StackRadar

CVE-2026-69248

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.3
base score, highest
EPSS
0.002
8th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
698
of 17,787 indexed, latest versions
Container images
576
deployed by those charts
Fix available
1 of 2
affected packages

python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees

Carried by container images the latest versions of 698 of 17,787 indexed charts deploy, on 576 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+74 more49.0.0576
python-cryptographydeb38.0.4-3, 38.0.4-3+deb12u1, 43.0.0-3+deb13u1, 46.0.5-1ubuntu2no fix listed15
OSV records
DEBIAN-CVE-2026-69248GHSA-m2h6-j472-rp4cPYSEC-2026-3554UBUNTU-CVE-2026-69248

Charts affected

698 by stars
ChartLatestAffected imagesRadar Score
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
cryptography@48.0.1
49.0.0

Open the chart page →

6,041
mysqlhelmforgeVerified publisher2.0.31 of 1See more

mysql helmforge 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:9.7.2257388edf9c8
cryptography@46.0.5
49.0.0

Open the chart page →

463
notediscoveryhelmforgeVerified publisher2.0.11 of 1See more

notediscovery helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
cryptography@41.0.7
49.0.0

Open the chart page →

1,238
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
cryptography@46.0.5
49.0.0

Open the chart page →

5,649
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

30,106
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
cryptography@44.0.1
49.0.0

Open the chart page →

25,099
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
cryptography@41.0.7
49.0.0

Open the chart page →

14,629
activation-servicei4trustVerified publisher2.3.11 of 1See more

activation-service i4trust 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
i4trust/activation-service:2.2.09f3719176893
cryptography@41.0.1
49.0.0

Open the chart page →

2,057
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:8.0.41bf577825b52a
cryptography@42.0.8
49.0.0

Open the chart page →

5,770
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
cryptography@41.0.7
49.0.0

Open the chart page →

2,002
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
cryptography@3.4.7
49.0.0

Open the chart page →

37,844
plausible-analyticsimioVerified publisher0.4.21 of 5See more

plausible-analytics imio 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
cryptography@44.0.0
49.0.0

Open the chart page →

10,152
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
cryptography@3.4.7
49.0.0

Open the chart page →

6,502
freeipaimprowisedVerified publisher0.4.11 of 1See more

freeipa improwised 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
cryptography@37.0.2
49.0.0

Open the chart page →

1,218
healthchecksimprowisedVerified publisher1.1.11 of 2See more

healthchecks improwised 1.1.1

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
linuxserver/healthchecks:2.7.2023033194696dab3c50
cryptography@39.0.2
49.0.0

Open the chart page →

2,628
label-studioinseefrlab2.3.11 of 3See more

label-studio inseefrlab 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
heartexlabs/label-studio:latestaa461572e8f9
cryptography@46.0.5
49.0.0

Open the chart page →

3,157
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
cryptography@2.8
49.0.0

Open the chart page →

3,314
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
cryptography@46.0.7
49.0.0

Open the chart page →

16,558
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
cryptography@41.0.7
49.0.0

Open the chart page →

45,392
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

10,816
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
cryptography@46.0.7
49.0.0

Open the chart page →

5,066
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
cryptography@2.9.2
49.0.0

Open the chart page →

9,853
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
cryptography@3.3.2
49.0.0

Open the chart page →

4,038
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
cryptography@41.0.7
49.0.0

Open the chart page →

6,648
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
cryptography@41.0.7
49.0.0

Open the chart page →

6,629
mumbledjjuniorjpdj0.1.1991 of 2See more

mumbledj juniorjpdj 0.1.199

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/mumbledj:latest558cb7e2604d
cryptography@47.0.0
49.0.0

Open the chart page →

959
shynetjuniorjpdj0.1.301 of 1See more

shynet juniorjpdj 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.13.1ba54f7797a6b
cryptography@41.0.0
49.0.0

Open the chart page →

2,581
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
cryptography@48.0.1
49.0.0

Open the chart page →

3,433
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
cryptography@44.0.3
49.0.0

Open the chart page →

8,990
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
cryptography@46.0.5
49.0.0

Open the chart page →

4,539
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
cryptography@46.0.6
49.0.0

Open the chart page →

6,836
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
cryptography@36.0.1
49.0.0

Open the chart page →

16,464
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:latest66aec17cd21a
cryptography@46.0.7
49.0.0

Open the chart page →

7,599
elastalert2kfirfer2.2.51 of 1See more

elastalert2 kfirfer 2.2.5

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
jertel/elastalert2:2.2.34dcc0ef93efc
cryptography@35.0.0
49.0.0

Open the chart page →

1,598
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
cryptography@41.0.4
49.0.0

Open the chart page →

6,446
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
cryptography@41.0.3
49.0.0

Open the chart page →

3,506
graphiti-mcpkiberonlabs0.1.21 of 1See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
cryptography@45.0.4
49.0.0

Open the chart page →

3,284
kimai-helmchartkimai2tet0.1.01 of 2See more

kimai-helmchart kimai2tet 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

1,518
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
cryptography@2.1.4
49.0.0

Open the chart page →

14,827
lnbitskronkltdVerified publisher0.1.01 of 1See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:latest26fae6327477
cryptography@41.0.7
49.0.0

Open the chart page →

1,444
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
cryptography@46.0.7
49.0.0

Open the chart page →

9,652
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
cryptography@3.2
49.0.0

Open the chart page →

1,850
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
cryptography@41.0.7
49.0.0

Open the chart page →

8,455
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
cryptography@41.0.3
49.0.0
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
cryptography@41.0.3
49.0.0

Open the chart page →

7,356
cephfs-csikubegems1.0.81 of 6See more

cephfs-csi kubegems 1.0.8

1 of the 6 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.5.128a674af1df2
cryptography@3.2.1
49.0.0

Open the chart page →

4,445
juicefs-csi-driverkubegems0.19.21 of 6See more

juicefs-csi-driver kubegems 0.19.2

1 of the 6 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
cryptography@3.3.2
49.0.0

Open the chart page →

4,825
juicefs-tenantkubegems1.0.11 of 3See more

juicefs-tenant kubegems 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
kubegems/juicefs-mount:ce-v1.1.010abb76892b8
cryptography@2.6.1
49.0.0

Open the chart page →

4,120
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
cryptography@41.0.1
49.0.0

Open the chart page →

3,700
kube-pod-alertskube-pod-alertsVerified publisher0.1.81 of 1See more

kube-pod-alerts kube-pod-alerts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-69248.

Container imageDigestPackageFixed in
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
cryptography@46.0.5
49.0.0

Open the chart page →

1,639

Container images carrying it

576 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
cryptography@46.0.5
49.0.0
1
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
cryptography@46.0.4
49.0.0
1
tombursch/kitchenowl-backend:v0.7.8b48e4ab727cd
cryptography@47.0.0
49.0.0
1
trueosiris/vrising:latest9356f98ad561
cryptography@3.4.8
49.0.0
1
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
cryptography@46.0.5
49.0.0
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
cryptography@3.4.8
49.0.0
1
tykling/dns_exporter:1.2.3cd6d650c01c1
cryptography@48.0.0
49.0.0
1
vabene1111/recipes:2.3.50f8d061895e9
cryptography@45.0.5
49.0.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
cryptography@2.9.2
49.0.0
1
voltha/voltha-cli:1.6.0c4e41e92f046
cryptography@2.4.1
49.0.0
1
voltha/voltha-netconf:1.6.037f80524c207
cryptography@2.4.1
49.0.0
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
cryptography@2.4.1
49.0.0
1
voltha/voltha-tester:1.7.0655c3048a602
cryptography@2.7
49.0.0
1
voltha/voltha-voltha:1.6.0ff596b62de59
cryptography@2.4.1
49.0.0
1
wallabag/wallabag:2.4.25e4c26a7fb4a
cryptography@2.9.2
49.0.0
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
cryptography@43.0.1
49.0.0
1
wazuh/wazuh-manager:4.4.121994f40e0da
cryptography@3.3.2
49.0.0
1
wazuh/wazuh-manager:4.14.45a065930682d
cryptography@44.0.1
49.0.0
1
wazuh/wazuh-manager:4.14.3f09282d281f6
cryptography@44.0.1
49.0.0
1
weblate/weblate:3.11.3-182848df56ecd
cryptography@2.8
49.0.0
1
wger/server:2.6997ead43aabd
cryptography@48.0.1
49.0.0
1
wiremind/pghoard:12-2019-11-264dea42c8166c
cryptography@2.8
49.0.0
1
yetiplatform/yeti:2.9.09bcbe2650a14
cryptography@44.0.2
49.0.0
1
yetiplatform/yeti:latest9c3006cedcca
cryptography@44.0.2
49.0.0
1
ygqygq2/mysql-exec-sql:latest54f30def1558
cryptography@41.0.3
49.0.0
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
cryptography@45.0.4
49.0.0
1
zurdi15/romm:2.3.12db88fe44c89
cryptography@41.0.6
49.0.0
1
gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine6d35276c2562
cryptography@46.0.7
49.0.0
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
cryptography@44.0.2
49.0.0
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
cryptography@44.0.1
49.0.0
1
gcr.io/rotationalio-habanero/imgtag:89ec287a534a3170d03
cryptography@44.0.2
49.0.0
1
ghcr.io/abcdesktopio/route:4.449c972229c6b
cryptography@46.0.7
49.0.0
1
ghcr.io/afairgiant/medikeep:v0.69.0766699daa9ac
cryptography@48.0.1
49.0.0
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
cryptography@41.0.7
49.0.0
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
cryptography@43.0.1
49.0.0
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
cryptography@43.0.0
49.0.0
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
cryptography@41.0.7
49.0.0
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
cryptography@41.0.7
49.0.0
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
cryptography@41.0.7
49.0.0
1
ghcr.io/caas-team/py-kube-downscaler:26.4.0af05a098b0d2
cryptography@46.0.7
49.0.0
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
cryptography@42.0.8
49.0.0
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
cryptography@38.0.3
49.0.0
1
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
cryptography@46.0.7
49.0.0
1
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
cryptography@44.0.0
49.0.0
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
cryptography@42.0.5
49.0.0
1
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
cryptography@45.0.6
49.0.0
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
cryptography@48.0.1
49.0.0
1
ghcr.io/dask/dask:2024.1.0080150de7d86
cryptography@41.0.3
49.0.0
1
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
cryptography@41.0.7
49.0.0
1
ghcr.io/dask/dask-gateway-server:2026.3.0afa5a729114e
cryptography@46.0.6
49.0.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.