StackRadar

GHSA-6q48-6c7w-9gw2

Critical

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,321
of 18,219 indexed, latest versions
Container images
1,187
deployed by those charts
Fix available
1 of 1
affected package

certifi bundles emSign root CAs with compromised intermediate CA keys

Carried by container images the latest versions of 1,321 of 18,219 indexed charts deploy, on 1,187 images.

Affected packageAffected versionsFixed inImages
certifipypi2019.3.9, 2019.6.16, 2019.9.11, 2019.11.28+37 more2026.10.191,187
OSV records
GHSA-6q48-6c7w-9gw2
Also known as
PYSEC-2026-4320
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

1,321 by stars
ChartLatestAffected imagesRadar Score
librephotosk8sonlabVerified publisher1.1.71 of 7See more

librephotos k8sonlab 1.1.7

1 of the 7 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
reallibrephotos/librephotos:1.2.1ecd7052f2b5f
certifi@2026.7.22
2026.10.19

Open the chart page →

18,508
netio-exporterk8sonlabVerified publisher0.1.101 of 1See more

netio-exporter k8sonlab 0.1.10

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
tomsajan/netio-exporter:0.0.5fb61907707b8
certifi@2024.2.2
2026.10.19

Open the chart page →

764
authentikkagiso-me0.1.11 of 1See more

authentik kagiso-me 0.1.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/goauthentik/server:2026.2.146a71d75dfd3
certifi@2026.1.4
2026.10.19

Open the chart page →

5,793
karbkarbVerified publisher1.0.31 of 1See more

karb karb 1.0.3

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/xeor/karb:main647a3c938d31
certifi@2026.2.25
2026.10.19

Open the chart page →

812
karb-chartkarbVerified publisher1.0.61 of 1See more

karb-chart karb 1.0.6

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/xeor/karb:1.0.6647a3c938d31
certifi@2026.2.25
2026.10.19

Open the chart page →

812
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
certifi@2025.11.12
2026.10.19

Open the chart page →

8,999
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
certifi@2022.12.7
2026.10.19

Open the chart page →

83,032
kc-chartkc-chart1.0.01 of 3See more

kc-chart kc-chart 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:latestf51c9c01c16b
certifi@2026.5.20
2026.10.19

Open the chart page →

10,338
mlflowkelvins0.4.01 of 3See more

mlflow kelvins 0.4.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
kelvinsp/mlflow:1.26.1cd33e6db2a59
certifi@2022.5.18.1
2026.10.19

Open the chart page →

5,231
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
certifi@2022.12.7
2026.10.19

Open the chart page →

67,250
elastalert2kfirfer2.2.51 of 1See more

elastalert2 kfirfer 2.2.5

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
jertel/elastalert2:2.2.34dcc0ef93efc
certifi@2021.10.8
2026.10.19

Open the chart page →

2,203
elasticsearch-cacherkfirfer0.0.21 of 1See more

elasticsearch-cacher kfirfer 0.0.2

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
kfirfer/elasticsearch-cacher:0.0.1cf81d0959256
certifi@2024.12.14
2026.10.19

Open the chart page →

930
home-assistantkfirfer0.5.41 of 1See more

home-assistant kfirfer 0.5.4

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2023.10.3021e2afc6e57
certifi@2023.7.22
2026.10.19

Open the chart page →

8,283
kibana-index-pattern-updaterkfirfer0.0.31 of 1See more

kibana-index-pattern-updater kfirfer 0.0.3

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
kfirfer/kibana-index-pattern-updater:1.0.12e88cfcec5c93
certifi@2020.12.5
2026.10.19

Open the chart page →

3,431
kube-hunterkfirfer1.0.51 of 1See more

kube-hunter kfirfer 1.0.5

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
aquasec/kube-hunter:0.6.8e64fe49f059f
certifi@2021.10.8
2026.10.19

Open the chart page →

1,082
scriptskfirfer0.1.361 of 1See more

scripts kfirfer 0.1.36

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
kfirfer/scripts:0.0.2481e5c4e5d70e
certifi@2020.12.5
2026.10.19

Open the chart page →

3,252
slackgptkfirfer0.0.61 of 1See more

slackgpt kfirfer 0.0.6

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
kfirfer/slackgpt:0.0.15461331bd838e
certifi@2023.7.22
2026.10.19

Open the chart page →

1,159
graphiti-mcpkiberonlabs0.1.21 of 1See more

graphiti-mcp kiberonlabs 0.1.2

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
certifi@2025.6.15
2026.10.19

Open the chart page →

3,816
kimai-helmchartkimai2tet0.1.01 of 2See more

kimai-helmchart kimai2tet 0.1.0

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
certifi@2023.7.22
2026.10.19

Open the chart page →

2,408
kitarukitaru0.27.21 of 1See more

kitaru kitaru 0.27.2

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
zenmldocker/kitaru-server:0.27.2d0e11680b5b4
certifi@2026.6.17
2026.10.19

Open the chart page →

1,025
csa-exporterklicktippVerified publisher0.1.41 of 1See more

csa-exporter klicktipp 0.1.4

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/klicktipp/csa-exporter:0.3.12c69513f9d85
certifi@2026.7.22
2026.10.19

Open the chart page →

1,290
snds-exporterklicktippVerified publisher0.2.51 of 1See more

snds-exporter klicktipp 0.2.5

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/klicktipp/snds-exporter:v0.2.4a23b389cb3c5
certifi@2026.6.17
2026.10.19

Open the chart page →

1,299
crate-operatorkrateo2.43.11 of 1See more

crate-operator krateo 2.43.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
crate/crate-operator:2.43.1ea396813f6f0
certifi@2024.12.14
2026.10.19

Open the chart page →

3,272
kubeflowkromanow94-kubeflow0.5.15 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

5 of the 30 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
kserve/models-web-app:v0.13.073486345a602
certifi@2024.7.4
2026.10.19
kubeflownotebookswg/jupyter-web-app:v1.9.2afb52057c997
certifi@2024.8.30
2026.10.19
kubeflownotebookswg/tensorboards-web-app:v1.9.277f07f52a84a
certifi@2024.8.30
2026.10.19
kubeflownotebookswg/volumes-web-app:v1.9.2f63c3e550af3
certifi@2024.8.30
2026.10.19
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
certifi@2023.7.22
2026.10.19

Open the chart page →

230,017
lnbitskronkltdVerified publisher0.1.01 of 1See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:latest26fae6327477
certifi@2023.11.17
2026.10.19

Open the chart page →

2,066
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
certifi@2026.2.25
2026.10.19

Open the chart page →

12,170
specter-desktopkronkltdVerified publisher0.1.01 of 1See more

specter-desktop kronkltd 0.1.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
lncm/specter-desktop:v0.10.4bca14d04397d
certifi@2019.9.11
2026.10.19

Open the chart page →

2,343
pavkrzwiatrzyk0.0.31 of 1See more

pav krzwiatrzyk 0.0.3

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
witcherek7/pav:0.0.342a744f29ac0
certifi@2022.12.7
2026.10.19

Open the chart page →

1,307
aperagkubeblocksVerified publisher0.0.0-nightly1 of 3See more

aperag kubeblocks 0.0.0-nightly

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
apecloud/aperag:v0.0.0-nightly8ac9947a2c84
certifi@2025.1.31
2026.10.19

Open the chart page →

10,010
jupyterhubkubeblocksVerified publisher0.1.02 of 7See more

jupyterhub kubeblocks 0.1.0

2 of the 7 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:3.0.1-0.dev.git.6287.hbfb05cd65a0ceed1300a
certifi@2023.7.22
2026.10.19
jupyterhub/k8s-singleuser-sample:3.0.1-0.dev.git.6287.hbfb05cd68e4778efec8e
certifi@2023.7.22
2026.10.19

Open the chart page →

9,938
lokikubeblocksVerified publisher5.39.01 of 5See more

loki kubeblocks 5.39.0

1 of the 5 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:1.24.35af76eebbba7
certifi@2023.5.7
2026.10.19

Open the chart page →

8,163
searxngkubeblocksVerified publisher0.1.01 of 1See more

searxng kubeblocks 0.1.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
searxng/searxng:2026.7.2-67973783d33aa33278be6
certifi@2026.6.17
2026.10.19

Open the chart page →

56
juicefs-csi-driverkubegems0.19.21 of 6See more

juicefs-csi-driver kubegems 0.19.2

1 of the 6 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.23.0d915e899e322
certifi@2020.6.20
2026.10.19

Open the chart page →

6,944
kube-infokube-info0.1.01 of 1See more

kube-info kube-info 0.1.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
andreymileshin/kube-info:v0.1.0f7b300bc9e66
certifi@2024.12.14
2026.10.19

Open the chart page →

577
kubeintellectkubeintellectVerified publisher2.6.01 of 2See more

kubeintellect kubeintellect 2.6.0

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/mskazemi/kubeintellect:2.6.01d2b74d49f63
certifi@2026.7.22
2026.10.19

Open the chart page →

2,979
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
certifi@2023.5.7
2026.10.19

Open the chart page →

88,003
kube-pod-alertskube-pod-alertsVerified publisher0.1.81 of 1See more

kube-pod-alerts kube-pod-alerts 0.1.8

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
tussanakorndev/kube-pod-alerts:1.0.5216fdadadf9a
certifi@2026.2.25
2026.10.19

Open the chart page →

1,950
kubernetes-feedskubernetes-feeds0.1.11 of 3See more

kubernetes-feeds kubernetes-feeds 0.1.1

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
lumutools/kubernetes-feeder:lateste35ffa90b129
certifi@2026.7.22
2026.10.19

Open the chart page →

1,243
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.31 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.3

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.5.2c80ae007ce2c
certifi@2026.7.22
2026.10.19

Open the chart page →

13,630
ghostkubernetes-homelab-helm-chartsVerified publisher0.2.51 of 2See more

ghost kubernetes-homelab-helm-charts 0.2.5

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:876f0358884cb
certifi@2026.2.25
2026.10.19

Open the chart page →

2,022
pve-exporterkubernetes-homelab-helm-chartsVerified publisher0.2.01 of 1See more

pve-exporter kubernetes-homelab-helm-charts 0.2.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/prometheus-pve/prometheus-pve-exporter:3.10.15678b230735a
certifi@2026.7.22
2026.10.19

Open the chart page →

64
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.2.11 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.2.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.6-slim5db97dbbef61
certifi@2022.9.24
2026.10.19

Open the chart page →

6,582
hertzbeatkubesphere-carryon-test1.4.11 of 4See more

hertzbeat kubesphere-carryon-test 1.4.1

1 of the 4 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
certifi@2026.2.25
2026.10.19

Open the chart page →

8,737
online-boutiquekubesphere-carryon-test0.1.02 of 11See more

online-boutique kubesphere-carryon-test 0.1.0

2 of the 11 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
certifi@2020.12.5
2026.10.19
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
certifi@2020.12.5
2026.10.19

Open the chart page →

37,320
deepflowkubesphere-stable6.2.6062 of 8See more

deepflow kubesphere-stable 6.2.606

2 of the 8 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
certifi@2021.10.8
2026.10.19
deepflowce/mysql:8.0.313d7ae561cf60
certifi@2022.6.15
2026.10.19

Open the chart page →

24,271
online-boutiquekubesphere-testVerified publisher0.1.02 of 11See more

online-boutique kubesphere-test 0.1.0

2 of the 11 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
gcr.io/google-samples/microservices-demo/loadgenerator:v0.2.3360130ab5850
certifi@2020.12.5
2026.10.19
gcr.io/google-samples/microservices-demo/recommendationservice:v0.2.35f60c4988859
certifi@2020.12.5
2026.10.19

Open the chart page →

37,320
forkliftkubevirt-forkliftVerified publisher0.4.01 of 2See more

forklift kubevirt-forklift 0.4.0

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
quay.io/kubev2v/forklift-operator:release-2.12c879733fd77e
certifi@2026.6.17
2026.10.19

Open the chart page →

2,233
kubevoipkubevoipOfficialVerified publisher0.6.81 of 1See more

kubevoip kubevoip 0.6.8

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/kubevoip/kubevoip:v0.6.841c603a93642
certifi@2026.6.17
2026.10.19

Open the chart page →

1,469
wordpresskube-wordpress0.1.01 of 2See more

wordpress kube-wordpress 0.1.0

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
certifi@2023.7.22
2026.10.19

Open the chart page →

4,950
kube-wordpress-mysqlkube-wordpress-mysql0.1.01 of 2See more

kube-wordpress-mysql kube-wordpress-mysql 0.1.0

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
certifi@2023.7.22
2026.10.19

Open the chart page →

10,986

Container images carrying it

1,187 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries GHSA-6q48-6c7w-9gw2.

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.