StackRadar

CVE-2026-69249

High

Advisory

Published 3 Aug 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
8.7
base score, highest
EPSS
0.003
17th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
691
of 17,787 indexed, latest versions
Container images
569
deployed by those charts
Fix available
1 of 2
affected packages

python-cryptography: Duplicate self-signed intermediates can cause exponential path-building

Carried by container images the latest versions of 691 of 17,787 indexed charts deploy, on 569 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+74 more49.0.0569
python-cryptographydeb38.0.4-3, 38.0.4-3+deb12u1, 43.0.0-3+deb13u1, 46.0.5-1ubuntu2no fix listed15
OSV records
DEBIAN-CVE-2026-69249GHSA-jwv3-5hgf-82wwPYSEC-2026-3553UBUNTU-CVE-2026-69249

Charts affected

691 by stars
ChartLatestAffected imagesRadar Score
notediscoveryhelmforgeVerified publisher2.0.11 of 1See more

notediscovery helmforge 2.0.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
cryptography@41.0.7
49.0.0

Open the chart page →

1,241
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
cryptography@46.0.5
49.0.0

Open the chart page →

5,714
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

30,099
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
cryptography@44.0.1
49.0.0

Open the chart page →

25,017
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
cryptography@46.0.5
49.0.0

Open the chart page →

20,190
paperlesshomelabcihelmchartstestVerified publisher9.1.91 of 1See more

paperless homelabcihelmchartstest 9.1.9

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
cryptography@41.0.7
49.0.0

Open the chart page →

16,384
activation-servicei4trustVerified publisher2.3.11 of 1See more

activation-service i4trust 2.3.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
i4trust/activation-service:2.2.09f3719176893
cryptography@41.0.1
49.0.0

Open the chart page →

2,058
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8.0.41bf577825b52a
cryptography@42.0.8
49.0.0

Open the chart page →

5,959
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
cryptography@41.0.7
49.0.0

Open the chart page →

1,948
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
cryptography@3.4.7
49.0.0

Open the chart page →

37,671
plausible-analyticsimioVerified publisher0.4.21 of 5See more

plausible-analytics imio 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
cryptography@44.0.0
49.0.0

Open the chart page →

10,418
erpnextimprowisedVerified publisher3.3.01 of 3See more

erpnext improwised 3.3.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
improwised/erpnext-worker:v13.4.197280b55cbd4
cryptography@3.4.7
49.0.0

Open the chart page →

6,501
freeipaimprowisedVerified publisher0.4.11 of 1See more

freeipa improwised 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
freeipa/freeipa-server:fedora-37-4.10.1c87d77342bf5
cryptography@37.0.2
49.0.0

Open the chart page →

1,218
healthchecksimprowisedVerified publisher1.1.11 of 2See more

healthchecks improwised 1.1.1

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
linuxserver/healthchecks:2.7.2023033194696dab3c50
cryptography@39.0.2
49.0.0

Open the chart page →

2,628
label-studioinseefrlab2.3.11 of 3See more

label-studio inseefrlab 2.3.1

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
heartexlabs/label-studio:latestaa461572e8f9
cryptography@46.0.5
49.0.0

Open the chart page →

3,157
redashinseefrlab2.1.01 of 3See more

redash inseefrlab 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
redash/redash:10.0.0.b503639392753c0376
cryptography@2.8
49.0.0

Open the chart page →

3,314
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
cryptography@46.0.7
49.0.0

Open the chart page →

17,852
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
cryptography@41.0.7
49.0.0

Open the chart page →

45,239
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

10,780
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
cryptography@46.0.7
49.0.0

Open the chart page →

5,040
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
cryptography@2.9.2
49.0.0

Open the chart page →

9,854
jx-app-datadogjenkins-x0.0.101 of 2See more

jx-app-datadog jenkins-x 0.0.10

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
datadog/agent:6aad9994de6a7
cryptography@3.3.2
49.0.0

Open the chart page →

3,999
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
cryptography@41.0.7
49.0.0

Open the chart page →

6,586
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
cryptography@41.0.7
49.0.0

Open the chart page →

6,568
mumbledjjuniorjpdj0.1.1991 of 2See more

mumbledj juniorjpdj 0.1.199

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/juniorjpdj/mumbledj:latest558cb7e2604d
cryptography@47.0.0
49.0.0

Open the chart page →

953
shynetjuniorjpdj0.1.301 of 1See more

shynet juniorjpdj 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
milesmcc/shynet:v0.13.1ba54f7797a6b
cryptography@41.0.0
49.0.0

Open the chart page →

2,581
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
cryptography@48.0.1
49.0.0

Open the chart page →

3,460
paperlessk8s-home-lab-repo11.0.11 of 1See more

paperless k8s-home-lab-repo 11.0.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
cryptography@44.0.3
49.0.0

Open the chart page →

9,103
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
cryptography@46.0.5
49.0.0

Open the chart page →

4,568
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
cryptography@46.0.6
49.0.0

Open the chart page →

7,081
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
cryptography@36.0.1
49.0.0

Open the chart page →

16,417
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:latest66aec17cd21a
cryptography@46.0.7
49.0.0

Open the chart page →

8,860
elastalert2kfirfer2.2.51 of 1See more

elastalert2 kfirfer 2.2.5

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
jertel/elastalert2:2.2.34dcc0ef93efc
cryptography@35.0.0
49.0.0

Open the chart page →

1,598
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
cryptography@41.0.4
49.0.0

Open the chart page →

6,447
mysqldumpkfirfer2.8.01 of 1See more

mysqldump kfirfer 2.8.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
kfirfer/gcloud-mysql:1.0.3c257c1e0e8b9
cryptography@41.0.3
49.0.0

Open the chart page →

3,507
graphiti-mcpkiberonlabs0.1.21 of 1See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
cryptography@45.0.4
49.0.0

Open the chart page →

3,393
kimai-helmchartkimai2tet0.1.01 of 2See more

kimai-helmchart kimai2tet 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
49.0.0

Open the chart page →

1,518
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
cryptography@2.1.4
49.0.0

Open the chart page →

14,813
lnbitskronkltdVerified publisher0.1.01 of 1See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:latest26fae6327477
cryptography@41.0.7
49.0.0

Open the chart page →

1,444
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
cryptography@46.0.7
49.0.0

Open the chart page →

9,620
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
cryptography@3.2
49.0.0

Open the chart page →

1,850
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
cryptography@41.0.7
49.0.0

Open the chart page →

8,405
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
cryptography@41.0.3
49.0.0
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
cryptography@41.0.3
49.0.0

Open the chart page →

7,356
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
cryptography@41.0.1
49.0.0

Open the chart page →

4,293
kube-pod-alertskube-pod-alertsVerified publisher0.1.81 of 1See more

kube-pod-alerts kube-pod-alerts 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
cryptography@46.0.5
49.0.0

Open the chart page →

1,627
ghostkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 2See more

ghost kubernetes-homelab-helm-charts 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
library/mysql:8b3b90af2a655
cryptography@46.0.5
49.0.0

Open the chart page →

2,756
pve-exporterkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pve-exporter kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
cryptography@46.0.5
49.0.0

Open the chart page →

994
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
cryptography@38.0.4
python-cryptography@38.0.4-3+deb12u1
49.0.0
no fix listed

Open the chart page →

6,356
gitlabkubesphereVerified publisher4.2.31 of 17See more

gitlab kubesphere 4.2.3

1 of the 17 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
mirrorgitlabcontainers/gitlab-task-runner-ce:v13.2.29efd73993c34
cryptography@3.0
49.0.0

Open the chart page →

38,133
deepflowkubesphere-stable6.2.6062 of 8See more

deepflow kubesphere-stable 6.2.606

2 of the 8 container images this version deploys carry CVE-2026-69249.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
cryptography@3.4.6
49.0.0
deepflowce/mysql:8.0.313d7ae561cf60
cryptography@3.4.7
49.0.0

Open the chart page →

18,316

Container images carrying it

569 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
nlmacamp/check_mk:latest5dbb8589f824
cryptography@2.3.1
49.0.0
1
omecproject/mme-exporter:paging-latestbcc5f19fd676
cryptography@2.1.4
49.0.0
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
cryptography@2.3.1
49.0.0
1
onyxdotapp/onyx-backend:latest473fdffe4e67
cryptography@48.0.1
49.0.0
1
openbas/caldera-server:5.1.0a277796d9724
cryptography@44.0.1
49.0.0
1
opencsghq/agenticflow:ee-v0.6-52f03fead54db
cryptography@43.0.3
49.0.0
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
cryptography@46.0.3
49.0.0
1
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
cryptography@45.0.6
49.0.0
1
opencsghq/label-studio:v2.5.047e22aa71870
cryptography@44.0.2
49.0.0
1
opencsghq/label-studio:v2.4.0b4e849fcf94a
cryptography@44.0.2
49.0.0
1
opendatacube/restcube:latest91870111837c
cryptography@2.7
49.0.0
1
opendatacube/wms:latest1b90cdf68831
cryptography@2.7
49.0.0
1
opendatacube/wps:latest80df355a660b
cryptography@45.0.4
49.0.0
1
openemr/openemr:6.1.089eaa6d9a4e3
cryptography@36.0.2
49.0.0
1
openmined/syft-backend:0.9.5b72f74a68b32
cryptography@44.0.1
49.0.0
1
openspeedtest/latest:v2.0.0d4d62f4b7d85
cryptography@38.0.3
49.0.0
1
openstackhelm/heat:wallaby-ubuntu_focalf728510bab3c
cryptography@3.4.6
49.0.0
1
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
cryptography@3.4.6
49.0.0
1
openvpn/openvpn-as:latest2253c10ec652
cryptography@46.0.6
49.0.0
1
openwhisk/ow-utils:1.0.0c80dba0de3aa
cryptography@2.5
49.0.0
1
openzaak/open-notificaties:1.3.02e65313b9b10
cryptography@3.4.8
49.0.0
1
openzaak/open-zaak:1.6.02ca2ea6e0ae9
cryptography@3.4.8
49.0.0
1
pangeo/base-notebook:2024.01.155fbe688a4f80
cryptography@41.0.3
49.0.0
1
percona/pmm-server:3.9.1003f9c25f842
cryptography@36.0.1
49.0.0
1
platzio/backend:v0.6.5d5e5972f344b
cryptography@44.0.3
49.0.0
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
cryptography@2.8
49.0.0
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
cryptography@41.0.3
49.0.0
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
cryptography@43.0.0
49.0.0
1
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
cryptography@46.0.5
49.0.0
1
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
cryptography@42.0.4
49.0.0
1
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
cryptography@2.9.2
49.0.0
1
prowlercloud/prowler-api:5.31.14f252d579be2
cryptography@46.0.7
49.0.0
1
pryorda/vmware_exporter:v0.18.479925e63e59f
cryptography@38.0.1
49.0.0
1
pryorda/vmware_exporter:v0.18.3e0f5ba8b7856
cryptography@36.0.2
49.0.0
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
cryptography@39.0.2
49.0.0
1
psono/psono-server:5.0.03b974b43ea03
cryptography@43.0.1
49.0.0
1
pyaephyohein/mysql2s3bk:alphafdee05f2d441
cryptography@41.0.3
49.0.0
1
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
cryptography@41.0.7
49.0.0
1
qonstrukt/php:8.4-v8-apache089af7925aa1
cryptography@41.0.7
49.0.0
1
redash/redash:25.8.000d813437db5
cryptography@45.0.5
49.0.0
1
redash/redash:10.0.0.b503639392753c0376
cryptography@2.8
49.0.0
1
redash/redash:26.3.0c5c9148f5c38
cryptography@46.0.5
49.0.0
1
redislabs/redisinsight:1.14.0b03ab1426d0d
cryptography@39.0.1
49.0.0
1
rommapp/romm:4.4.1b909e95d1aab
cryptography@45.0.5
49.0.0
1
rook/ceph:v1.20.72f970c425617
cryptography@36.0.1
49.0.0
1
rook/ceph:v1.19.2944a1dd70496
cryptography@36.0.1
49.0.0
1
saidsef/scapy-containerised:v2025.02f17f7c435891
cryptography@44.0.1
49.0.0
1
salehmir/jesse:1.10.101afa95f979e9
cryptography@42.0.8
49.0.0
1
saltstack/salt:3006.3e9c7906b7a5c
cryptography@41.0.3
49.0.0
1
samueldg/snappass:latest3987195edbe6
cryptography@2.8
49.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.