0

Open the chart page →

1,157
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
cryptography@44.0.3
50.0.0

Open the chart page →

2,866
plausiblesinextraVerified publisher1.1.21 of 1See more

plausible sinextra 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
cryptography@44.0.3
50.0.0

Open the chart page →

859
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
cryptography@48.0.1
50.0.0

Open the chart page →

5,852
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
cryptography@49.0.0
50.0.0

Open the chart page →

9,770
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
cryptography@46.0.3
50.0.0

Open the chart page →

3,804
wgerwgerOfficialVerified publisher1.0.01 of 8See more

wger wger 1.0.0

1 of the 8 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
wger/server:2.6997ead43aabd
cryptography@48.0.1
50.0.0

Open the chart page →

8,491
agentareaagentareaVerified publisher0.0.182 of 16See more

agentarea agentarea 0.0.18

2 of the 16 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latest9e15e16fa758
cryptography@49.0.0
50.0.0
agentarea/agentarea-worker:latest1e5cb68ee77a
cryptography@49.0.0
50.0.0

Open the chart page →

14,914
akeyless-api-gatewayakeyless-services-helmVerified publisher1.62.221 of 1See more

akeyless-api-gateway akeyless-services-helm 1.62.22

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
akeyless/base:latest759e4289fae8
cryptography@46.0.7
50.0.0

Open the chart page →

2,358
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
cryptography@44.0.3
50.0.0

Open the chart page →

12,037
easyhaproxybyjgVerified publisher2.0.41 of 1See more

easyhaproxy byjg 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
byjg/easy-haproxy:6.1.1230fdb7b00ae
cryptography@47.0.0
50.0.0

Open the chart page →

933

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/securo-finance/securo-backend:0.15.162e030110745
cryptography@46.0.7
50.0.0
1
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
cryptography@46.0.5
50.0.0
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
cryptography@46.0.3
50.0.0
1
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
cryptography@44.0.0
50.0.0
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
cryptography@46.0.6
50.0.0
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
cryptography@44.0.0
50.0.0
1
ghcr.io/tarkyaio/tarka:0.4.1e8d3f1512f06
cryptography@46.0.7
50.0.0
1
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
cryptography@49.0.0
50.0.0
1
ghcr.io/vinny1892/octantis:latest45459c0910fc
cryptography@46.0.6
50.0.0
1
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
cryptography@49.0.0
50.0.0
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
cryptography@45.0.6
50.0.0
1
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
cryptography@46.0.7
50.0.0
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
cryptography@48.0.0
50.0.0
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
cryptography@45.0.2
50.0.0
1
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
cryptography@46.0.3
50.0.0
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
cryptography@48.0.0
50.0.0
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
cryptography@46.0.7
50.0.0
1
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
cryptography@44.0.2
50.0.0
1
quay.io/kiwigrid/k8s-sidecar:2.10.021b9fe7bb29d
cryptography@49.0.0
50.0.0
1
quay.io/kiwigrid/k8s-sidecar:2.7.3694950d736c8
cryptography@48.0.0
50.0.0
1
quay.io/kiwigrid/k8s-sidecar:2.6.0a6c101156d42
cryptography@46.0.7
50.0.0
1
quay.io/kubev2v/forklift-operator:release-2.1268657c36c086
cryptography@49.0.0
50.0.0
1
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
cryptography@49.0.0
50.0.0
1
quay.io/opstree/k8s-sidecar:2.7.126aa9bb3386b
cryptography@46.0.7
50.0.0
1
quay.io/opstree/k8s-sidecar:2.7.37075d455b219
cryptography@46.0.7
50.0.0
1
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
cryptography@46.0.3
50.0.0
1
quay.io/ortelius/ms-dep-pkg-cud:main-v10.0.1670-g9abe110c0c881b509a
cryptography@46.0.3
50.0.0
1
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
cryptography@46.0.3
50.0.0
1
quay.io/ortelius/ms-sbom-export:main-v10.0.933-g2e222ef43bdaa51598
cryptography@46.0.3
50.0.0
1
quay.io/ortelius/ms-scorecard:main-v10.0.1276-g966a8a43337e52fdd4
cryptography@46.0.3
50.0.0
1
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
cryptography@46.0.3
50.0.0
1
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
cryptography@46.0.3
50.0.0
1
quay.io/stackgres/operator:1.19.1f241b0b20326
cryptography@49.0.0
50.0.0
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
cryptography@48.0.0
50.0.0
1
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
cryptography@48.0.0
50.0.0
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
cryptography@46.0.5
50.0.0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
cryptography@46.0.3
50.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.