StackRadar

CVE-2026-69249

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
693
of 17,781 indexed, latest versions
Container images
570
deployed by those charts
Fix available
1 of 2
affected packages

python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

Carried by container images the latest versions of 693 of 17,781 indexed charts deploy, on 570 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+74 more49.0.0570
python-cryptographydeb38.0.4-3, 38.0.4-3+deb12u1, 43.0.0-3+deb13u1, 46.0.5-1ubuntu2no fix listed15
OSV records
DEBIAN-CVE-2026-69249GHSA-jwv3-5hgf-82wwPYSEC-2026-3553UBUNTU-CVE-2026-69249

Charts affected

693 by stars
ChartLatestAffected imagesRadar Score
netboxstartechnicaVerified publisher5.1.01 of 4See more

netbox startechnica 5.1.0

1 of the 4 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
cryptography@42.0.7
49.0.0

Open the chart page →

1,650
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
cryptography@38.0.4
python-cryptography@38.0.4-3
49.0.0
no fix listed

Open the chart page →

9,746
matrixzekker6Verified publisher3.30.01 of 4See more

matrix zekker6 3.30.0

1 of the 4 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.160.078de1d10bef0
cryptography@46.0.7
49.0.0

Open the chart page →

5,557
changedetectionalekcVerified publisher0.14.21 of 1See more

changedetection alekc 0.14.2

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.47bb6963b730d
cryptography@44.0.0
49.0.0

Open the chart page →

2,595
alerta-webalerta-webVerified publisher0.1.121 of 2See more

alerta-web alerta-web 0.1.12

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
hayk96/alerta-web:9.0.486377705e9e3
cryptography@44.0.0
49.0.0

Open the chart page →

3,569
ansible-semaphoreansible-semaphore0.1.01 of 1See more

ansible-semaphore ansible-semaphore 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ansiblesemaphore/semaphore:v2.8.5303d1f8684027
cryptography@3.3.2
49.0.0

Open the chart page →

4,019
dns-exporterchristianhuthVerified publisher2.6.11 of 1See more

dns-exporter christianhuth 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
tykling/dns_exporter:1.2.3cd6d650c01c1
cryptography@48.0.0
49.0.0

Open the chart page →

458
dumpscriptcloudscriptVerified publisher1.8.31 of 1See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
cryptography@46.0.7
49.0.0

Open the chart page →

2,125
convertigoconvertigoOfficialVerified publisher8.4.31 of 5See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
cryptography@42.0.8
49.0.0

Open the chart page →

17,404
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
cryptography@46.0.5
49.0.0

Open the chart page →

9,316
bscdysnixVerified publisher0.6.591 of 4See more

bsc dysnix 0.6.59

1 of the 4 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
gcr.io/google.com/cloudsdktool/google-cloud-cli:alpine6d35276c2562
cryptography@46.0.7
49.0.0

Open the chart page →

2,012
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
cryptography@41.0.2
49.0.0

Open the chart page →

14,546
openshift-secured-redisInsighteximiaitVerified publisher0.9.21 of 2See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
redislabs/redisinsight:1.14.0b03ab1426d0d
cryptography@39.0.1
49.0.0

Open the chart page →

13,874
flyte-binaryflyte2.0.481 of 4See more

flyte-binary flyte 2.0.48

1 of the 4 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
cryptography@48.0.0
49.0.0

Open the chart page →

4,641
healthchecksgabe565Verified publisher0.17.01 of 1See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/healthchecks:version-v3.9b5c6bfb00b03
cryptography@44.0.3
49.0.0

Open the chart page →

2,286
deconzgeek-cookbookVerified publisher6.5.21 of 1See more

deconz geek-cookbook 6.5.2

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.12.066541bbb78952
cryptography@2.6.1
49.0.0

Open the chart page →

3,555
esphomegeek-cookbookVerified publisher8.4.21 of 1See more

esphome geek-cookbook 8.4.2

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
esphome/esphome:1.18.03f51ec10e823
cryptography@2.6.1
49.0.0

Open the chart page →

3,717
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
cryptography@37.0.2
49.0.0

Open the chart page →

7,579
ghost-on-kubernetesghost-on-kubernetes-helmVerified publisher1.1.21 of 3See more

ghost-on-kubernetes ghost-on-kubernetes-helm 1.1.2

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.4b3b90af2a655
cryptography@46.0.5
49.0.0

Open the chart page →

1,447
netbirdhelmforgeVerified publisher1.0.101 of 4See more

netbird helmforge 1.0.10

1 of the 4 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
netbirdio/dashboard:v2.90.101b59e1c905c9
cryptography@3.3.2
49.0.0

Open the chart page →

2,962
home-assistanthome-assistantVerified publisher0.5.101 of 3See more

home-assistant home-assistant 0.5.10

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.9.0372d991e5888
cryptography@48.0.1
49.0.0

Open the chart page →

2,331
calibre-webk8s-home-lab-repo9.1.11 of 1See more

calibre-web k8s-home-lab-repo 9.1.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/calibre-web:0.6.267c0464228f2f
cryptography@43.0.3
49.0.0

Open the chart page →

4,477
home-assistantk8s-home-lab-repo16.3.11 of 1See more

home-assistant k8s-home-lab-repo 16.3.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/home-operations/home-assistant:2026.3.1067e54e2e107
cryptography@46.0.5
49.0.0

Open the chart page →

4,634
mysql-clusterkfirfer0.0.41 of 1See more

mysql-cluster kfirfer 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
mysql/mysql-cluster:8.0.20e4ea36622cdd
cryptography@2.8
49.0.0

Open the chart page →

416
kiali-operatorkiali2.31.01 of 1See more

kiali-operator kiali 2.31.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
quay.io/kiali/kiali-operator:v2.31.0f837d8f25545
cryptography@44.0.2
49.0.0

Open the chart page →

1,157
mysqldumpkokuwa7.0.31 of 1See more

mysqldump kokuwa 7.0.3

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/kokuwaio/gcloud-mysql:v3.2.1963098135c550
cryptography@42.0.7
49.0.0

Open the chart page →

847
kubeviouskubevious1.2.21 of 7See more

kubevious kubevious 1.2.2

1 of the 7 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.0.303c1aab708f6e
cryptography@3.4.7
49.0.0

Open the chart page →

14,204
netscaler-cpx-with-ingress-controllernetscalerOfficialVerified publisher4.1.171 of 2See more

netscaler-cpx-with-ingress-controller netscaler 4.1.17

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
quay.io/netscaler/netscaler-k8s-ingress-controller:4.1.1755b12c2a8440
cryptography@43.0.1
49.0.0

Open the chart page →

394
kobotoolboxone-acre-fundVerified publisher0.7.42 of 9See more

kobotoolbox one-acre-fund 0.7.4

2 of the 9 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
kobotoolbox/kobocat:2.022.24ab15679454415
cryptography@36.0.2
49.0.0
kobotoolbox/kpi:2.022.24dbcacc01bccd4
cryptography@36.0.2
49.0.0

Open the chart page →

18,517
open-zaakopen-zaak0.8.01 of 3See more

open-zaak open-zaak 0.8.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
openzaak/open-zaak:1.6.02ca2ea6e0ae9
cryptography@3.4.8
49.0.0

Open the chart page →

4,045
platzioplatz-ioVerified publisher0.6.51 of 2See more

platzio platz-io 0.6.5

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
platzio/backend:v0.6.5d5e5972f344b
cryptography@44.0.3
49.0.0

Open the chart page →

2,866
plecopleco0.24.01 of 1See more

pleco pleco 0.24.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
public.ecr.aws/r3m4q3r9/pleco:0.24.0651739583336
cryptography@43.0.1
49.0.0

Open the chart page →

1,346
plausiblesinextraVerified publisher1.1.21 of 1See more

plausible sinextra 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.2.133e60bfb40f2
cryptography@44.0.3
49.0.0

Open the chart page →

859
skypilotskypilotOfficialVerified publisher0.13.01 of 3See more

skypilot skypilot 0.13.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot:0.13.03bc8bf8f4d83
cryptography@48.0.1
49.0.0

Open the chart page →

5,852
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
cryptography@46.0.3
49.0.0

Open the chart page →

3,804
wgerwgerOfficialVerified publisher1.0.01 of 8See more

wger wger 1.0.0

1 of the 8 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
wger/server:2.6997ead43aabd
cryptography@48.0.1
49.0.0

Open the chart page →

8,491
akeyless-api-gatewayakeyless-services-helmVerified publisher1.62.221 of 1See more

akeyless-api-gateway akeyless-services-helm 1.62.22

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
akeyless/base:latest759e4289fae8
cryptography@46.0.7
49.0.0

Open the chart page →

2,358
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
cryptography@44.0.3
49.0.0

Open the chart page →

12,037
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
cryptography@37.0.2
49.0.0

Open the chart page →

12,046
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
cryptography@43.0.1
49.0.0

Open the chart page →

2,388
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
cryptography@42.0.8
49.0.0
ddosify/selfhosted_backend:3.2.93c11e3182652
cryptography@42.0.8
49.0.0

Open the chart page →

22,202
tikaapache-tika3.2.21 of 1See more

tika apache-tika 3.2.2

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
apache/tika:3.2.2.0-fullffab324253ed
cryptography@43.0.0
49.0.0

Open the chart page →

437
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
cryptography@3.3.2
49.0.0

Open the chart page →

10,730
deployautoml0.1.01 of 3See more

deploy automl 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
amd64/mysql:5.7e20a653e0f51
cryptography@3.2.1
49.0.0

Open the chart page →

2,947
bucket-backup-restorebucket-backup-restore0.1.01 of 2See more

bucket-backup-restore bucket-backup-restore 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
abohatyrenko/bucket-backup-restore:latestfa98af15a13e
cryptography@3.3.2
49.0.0

Open the chart page →

2,042
easyhaproxybyjgVerified publisher2.0.41 of 1See more

easyhaproxy byjg 2.0.4

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
byjg/easy-haproxy:6.1.1230fdb7b00ae
cryptography@47.0.0
49.0.0

Open the chart page →

933
squestchristianhuthVerified publisher6.6.71 of 4See more

squest christianhuth 6.6.7

1 of the 4 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
quay.io/hewlettpackardenterprise/squest:2.8.465694109877e
cryptography@45.0.2
49.0.0

Open the chart page →

9,971
syncstorage-rschristianhuthVerified publisher6.1.11 of 2See more

syncstorage-rs christianhuth 6.1.1

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/porelli/firefox-sync:syncstorage-rs-mysql-0.18.27d244e514216
cryptography@43.0.1
49.0.0

Open the chart page →

693
pgbenchcloudnative-pgVerified publisher0.1.01 of 1See more

pgbench cloudnative-pg 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
cryptography@38.0.3
49.0.0

Open the chart page →

2,713
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
cryptography@42.0.5
49.0.0

Open the chart page →

11,205

Container images carrying it

570 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
dysnix/pritunl:v1.29-r819951e3e7a32
cryptography@2.8
49.0.0
1
elastichq/elasticsearch-hq:latestbb3bd22c2b87
cryptography@2.8
49.0.0
1
errbotio/errbot:6.1.900ee4e0953ab
cryptography@37.0.2
49.0.0
1
esphome/esphome:1.18.03f51ec10e823
cryptography@2.6.1
49.0.0
1
esphome/esphome:2024.3.09ab8cc88b28c
cryptography@42.0.2
49.0.0
1
esphome/esphome:2024.12.2b2c6322700ac
cryptography@43.0.0
49.0.0
1
esphome/esphome:2025.3.0def8b6e4f517
cryptography@44.0.2
49.0.0
1
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
cryptography@2.7
49.0.0
1
evk02/mlflow:2.2.1ef6ff257ef35
cryptography@39.0.2
49.0.0
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
cryptography@39.0.0
49.0.0
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
cryptography@47.0.0
49.0.0
1
fiware/ishare-satellite:1.2.0c3c1c8ccfb45
cryptography@37.0.4
49.0.0
1
flanksource/batch-runner:v1.0.44689687a7cf95
cryptography@44.0.1
49.0.0
1
fossology/fossology:4.2.18bd1f22ba7bb
cryptography@38.0.3
49.0.0
1
frankescobar/allure-docker-service:latestdc171ec796d5
cryptography@48.0.1
49.0.0
1
freedom98/flask:k3.0d7ce1533f297
cryptography@45.0.4
49.0.0
1
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
cryptography@37.0.2
49.0.0
1
galaxy/cloudman-server:lateste5c265fe9fcd
cryptography@38.0.1
49.0.0
1
galaxy/galaxy-init:v18.010267bad550e6
cryptography@2.2.2
49.0.0
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
cryptography@44.0.3
49.0.0
1
gethue/hue:4.11.011b649636e68
cryptography@36.0.1
49.0.0
1
gethue/hue:4.10.05702b2c37ff9
cryptography@3.3.2
49.0.0
1
gethue/hue:latest7d5c1b9f8a79
cryptography@42.0.8
49.0.0
1
getsentry/sentry-kubernetes:latest6ac37974fd2a
cryptography@2.6.1
49.0.0
1
gluufederation/cloudtools:4.5.17-1fe944d2e5d0f
cryptography@47.0.0
49.0.0
1
gluufederation/opendj:4.3.0_011a1128b28b95
cryptography@3.3.2
49.0.0
1
goofball222/pritunl:1.30.3070.5943c0743701d4
cryptography@3.4.7
49.0.0
1
goofball222/pritunl:1.32.3602.807bf26032dfce
cryptography@38.0.4
49.0.0
1
google/cloud-sdk:alpinef7d3e6d6d4f4
cryptography@46.0.7
49.0.0
1
gpappsoft/privacyidea-docker:3.12.2af7841adad26
cryptography@44.0.2
49.0.0
1
grafana/oncall:v1.16.5499851658393
cryptography@44.0.1
49.0.0
1
hansehe/locust:1.1.0bc8e45262bc4
cryptography@44.0.2
49.0.0
1
hayk96/alerta-web:9.0.486377705e9e3
cryptography@44.0.0
49.0.0
1
healthchecks/healthchecks:v2.8.1e82bb0836e30
cryptography@39.0.2
49.0.0
1
heartexlabs/label-studio:latestaa461572e8f9
cryptography@46.0.5
49.0.0
1
helga09/my_sql_shoes:v1.1.1a03657d97897
cryptography@37.0.2
49.0.0
1
helmforge/fastmcp-server:0.2.061f759a1421f
cryptography@46.0.6
49.0.0
1
helmforge/fastmcp-server:0.11.2fcb7017327d6
cryptography@46.0.7
49.0.0
1
hhyo/archery:v1.9.11aa41843419e
cryptography@38.0.1
49.0.0
1
hjacobs/kube-downscaler:23.2.05d328c003efe
cryptography@39.0.1
49.0.0
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
cryptography@41.0.1
49.0.0
1
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
cryptography@40.0.2
49.0.0
1
hjacobs/kube-resource-report:21.2.145f93491c434
cryptography@3.4.1
49.0.0
1
hjacobs/kube-resource-report:22.11.0c173cd02f5af
cryptography@38.0.4
49.0.0
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
cryptography@41.0.1
49.0.0
1
hjacobs/kube-web-view:20.10.0b44a9cf81a2f
cryptography@3.1.1
49.0.0
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
cryptography@37.0.2
49.0.0
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
cryptography@41.0.4
49.0.0
1
homeassistant/home-assistant:2026.75a531753cea9
cryptography@48.0.1
49.0.0
1
homeassistant/home-assistant:2023.12.48d000332b09b
cryptography@41.0.7
49.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.