StackRadar

GHSA-6q48-6c7w-9gw2

Critical

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,321
of 18,219 indexed, latest versions
Container images
1,187
deployed by those charts
Fix available
1 of 1
affected package

certifi bundles emSign root CAs with compromised intermediate CA keys

Carried by container images the latest versions of 1,321 of 18,219 indexed charts deploy, on 1,187 images.

Affected packageAffected versionsFixed inImages
certifipypi2019.3.9, 2019.6.16, 2019.9.11, 2019.11.28+37 more2026.10.191,187
OSV records
GHSA-6q48-6c7w-9gw2
Also known as
PYSEC-2026-4320
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

1,321 by stars
ChartLatestAffected imagesRadar Score
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-loadgenerator85c9935ff31b
certifi@2023.7.22
2026.10.19

Open the chart page →

196,721
grafana-dashboard-convertergrafana-dashboard-converterVerified publisher0.3.101 of 1See more

grafana-dashboard-converter grafana-dashboard-converter 0.3.10

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
kenchrcum/grafana-dashboard-converter:0.3.105310497aea3f
certifi@2026.2.25
2026.10.19

Open the chart page →

1,133
mysqlgroundhog2k3.1.41 of 1See more

mysql groundhog2k 3.1.4

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:9.7.2e2fa358a74ac
certifi@2026.2.25
2026.10.19

Open the chart page →

908
guacamoleguacamole1.0.01 of 4See more

guacamole guacamole 1.0.0

1 of the 4 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:18899d3ed526b6
certifi@2026.7.22
2026.10.19

Open the chart page →

4,684
gwangju_2-3gwangju2-30.1.03 of 5See more

gwangju_2-3 gwangju2-3 0.1.0

3 of the 5 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
clsen2024/gwangju_2-3:service-b-10ba9eff852c5
certifi@2024.7.4
2026.10.19
clsen2024/gwangju_2-3:service-a-151b1d45961cd
certifi@2024.7.4
2026.10.19
clsen2024/gwangju_2-3:service-c-1efb1586c8299
certifi@2024.7.4
2026.10.19

Open the chart page →

7,319
rag-apihajowielandVerified publisher1.0.01 of 1See more

rag-api hajowieland 1.0.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latesta62ce2221b43
certifi@2026.7.22
2026.10.19

Open the chart page →

1,808
resurrectbothalkeye0.1.51 of 1See more

resurrectbot halkeye 0.1.5

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
halkeye/slack-resurrect:v0.1.477b05e95fdb5
certifi@2019.6.16
2026.10.19

Open the chart page →

5,216
hawk-envoy-pluginhawk0.1.01 of 4See more

hawk-envoy-plugin hawk 0.1.0

1 of the 4 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
kong/httpbin:latesta6ac46531193
certifi@2024.12.14
2026.10.19

Open the chart page →

70,339
helixhelix1.4.31 of 2See more

helix helix 1.4.3

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.492f883d09270
certifi@2026.4.22
2026.10.19

Open the chart page →

6,298
pageshelm-chart-repos-camden1.0.01 of 3See more

pages helm-chart-repos-camden 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,677
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
certifi@2025.1.31
2026.10.19

Open the chart page →

6,800
home-assistanthelm-chart-roeiVerified publisher2025.3.01 of 1See more

home-assistant helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.3.026c51e44d932
certifi@2025.1.31
2026.10.19

Open the chart page →

6,590
kube-downscalerhelm-charts-nr0.7.61 of 1See more

kube-downscaler helm-charts-nr 0.7.6

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
certifi@2023.5.7
2026.10.19

Open the chart page →

88,003
locusthelm-charts-nr0.32.41 of 1See more

locust helm-charts-nr 0.32.4

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
locustio/locust:2.32.2a0d4b88e42c1
certifi@2024.8.30
2026.10.19

Open the chart page →

3,063
mlflowhelm-charts-nr1.0.101 of 1See more

mlflow helm-charts-nr 1.0.10

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
larribas/mlflow:1.9.105ccb0b46bfb
certifi@2020.6.20
2026.10.19

Open the chart page →

5,110
newrelic-controllerhelm-charts-nr1.2.01 of 1See more

newrelic-controller helm-charts-nr 1.2.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
maxrocketinternet/newrelic-controller:0.8ff66958597f0
certifi@2020.4.5.1
2026.10.19

Open the chart page →

951
postgres-controllerhelm-charts-nr1.4.01 of 1See more

postgres-controller helm-charts-nr 1.4.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
maxrocketinternet/postgres-controller:0.572ac4d33b99d
certifi@2020.4.5.1
2026.10.19

Open the chart page →

978
supersethelm-charts-nr1.1.31 of 1See more

superset helm-charts-nr 1.1.3

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
apache/superset:latest16b50bbef664
certifi@2025.6.15
2026.10.19

Open the chart page →

30,618
weblatehelm-charts-nr0.3.21 of 3See more

weblate helm-charts-nr 0.3.2

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
weblate/weblate:4.2.2-169c160d37a3c
certifi@2020.6.20
2026.10.19

Open the chart page →

11,158
dbapphelmcourseVerified publisher0.3.31 of 2See more

dbapp helmcourse 0.3.3

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
certifi@2023.7.22
2026.10.19

Open the chart page →

4,924
mysqlhelmcourseVerified publisher0.2.41 of 1See more

mysql helmcourse 0.2.4

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
certifi@2023.7.22
2026.10.19

Open the chart page →

2,408
chart-bookhelm-deploy-book0.1.01 of 3See more

chart-book helm-deploy-book 0.1.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
dannielkil/book-db:latest433290c5c1db
certifi@2024.2.2
2026.10.19

Open the chart page →

10,702
appwritehelmforgeVerified publisher2.0.71 of 5See more

appwrite helmforge 2.0.7

1 of the 5 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
appwrite/appwrite:2.5.000bf6b9a0be8
certifi@2026.2.25
2026.10.19

Open the chart page →

4,405
archiveboxhelmforgeVerified publisher1.1.151 of 1See more

archivebox helmforge 1.1.15

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.73d4720d86c0e9
certifi@2026.7.22
2026.10.19

Open the chart page →

6,414
changedetectionhelmforgeVerified publisher1.1.201 of 1See more

changedetection helmforge 1.1.20

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.904eaae7915ba
certifi@2026.7.22
2026.10.19

Open the chart page →

2,728
chiefonboardinghelmforgeVerified publisher1.1.171 of 3See more

chiefonboarding helmforge 1.1.17

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
certifi@2026.7.22
2026.10.19

Open the chart page →

8,810
ckanhelmforgeVerified publisher1.3.132 of 6See more

ckan helmforge 1.3.13

2 of the 6 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ckan/ckan-base:2.12.087ecf3f27ad6
certifi@2026.6.17
2026.10.19
ckan/ckan-base-datapusher:0.0.2184d11924549f
certifi@2020.12.5
2026.10.19

Open the chart page →

11,595
countlyhelmforgeVerified publisher1.2.101 of 3See more

countly helmforge 1.2.10

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
certifi@2019.11.28
2026.10.19

Open the chart page →

74,385
discount-bandithelmforgeVerified publisher2.0.121 of 3See more

discount-bandit helmforge 2.0.12

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:26.7.0625f74ddf936
certifi@2026.5.20
2026.10.19

Open the chart page →

38,844
drupalhelmforgeVerified publisher1.2.181 of 2See more

drupal helmforge 1.2.18

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:26.7.0625f74ddf936
certifi@2026.5.20
2026.10.19

Open the chart page →

17,609
fastmcp-serverhelmforgeVerified publisher1.7.51 of 1See more

fastmcp-server helmforge 1.7.5

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.11.2fcb7017327d6
certifi@2026.4.22
2026.10.19

Open the chart page →

3,948
ghosthelmforgeVerified publisher1.2.131 of 3See more

ghost helmforge 1.2.13

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.4.110f51e63e537a
certifi@2026.2.25
2026.10.19

Open the chart page →

2,879
hermes-agenthelmforgeVerified publisher1.0.21 of 1See more

hermes-agent helmforge 1.0.2

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
certifi@2026.5.20
2026.10.19

Open the chart page →

7,429
immichhelmforgeVerified publisher1.2.131 of 5See more

immich helmforge 1.2.13

1 of the 5 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
certifi@2025.11.12
2026.10.19

Open the chart page →

13,173
jupyterhubhelmforgeVerified publisher1.0.71 of 3See more

jupyterhub helmforge 1.0.7

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.3.5113e372cf71b
certifi@2026.4.22
2026.10.19

Open the chart page →

6,216
langflowhelmforgeVerified publisher2.0.41 of 1See more

langflow helmforge 2.0.4

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
langflowai/langflow:1.12.6a0396e089eb9
certifi@2026.7.22
2026.10.19

Open the chart page →

578
mcp-serverhelmforgeVerified publisher1.0.01 of 1See more

mcp-server helmforge 1.0.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
helmforge/fastmcp-server:0.2.061f759a1421f
certifi@2026.2.25
2026.10.19

Open the chart page →

4,085
medikeephelmforgeVerified publisher2.0.51 of 3See more

medikeep helmforge 2.0.5

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/afairgiant/medikeep:v0.72.09285e26f6d0d
certifi@2025.4.26
2026.10.19

Open the chart page →

6,624
mysqlhelmforgeVerified publisher2.1.11 of 1See more

mysql helmforge 2.1.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:26.7.0625f74ddf936
certifi@2026.5.20
2026.10.19

Open the chart page →

824
netboxhelmforgeVerified publisher2.0.51 of 4See more

netbox helmforge 2.0.5

1 of the 4 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
certifi@2026.7.22
2026.10.19

Open the chart page →

5,414
olivetinhelmforgeVerified publisher1.2.31 of 2See more

olivetin helmforge 1.2.3

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
jamesread/olivetin:3000.20.0f3066e207efd
certifi@2026.1.4
2026.10.19

Open the chart page →

789
openreplayhelmforgeVerified publisher1.1.12 of 24See more

openreplay helmforge 1.1.1

2 of the 24 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
public.ecr.aws/p1t3u8a3/alerts:v1.28.0048f3090de46
certifi@2026.7.22
2026.10.19
public.ecr.aws/p1t3u8a3/chalice:v1.28.66abe7250a64e
certifi@2026.7.22
2026.10.19

Open the chart page →

15,720
paperless-ngxhelmforgeVerified publisher1.1.11 of 4See more

paperless-ngx helmforge 1.1.1

1 of the 4 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.2d232cba37cc0
certifi@2026.1.4
2026.10.19

Open the chart page →

8,142
supersethelmforgeVerified publisher1.4.21 of 5See more

superset helmforge 1.4.2

1 of the 5 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
apache/superset:6.1.016b50bbef664
certifi@2025.6.15
2026.10.19

Open the chart page →

34,432
webodmhelmforgeVerified publisher1.1.21 of 4See more

webodm helmforge 1.1.2

1 of the 4 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
opendronemap/nodeodm:3.6.2fcd99eb23d8d
certifi@2026.7.22
2026.10.19

Open the chart page →

13,271
openaevhelm-openbasVerified publisher2.0.151 of 7See more

openaev helm-openbas 2.0.15

1 of the 7 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
certifi@2025.1.31
2026.10.19

Open the chart page →

79,005
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
certifi@2025.1.31
2026.10.19

Open the chart page →

83,823
pageshelm-repo1.0.01 of 3See more

pages helm-repo 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,677
hetzner-s3-operatorhetzner-s3-operatorVerified publisher0.1.31 of 1See more

hetzner-s3-operator hetzner-s3-operator 0.1.3

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
kenchrcum/hetzner-s3-operator:0.1.384dae7aeea5b
certifi@2026.2.25
2026.10.19

Open the chart page →

850
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
certifi@2024.2.2
2026.10.19

Open the chart page →

15,662

Container images carrying it

1,187 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries GHSA-6q48-6c7w-9gw2.

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.