StackRadar

CVE-2026-69248

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
693
of 17,781 indexed, latest versions
Container images
570
deployed by those charts
Fix available
1 of 2
affected packages

python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

Carried by container images the latest versions of 693 of 17,781 indexed charts deploy, on 570 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+74 more49.0.0570
python-cryptographydeb38.0.4-3, 38.0.4-3+deb12u1, 43.0.0-3+deb13u1, 46.0.5-1ubuntu2no fix listed15
OSV records
DEBIAN-CVE-2026-69248GHSA-m2h6-j472-rp4cPYSEC-2026-3554UBUNTU-CVE-2026-69248

Charts affected

693 by stars
ChartLatestAffected imagesRadar Score
argocd-image-updaterargoOfficialVerified publisher1.3.11 of 1See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
cryptography@47.0.0
49.0.0

Open the chart page →

718
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

30,159
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
cryptography@41.0.7
49.0.0

Open the chart page →

11,367
rook-cephrookOfficialVerified publisher1.20.71 of 2See more

rook-ceph rook 1.20.7

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
rook/ceph:v1.20.72f970c425617
cryptography@36.0.1
49.0.0

Open the chart page →

1,447
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
cryptography@46.0.3
49.0.0

Open the chart page →

5,366
ceph-csi-cephfsceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-cephfs ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
cryptography@36.0.1
49.0.0

Open the chart page →

4,061
ceph-csi-rbdceph-csiOfficialVerified publisher3.17.11 of 6See more

ceph-csi-rbd ceph-csi 3.17.1

1 of the 6 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.17.10b62db8afc9b
cryptography@36.0.1
49.0.0

Open the chart page →

4,061
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
cryptography@37.0.4
49.0.0

Open the chart page →

9,145
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
cryptography@44.0.0
49.0.0

Open the chart page →

10,622
semaphoresemaphoreuiOfficialVerified publisher16.2.21 of 1See more

semaphore semaphoreui 16.2.2

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.18.3e9260bfa8255
cryptography@48.0.0
49.0.0

Open the chart page →

2,221
nacosygqygq2Verified publisher2.1.101 of 4See more

nacos ygqygq2 2.1.10

1 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ygqygq2/mysql-exec-sql:latest54f30def1558
cryptography@41.0.3
49.0.0

Open the chart page →

4,983
stackgres-operatorstackgres-chartsOfficialVerified publisher1.19.11 of 2See more

stackgres-operator stackgres-charts 1.19.1

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
quay.io/stackgres/operator:1.19.1f241b0b20326
cryptography@43.0.1
49.0.0

Open the chart page →

2,119
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
langgenius/dify-agent-backend:1.16.1097d3fd27a7b
cryptography@46.0.7
49.0.0

Open the chart page →

22,002
oncallgrafana1.16.51 of 12See more

oncall grafana 1.16.5

1 of the 12 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
grafana/oncall:v1.16.5499851658393
cryptography@44.0.1
49.0.0

Open the chart page →

16,251
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.3f09282d281f6
cryptography@44.0.1
49.0.0

Open the chart page →

11,384
kube-downscalerdeliveryheroVerified publisher0.7.61 of 1See more

kube-downscaler deliveryhero 0.7.6

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
cryptography@41.0.1
49.0.0

Open the chart page →

4,293
home-assistantgeek-cookbookVerified publisher13.5.01 of 1See more

home-assistant geek-cookbook 13.5.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
cryptography@36.0.2
49.0.0

Open the chart page →

7,705
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
cryptography@42.0.8
49.0.0

Open the chart page →

6,543
stacks-blockchain-apihirosystemsVerified publisher6.5.11 of 5See more

stacks-blockchain-api hirosystems 6.5.1

1 of the 5 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
google/cloud-sdk:alpinef7d3e6d6d4f4
cryptography@46.0.7
49.0.0

Open the chart page →

8,364
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
cryptography@45.0.5
49.0.0

Open the chart page →

5,987
daskdask2024.1.11 of 2See more

dask dask 2024.1.1

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
cryptography@41.0.3
49.0.0

Open the chart page →

12,746
homeassistantvolker-raschekVerified publisher0.2.31 of 1See more

homeassistant volker-raschek 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.12.48d000332b09b
cryptography@41.0.7
49.0.0

Open the chart page →

6,041
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
cryptography@2.7
49.0.0

Open the chart page →

5,851
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
cryptography@39.0.1
49.0.0
stackstorm/st2api:3.86f56d239d280
cryptography@39.0.1
49.0.0
stackstorm/st2auth:3.833ecfda16608
cryptography@39.0.1
49.0.0
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
cryptography@39.0.1
49.0.0
stackstorm/st2notifier:3.8f190a6212195
cryptography@39.0.1
49.0.0
stackstorm/st2rulesengine:3.8259503496ff9
cryptography@39.0.1
49.0.0
stackstorm/st2scheduler:3.8b1de2055c362
cryptography@39.0.1
49.0.0
stackstorm/st2sensorcontainer:3.8b1a338f64773
cryptography@39.0.1
49.0.0
stackstorm/st2stream:3.81c8904a3bf67
cryptography@39.0.1
49.0.0
stackstorm/st2timersengine:3.81bf35bfaf00c
cryptography@39.0.1
49.0.0
stackstorm/st2workflowengine:3.819fdfffdbba8
cryptography@39.0.1
49.0.0

Open the chart page →

96,419
frigateblakeblackshear7.8.01 of 1See more

frigate blakeblackshear 7.8.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
cryptography@43.0.0
49.0.0

Open the chart page →

3,004
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
cryptography@41.0.7
49.0.0

Open the chart page →

2,977
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
cryptography@41.0.7
49.0.0

Open the chart page →

4,556
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
cryptography@46.0.7
49.0.0

Open the chart page →

4,332
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
cryptography@44.0.1
49.0.0

Open the chart page →

17,245
home-assistantalekcVerified publisher2.11.21 of 1See more

home-assistant alekc 2.11.2

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.2a1bc133af84e
cryptography@48.0.1
49.0.0

Open the chart page →

2,133
home-assistantandrenarchyVerified publisher14.103.01 of 1See more

home-assistant andrenarchy 14.103.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.1612d76760b54
cryptography@48.0.1
49.0.0

Open the chart page →

2,133
awx-operatorawx-operator-helm3.2.11 of 2See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
cryptography@41.0.7
49.0.0

Open the chart page →

9,868
uptime-kumaduyet0.1.71 of 1See more

uptime-kuma duyet 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
louislam/uptime-kuma:1.18.5a84767d7934f
cryptography@2.6.1
49.0.0

Open the chart page →

4,515
gluugluuOfficialVerified publisher1.8.521 of 5See more

gluu gluu 1.8.52

1 of the 5 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
cryptography@47.0.0
49.0.0

Open the chart page →

227
wordpresshelmforgeVerified publisher3.0.61 of 3See more

wordpress helmforge 3.0.6

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
cryptography@46.0.5
49.0.0

Open the chart page →

4,148
lightrun-helm-chartlightrun-helm-chartOfficialVerified publisher3.51.01 of 9See more

lightrun-helm-chart lightrun-helm-chart 3.51.0

1 of the 9 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.4.108dbcf531a03a
cryptography@46.0.5
49.0.0

Open the chart page →

463
pmmpercona1.9.11 of 1See more

pmm percona 1.9.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
percona/pmm-server:3.9.1003f9c25f842
cryptography@36.0.1
49.0.0

Open the chart page →

790
py-kube-downscalerpy-kube-downscalerVerified publisher0.3.121 of 1See more

py-kube-downscaler py-kube-downscaler 0.3.12

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
cryptography@46.0.7
49.0.0

Open the chart page →

731
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.11.11da5c38c6a78
cryptography@43.0.1
49.0.0

Open the chart page →

6,168
abcdesktopabcdesktopOfficialVerified publisher4.4.121 of 9See more

abcdesktop abcdesktop 4.4.12

1 of the 9 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/abcdesktopio/route:4.449c972229c6b
cryptography@46.0.7
49.0.0

Open the chart page →

768
openvpn-asas-helm-chartOfficialVerified publisher0.2.11 of 1See more

openvpn-as as-helm-chart 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
openvpn/openvpn-as:latest2253c10ec652
cryptography@46.0.6
49.0.0

Open the chart page →

2,668
fadicetic0.3.14 of 25See more

fadi cetic 0.3.1

4 of the 25 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
cryptography@2.7
49.0.0
ceticasbl/pg-ldap-sync:latest6c0aa7567145
cryptography@2.6.1
49.0.0
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
cryptography@3.2.1
49.0.0
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
cryptography@3.1.1
49.0.0

Open the chart page →

52,919
daskhubdask2024.1.13 of 9See more

daskhub dask 2024.1.1

3 of the 9 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
cryptography@41.0.3
49.0.0
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
cryptography@41.0.7
49.0.0
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
cryptography@41.0.5
49.0.0

Open the chart page →

14,094
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
cryptography@45.0.6
49.0.0

Open the chart page →

27,267
dolibarrhelmforgeVerified publisher1.2.181 of 3See more

dolibarr helmforge 1.2.18

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
cryptography@46.0.5
49.0.0

Open the chart page →

4,109
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
cryptography@41.0.7
49.0.0

Open the chart page →

9,460
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
cryptography@41.0.7
49.0.0
apache/hertzbeat-collector:1.8.0a2bab1be574c
cryptography@41.0.7
49.0.0

Open the chart page →

14,000
netbird-dashboardjaconiVerified publisher1.2.11 of 1See more

netbird-dashboard jaconi 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.90.2332cc31f5f35
cryptography@3.3.2
49.0.0

Open the chart page →

585
taigarc-helm-charts0.1.01 of 7See more

taiga rc-helm-charts 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
taigaio/taiga-back:6.4.29f97323cc150
cryptography@3.4.7
49.0.0

Open the chart page →

7,255
openspeedtestspeedtestVerified publisher0.1.21 of 1See more

openspeedtest speedtest 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
openspeedtest/latest:v2.0.0d4d62f4b7d85
cryptography@38.0.3
49.0.0

Open the chart page →

2,040

Container images carrying it

570 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/kiwigrid/k8s-sidecar:2.7.3694950d736c8
cryptography@48.0.0
49.0.0
1
quay.io/kiwigrid/k8s-sidecar:2.6.0a6c101156d42
cryptography@46.0.7
49.0.0
1
quay.io/netscaler/netscaler-k8s-ingress-controller:4.1.1755b12c2a8440
cryptography@43.0.1
49.0.0
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
cryptography@38.0.1
49.0.0
1
quay.io/opstree/k8s-sidecar:2.7.126aa9bb3386b
cryptography@46.0.7
49.0.0
1
quay.io/opstree/k8s-sidecar:2.7.37075d455b219
cryptography@46.0.7
49.0.0
1
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
cryptography@46.0.3
49.0.0
1
quay.io/ortelius/ms-dep-pkg-cud:main-v10.0.1670-g9abe110c0c881b509a
cryptography@46.0.3
49.0.0
1
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
cryptography@46.0.3
49.0.0
1
quay.io/ortelius/ms-sbom-export:main-v10.0.933-g2e222ef43bdaa51598
cryptography@46.0.3
49.0.0
1
quay.io/ortelius/ms-scorecard:main-v10.0.1276-g966a8a43337e52fdd4
cryptography@46.0.3
49.0.0
1
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
cryptography@46.0.3
49.0.0
1
quay.io/ortelius/ms-validate-user:main-v10.0.1694-g98ed94b5054bd4e97a
cryptography@46.0.3
49.0.0
1
quay.io/stackgres/operator:1.19.1f241b0b20326
cryptography@43.0.1
49.0.0
1
registry.gitlab.com/crafty-controller/crafty-4:latest166a06f73d8c
cryptography@48.0.0
49.0.0
1
registry.gitlab.com/dyff/dyff-orchestrator:0.22.199bd5d93aaff7
cryptography@48.0.0
49.0.0
1
registry.gitlab.com/dyff/workflows-sink:0.16.3564718e28931
cryptography@46.0.5
49.0.0
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
cryptography@3.4.8
49.0.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
cryptography@3.4.8
49.0.0
1
registry.gitlab.com/xrow-public/helm-smtp/postfix:1.3.37eea4f0883dd
cryptography@46.0.3
49.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.