StackRadar

GHSA-6q48-6c7w-9gw2

Critical

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,306
of 18,219 indexed, latest versions
Container images
1,175
deployed by those charts
Fix available
1 of 1
affected package

certifi bundles emSign root CAs with compromised intermediate CA keys

Carried by container images the latest versions of 1,306 of 18,219 indexed charts deploy, on 1,175 images.

Affected packageAffected versionsFixed inImages
certifipypi2019.3.9, 2019.6.16, 2019.9.11, 2019.11.28+37 more2026.10.191,175
OSV records
GHSA-6q48-6c7w-9gw2
Also known as
PYSEC-2026-4320
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

1,306 by stars
ChartLatestAffected imagesRadar Score
pagespages101.0.01 of 3See more

pages pages10 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages1111.0.01 of 3See more

pages pages111 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages21.0.01 of 3See more

pages pages2 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-alexchmielu1.0.01 of 3See more

pages pages-alexchmielu 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-alps1.0.01 of 3See more

pages pages-alps 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-alstom1.0.01 of 3See more

pages pages-alstom 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-ambala1.0.01 of 3See more

pages pages-ambala 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-andromeda1.0.01 of 3See more

pages pages-andromeda 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespagesbadami1.0.01 of 3See more

pages pagesbadami 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-blackburn1.0.01 of 3See more

pages pages-blackburn 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-botes1.0.01 of 3See more

pages pages-botes 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-brian1.0.01 of 3See more

pages pages-brian 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-buckll1.0.01 of 3See more

pages pages-buckll 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-camden1.0.01 of 3See more

pages pages-camden 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-camden7711.0.01 of 3See more

pages pages-camden771 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-diarmuidkeane1.0.01 of 3See more

pages pages-diarmuidkeane 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-draco1.0.01 of 3See more

pages pages-draco 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-ellora1.0.01 of 3See more

pages pages-ellora 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-finchley1.0.01 of 3See more

pages pages-finchley 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-fornax1.0.01 of 3See more

pages pages-fornax 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-harsh1.0.01 of 3See more

pages pages-harsh 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespagesk1.0.01 of 3See more

pages pagesk 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-microservice-ashim1.0.01 of 3See more

pages pages-microservice-ashim 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-mihai1.0.01 of 3See more

pages pages-mihai 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-nivesh1.0.01 of 3See more

pages pages-nivesh 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespagessandeepgudu1.0.01 of 3See more

pages pagessandeepgudu 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-shubhanker1.0.01 of 3See more

pages pages-shubhanker 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-ssharma09091.0.01 of 3See more

pages pages-ssharma0909 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-sucharitha1.0.01 of 3See more

pages pages-sucharitha 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-sudhir1.0.01 of 3See more

pages pages-sudhir 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-sushi1.0.01 of 3See more

pages pages-sushi 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-vasanth58141.0.01 of 3See more

pages pages-vasanth5814 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pagespages-vjp1.0.01 of 3See more

pages pages-vjp 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
ctfdpascaliskeVerified publisher2.0.01 of 1See more

ctfd pascaliske 2.0.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
certifi@2025.8.3
2026.10.19

Open the chart page →

2,763
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
certifi@2025.11.12
2026.10.19

Open the chart page →

6,564
linkdingpascaliskeVerified publisher3.0.01 of 1See more

linkding pascaliske 3.0.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/sissbruecker/linkding:1.45.061b2eb9eed8e
certifi@2025.11.12
2026.10.19

Open the chart page →

4,413
plausiblepascaliskeVerified publisher2.0.01 of 1See more

plausible pascaliske 2.0.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
certifi@2024.2.2
2026.10.19

Open the chart page →

1,016
pagespawan-pages1.0.01 of 3See more

pages pawan-pages 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pax-prometheuspaxtecnologia0.7.41 of 8See more

pax-prometheus paxtecnologia 0.7.4

1 of the 8 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.14.1092dbe0c335f
certifi@2026.7.22
2026.10.19

Open the chart page →

3,750
stk-fluent-bit-loki-s3paxtecnologia0.2.31 of 6See more

stk-fluent-bit-loki-s3 paxtecnologia 0.2.3

1 of the 6 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:2.5.0a6b3f707f883
certifi@2026.1.4
2026.10.19

Open the chart page →

5,022
falcon-asgi-serverphanVerified publisher0.1.01 of 1See more

falcon-asgi-server phan 0.1.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
phan2410/falcon-asgi-server:0.1.04a86d138832d
certifi@2025.1.31
2026.10.19

Open the chart page →

8,791
email-managerphntom0.1.221 of 2See more

email-manager phntom 0.1.22

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
phntom/email-manager:0.1.22d8e2a9f2f085
certifi@2022.12.7
2026.10.19

Open the chart page →

3,624
external-dns-host-networkphntom0.0.121 of 1See more

external-dns-host-network phntom 0.0.12

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
phntom/external-dns-host-network:0.0.123adadbac8443
certifi@2022.9.24
2026.10.19

Open the chart page →

6,637
npre-essentialsphntom0.1.601 of 22See more

npre-essentials phntom 0.1.60

1 of the 22 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
quay.io/kiwigrid/k8s-sidecar:1.21.0710e23b489c5
certifi@2022.9.24
2026.10.19

Open the chart page →

39,966
stocks-nasdaq-crawlerphntom0.0.361 of 1See more

stocks-nasdaq-crawler phntom 0.0.36

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
phntom/stocks-nasdaq-crawler:0.0.28d2b844700b57
certifi@2020.6.20
2026.10.19

Open the chart page →

1,881
phronetisphronetis0.1.272 of 2See more

phronetis phronetis 0.1.27

2 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
certifi@2025.6.15
2026.10.19
knspar/phronetis-operator:0.1.60c4f0543ee58
certifi@2025.6.15
2026.10.19

Open the chart page →

18,248
seafilephybros-helm-charts4.0.11 of 1See more

seafile phybros-helm-charts 4.0.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:9.0.97ac833196f60
certifi@2019.11.28
2026.10.19

Open the chart page →

93,226
pieeatpieeatOfficialVerified publisher0.9.31 of 1See more

pieeat pieeat 0.9.3

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
quay.io/maxiv/pieeat:0.9.3099715479210
certifi@2026.4.22
2026.10.19

Open the chart page →

1,811
pagespighosh-pages1.0.01 of 3See more

pages pighosh-pages 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,723
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
certifi@2024.7.4
2026.10.19

Open the chart page →

13,234

Container images carrying it

1,175 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
makersquad/harp-proxy:0.8.1a40dd258c527
certifi@2022.9.24
2026.10.19
1
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
certifi@2026.7.22
2026.10.19
1
maponyacharles/sceptreai:api-0.1.127b37b092130a
certifi@2026.7.22
2026.10.19
1
marcoimme/oidcmock:latestb6035c0721a8
certifi@2026.1.4
2026.10.19
1
mathesar/mathesar:0.12.0091757cb01fe
certifi@2026.6.17
2026.10.19
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
certifi@2024.7.4
2026.10.19
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
certifi@2021.10.8
2026.10.19
1
matrixdotorg/synapse:v1.78.0def97fd537d8
certifi@2022.12.7
2026.10.19
1
matrixdotorg/synapse:v1.163.0e98ab72138d9
certifi@2026.2.25
2026.10.19
1
mawad98/backstage-pyactions:demo99422c56a274
certifi@2026.2.25
2026.10.19
1
mediagis/nominatim:5.3.27923a8e67197
certifi@2023.11.17
2026.10.19
1
mediagis/nominatim:3.7c15e941485ef
certifi@2022.6.15
2026.10.19
1
mediagis/nominatim:4.2d0eae7b51374
certifi@2024.2.2
2026.10.19
1
memgraph/mcp-memgraph:0.1.13ecdf7faea3f7
certifi@2026.4.22
2026.10.19
1
microslac/auth:latest5c1eb1f5c64d
certifi@2024.2.2
2026.10.19
1
microslac/chat:latest417317e4e4e8
certifi@2024.2.2
2026.10.19
1
microslac/client:latestff6d6c7968dd
certifi@2024.2.2
2026.10.19
1
microslac/conversations:latest1b24afcd71ff
certifi@2024.2.2
2026.10.19
1
microslac/realtime:latest7bde633b4158
certifi@2024.2.2
2026.10.19
1
microslac/teams:latest0f75997fcbe5
certifi@2024.2.2
2026.10.19
1
microslac/users:latest216ea6832a56
certifi@2024.2.2
2026.10.19
1
milesmcc/shynet:v0.13.1ba54f7797a6b
certifi@2022.12.7
2026.10.19
1
milesmcc/shynet:v0.12.0e821e31140f7
certifi@2021.10.8
2026.10.19
1
mindsdb/mindsdb:latest163011c09299
certifi@2026.2.25
2026.10.19
1
mintproject/data-catalog:9be70359feabe03ed55bfdbf92c20a7e43ab928b67d2f2103085
certifi@2020.12.5
2026.10.19
1
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
certifi@2022.9.24
2026.10.19
1
mohankrishna999/k8s-ai-agent:3.1.27f980f8c650c
certifi@2026.7.22
2026.10.19
1
mondata/mlflow:v2.3.0.s3.gc6f94c6caf8bf
certifi@2022.12.7
2026.10.19
1
moonrailgun/tianji:1.11.2b528c8f8fcc4
certifi@2024.6.2
2026.10.19
1
moreillon/face-recognition-fastapi:x86bacb2ddd8394
certifi@2022.6.15
2026.10.19
1
mozilla/syncserver:latest016162bf39d8
certifi@2019.3.9
2026.10.19
1
mozilla/syncstorage-rs:0.15.893752877dced
certifi@2024.2.2
2026.10.19
1
mshanley80/httpbin2022:latest5b189a70c0fb
certifi@2022.12.7
2026.10.19
1
mundialis/openeo-grassgis-driver:2.5.38461488723e3
certifi@2022.12.7
2026.10.19
1
mvitale1989/docker-taiga:20191031-4.2.141504ccda06df
certifi@2019.6.16
2026.10.19
1
mysql/mysql-cluster:8.0.20e4ea36622cdd
certifi@2019.11.28
2026.10.19
1
n8nio/runners:2.44.4f95ccf564f3b
certifi@2025.8.3
2026.10.19
1
nathanielvarona/pritunl-slack-app:0.1.10b746a34e5597
certifi@2024.2.2
2026.10.19
1
netbirdio/dashboard:v2.22.215a3aab9a345
certifi@2020.12.5
2026.10.19
1
netbirdio/dashboard:v2.90.101b59e1c905c9
certifi@2020.12.5
2026.10.19
1
netbirdio/dashboard:v2.90.2332cc31f5f35
certifi@2020.12.5
2026.10.19
1
netbirdio/dashboard:v2.13.188b5fb704a8c
certifi@2020.12.5
2026.10.19
1
netboxcommunity/netbox:v3.2.83d652dca5351
certifi@2022.6.15
2026.10.19
1
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
certifi@2026.7.22
2026.10.19
1
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
certifi@2024.2.2
2026.10.19
1
networktocode/nautobot:3.0-py3.13ed484336b1ad
certifi@2026.2.25
2026.10.19
1
neuvector/manager:5.6.3fafe7fe50ce3
certifi@2026.10.18
2026.10.19
1
neuvector/prometheus-exporter:1.0.20a4448f370c4a
certifi@2026.10.18
2026.10.19
1
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
certifi@2020.4.5.1
2026.10.19
1
ngoduykhanh/powerdns-admin:latest9898a7cf37d2
certifi@2022.12.7
2026.10.19
1

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.