StackRadar

GHSA-h4gh-qq45-vh27

Medium

Advisory

Published 3 Sept 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
174
of 17,781 indexed, latest versions
Container images
189
deployed by those charts
Fix available
1 of 1
affected package

pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels

Carried by container images the latest versions of 174 of 17,781 indexed charts deploy, on 189 images.

Affected packageAffected versionsFixed inImages
cryptographypypi37.0.2, 37.0.4, 38.0.1, 38.0.3+21 more43.0.1189
OSV records
GHSA-h4gh-qq45-vh27

Charts affected

174 by stars
ChartLatestAffected imagesRadar Score
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
cryptography@38.0.4
43.0.1

Open the chart page →

30,219
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
cryptography@41.0.7
43.0.1

Open the chart page →

10,209
mysqlsb-helm-charts0.4.01 of 1See more

mysql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
library/mysql:8.4.3106d5197fd8e
cryptography@42.0.8
43.0.1

Open the chart page →

1,096
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
library/mysql:9.0.192dc86967801
cryptography@42.0.7
43.0.1

Open the chart page →

5,497
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
cryptography@41.0.3
43.0.1

Open the chart page →

3,337
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
cryptography@41.0.7
43.0.1

Open the chart page →

5,565
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
helga09/my_sql_shoes:v1.1.1a03657d97897
cryptography@37.0.2
43.0.1

Open the chart page →

7,574
downscalersqream-chartsVerified publisher1.0.01 of 1See more

downscaler sqream-charts 1.0.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.05d328c003efe
cryptography@39.0.1
43.0.1

Open the chart page →

1,009
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
cryptography@42.0.7
43.0.1

Open the chart page →

13,390
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
cryptography@41.0.3
43.0.1

Open the chart page →

12,655
icinga2svtech-public-helm-charts1.0.01 of 4See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
cryptography@40.0.2
43.0.1

Open the chart page →

5,511
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
cryptography@41.0.3
43.0.1

Open the chart page →

5,841
agentssynapse0.1.301 of 9See more

agents synapse 0.1.30

1 of the 9 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
mysql/mysql-server:latestd6c8301b7834
cryptography@37.0.2
43.0.1

Open the chart page →

7,244
scribesynapse0.2.161 of 7See more

scribe synapse 0.2.16

1 of the 7 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
mysql/mysql-server:latestd6c8301b7834
cryptography@37.0.2
43.0.1

Open the chart page →

2,680
sinnersynapse0.1.01 of 6See more

sinner synapse 0.1.0

1 of the 6 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
mysql/mysql-server:latestd6c8301b7834
cryptography@37.0.2
43.0.1

Open the chart page →

1,955
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
supabase/realtime:latestd3aa0c86c7b3
cryptography@43.0.0
43.0.1

Open the chart page →

9,556
kasa-exporterth-chartsVerified publisher0.1.01 of 1See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
thelande/kasa_exporter:v0.2.3a1fdb8baa152
cryptography@42.0.7
43.0.1

Open the chart page →

1,515
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
cryptography@41.0.7
43.0.1

Open the chart page →

7,248
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
cryptography@39.0.1
43.0.1

Open the chart page →

3,164
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
cryptography@38.0.1
43.0.1

Open the chart page →

8,607
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
cryptography@41.0.7
43.0.1

Open the chart page →

45,239
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
cryptography@41.0.7
43.0.1

Open the chart page →

4,305
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
cryptography@42.0.4
43.0.1

Open the chart page →

7,085
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
cryptography@38.0.4
43.0.1

Open the chart page →

9,117

Container images carrying it

189 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
netboxcommunity/netbox:v3.7.8-2.8.09bf83b350a89
cryptography@42.0.7
43.0.1
1
openspeedtest/latest:v2.0.0d4d62f4b7d85
cryptography@38.0.3
43.0.1
1
openvpn/openvpn-as:latest2253c10ec652
cryptography@41.0.7
43.0.1
1
pangeo/base-notebook:2024.01.155fbe688a4f80
cryptography@41.0.3
43.0.1
1
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
cryptography@41.0.3
43.0.1
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
cryptography@43.0.0
43.0.1
1
prompve/prometheus-pve-exporter:3.4.2fcf041f0c24d
cryptography@42.0.4
43.0.1
1
pryorda/vmware_exporter:v0.18.479925e63e59f
cryptography@38.0.1
43.0.1
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
cryptography@39.0.2
43.0.1
1
pyaephyohein/mysql2s3bk:alphafdee05f2d441
cryptography@41.0.3
43.0.1
1
qichenxu4pd/mysqlweb:1.2d758d41d9c6b
cryptography@41.0.7
43.0.1
1
qonstrukt/php:8.4-v8-apache089af7925aa1
cryptography@41.0.7
43.0.1
1
redislabs/redisinsight:1.14.0b03ab1426d0d
cryptography@39.0.1
43.0.1
1
salehmir/jesse:1.10.101afa95f979e9
cryptography@42.0.8
43.0.1
1
saltstack/salt:3006.3e9c7906b7a5c
cryptography@41.0.3
43.0.1
1
seafileltd/seafile-mc:9.0.106693911bcc40
cryptography@38.0.4
43.0.1
1
seafileltd/seafile-mc:10.0.170628f29c663
cryptography@41.0.1
43.0.1
1
seafileltd/seafile-mc:9.0.97ac833196f60
cryptography@38.0.1
43.0.1
1
seafileltd/seafile-mc:11.0.12d0c66e4621bd
cryptography@43.0.0
43.0.1
1
semaphoreui/semaphore:v2.9.645b50bc11833f
cryptography@41.0.3
43.0.1
1
sirrend/helmup-engine:0.1.13699e79e3d4e2
cryptography@43.0.0
43.0.1
1
sirrend/helmup-github-scraper:0.1.47ca688c7abf5
cryptography@43.0.0
43.0.1
1
stackstorm/st2actionrunner:3.888235ba70cad
cryptography@39.0.1
43.0.1
1
stackstorm/st2api:3.86f56d239d280
cryptography@39.0.1
43.0.1
1
stackstorm/st2auth:3.833ecfda16608
cryptography@39.0.1
43.0.1
1
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
cryptography@39.0.1
43.0.1
1
stackstorm/st2notifier:3.8f190a6212195
cryptography@39.0.1
43.0.1
1
stackstorm/st2rulesengine:3.8259503496ff9
cryptography@39.0.1
43.0.1
1
stackstorm/st2scheduler:3.8b1de2055c362
cryptography@39.0.1
43.0.1
1
stackstorm/st2sensorcontainer:3.8b1a338f64773
cryptography@39.0.1
43.0.1
1
stackstorm/st2stream:3.81c8904a3bf67
cryptography@39.0.1
43.0.1
1
stackstorm/st2timersengine:3.81bf35bfaf00c
cryptography@39.0.1
43.0.1
1
stackstorm/st2workflowengine:3.819fdfffdbba8
cryptography@39.0.1
43.0.1
1
substratusai/verba:v0.4.0-baseURL261695be635eb
cryptography@42.0.7
43.0.1
1
supabase/realtime:v2.102.3aa1c92c0cf32
cryptography@38.0.4
43.0.1
1
supabase/realtime:latestd3aa0c86c7b3
cryptography@43.0.0
43.0.1
1
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
cryptography@40.0.2
43.0.1
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
cryptography@39.0.1
43.0.1
1
thelande/kasa_exporter:v0.2.3a1fdb8baa152
cryptography@42.0.7
43.0.1
1
ygqygq2/mysql-exec-sql:latest54f30def1558
cryptography@41.0.3
43.0.1
1
zurdi15/romm:2.3.12db88fe44c89
cryptography@41.0.6
43.0.1
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
cryptography@41.0.7
43.0.1
1
ghcr.io/blakeblackshear/frigate:0.14.122e3d0b486df
cryptography@43.0.0
43.0.1
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
cryptography@41.0.7
43.0.1
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
cryptography@41.0.7
43.0.1
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
cryptography@41.0.7
43.0.1
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
cryptography@42.0.8
43.0.1
1
ghcr.io/cloudnative-pg/postgresql:14.5b3b30d04b362
cryptography@38.0.3
43.0.1
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
cryptography@42.0.5
43.0.1
1
ghcr.io/dask/dask:2024.1.0080150de7d86
cryptography@41.0.3
43.0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.