StackRadar

GHSA-6q48-6c7w-9gw2

Critical

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,321
of 18,219 indexed, latest versions
Container images
1,187
deployed by those charts
Fix available
1 of 1
affected package

certifi bundles emSign root CAs with compromised intermediate CA keys

Carried by container images the latest versions of 1,321 of 18,219 indexed charts deploy, on 1,187 images.

Affected packageAffected versionsFixed inImages
certifipypi2019.3.9, 2019.6.16, 2019.9.11, 2019.11.28+37 more2026.10.191,187
OSV records
GHSA-6q48-6c7w-9gw2
Also known as
PYSEC-2026-4320
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

1,321 by stars
ChartLatestAffected imagesRadar Score
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/sdk-py:v1.20.0f108f49570cc
certifi@2024.8.30
2026.10.19

Open the chart page →

26,646
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

66,373
kyso-nbdimekyso1.0.01 of 1See more

kyso-nbdime kyso 1.0.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
kyso/kyso-nbdime:latest4aa9d38ee81d
certifi@2022.12.7
2026.10.19

Open the chart page →

3,009
large-systems-djangolarge-systems-djangoVerified publisher1.0.01 of 1See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ha33ona/python:test6affdfc644d0
certifi@2022.12.7
2026.10.19

Open the chart page →

5,626
pageslatif-pages1.0.01 of 3See more

pages latif-pages 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,677
pageslavanya-pages1.0.01 of 3See more

pages lavanya-pages 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,677
searxnglbenicio-communityVerified publisher0.1.11 of 1See more

searxng lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
searxng/searxng:2026.6.22-952896d293f52dca114d9
certifi@2026.6.17
2026.10.19

Open the chart page →

65
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
certifi@2022.9.24
2026.10.19

Open the chart page →

42,784
jenkinsleechistest2.7.11 of 2See more

jenkins leechistest 2.7.1

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
kiwigrid/k8s-sidecar:0.1.193170069ff0976
certifi@2020.6.20
2026.10.19

Open the chart page →

4,202
legendlegend0.1.21 of 1See more

legend legend 0.1.2

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/grofers/legend:0.1d6e901ad0ebd
certifi@2020.6.20
2026.10.19

Open the chart page →

5,695
llm-mitmleprechaun-charts0.1.251 of 1See more

llm-mitm leprechaun-charts 0.1.25

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/llm-mitm:25a3c371a673aa
certifi@2026.7.22
2026.10.19

Open the chart page →

607
mqtt-to-stuffleprechaun-charts0.1.821 of 1See more

mqtt-to-stuff leprechaun-charts 0.1.82

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/mqtt-to-stuff:0.1.82a02099acd3ee
certifi@2026.7.22
2026.10.19

Open the chart page →

678
owntracks-exporterleprechaun-charts0.1.111 of 1See more

owntracks-exporter leprechaun-charts 0.1.11

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/leprechaun/owntracks-exporter:0.1.11-de545066099e1abd6d08
certifi@2023.7.22
2026.10.19

Open the chart page →

4,349
librenmslibrenms10.3.01 of 5See more

librenms librenms 10.3.0

1 of the 5 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:26.7.0625f74ddf936
certifi@2026.5.20
2026.10.19

Open the chart page →

3,078
neuvectorlifen-chartsVerified publisher1.5.21 of 3See more

neuvector lifen-charts 1.5.2

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
neuvector/manager:3.2.1f1b7d666eae0
certifi@2019.11.28
2026.10.19

Open the chart page →

2,747
lightlyticslightlytics0.1.212 of 2See more

lightlytics lightlytics 0.1.21

2 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
public.ecr.aws/k6v9y5g3/cluster-agent:master.57536d051110158
certifi@2024.12.14
2026.10.19
public.ecr.aws/k6v9y5g3/cluster-agent:cost_k8s_process.5769e14a72b066d
certifi@2024.12.14
2026.10.19

Open the chart page →

5,953
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
certifi@2024.8.30
2026.10.19

Open the chart page →

99,492
calendar-apiliturgical0.1.51 of 1See more

calendar-api liturgical 0.1.5

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/liturgical-app/calendar-api:0.0.9688a685e2bde
certifi@2025.8.3
2026.10.19

Open the chart page →

2,077
liturgical-apiliturgical0.2.111 of 1See more

liturgical-api liturgical 0.2.11

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/liturgical-app/liturgical-api:1.0.12637bdcebdd8d
certifi@2026.2.25
2026.10.19

Open the chart page →

1,535
liturgical-appliturgical0.9.01 of 1See more

liturgical-app liturgical 0.9.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/liturgical-app/liturgical-app:1.2.041f25aded572
certifi@2025.8.3
2026.10.19

Open the chart page →

1,045
pagesliviu884422-pages1.0.01 of 3See more

pages liviu884422-pages 1.0.0

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:8.07dcddc01f13b
certifi@2026.2.25
2026.10.19

Open the chart page →

21,677
llmarinerllmariner1.53.11 of 21See more

llmariner llmariner 1.53.1

1 of the 21 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
certifi@2025.8.3
2026.10.19

Open the chart page →

25,799
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
certifi@2026.7.22
2026.10.19

Open the chart page →

4,282
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
certifi@2022.12.7
2026.10.19

Open the chart page →

2,828
local-businesslocal-business0.1.01 of 1See more

local-business local-business 0.1.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
alakaganaguathoork/local-business:latest7eb27b0f4a5a
certifi@2025.10.5
2026.10.19

Open the chart page →

1,232
weather-app-chartlocal-weatherapp0.1.01 of 4See more

weather-app-chart local-weatherapp 0.1.0

1 of the 4 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
youssef11gaber10/deployment-weather-flask:latest96bce8b8b5a7
certifi@2026.2.25
2026.10.19

Open the chart page →

8,389
locust-pluginslocust-pluginsVerified publisher0.0.41 of 3See more

locust-plugins locust-plugins 0.0.4

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
locustio/locust:2.24.151d866285170
certifi@2024.2.2
2026.10.19

Open the chart page →

9,364
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
certifi@2022.9.24
2026.10.19

Open the chart page →

42,784
nightingalelogic3579Verified publisher0.3.12 of 6See more

nightingale logic3579 0.3.1

2 of the 6 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
flashcatcloud/nightingale:8.5.1421acb36181b
certifi@2026.1.4
2026.10.19
library/mysql:5.74bc6bc963e6d
certifi@2023.7.22
2026.10.19

Open the chart page →

11,986
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
logiqai/toolbox:2.0.155a574ec5b64
certifi@2019.11.28
2026.10.19

Open the chart page →

87,077
allure_docker_servicelovemew67Verified publisher0.0.11 of 1See more

allure_docker_service lovemew67 0.0.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.27.00815040339a9
certifi@2024.2.2
2026.10.19

Open the chart page →

63,214
oncall-hobbylovemew67Verified publisher0.0.51 of 2See more

oncall-hobby lovemew67 0.0.5

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
grafana/oncall:v1.13.11159b6b836fed
certifi@2024.7.4
2026.10.19

Open the chart page →

7,235
redisinsightlovemew67Verified publisher0.0.11 of 1See more

redisinsight lovemew67 0.0.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
redislabs/redisinsight:1.14.0b03ab1426d0d
certifi@2022.12.7
2026.10.19

Open the chart page →

2,118
vulnerability-scaninglovemew67Verified publisher0.0.31 of 2See more

vulnerability-scaning lovemew67 0.0.3

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.35.14154286c0209
certifi@2025.10.5
2026.10.19

Open the chart page →

6,419
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
certifi@2025.1.31
2026.10.19

Open the chart page →

7,286
alert-stream-schema-registrylsst-sqre2.1.01 of 1See more

alert-stream-schema-registry lsst-sqre 2.1.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
lsstdm/lsst_alert_packet:tickets-DM-3274374c97a490940
certifi@2021.10.8
2026.10.19

Open the chart page →

3,399
nubladolsst-sqre0.9.233 of 5See more

nublado lsst-sqre 0.9.23

3 of the 5 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
lsstsqre/prepuller:latest19c2dfc4e4ff
certifi@2020.12.5
2026.10.19
lsstsqre/sciplat-hub:latest5e0ade6bed1c
certifi@2020.12.5
2026.10.19
lsstsqre/wfdispatcher:lateste9feb99f524d
certifi@2020.12.5
2026.10.19

Open the chart page →

6,601
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
certifi@2021.10.8
2026.10.19

Open the chart page →

90,905
sasquatchlsst-sqre0.1.132 of 6See more

sasquatch lsst-sqre 0.1.13

2 of the 6 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
lsstsqre/kafkaconnect:0.9.34143c7cd705e
certifi@2021.10.8
2026.10.19
lsstsqre/strimzi-registry-operator:0.4.1e139fde946d7
certifi@2021.10.8
2026.10.19

Open the chart page →

13,315
squash-apilsst-sqre0.1.61 of 3See more

squash-api lsst-sqre 0.1.6

1 of the 3 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
lsstsqre/squash-api:0.5.34879415ec6ac
certifi@2020.11.8
2026.10.19

Open the chart page →

9,331
flaresolverrluiscajl0.0.31 of 1See more

flaresolverr luiscajl 0.0.3

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:latestc80ae007ce2c
certifi@2026.7.22
2026.10.19

Open the chart page →

13,630
bazarrm0nsterrr-bazarrVerified publisher2.4.01 of 1See more

bazarr m0nsterrr-bazarr 2.4.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/home-operations/bazarr:1.6.217dc1cff22e9
certifi@2026.6.17
2026.10.19

Open the chart page →

587
hyperglassm0nsterrr-hyperglassVerified publisher4.2.11 of 2See more

hyperglass m0nsterrr-hyperglass 4.2.1

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
certifi@2024.7.4
2026.10.19

Open the chart page →

5,354
kea-exporterm0nsterrr-kea-exporterVerified publisher2.2.11 of 1See more

kea-exporter m0nsterrr-kea-exporter 2.2.1

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
certifi@2026.6.17
2026.10.19

Open the chart page →

1,328
kube-hunterm9sweeperVerified publisher1.6.01 of 1See more

kube-hunter m9sweeper 1.6.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
aquasec/kube-hunter:0.6.8e64fe49f059f
certifi@2021.10.8
2026.10.19

Open the chart page →

1,082
demoshopmakaira2.4.01 of 4See more

demoshop makaira 2.4.0

1 of the 4 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:86ea90827b110
certifi@2026.2.25
2026.10.19

Open the chart page →

4,583
plane-mcp-servermakeplaneVerified publisher1.0.01 of 2See more

plane-mcp-server makeplane 1.0.0

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
makeplane/plane-mcp-server:v0.3.071b7252adef0
certifi@2026.7.22
2026.10.19

Open the chart page →

3,362
nodecg-chartmarathon-charts0.1.51 of 2See more

nodecg-chart marathon-charts 0.1.5

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/rodg/rtmp-controller:latest67f99a5beab7
certifi@2023.5.7
2026.10.19

Open the chart page →

91,775
novosgamarcusrepo0.1.11 of 2See more

novosga marcusrepo 0.1.1

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
library/mysql:5.74bc6bc963e6d
certifi@2023.7.22
2026.10.19

Open the chart page →

5,314
marge-botmarge-bot1.1.01 of 1See more

marge-bot marge-bot 1.1.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
smarketshq/marge-bot:0.9.2cfc765b27e64
certifi@2019.3.9
2026.10.19

Open the chart page →

361

Container images carrying it

1,187 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

No deployed image carries GHSA-6q48-6c7w-9gw2.

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.