StackRadar

CVE-2026-69247

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.2
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
344
of 17,781 indexed, latest versions
Container images
237
deployed by those charts
Fix available
1 of 2
affected packages

cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing

Carried by container images the latest versions of 344 of 17,781 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
cryptographypypi44.0.0, 44.0.1, 44.0.2, 44.0.3+18 more50.0.0237
python-cryptographydeb46.0.5-1ubuntu2no fix listed1
OSV records
GHSA-g6cj-pr64-35w5UBUNTU-CVE-2026-69247
Also known as
PYSEC-2026-3552

Charts affected

344 by stars
ChartLatestAffected imagesRadar Score
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
cryptography@45.0.2
50.0.0

Open the chart page →

9,971
aibrixdanchevVerified publisher0.7.01 of 5See more

aibrix danchev 0.7.0

1 of the 5 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
aibrix/metadata-service:v0.7.063fb81a64377
cryptography@49.0.0
50.0.0

Open the chart page →

5,274
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
cryptography@44.0.1
50.0.0

Open the chart page →

9,205
craftycontrollerdrewburr-labs-helm-chartsVerified publisher0.3.01 of 1See more

craftycontroller drewburr-labs-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
cryptography@48.0.0
50.0.0

Open the chart page →

3,671
dyff-orchestratordyff-orchestratorVerified publisher0.22.191 of 1See more

dyff-orchestrator dyff-orchestrator 0.22.19

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
cryptography@48.0.0
50.0.0

Open the chart page →

1,354
copypartyernail-copyparty2.0.01 of 1See more

copyparty ernail-copyparty 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
copyparty/ac:1.19.200a0a8605062c
cryptography@44.0.3
50.0.0

Open the chart page →

1,685
taigafermosit0.0.111 of 7See more

taiga fermosit 0.0.11

1 of the 7 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
cryptography@46.0.3
50.0.0

Open the chart page →

8,496
home-assistantgabe565Verified publisher0.17.01 of 1See more

home-assistant gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:latest612d76760b54
cryptography@48.0.1
50.0.0

Open the chart page →

2,133
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
cryptography@44.0.0
50.0.0

Open the chart page →

1,965
gluugluu-flexOfficialVerified publisher0.0.0-nightly1 of 9See more

gluu gluu-flex 0.0.0-nightly

1 of the 9 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/gluufederation/flex/admin-ui:0.0.0-nightlyeab2795cc9e7
cryptography@46.0.7
50.0.0

Open the chart page →

1,507
IMgrycapOfficialVerified publisher1.8.02 of 3See more

IM grycap 1.8.0

2 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
cryptography@46.0.5
50.0.0
ghcr.io/grycap/im:latest06a16d4f279f
cryptography@46.0.1
50.0.0

Open the chart page →

4,132
matomohelmforgeVerified publisher2.3.01 of 3See more

matomo helmforge 2.3.0

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:9.7.2b2cf29815e62
cryptography@46.0.5
50.0.0

Open the chart page →

2,680
hpe-greenlake-file-csi-driverhpe-storageVerified publisher2.6.41 of 7See more

hpe-greenlake-file-csi-driver hpe-storage 2.6.4

1 of the 7 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
cryptography@46.0.3
50.0.0

Open the chart page →

6,095
spoolmanideaplexusVerified publisher2.7.11 of 1See more

spoolman ideaplexus 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
cryptography@49.0.0
50.0.0

Open the chart page →

1,779
backendikusi-bk-chart1.0.32 of 3See more

backend ikusi-bk-chart 1.0.3

2 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
kyovint/kyoimgtransactions:1.0.048c19e3ae9a3
cryptography@45.0.7
50.0.0
kyovint/kyoimgusers:1.0.080084149156e
cryptography@45.0.7
50.0.0

Open the chart page →

5,940
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
cryptography@46.0.3
50.0.0

Open the chart page →

11,764
jupyterhub-outpostjupyter-jscVerified publisher2.4.11 of 1See more

jupyterhub-outpost jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
cryptography@46.0.7
50.0.0

Open the chart page →

1,678
tautullik8s-home-lab-repo12.3.01 of 1See more

tautulli k8s-home-lab-repo 12.3.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/home-operations/tautulli:2.17.12183820d45a1
cryptography@46.0.7
50.0.0

Open the chart page →

1,129
netbirdkitstream-netbird0.7.01 of 3See more

netbird kitstream-netbird 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.91.0aae926912ca4
cryptography@47.0.0
50.0.0

Open the chart page →

1,291
hertzbeatkubesphere-testVerified publisher1.4.11 of 4See more

hertzbeat kubesphere-test 1.4.1

1 of the 4 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
cryptography@46.0.5
50.0.0

Open the chart page →

7,710
kuma-ingress-watcherkuma-ingress-watcherVerified publisher1.4.01 of 1See more

kuma-ingress-watcher kuma-ingress-watcher 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
cryptography@44.0.0
50.0.0

Open the chart page →

2,662
music-assistant-serverlmatfyVerified publisher0.1.91 of 1See more

music-assistant-server lmatfy 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
cryptography@46.0.3
50.0.0

Open the chart page →

7,201
locustlocustVerified publisher0.1.41 of 1See more

locust locust 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
hansehe/locust:1.1.0bc8e45262bc4
cryptography@44.0.2
50.0.0

Open the chart page →

2,757
Practica_4_Recuperacion_helmmca-03-02-practica4-recuperacionVerified publisher1.0.11 of 6See more

Practica_4_Recuperacion_helm mca-03-02-practica4-recuperacion 1.0.1

1 of the 6 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
cryptography@46.0.5
50.0.0

Open the chart page →

19,187
opentelemetry-demoopentelemetry-helmVerified publisher0.41.13 of 34See more

opentelemetry-demo opentelemetry-helm 0.41.1

3 of the 34 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.0.0-mcp654f860148ba
cryptography@49.0.0
50.0.0
ghcr.io/open-telemetry/demo:3.0.0-agentdf5ee05e23e3
cryptography@49.0.0
50.0.0
quay.io/kiwigrid/k8s-sidecar:2.8.1abb55b2165c6
cryptography@49.0.0
50.0.0

Open the chart page →

22,420
palworldpalworld-server-chartVerified publisher2.7.11 of 1See more

palworld palworld-server-chart 2.7.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
cryptography@48.0.1
50.0.0

Open the chart page →

3,681
home-assistantpree-helm-chartsVerified publisher1.80.01 of 1See more

home-assistant pree-helm-charts 1.80.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
cryptography@48.0.1
50.0.0

Open the chart page →

2,133
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
gpappsoft/privacyidea-docker:3.12.2af7841adad26
cryptography@44.0.2
50.0.0

Open the chart page →

5,440
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
cryptography@46.0.7
50.0.0

Open the chart page →

8,158
sceptresceptreai0.1.122 of 5See more

sceptre sceptreai 0.1.12

2 of the 5 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
cryptography@48.0.1
50.0.0
maponyacharles/sceptreai:api-0.1.127b37b092130a
cryptography@48.0.1
50.0.0

Open the chart page →

4,369
securosecuroVerified publisher0.15.11 of 4See more

securo securo 0.15.1

1 of the 4 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/securo-finance/securo-backend:0.15.162e030110745
cryptography@46.0.7
50.0.0

Open the chart page →

3,436
karakeepself-hosters-by-nightVerified publisher2.5.11 of 1See more

karakeep self-hosters-by-night 2.5.1

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
cryptography@44.0.3
50.0.0

Open the chart page →

5,213
sentry-k8ssentry-k8sVerified publisher1.4.12 of 11See more

sentry-k8s sentry-k8s 1.4.1

2 of the 11 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
cryptography@49.0.0
50.0.0
ghcr.io/getsentry/snuba:26.7.210f8d164109b
cryptography@46.0.7
50.0.0

Open the chart page →

16,449
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
cryptography@44.0.0
50.0.0

Open the chart page →

2,928
streamlit-appstreamlit-appVerified publisher0.2.01 of 1See more

streamlit-app streamlit-app 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
sruthitanneru/pi-sample:ui-lateste565ea454ffd
cryptography@44.0.0
50.0.0

Open the chart page →

1,696
tocktock0.6.31 of 9See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
cryptography@46.0.4
50.0.0

Open the chart page →

12,907
taigaunxwaresVerified publisher2026.3.81 of 6See more

taiga unxwares 2026.3.8

1 of the 6 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
cryptography@46.0.3
50.0.0

Open the chart page →

9,148
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
50.0.0

Open the chart page →

7,696
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:885b9bf2e29cf
cryptography@46.0.5
50.0.0

Open the chart page →

8,217
workflows-sinkworkflows-sinkVerified publisher0.16.31 of 1See more

workflows-sink workflows-sink 0.16.3

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
cryptography@46.0.5
50.0.0

Open the chart page →

1,397
changedetection-iozekker6Verified publisher1.99.01 of 1See more

changedetection-io zekker6 1.99.0

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
cryptography@44.0.0
50.0.0

Open the chart page →

2,595
plausible-analyticszekker6Verified publisher1.4.01 of 2See more

plausible-analytics zekker6 1.4.0

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
cryptography@44.0.3
50.0.0

Open the chart page →

1,170
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.23.73b3a670af168
cryptography@49.0.0
50.0.0

Open the chart page →

12,473
akeyless-gatewayakeyless-services-helmVerified publisher3.5.31 of 2See more

akeyless-gateway akeyless-services-helm 3.5.3

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
akeyless/gateway:5.3.13d2e7dce5eb9
cryptography@48.0.1
50.0.0

Open the chart page →

1,522
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
aktosecurity/akto-agent-guard-anonymizer:1.1.4d4b100cbdc47
cryptography@49.0.0
50.0.0

Open the chart page →

9,321
akto-mini-testingakto1.45.71 of 5See more

akto-mini-testing akto 1.45.7

1 of the 5 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
cryptography@49.0.0
50.0.0

Open the chart page →

6,486
akto-regional-setupakto1.3.11 of 9See more

akto-regional-setup akto 1.3.1

1 of the 9 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
aktosecurity/akto-agent-guard-anonymizer:1.1.6cc9aac5cf7ef
cryptography@48.0.1
50.0.0

Open the chart page →

7,603
allure-docker-helm-chartallure-service-chartVerified publisher0.1.01 of 2See more

allure-docker-helm-chart allure-service-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:latestdc171ec796d5
cryptography@48.0.1
50.0.0

Open the chart page →

3,647
pagesalstom-pages-app1.0.01 of 3See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
50.0.0

Open the chart page →

20,190
music-assistant-serverandibraeuVerified publisher2.1.21 of 1See more

music-assistant-server andibraeu 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-69247.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.9.950666a6f8d7f
cryptography@49.0.0
50.0.0

Open the chart page →

5,817

Container images carrying it

237 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/securo-finance/securo-backend:0.15.162e030110745
cryptography@46.0.7
50.0.0
1
ghcr.io/shadrus/srebot:0.14.09b4415e937b2
cryptography@46.0.5
50.0.0
1
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
cryptography@46.0.3
50.0.0
1
ghcr.io/squent/kuma-ingress-watcher:1.7.014d45b2a1f00
cryptography@44.0.0
50.0.0
1
ghcr.io/stirling-tools/stirling-pdf:2.14.33b3670fce70b
cryptography@46.0.6
50.0.0
1
ghcr.io/tandoorrecipes/recipes:1.5.31063eb446e298
cryptography@44.0.0
50.0.0
1
ghcr.io/tarkyaio/tarka:0.4.1e8d3f1512f06
cryptography@46.0.7
50.0.0
1
ghcr.io/unique-ag/ai/search-proxy:2026.38.0aa6699b027bb
cryptography@49.0.0
50.0.0
1
ghcr.io/vinny1892/octantis:latest45459c0910fc
cryptography@46.0.6
50.0.0
1
public.ecr.aws/aktosecurity/akto-ai-automated-testing:latest5a5d32281374
cryptography@49.0.0
50.0.0
1
public.ecr.aws/datadog/agent:7.73.0f4925b15ce94
cryptography@45.0.6
50.0.0
1
quay.io/argoprojlabs/argocd-image-updater:v1.2.13c56f354fac5
cryptography@46.0.7
50.0.0
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
cryptography@48.0.0
50.0.0
1
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
cryptography@45.0.2
50.0.0
1
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
cryptography@46.0.3
50.0.0
1
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
cryptography@48.0.0
50.0.0
1
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
cryptography@46.0.7
50.0.0
1
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
cryptography@44.0.2
50.0.0
1
quay.io/kiwigrid/k8s-sidecar:2.10.021b9fe7bb29d
cryptography@49.0.0
50.0.0
1
quay.io/kiwigrid/k8s-sidecar:2.7.3694950d736c8
cryptography@48.0.0
50.0.0
1
quay.io/kiwigrid/k8s-sidecar:2.6.0a6c101156d42
cryptography@46.0.7
50.0.0
1
quay.io/kubev2v/forklift-operator:release-2.1268657c36c086
cryptography@49.0.0
50.0.0
1
quay.io/ocellusai/operator:v0.10.59ff01f642e2b
cryptography@49.0.0
50.0.0
1
quay.io/opstree/k8s-sidecar:2.7.126aa9bb3386b
cryptography@46.0.7
50.0.0
1
quay.io/opstree/k8s-sidecar:2.7.37075d455b219
cryptography@46.0.7
50.0.0
1
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
cryptography@46.0.3
50.0.0
1
quay.io/ortelius/ms-dep-pkg-cud:main-v10.0.1670-g9abe110c0c881b509a
cryptography@46.0.3
50.0.0
1
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
cryptography@46.0.3
50.0.0
1
quay.io/ortelius/ms-sbom-export:main-v10.0.933-g2e222ef43bdaa51598
cryptography@46.0.3
50.0.0
1
quay.io/ortelius/ms-scorecard:main-v10.0.1276-g966a8a43337e52fdd4
cryptography@46.0.3
50.0.0
1
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
cryptography@46.0.3
50.0.0
1
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
cryptography@46.0.3
50.0.0
1
quay.io/stackgres/operator:1.19.1f241b0b20326
cryptography@49.0.0
50.0.0
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
cryptography@48.0.0
50.0.0
1
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
cryptography@48.0.0
50.0.0
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
cryptography@46.0.5
50.0.0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
cryptography@46.0.3
50.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.