StackRadar

GHSA-5cpq-8wj7-hf2v

Low

Advisory

Published 2 Jun 2023In the index since 5 Sept 2026
Severity
Low
worst across findings
CVSS
2.0
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
262
of 17,781 indexed, latest versions
Container images
240
deployed by those charts
Fix available
1 of 1
affected package

Vulnerable OpenSSL included in cryptography wheels

Carried by container images the latest versions of 262 of 17,781 indexed charts deploy, on 240 images.

Affected packageAffected versionsFixed inImages
cryptographypypi1.7.2, 1.9, 2.1.4, 2.2.2+35 more41.0.0240
OSV records
GHSA-5cpq-8wj7-hf2v

Charts affected

262 by stars
ChartLatestAffected imagesRadar Score
tensor_apptensor-app0.2.21 of 3See more

tensor_app tensor-app 0.2.2

1 of the 3 container images this version deploys carry GHSA-5cpq-8wj7-hf2v.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
41.0.0

Open the chart page →

17,461
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry GHSA-5cpq-8wj7-hf2v.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
cryptography@39.0.1
41.0.0

Open the chart page →

3,164
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-5cpq-8wj7-hf2v.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
cryptography@38.0.1
41.0.0

Open the chart page →

8,607
phonebook-chartusuladams2Verified publisher0.2.11 of 3See more

phonebook-chart usuladams2 0.2.1

1 of the 3 container images this version deploys carry GHSA-5cpq-8wj7-hf2v.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
cryptography@3.2.1
41.0.0

Open the chart page →

3,176
twenty-crmvictorlane0.0.11 of 3See more

twenty-crm victorlane 0.0.1

1 of the 3 container images this version deploys carry GHSA-5cpq-8wj7-hf2v.

Container imageDigestPackageFixed in
twentycrm/twenty-postgres-spilo:latest2f78405a78be
cryptography@3.4.8
41.0.0

Open the chart page →

13,459
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry GHSA-5cpq-8wj7-hf2v.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
cryptography@3.3.2
41.0.0

Open the chart page →

11,119
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry GHSA-5cpq-8wj7-hf2v.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
cryptography@38.0.4
41.0.0

Open the chart page →

9,117
ceph-csi-cephfswikimedia0.1.81 of 5See more

ceph-csi-cephfs wikimedia 0.1.8

1 of the 5 container images this version deploys carry GHSA-5cpq-8wj7-hf2v.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
cryptography@3.2.1
41.0.0

Open the chart page →

10,285
ceph-csi-rbdwikimedia0.1.131 of 6See more

ceph-csi-rbd wikimedia 0.1.13

1 of the 6 container images this version deploys carry GHSA-5cpq-8wj7-hf2v.

Container imageDigestPackageFixed in
quay.io/cephcsi/cephcsi:v3.7.2f7f8228f17cc
cryptography@3.2.1
41.0.0

Open the chart page →

11,784
powerdnsadminwitcom-gmbh0.3.41 of 1See more

powerdnsadmin witcom-gmbh 0.3.4

1 of the 1 container images this version deploys carry GHSA-5cpq-8wj7-hf2v.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:v0.2.4ba36ab196d3d
cryptography@35.0.0
41.0.0

Open the chart page →

2,643
alertmanager-matrix-forwarderzloi-space1.0.11 of 2See more

alertmanager-matrix-forwarder zloi-space 1.0.1

1 of the 2 container images this version deploys carry GHSA-5cpq-8wj7-hf2v.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
cryptography@36.0.1
41.0.0

Open the chart page →

3,118
grafana-matrix-forwarderzloi-space1.0.01 of 2See more

grafana-matrix-forwarder zloi-space 1.0.0

1 of the 2 container images this version deploys carry GHSA-5cpq-8wj7-hf2v.

Container imageDigestPackageFixed in
matrixdotorg/pantalaimon:v0.10.4ba6a587fa508
cryptography@36.0.1
41.0.0

Open the chart page →

1,636

Container images carrying it

240 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.10ebcf7f033b54
cryptography@2.6.1
41.0.0
1
supabase/realtime:v2.102.3aa1c92c0cf32
cryptography@38.0.4
41.0.0
1
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
cryptography@40.0.2
41.0.0
1
svtechnmaa/svtech_rundeck:v1.2.26e368ace0977
cryptography@2.5
41.0.0
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
cryptography@39.0.1
41.0.0
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
cryptography@36.0.0
41.0.0
1
taigaio/taiga-back:6.4.29f97323cc150
cryptography@3.4.7
41.0.0
1
tautulli/tautulli:v2.7.7c4da15f058ea
cryptography@3.4.8
41.0.0
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
cryptography@3.4.8
41.0.0
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
cryptography@3.4.8
41.0.0
1
timescale/timescaledb-ha:pg16d7db8f1085a3
cryptography@3.4.8
41.0.0
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
cryptography@3.4.8
41.0.0
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
cryptography@3.4.8
41.0.0
1
trueosiris/vrising:latest9356f98ad561
cryptography@3.4.8
41.0.0
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
cryptography@3.4.8
41.0.0
1
vabene1111/recipes:1.0.5.2ec4e9e2905b0
cryptography@2.9.2
41.0.0
1
voltha/voltha-cli:1.6.0c4e41e92f046
cryptography@2.4.1
41.0.0
1
voltha/voltha-netconf:1.6.037f80524c207
cryptography@2.4.1
41.0.0
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
cryptography@2.4.1
41.0.0
1
voltha/voltha-tester:1.7.0655c3048a602
cryptography@2.7
41.0.0
1
voltha/voltha-voltha:1.6.0ff596b62de59
cryptography@2.4.1
41.0.0
1
wallabag/wallabag:2.4.25e4c26a7fb4a
cryptography@2.9.2
41.0.0
1
wazuh/wazuh-manager:4.4.121994f40e0da
cryptography@3.3.2
41.0.0
1
weblate/weblate:3.11.3-182848df56ecd
cryptography@2.8
41.0.0
1
wiremind/pghoard:12-2019-11-264dea42c8166c
cryptography@2.8
41.0.0
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
cryptography@38.0.3
41.0.0
1
ghcr.io/dgtlmoon/changedetection.io:0.39.4f1ce4c56ccaa
cryptography@3.4.8
41.0.0
1
ghcr.io/dodevops/azure-advanced-backup:0.4.01041d4449e49
cryptography@3.3.2
41.0.0
1
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
cryptography@37.0.2
41.0.0
1
ghcr.io/home-assistant/home-assistant:2022.5.4ec6d67fbedfa
cryptography@36.0.2
41.0.0
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
cryptography@3.4.7
41.0.0
1
ghcr.io/linuxserver/pyload:version-5de90278d3c87933a5fd
cryptography@3.3.2
41.0.0
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
cryptography@37.0.4
41.0.0
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
cryptography@39.0.1
41.0.0
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
cryptography@38.0.4
41.0.0
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
cryptography@37.0.2
41.0.0
1
quay.io/ibmgaragecloud/cli-tools:v0.159663f06adcb1
cryptography@36.0.2
41.0.0
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
cryptography@38.0.1
41.0.0
1
registry.gitlab.com/open-forms/forms-catalogue:latest4eaf9c911f33
cryptography@3.4.8
41.0.0
1
registry.gitlab.com/open-forms/request-registry:latest0886cbbc5f95
cryptography@3.4.8
41.0.0
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.