StackRadar

CVE-2026-69248

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
698
of 17,787 indexed, latest versions
Container images
576
deployed by those charts
Fix available
1 of 2
affected packages

python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

Carried by container images the latest versions of 698 of 17,787 indexed charts deploy, on 576 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+74 more49.0.0576
python-cryptographydeb38.0.4-3, 38.0.4-3+deb12u1, 43.0.0-3+deb13u1, 46.0.5-1ubuntu2no fix listed15
OSV records
DEBIAN-CVE-2026-69248GHSA-m2h6-j472-rp4cPYSEC-2026-3554UBUNTU-CVE-2026-69248

Charts affected

698 by stars
ChartLatestAffected imagesRadar Score
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
cryptography@45.0.6
49.0.0

Open the chart page →

2,383
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
cryptography@46.0.2
49.0.0

Open the chart page →

4,788
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
cryptography@46.0.3
49.0.0

Open the chart page →

3,866
plausiblepascaliskeVerified publisher2.0.01 of 1See more

plausible pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
cryptography@42.0.7
49.0.0

Open the chart page →

959
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
cryptography@45.0.4
49.0.0

Open the chart page →

15,077
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
cryptography@38.0.1
49.0.0

Open the chart page →

22,146
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
plausibleplausible0.1.21 of 2See more

plausible plausible 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
cryptography@42.0.7
49.0.0

Open the chart page →

1,337
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
cryptography@2.8
49.0.0

Open the chart page →

11,153
tenant-namespace-operatorpnnl-miscscripts0.1.281 of 1See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
cryptography@41.0.3
49.0.0

Open the chart page →

12,754
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

28,495
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
cryptography@43.0.0
49.0.0

Open the chart page →

4,996
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

5,234
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
cryptography@48.0.0
49.0.0

Open the chart page →

3,312
flaskDiaryptj-miniproject2.1.22 of 2See more

flaskDiary ptj-miniproject 2.1.2

2 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
freedom98/flask:k3.0d7ce1533f297
cryptography@45.0.4
49.0.0
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

2,965
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
cryptography@39.0.2
49.0.0

Open the chart page →

4,614
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

6,667
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
cryptography@42.0.7
49.0.0

Open the chart page →

11,400
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
cryptography@42.0.7
49.0.0

Open the chart page →

11,400
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
cryptography@46.0.0
49.0.0

Open the chart page →

4,231
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
cryptography@42.0.8
49.0.0

Open the chart page →

20,812
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
cryptography@44.0.1
49.0.0

Open the chart page →

9,389
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
cryptography@41.0.7
49.0.0

Open the chart page →

5,269
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
iparedhat-cop1.3.91 of 1See more

ipa redhat-cop 1.3.9

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
quay.io/freeipa/freeipa-server:fedora-39-4.11.1d422ee50c2c3
cryptography@41.0.7
49.0.0

Open the chart page →

951
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
cryptography@3.4.8
49.0.0

Open the chart page →

2,201
delugeretsamedocVerified publisher26.9.01 of 1See more

deluge retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
linuxserver/deluge:2.2.09505c64720af
cryptography@48.0.1
49.0.0

Open the chart page →

782
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
cryptography@42.0.2
49.0.0

Open the chart page →

6,562
kube-web-viewrlex0.5.01 of 1See more

kube-web-view rlex 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:23.8.0431f1bf013d0
cryptography@41.0.1
49.0.0

Open the chart page →

4,315
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

15,623
olivetinrm3lVerified publisher0.2.01 of 1See more

olivetin rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
cryptography@41.0.7
49.0.0

Open the chart page →

1,370
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
cryptography@43.0.3
49.0.0

Open the chart page →

9,275
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
cryptography@43.0.3
49.0.0

Open the chart page →

9,152

Container images carrying it

576 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
saidsef/scapy-containerised:v2025.02f17f7c435891
cryptography@44.0.1
49.0.0
1
salehmir/jesse:1.10.101afa95f979e9
cryptography@42.0.8
49.0.0
1
saltstack/salt:3006.3e9c7906b7a5c
cryptography@41.0.3
49.0.0
1
samueldg/snappass:latest3987195edbe6
cryptography@2.8
49.0.0
1
sashafefler/spacecapybara_app:latestf96d7804c0ca
cryptography@44.0.0
49.0.0
1
seafileltd/seafile-mc:9.0.106693911bcc40
cryptography@38.0.4
49.0.0
1
seafileltd/seafile-mc:10.0.170628f29c663
cryptography@41.0.1
49.0.0
1
seafileltd/seafile-mc:9.0.97ac833196f60
cryptography@38.0.1
49.0.0
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
cryptography@43.0.0
49.0.0
1
seldonio/seldon-request-logger:1.11.24e985d2006a8
cryptography@3.4
49.0.0
1
semaphoreui/semaphore:v2.9.645b50bc11833f
cryptography@41.0.3
49.0.0
1
semaphoreui/semaphore:v2.18.3e9260bfa8255
cryptography@48.0.0
49.0.0
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
cryptography@43.0.0
49.0.0
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
cryptography@43.0.0
49.0.0
1
sissbruecker/linkding:1.35.00c5dddf0b37c
cryptography@43.0.1
49.0.0
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
cryptography@43.0.1
49.0.0
1
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
cryptography@2.1.4
49.0.0
1
socialmediamacroscope/image_crawler:0.1.2f508216be63c
cryptography@2.1.4
49.0.0
1
softonic/gar-exporter:0.2.1a64d6c0e0ae5
cryptography@3.2.1
49.0.0
1
someblackmagic/k8s-testing-multitool:v0.1.06eca64b6b440
cryptography@2.8
49.0.0
1
sruthitanneru/pi-sample:ui-lateste565ea454ffd
cryptography@44.0.0
49.0.0
1
stackstorm/st2actionrunner:3.888235ba70cad
cryptography@39.0.1
49.0.0
1
stackstorm/st2api:3.86f56d239d280
cryptography@39.0.1
49.0.0
1
stackstorm/st2auth:3.833ecfda16608
cryptography@39.0.1
49.0.0
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
cryptography@39.0.1
49.0.0
1
stackstorm/st2notifier:3.8f190a6212195
cryptography@39.0.1
49.0.0
1
stackstorm/st2rulesengine:3.8259503496ff9
cryptography@39.0.1
49.0.0
1
stackstorm/st2scheduler:3.8b1de2055c362
cryptography@39.0.1
49.0.0
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
cryptography@39.0.1
49.0.0
1
stackstorm/st2stream:3.81c8904a3bf67
cryptography@39.0.1
49.0.0
1
stackstorm/st2timersengine:3.81bf35bfaf00c
cryptography@39.0.1
49.0.0
1
stackstorm/st2workflowengine:3.819fdfffdbba8
cryptography@39.0.1
49.0.0
1
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
cryptography@2.6.1
49.0.0
1
substratusai/verba:v0.4.0-baseURL261695be635eb
cryptography@42.0.7
49.0.0
1
supabase/realtime:v2.102.3aa1c92c0cf32
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed
1
supabase/realtime:latestd3aa0c86c7b3
cryptography@43.0.0
python-cryptography@43.0.0-3+deb13u1
49.0.0
no fix listed
1
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
cryptography@40.0.2
49.0.0
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cryptography@2.5
49.0.0
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
cryptography@39.0.1
49.0.0
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
cryptography@36.0.0
49.0.0
1
taigaio/taiga-back:6.4.29f97323cc150
cryptography@3.4.7
49.0.0
1
tautulli/tautulli:v2.7.7c4da15f058ea
cryptography@3.4.8
49.0.0
1
thelande/kasa_exporter:v0.2.3a1fdb8baa152
cryptography@42.0.7
49.0.0
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
cryptography@48.0.1
49.0.0
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
cryptography@48.0.1
49.0.0
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
cryptography@3.4.8
49.0.0
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
cryptography@3.4.8
49.0.0
1
timescale/timescaledb-ha:pg16d7db8f1085a3
cryptography@3.4.8
49.0.0
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
cryptography@3.4.8
49.0.0
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
cryptography@3.4.8
49.0.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.