StackRadar

GHSA-6q48-6c7w-9gw2

Critical

Advisory

Published 20 Oct 2026In the index since 21 Oct 2026
Severity
Critical
worst across findings
CVSS
9.1
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1,303
of 18,219 indexed, latest versions
Container images
1,173
deployed by those charts
Fix available
1 of 1
affected package

certifi bundles emSign root CAs with compromised intermediate CA keys

Carried by container images the latest versions of 1,303 of 18,219 indexed charts deploy, on 1,173 images.

Affected packageAffected versionsFixed inImages
certifipypi2019.3.9, 2019.6.16, 2019.9.11, 2019.11.28+37 more2026.10.191,173
OSV records
GHSA-6q48-6c7w-9gw2
Also known as
PYSEC-2026-4320
Trending
Rank 2 in indexed charts, since 21 Oct 2026. See the ranking →

Charts affected

1,303 by stars
ChartLatestAffected imagesRadar Score
changedetection-iozekker6Verified publisher1.104.01 of 1See more

changedetection-io zekker6 1.104.0

1 of the 1 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.904eaae7915ba
certifi@2026.7.22
2026.10.19

Open the chart page →

2,534
zerossl-cert-managerzerossl-cert-manager0.1.01 of 2See more

zerossl-cert-manager zerossl-cert-manager 0.1.0

1 of the 2 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
andreymileshin/zerossl-issuer:v1.0.0e0825acc9e48
certifi@2025.1.31
2026.10.19

Open the chart page →

632
zoo-project-druzoo-projectOfficialVerified publisher0.10.91 of 6See more

zoo-project-dru zoo-project 0.10.9

1 of the 6 container images this version deploys carry GHSA-6q48-6c7w-9gw2.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
certifi@2026.7.22
2026.10.19

Open the chart page →

7,561

Container images carrying it

1,173 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
codecov/self-hosted-worker:24.4.1837f546b479b
certifi@2023.7.22
2026.10.19
1
confluentinc/cp-enterprise-control-center:6.1.0f2975d507a2a
certifi@2020.12.5
2026.10.19
1
confluentinc/cp-enterprise-kafka:6.1.08f1544df1f48
certifi@2020.12.5
2026.10.19
1
confluentinc/cp-kafka:7.6.024cdd3a7fa89
certifi@2024.2.2
2026.10.19
1
confluentinc/cp-kafka:7.1.2.amd643bf359d5e340
certifi@2022.6.15
2026.10.19
1
confluentinc/cp-kafka:7.6.683dbca3efd2a
certifi@2025.4.26
2026.10.19
1
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
certifi@2024.8.30
2026.10.19
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
certifi@2023.11.17
2026.10.19
1
confluentinc/cp-kafka:7.5.1dc9b972db002
certifi@2023.7.22
2026.10.19
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
certifi@2020.12.5
2026.10.19
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
certifi@2020.12.5
2026.10.19
1
confluentinc/cp-ksqldb-cli:7.6.0118cec1c87e2
certifi@2024.2.2
2026.10.19
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
certifi@2024.2.2
2026.10.19
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
certifi@2020.12.5
2026.10.19
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
certifi@2020.12.5
2026.10.19
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
certifi@2023.7.22
2026.10.19
1
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
certifi@2024.8.30
2026.10.19
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
certifi@2020.12.5
2026.10.19
1
confluentinc/ksqldb-server:latest1a3266adff1a
certifi@2021.10.8
2026.10.19
1
countly/countly-server:25.05.4e3c238248f99
certifi@2019.11.28
2026.10.19
1
cr0hn/ja-shortener:v0.1.414482d0bc4a1
certifi@2025.6.15
2026.10.19
1
craigwillis/c2metadata-bd:latestae317d7e4724
certifi@2020.11.8
2026.10.19
1
crate/crate-operator:2.43.1ea396813f6f0
certifi@2024.12.14
2026.10.19
1
crazymax/rtorrent-rutorrent:3.10-0.9.8-0.13.8fb307f5b87bf
certifi@2022.12.7
2026.10.19
1
crocodilestick/calibre-web-automated:v4.0.6c31a738b6d5e
certifi@2026.1.4
2026.10.19
1
dagster/dagster-celery-k8s:1.13.26605d41ae6647
certifi@2026.7.22
2026.10.19
1
dagster/dagster-cloud-agent:1.13.26c9320c34f7ed
certifi@2026.4.22
2026.10.19
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
certifi@2025.1.31
2026.10.19
1
dannielkil/book-db:latest433290c5c1db
certifi@2024.2.2
2026.10.19
1
danuk/telegram-sender:0.0.1026560388070
certifi@2022.9.24
2026.10.19
1
datadog/agent:7.22.08f20e56b5311
certifi@2020.6.20
2026.10.19
1
datadog/agent:6aad9994de6a7
certifi@2021.10.8
2026.10.19
1
datamate/seafile-professional:11.0.202dd66b722464
certifi@2023.11.17
2026.10.19
1
datawire/aes:2.0.3-ea07f8fe4f4f8e
certifi@2020.6.20
2026.10.19
1
datawire/aes:1.13.62beb65062c8b
certifi@2020.6.20
2026.10.19
1
datawire/aes:3.11.195ec30b3c732
certifi@2024.2.2
2026.10.19
1
datawire/emissary:2.0.2-ea9716efbdd24b
certifi@2020.6.20
2026.10.19
1
dchesterton/amcrest2mqtt:1.0.9cc70f2238aa9
certifi@2021.5.30
2026.10.19
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
certifi@2024.2.2
2026.10.19
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
certifi@2024.7.4
2026.10.19
1
ddosify/selfhosted_backend:3.2.93c11e3182652
certifi@2024.6.2
2026.10.19
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
certifi@2024.2.2
2026.10.19
1
ddosify/selfhosted_hammermanager:1.2.471b8768f49bc
certifi@2024.2.2
2026.10.19
1
ddosify/selfhosted_hammermanager:2.0.2b796b8c73011
certifi@2024.6.2
2026.10.19
1
decisionrules/ai-engine:latestb18f5190807b
certifi@2026.5.20
2026.10.19
1
deconzcommunity/deconz:2.29.2062de2362641
certifi@2022.9.24
2026.10.19
1
deconzcommunity/deconz:2.26.123c86008d73f
certifi@2022.9.24
2026.10.19
1
deepflowce/deepflow-app:v6.2.6.5a1888d35e787
certifi@2021.10.8
2026.10.19
1
deepflowce/deepflow-app:v6.2.2aa9468ad4d96
certifi@2021.10.8
2026.10.19
1
dellnoantechnp/dingtalk-bot:v1.0.1034000bbcad5
certifi@2025.11.12
2026.10.19
1

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.