GHSA-jm77-qphf-c4w8
LowAdvisory
Published 1 Aug 2023In the index since 5 Sept 2026
- Severity
- Low
- worst across findings
- CVSS
- 2.0
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 270
- of 17,781 indexed, latest versions
- Container images
- 247
- deployed by those charts
- Fix available
- 1 of 1
- affected package
pyca/cryptography's wheels include vulnerable OpenSSL
Carried by container images the latest versions of 270 of 17,781 indexed charts deploy, on 247 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| cryptographypypi | 1.7.2, 1.9, 2.1.4, 2.2.2+38 more | 41.0.3 | 247 |
- OSV records
- GHSA-jm77-qphf-c4w8
Charts affected
270 by stars
Container images carrying it
247 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| stackstorm/ | f190a6212195 | cryptography | 41.0.3 | 1 |
| stackstorm/ | 259503496ff9 | cryptography | 41.0.3 | 1 |
| stackstorm/ | b1de2055c362 | cryptography | 41.0.3 | 1 |
| stackstorm/ | b1a338f64773 | cryptography | 41.0.3 | 1 |
| stackstorm/ | 1c8904a3bf67 | cryptography | 41.0.3 | 1 |
| stackstorm/ | 1bf35bfaf00c | cryptography | 41.0.3 | 1 |
| stackstorm/ | 19fdfffdbba8 | cryptography | 41.0.3 | 1 |
| streamnative/ | ebcf7f033b54 | cryptography | 41.0.3 | 1 |
| supabase/ | aa1c92c0cf32 | cryptography | 41.0.3 | 1 |
| svtechnmaa/ | 67be2aba9436 | cryptography | 41.0.3 | 1 |
| svtechnmaa/ | 6e368ace0977 | cryptography | 41.0.3 | 1 |
| tachyongroup/ | 7e79b9000856 | cryptography | 41.0.3 | 1 |
| tachyongroup/ | f4f7fabe1037 | cryptography | 41.0.3 | 1 |
| taigaio/ | 9f97323cc150 | cryptography | 41.0.3 | 1 |
| tautulli/ | c4da15f058ea | cryptography | 41.0.3 | 1 |
| timescale/ | a8e3322e1cf9 | cryptography | 41.0.3 | 1 |
| timescale/ | cdb9ae118899 | cryptography | 41.0.3 | 1 |
| timescale/ | d7db8f1085a3 | cryptography | 41.0.3 | 1 |
| timescale/ | e8d0a9cc3db5 | cryptography | 41.0.3 | 1 |
| timescale/ | ed719c0cd19d | cryptography | 41.0.3 | 1 |
| trueosiris/ | 9356f98ad561 | cryptography | 41.0.3 | 1 |
| twentycrm/ | 2f78405a78be | cryptography | 41.0.3 | 1 |
| vabene1111/ | ec4e9e2905b0 | cryptography | 41.0.3 | 1 |
| voltha/ | c4e41e92f046 | cryptography | 41.0.3 | 1 |
| voltha/ | 37f80524c207 | cryptography | 41.0.3 | 1 |
| voltha/ | 9ee8c1f4428c | cryptography | 41.0.3 | 1 |
| voltha/ | 655c3048a602 | cryptography | 41.0.3 | 1 |
| voltha/ | ff596b62de59 | cryptography | 41.0.3 | 1 |
| wallabag/ | 5e4c26a7fb4a | cryptography | 41.0.3 | 1 |
| wazuh/ | 21994f40e0da | cryptography | 41.0.3 | 1 |
| weblate/ | 82848df56ecd | cryptography | 41.0.3 | 1 |
| wiremind/ | 4dea42c8166c | cryptography | 41.0.3 | 1 |
| ghcr.io/ | b3b30d04b362 | cryptography | 41.0.3 | 1 |
| ghcr.io/ | f1ce4c56ccaa | cryptography | 41.0.3 | 1 |
| ghcr.io/ | 1041d4449e49 | cryptography | 41.0.3 | 1 |
| ghcr.io/ | c42c0946bd0f | cryptography | 41.0.3 | 1 |
| ghcr.io/ | ec6d67fbedfa | cryptography | 41.0.3 | 1 |
| ghcr.io/ | c2d6e775db5a | cryptography | 41.0.3 | 1 |
| ghcr.io/ | d3c87933a5fd | cryptography | 41.0.3 | 1 |
| ghcr.io/ | 9bbc9a90641e | cryptography | 41.0.3 | 1 |
| ghcr.io/ | 8bf880fe8c73 | cryptography | 41.0.3 | 1 |
| ghcr.io/ | dbaa8527bf4c | cryptography | 41.0.3 | 1 |
| quay.io/ | d6fd2a9e3273 | cryptography | 41.0.3 | 1 |
| quay.io/ | 9663f06adcb1 | cryptography | 41.0.3 | 1 |
| quay.io/ | cae8c0622533 | cryptography | 41.0.3 | 1 |
| registry.gitlab.com/ | 4eaf9c911f33 | cryptography | 41.0.3 | 1 |
| registry.gitlab.com/ | 0886cbbc5f95 | cryptography | 41.0.3 | 1 |