StackRadar

CVE-2026-69249

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
698
of 17,787 indexed, latest versions
Container images
576
deployed by those charts
Fix available
1 of 2
affected packages

python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

Carried by container images the latest versions of 698 of 17,787 indexed charts deploy, on 576 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+74 more49.0.0576
python-cryptographydeb38.0.4-3, 38.0.4-3+deb12u1, 43.0.0-3+deb13u1, 46.0.5-1ubuntu2no fix listed15
OSV records
DEBIAN-CVE-2026-69249GHSA-jwv3-5hgf-82wwPYSEC-2026-3553UBUNTU-CVE-2026-69249

Charts affected

698 by stars
ChartLatestAffected imagesRadar Score
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
cryptography@45.0.6
49.0.0

Open the chart page →

2,383
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
cryptography@46.0.2
49.0.0

Open the chart page →

4,788
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
cryptography@46.0.3
49.0.0

Open the chart page →

3,866
plausiblepascaliskeVerified publisher2.0.01 of 1See more

plausible pascaliske 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
cryptography@42.0.7
49.0.0

Open the chart page →

959
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
cryptography@45.0.4
49.0.0

Open the chart page →

15,077
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
cryptography@38.0.1
49.0.0

Open the chart page →

22,146
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
plausibleplausible0.1.21 of 2See more

plausible plausible 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
cryptography@42.0.7
49.0.0

Open the chart page →

1,337
gitlab-runner-operatorpnnl-miscscripts0.1.61 of 1See more

gitlab-runner-operator pnnl-miscscripts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
cryptography@2.8
49.0.0

Open the chart page →

11,153
tenant-namespace-operatorpnnl-miscscripts0.1.281 of 1See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
cryptography@41.0.3
49.0.0

Open the chart page →

12,754
practica-helmpractica-helm0.1.01 of 7See more

practica-helm practica-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

28,495
pagesprasanthi1.0.01 of 3See more

pages prasanthi 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
prefect-agentprefectVerified publisher2024.8.301638221 of 1See more

prefect-agent prefect 2024.8.30163822

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
cryptography@43.0.0
49.0.0

Open the chart page →

4,996
wp-chartprojet-devops0.1.01 of 2See more

wp-chart projet-devops 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

5,234
prompt-dbprompt-dbVerified publisher1.0.71 of 3See more

prompt-db prompt-db 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
cryptography@48.0.0
49.0.0

Open the chart page →

3,312
flaskDiaryptj-miniproject2.1.22 of 2See more

flaskDiary ptj-miniproject 2.1.2

2 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
freedom98/flask:k3.0d7ce1533f297
cryptography@45.0.4
49.0.0
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

2,965
powerdnspuckpuck2.0.01 of 4See more

powerdns puckpuck 2.0.0

1 of the 4 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
pschiffe/pdns-admin:0.4.137ebba8c2b8f
cryptography@39.0.2
49.0.0

Open the chart page →

4,614
cdmswebapppyalive-cdmswebappVerified publisher0.1.01 of 3See more

cdmswebapp pyalive-cdmswebapp 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

6,667
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
cryptography@42.0.7
49.0.0

Open the chart page →

11,400
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
cryptography@42.0.7
49.0.0

Open the chart page →

11,400
qubivaqubiva0.3.21 of 3See more

qubiva qubiva 0.3.2

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/qubiva/qubiva:v0.3.2cdf1e3329bfe
cryptography@46.0.0
49.0.0

Open the chart page →

4,231
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
cryptography@42.0.8
49.0.0

Open the chart page →

20,812
kubecostradar-baseVerified publisher1.0.01 of 7See more

kubecost radar-base 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
cryptography@44.0.1
49.0.0

Open the chart page →

9,389
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
cryptography@41.0.7
49.0.0

Open the chart page →

5,269
pagesranjinigogga1.0.01 of 3See more

pages ranjinigogga 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
pagesrebecca-pages1.0.01 of 3See more

pages rebecca-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
iparedhat-cop1.3.91 of 1See more

ipa redhat-cop 1.3.9

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
quay.io/freeipa/freeipa-server:fedora-39-4.11.1d422ee50c2c3
cryptography@41.0.7
49.0.0

Open the chart page →

951
request-registryrequest-registry0.1.01 of 2See more

request-registry request-registry 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
cryptography@3.4.8
49.0.0

Open the chart page →

2,201
delugeretsamedocVerified publisher26.9.01 of 1See more

deluge retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
linuxserver/deluge:2.2.09505c64720af
cryptography@48.0.1
49.0.0

Open the chart page →

782
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
cryptography@42.0.2
49.0.0

Open the chart page →

6,562
kube-web-viewrlex0.5.01 of 1See more

kube-web-view rlex 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:23.8.0431f1bf013d0
cryptography@41.0.1
49.0.0

Open the chart page →

4,315
kresusrm3lVerified publisher0.2.11 of 3See more

kresus rm3l 0.2.1

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
bnjbvr/kresus:0.22.137e216b182c8
cryptography@44.0.0
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

15,623
olivetinrm3lVerified publisher0.2.01 of 1See more

olivetin rm3l 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
cryptography@41.0.7
49.0.0

Open the chart page →

1,370
pagesroccohiggins-pages1.0.01 of 3See more

pages roccohiggins-pages 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,233
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
cryptography@43.0.3
49.0.0

Open the chart page →

9,275
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
cryptography@43.0.3
49.0.0

Open the chart page →

9,152

Container images carrying it

576 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
cryptography@42.0.7
49.0.0
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
cryptography@46.0.7
49.0.0
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
cryptography@3.1.1
49.0.0
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
cryptography@36.0.2
49.0.0
1
nlmacamp/check_mk:latest5dbb8589f824
cryptography@2.3.1
49.0.0
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
cryptography@2.1.4
49.0.0
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
cryptography@2.3.1
49.0.0
1
onyxdotapp/onyx-backend:latest473fdffe4e67
cryptography@48.0.1
49.0.0
1
openbas/caldera-server:5.1.0a277796d9724
cryptography@44.0.1
49.0.0
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
cryptography@43.0.3
49.0.0
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
cryptography@46.0.3
49.0.0
1
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
cryptography@45.0.6
49.0.0
1
opencsghq/label-studio:v2.5.047e22aa71870
cryptography@44.0.2
49.0.0
1
opencsghq/label-studio:v2.4.0b4e849fcf94a
cryptography@44.0.2
49.0.0
1
opendatacube/restcube:latest91870111837c
cryptography@2.7
49.0.0
1
opendatacube/wms:latest1b90cdf68831
cryptography@2.7
49.0.0
1
opendatacube/wps:latest80df355a660b
cryptography@45.0.4
49.0.0
1
openemr/openemr:6.1.089eaa6d9a4e3
cryptography@36.0.2
49.0.0
1
openmined/syft-backend:0.9.5b72f74a68b32
cryptography@44.0.1
49.0.0
1
openspeedtest/latest:v2.0.0d4d62f4b7d85
cryptography@38.0.3
49.0.0
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
cryptography@3.4.6
49.0.0
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
cryptography@3.4.6
49.0.0
1
openvpn/openvpn-as:latest2253c10ec652
cryptography@46.0.6
49.0.0
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
cryptography@2.5
49.0.0
1
openzaak/open-notificaties:1.3.02e65313b9b10
cryptography@3.4.8
49.0.0
1
openzaak/open-zaak:1.6.02ca2ea6e0ae9
cryptography@3.4.8
49.0.0
1
pangeo/base-notebook:2024.01.155fbe688a4f80
cryptography@41.0.3
49.0.0
1
percona/pmm-server:3.9.1003f9c25f842
cryptography@36.0.1
49.0.0
1
platzio/backend:v0.6.5d5e5972f344b
cryptography@44.0.3
49.0.0
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
cryptography@2.8
49.0.0
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
cryptography@41.0.3
49.0.0
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
cryptography@43.0.0
49.0.0
1
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
cryptography@46.0.5
49.0.0
1
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
cryptography@42.0.4
49.0.0
1
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
cryptography@2.9.2
49.0.0
1
prowlercloud/prowler-api:5.31.14f252d579be2
cryptography@46.0.7
49.0.0
1
pryorda/vmware_exporter:v0.18.479925e63e59f
cryptography@38.0.1
49.0.0
1
pryorda/vmware_exporter:v0.18.3e0f5ba8b7856
cryptography@36.0.2
49.0.0
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
cryptography@39.0.2
49.0.0
1
psono/psono-server:5.0.03b974b43ea03
cryptography@43.0.1
49.0.0
1
pyaephyohein/mysql2s3bk:alphafdee05f2d441
cryptography@41.0.3
49.0.0
1
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
cryptography@41.0.7
49.0.0
1
qonstrukt/php:8.4-v8-apache089af7925aa1
cryptography@41.0.7
49.0.0
1
redash/redash:25.8.000d813437db5
cryptography@45.0.5
49.0.0
1
redash/redash:10.0.0.b503639392753c0376
cryptography@2.8
49.0.0
1
redash/redash:26.3.0c5c9148f5c38
cryptography@46.0.5
49.0.0
1
redislabs/redisinsight:1.14.0b03ab1426d0d
cryptography@39.0.1
49.0.0
1
rommapp/romm:4.4.1b909e95d1aab
cryptography@45.0.5
49.0.0
1
rook/ceph:v1.20.72f970c425617
cryptography@36.0.1
49.0.0
1
rook/ceph:v1.19.2944a1dd70496
cryptography@36.0.1
49.0.0
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.