StackRadar

GHSA-h4gh-qq45-vh27

Medium

Advisory

Published 3 Sept 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
174
of 17,781 indexed, latest versions
Container images
189
deployed by those charts
Fix available
1 of 1
affected package

pyca/cryptography has a vulnerable OpenSSL included in cryptography wheels

Carried by container images the latest versions of 174 of 17,781 indexed charts deploy, on 189 images.

Affected packageAffected versionsFixed inImages
cryptographypypi37.0.2, 37.0.4, 38.0.1, 38.0.3+21 more43.0.1189
OSV records
GHSA-h4gh-qq45-vh27

Charts affected

174 by stars
ChartLatestAffected imagesRadar Score
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
cryptography@38.0.4
43.0.1

Open the chart page →

30,219
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
cryptography@41.0.7
43.0.1

Open the chart page →

10,209
mysqlsb-helm-charts0.4.01 of 1See more

mysql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
library/mysql:8.4.3106d5197fd8e
cryptography@42.0.8
43.0.1

Open the chart page →

1,096
secret-managersecret-managerVerified publisher1.0.01 of 4See more

secret-manager secret-manager 1.0.0

1 of the 4 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
library/mysql:9.0.192dc86967801
cryptography@42.0.7
43.0.1

Open the chart page →

5,497
ansible-semaphoresergiotocaliniVerified publisher1.2.01 of 1See more

ansible-semaphore sergiotocalini 1.2.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
semaphoreui/semaphore:v2.9.645b50bc11833f
cryptography@41.0.3
43.0.1

Open the chart page →

3,337
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
cryptography@41.0.7
43.0.1

Open the chart page →

5,565
sneakerssneakers1.0.01 of 4See more

sneakers sneakers 1.0.0

1 of the 4 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
helga09/my_sql_shoes:v1.1.1a03657d97897
cryptography@37.0.2
43.0.1

Open the chart page →

7,574
downscalersqream-chartsVerified publisher1.0.01 of 1See more

downscaler sqream-charts 1.0.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.05d328c003efe
cryptography@39.0.1
43.0.1

Open the chart page →

1,009
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
cryptography@42.0.7
43.0.1

Open the chart page →

13,390
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
cryptography@41.0.3
43.0.1

Open the chart page →

12,655
icinga2svtech-public-helm-charts1.0.01 of 4See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
svtechnmaa/svtech_icinga2:v1.1.667be2aba9436
cryptography@40.0.2
43.0.1

Open the chart page →

5,511
maxscalesvtech-public-helm-charts1.0.01 of 2See more

maxscale svtech-public-helm-charts 1.0.0

1 of the 2 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
library/mysql:8.2.0212fe73edca5
cryptography@41.0.3
43.0.1

Open the chart page →

5,841
agentssynapse0.1.301 of 9See more

agents synapse 0.1.30

1 of the 9 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
mysql/mysql-server:latestd6c8301b7834
cryptography@37.0.2
43.0.1

Open the chart page →

7,244
scribesynapse0.2.161 of 7See more

scribe synapse 0.2.16

1 of the 7 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
mysql/mysql-server:latestd6c8301b7834
cryptography@37.0.2
43.0.1

Open the chart page →

2,680
sinnersynapse0.1.01 of 6See more

sinner synapse 0.1.0

1 of the 6 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
mysql/mysql-server:latestd6c8301b7834
cryptography@37.0.2
43.0.1

Open the chart page →

1,955
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
supabase/realtime:latestd3aa0c86c7b3
cryptography@43.0.0
43.0.1

Open the chart page →

9,556
kasa-exporterth-chartsVerified publisher0.1.01 of 1See more

kasa-exporter th-charts 0.1.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
thelande/kasa_exporter:v0.2.3a1fdb8baa152
cryptography@42.0.7
43.0.1

Open the chart page →

1,515
the0the0Verified publisher0.9.81 of 9See more

the0 the0 0.9.8

1 of the 9 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
cryptography@41.0.7
43.0.1

Open the chart page →

7,248
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
cryptography@39.0.1
43.0.1

Open the chart page →

3,164
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
cryptography@38.0.1
43.0.1

Open the chart page →

8,607
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
cryptography@41.0.7
43.0.1

Open the chart page →

45,239
browserlessvictorlane0.2.01 of 1See more

browserless victorlane 0.2.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
cryptography@41.0.7
43.0.1

Open the chart page →

4,305
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
cryptography@42.0.4
43.0.1

Open the chart page →

7,085
juicefs-csi-driverwenerme0.32.51 of 5See more

juicefs-csi-driver wenerme 0.32.5

1 of the 5 container images this version deploys carry GHSA-h4gh-qq45-vh27.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.32.595008ba63318
cryptography@38.0.4
43.0.1

Open the chart page →

9,117

Container images carrying it

189 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/dask/dask-gateway-server:2024.1.0881e7acfc5a0
cryptography@41.0.7
43.0.1
1
ghcr.io/dodevops/azure-app-exporter/azure-app-exporter:0.1.38b472877847f5
cryptography@43.0.0
43.0.1
1
ghcr.io/ducksify/pgdump-to-s3:latestc42c0946bd0f
cryptography@37.0.2
43.0.1
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
cryptography@42.0.8
43.0.1
1
ghcr.io/gamosoft/notediscovery:0.31.5c06aa0fa9a85
cryptography@41.0.7
43.0.1
1
ghcr.io/home-assistant/home-assistant:2023.11.3feffc0b8227d
cryptography@41.0.4
43.0.1
1
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
cryptography@41.0.7
43.0.1
1
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
cryptography@41.0.7
43.0.1
1
ghcr.io/kokuwaio/gcloud-mysql:v3.2.1963098135c550
cryptography@42.0.7
43.0.1
1
ghcr.io/m0nsterrr/hyperglass:v2.0.4f7b5d20c5e42
cryptography@42.0.8
43.0.1
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
cryptography@41.0.7
43.0.1
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
cryptography@41.0.7
43.0.1
1
ghcr.io/mirio/verbacap:v1.5.084928e2fc4f2
cryptography@42.0.6
43.0.1
1
ghcr.io/olivetin/olivetin:2025.2.19a89958921526
cryptography@41.0.7
43.0.1
1
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
cryptography@41.0.7
43.0.1
1
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestb175cc61959a
cryptography@41.0.7
43.0.1
1
ghcr.io/openrelik/openrelik-worker-bulkextractor:latest67498ee2e639
cryptography@41.0.7
43.0.1
1
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
cryptography@41.0.7
43.0.1
1
ghcr.io/openrelik/openrelik-worker-extraction:latestec9fc5864cd5
cryptography@41.0.7
43.0.1
1
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
cryptography@41.0.7
43.0.1
1
ghcr.io/openrelik/openrelik-worker-plaso:latest75537ea8c851
cryptography@41.0.7
43.0.1
1
ghcr.io/openrelik/openrelik-worker-timesketch:latest4cb88b603cdc
cryptography@41.0.7
43.0.1
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
cryptography@37.0.4
43.0.1
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
cryptography@41.0.7
43.0.1
1
ghcr.io/plausible/community-edition:v2.1.51f9d3fb861e1
cryptography@42.0.7
43.0.1
1
ghcr.io/plausible/community-edition:v2.1.44c2553516d09
cryptography@42.0.7
43.0.1
1
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
cryptography@39.0.1
43.0.1
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
cryptography@38.0.4
43.0.1
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
cryptography@42.0.4
43.0.1
1
mcr.microsoft.com/oss/v2/kubernetes-csi/azurefile-csi:v1.35.76e43ba0bd009
cryptography@42.0.5
43.0.1
1
quay.io/ansible/awx-operator:2.19.17302e0c8e5a7
cryptography@41.0.7
43.0.1
1
quay.io/ceph/ceph:v21.1.05ff3692d2f3f
cryptography@43.0.0
43.0.1
1
quay.io/cloudnativetoolkit/cli-tools:v1.1-v1.8.2d6fd2a9e3273
cryptography@37.0.2
43.0.1
1
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
cryptography@41.0.3
43.0.1
1
quay.io/freeipa/freeipa-server:fedora-39-4.11.1d422ee50c2c3
cryptography@41.0.7
43.0.1
1
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
cryptography@43.0.0
43.0.1
1
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
cryptography@41.0.5
43.0.1
1
quay.io/nird-toolkit/jupyterhub-server:20221215-e6aa80ecae8c0622533
cryptography@38.0.1
43.0.1
1
quay.io/stackgres/operator:1.19.1f241b0b20326
cryptography@41.0.5
43.0.1
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.