StackRadar

CVE-2026-69248

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
693
of 17,781 indexed, latest versions
Container images
570
deployed by those charts
Fix available
1 of 2
affected packages

python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

Carried by container images the latest versions of 693 of 17,781 indexed charts deploy, on 570 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+74 more49.0.0570
python-cryptographydeb38.0.4-3, 38.0.4-3+deb12u1, 43.0.0-3+deb13u1, 46.0.5-1ubuntu2no fix listed15
OSV records
DEBIAN-CVE-2026-69248GHSA-m2h6-j472-rp4cPYSEC-2026-3554UBUNTU-CVE-2026-69248

Charts affected

693 by stars
ChartLatestAffected imagesRadar Score
allure-docker-helm-chartallure-service-chartVerified publisher0.1.01 of 2See more

allure-docker-helm-chart allure-service-chart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:latestdc171ec796d5
cryptography@48.0.1
49.0.0

Open the chart page →

3,647
pagesalstom-pages-app1.0.01 of 3See more

pages alstom-pages-app 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,190
radosgwananace-chartsVerified publisher0.3.41 of 1See more

radosgw ananace-charts 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ceph/daemon:latest-nautilus90f30824a96e
cryptography@1.7.2
49.0.0

Open the chart page →

1,650
pagesandrei-pages1.0.01 of 3See more

pages andrei-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,190
games-on-whalesangelnu2.0.01 of 7See more

games-on-whales angelnu 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/xorg:1.0.0305b3327ebba
cryptography@3.3.2
49.0.0

Open the chart page →

42,126
ansible-inspecansible-inspec0.2.171 of 2See more

ansible-inspec ansible-inspec 0.2.17

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
cryptography@46.0.5
49.0.0

Open the chart page →

5,558
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
cryptography@42.0.5
49.0.0
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
cryptography@42.0.5
49.0.0

Open the chart page →

25,669
pgadminappscodeVerified publisher2026.3.301 of 1See more

pgadmin appscode 2026.3.30

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.11.050700ac17936
cryptography@46.0.3
49.0.0

Open the chart page →

1,565
snappassappuio1.0.01 of 3See more

snappass appuio 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
samueldg/snappass:latest3987195edbe6
cryptography@2.8
49.0.0

Open the chart page →

1,488
appwriteappwrite-helmVerified publisher1.3.21 of 8See more

appwrite appwrite-helm 1.3.2

1 of the 8 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
appwrite/appwrite:1.9.01aaa70127114
cryptography@46.0.5
49.0.0

Open the chart page →

9,847
pgadminarunalakmalVerified publisher0.1.01 of 1See more

pgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
cryptography@3.3.2
49.0.0

Open the chart page →

2,418
swdpgadminarunalakmalVerified publisher0.1.01 of 1See more

swdpgadmin arunalakmal 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
cryptography@3.3.2
49.0.0

Open the chart page →

2,418
keystonearzu0.2.292 of 4See more

keystone arzu 0.2.29

2 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
cryptography@3.4.6
49.0.0
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
cryptography@3.4.6
49.0.0

Open the chart page →

22,568
authorizationassist-iot-authorisation0.1.01 of 2See more

authorization assist-iot-authorisation 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
assistiot/authorization_db:latestc3adbab6a3e7
cryptography@41.0.3
49.0.0

Open the chart page →

5,537
automatedconfigurationassist-iot-automated-configuration1.0.02 of 5See more

automatedconfiguration assist-iot-automated-configuration 1.0.0

2 of the 5 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
confluentinc/cp-kafka:7.5.1dc9b972db002
cryptography@41.0.4
49.0.0
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
cryptography@41.0.4
49.0.0

Open the chart page →

14,728
locationprocessingassist-iot-location-processing1.0.01 of 3See more

locationprocessing assist-iot-location-processing 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
dpage/pgadmin4:6.12781369df9994
cryptography@3.3.2
49.0.0

Open the chart page →

10,061
resource-provisioningassist-iot-resource-provisioning1.0.01 of 7See more

resource-provisioning assist-iot-resource-provisioning 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

8,032
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

45,363
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
cryptography@3.4.8
49.0.0

Open the chart page →

32,501
phonebook-chartasumankamberoglu0.1.51 of 3See more

phonebook-chart asumankamberoglu 0.1.5

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

3,176
asya-playgroundasya1.1.31 of 1See more

asya-playground asya 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
localstack/localstack:3.19d278167f2b7
cryptography@41.0.7
49.0.0

Open the chart page →

9,412
shynetatrox0.1.11 of 1See more

shynet atrox 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.12.0e821e31140f7
cryptography@36.0.1
49.0.0

Open the chart page →

5,507
azure-advanced-backupazure-advanced-backup0.4.11 of 1See more

azure-advanced-backup azure-advanced-backup 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
cryptography@3.3.2
49.0.0

Open the chart page →

4,568
azure-app-exporterazure-app-exporterVerified publisher0.4.21 of 2See more

azure-app-exporter azure-app-exporter 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
cryptography@43.0.0
49.0.0

Open the chart page →

1,790
azurefile-csi-driverazurefile-csi-driverVerified publisher1.35.71 of 7See more

azurefile-csi-driver azurefile-csi-driver 1.35.7

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.76e43ba0bd009
cryptography@42.0.5
49.0.0

Open the chart page →

1,109
osba-storage-demoazure-sample0.1.01 of 1See more

osba-storage-demo azure-sample 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
neilpeterson/osba-storage-demo:latest29d229ab446e
cryptography@2.1.4
49.0.0

Open the chart page →

3,425
twitter-sentimentazure-sample0.1.02 of 3See more

twitter-sentiment azure-sample 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
neilpeterson/get-tweet:v28b645ac1a23e
cryptography@2.2.2
49.0.0
neilpeterson/process-tweet:latest39ce9f92e899
cryptography@2.2.2
49.0.0

Open the chart page →

11,833
ragflowbaboulinet0.1.11 of 5See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.0.39ccb8f749bb5e
cryptography@42.0.7
49.0.0

Open the chart page →

5,823
backstage-pyactionsbackstage-pyactionsVerified publisher0.1.01 of 1See more

backstage-pyactions backstage-pyactions 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
mawad98/backstage-pyactions:demo99422c56a274
cryptography@46.0.6
49.0.0

Open the chart page →

2,738
helm-samplebehnambm-helm-chart1.0.12 of 3See more

helm-sample behnambm-helm-chart 1.0.1

2 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
behnambm/docker-sample:v1bd3ad88afff9
cryptography@41.0.7
49.0.0
library/mysql:8b3b90af2a655
cryptography@46.0.5
49.0.0

Open the chart page →

2,727
pagesberrutig-pages1.0.01 of 3See more

pages berrutig-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,190
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
cryptography@3.3.2
49.0.0

Open the chart page →

22,891
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
cryptography@42.0.8
49.0.0

Open the chart page →

10,145
pagesbrian-pages1.0.01 of 3See more

pages brian-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,190
pagesbrixton-mayuribhavsar23-pages1.0.01 of 3See more

pages brixton-mayuribhavsar23-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,190
pagesbrixton-pages1.0.01 of 3See more

pages brixton-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,190
couchpotatobryanalves0.3.01 of 1See more

couchpotato bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
cryptography@2.8
49.0.0

Open the chart page →

2,018
sickchillbryanalves0.3.01 of 1See more

sickchill bryanalves 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
cryptography@2.8
49.0.0

Open the chart page →

2,504
duoauthproxy-radius-simplecaerus0.1.01 of 1See more

duoauthproxy-radius-simple caerus 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
49.0.0

Open the chart page →

2,974
pagescamden-pages1.0.01 of 3See more

pages camden-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,190
camerahubcamerahub0.10.211 of 2See more

camerahub camerahub 0.10.21

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
camerahub/camerahub:0.36.23a5af37dd6e1b
cryptography@40.0.2
49.0.0

Open the chart page →

2,507
ekorrecamptocamp30.1.11 of 1See more

ekorre camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
camptocamp/ekorre:0.1.035c91d5fda04
cryptography@2.8
49.0.0

Open the chart page →

3,891
pghoardcamptocamp35.8.11 of 1See more

pghoard camptocamp3 5.8.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
camptocamp/pghoard:10bff736b15623
cryptography@2.3.1
49.0.0

Open the chart page →

2,813
prometheus-operatorcamptocamp35.15.11 of 5See more

prometheus-operator camptocamp3 5.15.1

1 of the 5 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.0.16899ccd0b1f54
cryptography@2.6.1
49.0.0

Open the chart page →

2,490
snow-webhookcamptocamp31.0.01 of 1See more

snow-webhook camptocamp3 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
camptocamp/snow-webhook:latest2924b43dbf40
cryptography@2.6.1
49.0.0

Open the chart page →

1,310
pagescarina-pages1.0.01 of 3See more

pages carina-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,190
pagescarmel-pages-dell1.0.01 of 3See more

pages carmel-pages-dell 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,190
castai-hibernatecastaiVerified publisher0.2.121 of 1See more

castai-hibernate castai 0.2.12

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
castai/hibernate:v0.14da62858c8381
cryptography@43.0.3
49.0.0

Open the chart page →

1,146
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
cryptography@42.0.8
49.0.0

Open the chart page →

15,371
chart-appchart-app0.3.01 of 2See more

chart-app chart-app 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
cryptography@46.0.5
49.0.0

Open the chart page →

1,775

Container images carrying it

570 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
trueosiris/vrising:latest9356f98ad561
cryptography@3.4.8
49.0.0
1
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
cryptography@46.0.5
49.0.0
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
cryptography@3.4.8
49.0.0
1
tykling/dns_exporter:1.2.3cd6d650c01c1
cryptography@48.0.0
49.0.0
1
vabene1111/recipes:2.3.50f8d061895e9
cryptography@45.0.5
49.0.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
cryptography@2.9.2
49.0.0
1
voltha/voltha-cli:1.6.0c4e41e92f046
cryptography@2.4.1
49.0.0
1
voltha/voltha-netconf:1.6.037f80524c207
cryptography@2.4.1
49.0.0
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
cryptography@2.4.1
49.0.0
1
voltha/voltha-tester:1.7.0655c3048a602
cryptography@2.7
49.0.0
1
voltha/voltha-voltha:1.6.0ff596b62de59
cryptography@2.4.1
49.0.0
1
wallabag/wallabag:2.4.25e4c26a7fb4a
cryptography@2.9.2
49.0.0
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
cryptography@43.0.1
49.0.0
1
wazuh/wazuh-manager:4.4.121994f40e0da
cryptography@3.3.2
49.0.0
1
wazuh/wazuh-manager:4.14.45a065930682d
cryptography@44.0.1
49.0.0
1
wazuh/wazuh-manager:4.14.3f09282d281f6
cryptography@44.0.1
49.0.0
1
weblate/weblate:3.11.3-182848df56ecd
cryptography@2.8
49.0.0
1
wger/server:2.6997ead43aabd
cryptography@48.0.1
49.0.0
1
wiremind/pghoard:12-2019-11-264dea42c8166c
cryptography@2.8
49.0.0
1
yetiplatform/yeti:2.9.09bcbe2650a14
cryptography@44.0.2
49.0.0
1
yetiplatform/yeti:latest9c3006cedcca
cryptography@44.0.2
49.0.0
1
ygqygq2/mysql-exec-sql:latest54f30def1558
cryptography@41.0.3
49.0.0
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
cryptography@45.0.4
49.0.0
1
zurdi15/romm:2.3.12db88fe44c89
cryptography@41.0.6
49.0.0
1
gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine6d35276c2562
cryptography@46.0.7
49.0.0
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
cryptography@44.0.2
49.0.0
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
cryptography@44.0.1
49.0.0
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
cryptography@44.0.2
49.0.0
1
ghcr.io/abcdesktopio/route:4.449c972229c6b
cryptography@46.0.7
49.0.0
1
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
cryptography@48.0.1
49.0.0
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
cryptography@41.0.7
49.0.0
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
cryptography@43.0.1
49.0.0
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
cryptography@43.0.0
49.0.0
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
cryptography@41.0.7
49.0.0
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
cryptography@41.0.7
49.0.0
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
cryptography@41.0.7
49.0.0
1
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
cryptography@46.0.7
49.0.0
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
cryptography@42.0.8
49.0.0
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
cryptography@38.0.3
49.0.0
1
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
cryptography@46.0.7
49.0.0
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
cryptography@44.0.0
49.0.0
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
cryptography@42.0.5
49.0.0
1
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
cryptography@45.0.6
49.0.0
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
cryptography@48.0.1
49.0.0
1
ghcr.io/dask/dask:2024.1.0080150de7d86
cryptography@41.0.3
49.0.0
1
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
cryptography@41.0.7
49.0.0
1
ghcr.io/dask/dask-gateway-server:2026.3.0afa5a729114e
cryptography@46.0.6
49.0.0
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
cryptography@46.0.5
49.0.0
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
cryptography@46.0.3
49.0.0
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
cryptography@3.4.8
49.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.