StackRadar

CVE-2026-69248

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
698
of 17,787 indexed, latest versions
Container images
576
deployed by those charts
Fix available
1 of 2
affected packages

python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

Carried by container images the latest versions of 698 of 17,787 indexed charts deploy, on 576 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+74 more49.0.0576
python-cryptographydeb38.0.4-3, 38.0.4-3+deb12u1, 43.0.0-3+deb13u1, 46.0.5-1ubuntu2no fix listed15
OSV records
DEBIAN-CVE-2026-69248GHSA-m2h6-j472-rp4cPYSEC-2026-3554UBUNTU-CVE-2026-69248

Charts affected

698 by stars
ChartLatestAffected imagesRadar Score
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
cryptography@45.0.6
49.0.0

Open the chart page →

2,383
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
cryptography@46.0.2
49.0.0

Open the chart page →

4,788
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
cryptography@46.0.3
49.0.0

Open the chart page →

3,866
plausiblepascaliskeVerified publisher2.0.01 of 1See more

plausible pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
cryptography@42.0.7
49.0.0

Open the chart page →

959
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
cryptography@45.0.4
49.0.0

Open the chart page →

15,077
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
cryptography@38.0.1
49.0.0

Open the chart page →

22,146
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
plausibleplausible0.1.21 of 2See more

plausible plausible 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
cryptography@42.0.7
49.0.0

Open the chart page →

1,337
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
cryptography@2.8
49.0.0

Open the chart page →

11,153
tenant-namespace-operatorpnnl-miscscripts0.1.281 of 1See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
cryptography@41.0.3
49.0.0

Open the chart page →

12,754
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

28,495
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
cryptography@43.0.0
49.0.0

Open the chart page →

4,996
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

5,234
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
cryptography@48.0.0
49.0.0

Open the chart page →

3,312
flaskDiaryptj-miniproject2.1.22 of 2See more

flaskDiary ptj-miniproject 2.1.2

2 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
freedom98/flask:k3.0d7ce1533f297
cryptography@45.0.4
49.0.0
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

2,965
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
cryptography@39.0.2
49.0.0

Open the chart page →

4,614
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

6,667
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
cryptography@42.0.7
49.0.0

Open the chart page →

11,400
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
cryptography@42.0.7
49.0.0

Open the chart page →

11,400
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
cryptography@46.0.0
49.0.0

Open the chart page →

4,231
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
cryptography@42.0.8
49.0.0

Open the chart page →

20,812
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
cryptography@44.0.1
49.0.0

Open the chart page →

9,389
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
cryptography@41.0.7
49.0.0

Open the chart page →

5,269
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
iparedhat-cop1.3.91 of 1See more

ipa redhat-cop 1.3.9

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
quay.io/freeipa/freeipa-server:fedora-39-4.11.1d422ee50c2c3
cryptography@41.0.7
49.0.0

Open the chart page →

951
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
cryptography@3.4.8
49.0.0

Open the chart page →

2,201
delugeretsamedocVerified publisher26.9.01 of 1See more

deluge retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
linuxserver/deluge:2.2.09505c64720af
cryptography@48.0.1
49.0.0

Open the chart page →

782
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
cryptography@42.0.2
49.0.0

Open the chart page →

6,562
kube-web-viewrlex0.5.01 of 1See more

kube-web-view rlex 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:23.8.0431f1bf013d0
cryptography@41.0.1
49.0.0

Open the chart page →

4,315
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

15,623
olivetinrm3lVerified publisher0.2.01 of 1See more

olivetin rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
cryptography@41.0.7
49.0.0

Open the chart page →

1,370
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
cryptography@43.0.3
49.0.0

Open the chart page →

9,275
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
cryptography@43.0.3
49.0.0

Open the chart page →

9,152

Container images carrying it

576 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
cryptography@46.0.5
49.0.0
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
cryptography@46.0.3
49.0.0
1
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
cryptography@44.0.0
49.0.0
1
ghcr.io/dgtlmoon/changedetection.io:0.60.6eb4a9f718801
cryptography@44.0.0
49.0.0
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
cryptography@3.4.8
49.0.0
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
cryptography@3.3.2
49.0.0
1
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
cryptography@43.0.0
49.0.0
1
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
cryptography@37.0.2
49.0.0
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
cryptography@42.0.8
49.0.0
1
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
cryptography@48.0.0
49.0.0
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
cryptography@46.0.7
49.0.0
1
ghcr.io/gabe565/obico/web:latesta5c1daef46c0
cryptography@44.0.0
49.0.0
1
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
cryptography@41.0.7
49.0.0
1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
cryptography@46.0.7
49.0.0
1
ghcr.io/gluufederation/flex/admin-ui:0.0.0-nightlyeab2795cc9e7
cryptography@46.0.7
49.0.0
1
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
cryptography@46.0.5
49.0.0
1
ghcr.io/goauthentik/server:2026.5.6ed120caf710c
cryptography@48.0.0
49.0.0
1
ghcr.io/grycap/im:latest06a16d4f279f
cryptography@46.0.1
49.0.0
1
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
cryptography@44.0.1
49.0.0
1
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
cryptography@48.0.1
49.0.0
1
ghcr.io/home-assistant/home-assistant:2026.8.256690a89c79a
cryptography@48.0.1
49.0.0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
cryptography@46.0.2
49.0.0
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
cryptography@36.0.2
49.0.0
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
cryptography@41.0.4
49.0.0
1
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
cryptography@46.0.5
49.0.0
1
ghcr.io/home-operations/tautulli:2.17.12183820d45a1
cryptography@46.0.7
49.0.0
1
ghcr.io/hoverkraft-tech/ovh-snapshoter/app:0.4.1010d271f08ab3
cryptography@43.0.3
49.0.0
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
cryptography@46.0.5
49.0.0
1
ghcr.io/iisas/domino-rest:latest3009350bfc11
cryptography@45.0.7
49.0.0
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
cryptography@41.0.7
49.0.0
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
cryptography@41.0.7
49.0.0
1
ghcr.io/juniorjpdj/mumbledj:latest558cb7e2604d
cryptography@47.0.0
49.0.0
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
cryptography@3.4.7
49.0.0
1
ghcr.io/karakeep-app/karakeep:0.27.1abd7d6b11b1b
cryptography@44.0.3
49.0.0
1
ghcr.io/karakeep-app/karakeep:0.26.0f575a34ed3f8
cryptography@44.0.3
49.0.0
1
ghcr.io/kokuwaio/gcloud-mysql:v3.2.1963098135c550
cryptography@42.0.7
49.0.0
1
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
cryptography@43.0.3
49.0.0
1
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
cryptography@44.0.3
49.0.0
1
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
cryptography@3.3.2
49.0.0
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
cryptography@42.0.8
49.0.0
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
cryptography@41.0.7
49.0.0
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
cryptography@41.0.7
49.0.0
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
cryptography@46.0.3
49.0.0
1
ghcr.io/microboxlabs/miot-harness:0.1.0d548e9ae4b84
cryptography@48.0.1
49.0.0
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
cryptography@42.0.6
49.0.0
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
cryptography@46.0.3
49.0.0
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
cryptography@46.0.6
49.0.0
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
cryptography@48.0.0
49.0.0
1
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
cryptography@41.0.7
49.0.0
1
ghcr.io/openappsec/openappsec-waf-webhook:1.1.345b979b962043
cryptography@46.0.7
49.0.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.