StackRadar

GHSA-6q48-6c7w-9gw2

Critical

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,311
of 18,219 indexed, latest versions
Container images
1,178
deployed by those charts
Fix available
1 of 1
affected package

certifi bundles emSign root CAs with compromised intermediate CA keys

Carried by container images the latest versions of 1,311 of 18,219 indexed charts deploy, on 1,178 images.

Affected packageAffected versionsFixed inImages
certifipypi2019.3.9, 2019.6.16, 2019.9.11, 2019.11.28+37 more2026.10.191,178
OSV records
GHSA-6q48-6c7w-9gw2
Also known as
PYSEC-2026-4320
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

1,311 by stars
ChartLatestAffected imagesRadar Score
vm-standaloneot-container-kit0.0.41 of 6See more

vm-standalone ot-container-kit 0.0.4

1 of the 6 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
quay.io/opstree/k8s-sidecar:2.7.37075d455b219
certifi@2026.4.22
2026.10.19

Open the chart page →

5,517
devpiowan-charts0.1.01 of 1See more

devpi owan-charts 0.1.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
owanio1992/devpi:6.16.04ade8e1e4d7e
certifi@2025.6.15
2026.10.19

Open the chart page →

737
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
certifi@2026.2.25
2026.10.19

Open the chart page →

31,827
myappp4-helm0.1.01 of 6See more

myapp p4-helm 0.1.0

1 of the 6 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
certifi@2026.2.25
2026.10.19

Open the chart page →

23,666
pagespages1.0.01 of 3See more

pages pages 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-diarmuidkeane1.0.01 of 3See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-draco1.0.01 of 3See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-ellora1.0.01 of 3See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-finchley1.0.01 of 3See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-fornax1.0.01 of 3See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
certifi@2025.8.3
2026.10.19

Open the chart page →

2,763
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
certifi@2025.11.12
2026.10.19

Open the chart page →

6,564
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
certifi@2025.11.12
2026.10.19

Open the chart page →

4,413
plausiblepascaliskeVerified publisher2.0.01 of 1See more

plausible pascaliske 2.0.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
certifi@2024.2.2
2026.10.19

Open the chart page →

1,016
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pax-prometheuspaxtecnologia0.7.41 of 8See more

pax-prometheus paxtecnologia 0.7.4

1 of the 8 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.14.1092dbe0c335f
certifi@2026.7.22
2026.10.19

Open the chart page →

3,750
stk-fluent-bit-loki-s3paxtecnologia0.2.31 of 6See more

stk-fluent-bit-loki-s3 paxtecnologia 0.2.3

1 of the 6 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
certifi@2026.1.4
2026.10.19

Open the chart page →

5,022
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
certifi@2025.1.31
2026.10.19

Open the chart page →

8,791
email-managerphntom0.1.221 of 2See more

email-manager phntom 0.1.22

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
phntom/email-manager:0.1.22d8e2a9f2f085
certifi@2022.12.7
2026.10.19

Open the chart page →

3,624
external-dns-host-networkphntom0.0.121 of 1See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
phntom/external-dns-host-network:0.0.123adadbac8443
certifi@2022.9.24
2026.10.19

Open the chart page →

6,637
npre-essentialsphntom0.1.601 of 22See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.21.0710e23b489c5
certifi@2022.9.24
2026.10.19

Open the chart page →

39,966
stocks-nasdaq-crawlerphntom0.0.361 of 1See more

stocks-nasdaq-crawler phntom 0.0.36

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
phntom/stocks-nasdaq-crawler:0.0.28d2b844700b57
certifi@2020.6.20
2026.10.19

Open the chart page →

1,881

Container images carrying it

1,178 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
langgenius/dify-sandbox:0.2.15750e1111426e
certifi@2026.4.22
2026.10.19
1
library/mysql:8.4.3106d5197fd8e
certifi@2024.7.4
2026.10.19
1
library/mysql:8:8.4.1124989179f588
certifi@2026.2.25
2026.10.19
1
library/mysql:8.0.303c1aab708f6e
certifi@2021.10.8
2026.10.19
1
library/mysql:8:8.4:8.4.1185b9bf2e29cf
certifi@2026.2.25
2026.10.19
1
library/mysql:8.4.108dbcf531a03a
certifi@2026.2.25
2026.10.19
1
library/mysql:9.0.192dc86967801
certifi@2024.2.2
2026.10.19
1
library/mysql:8.0.41bf577825b52a
certifi@2024.8.30
2026.10.19
1
library/mysql:8.0.39ccb8f749bb5e
certifi@2024.2.2
2026.10.19
1
library/mysql:8.0.40d58ac93387f6
certifi@2024.7.4
2026.10.19
1
library/mysql:9.7.2e2bde46db656
certifi@2026.2.25
2026.10.19
1
librenms/librenms:22.4.14f1f3d667cc7
certifi@2020.12.5
2026.10.19
1
libretranslate/libretranslate:v1.9.61de2d7056bb8
certifi@2026.5.20
2026.10.19
1
linuxserver/babybuddy:1.10.2f7d7c7704249
certifi@2020.12.5
2026.10.19
1
linuxserver/bazarr:latestfb0437897eaa
certifi@2026.6.17
2026.10.19
1
linuxserver/calibre-web:0.6.24241009026e6f
certifi@2025.8.3
2026.10.19
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
certifi@2021.5.30
2026.10.19
1
linuxserver/couchpotato:75e576ee-ls32c4d2766b9eb7
certifi@2019.11.28
2026.10.19
1
linuxserver/healthchecks:version-v1.20.050792a72fc71
certifi@2021.5.30
2026.10.19
1
linuxserver/healthchecks:2.7.2023033194696dab3c50
certifi@2022.12.7
2026.10.19
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
certifi@2021.5.30
2026.10.19
1
linuxserver/medusa:v1.0.27-ls2940c7a40f32040
certifi@2025.10.5
2026.10.19
1
linuxserver/nzbget:26.3.20261016ab18af1d1602
certifi@2026.7.22
2026.10.19
1
linuxserver/sickchill:v2020.08.07-1-ls40e48b479c1891
certifi@2020.6.20
2026.10.19
1
litellm/litellm-non_root:v1.82.3-stable09b217802ded
certifi@2026.2.25
2026.10.19
1
lnbitsdocker/lnbits-legend:latest26fae6327477
certifi@2023.11.17
2026.10.19
1
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
certifi@2022.12.7
2026.10.19
1
lncm/specter-desktop:v0.10.4bca14d04397d
certifi@2019.9.11
2026.10.19
1
localstack/localstack:3.19d278167f2b7
certifi@2023.11.17
2026.10.19
1
localstack/localstack-pro:latest801a3dff7f6a
certifi@2026.7.22
2026.10.19
1
locustio/locust:2.24.151d866285170
certifi@2024.2.2
2026.10.19
1
loeken/home-assistant:2026.9.2b1dff5b4c593
certifi@2026.7.22
2026.10.19
1
loeken/jellyfin:10.11.87efbc24e47b0
certifi@2025.11.12
2026.10.19
1
logiqai/toolbox:2.0.155a574ec5b64
certifi@2019.11.28
2026.10.19
1
louislam/uptime-kuma:2.0.24c364ef96aad
certifi@2022.9.24
2026.10.19
1
louislam/uptime-kuma:2.5.4917318f9d7be
certifi@2022.9.24
2026.10.19
1
louislam/uptime-kuma:2.4.091e963bfda56
certifi@2022.9.24
2026.10.19
1
louislam/uptime-kuma:2.0.2-slim-rootless9865163f92c1
certifi@2022.9.24
2026.10.19
1
louislam/uptime-kuma:2.5.0a8610b3b4c38
certifi@2022.9.24
2026.10.19
1
louislam/uptime-kuma:2.5.5c74379ac4509
certifi@2022.9.24
2026.10.19
1
louislam/uptime-kuma:2.5.1ecd5b8c8b49f
certifi@2022.9.24
2026.10.19
1
lsstdm/lsst_alert_packet:tickets-DM-3274374c97a490940
certifi@2021.10.8
2026.10.19
1
lsstsqre/kafkaconnect:0.9.34143c7cd705e
certifi@2021.10.8
2026.10.19
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
certifi@2021.10.8
2026.10.19
1
lsstsqre/prepuller:latest19c2dfc4e4ff
certifi@2020.12.5
2026.10.19
1
lsstsqre/sciplat-hub:latest5e0ade6bed1c
certifi@2020.12.5
2026.10.19
1
lsstsqre/squash-api:0.5.34879415ec6ac
certifi@2020.11.8
2026.10.19
1
lsstsqre/strimzi-registry-operator:0.4.1e139fde946d7
certifi@2021.10.8
2026.10.19
1
lsstsqre/wfdispatcher:lateste9feb99f524d
certifi@2020.12.5
2026.10.19
1
lumutools/kubernetes-feeder:lateste35ffa90b129
certifi@2026.7.22
2026.10.19
1

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.