GHSA-mpwr-8vm7-h73f
MediumAdvisory
Published 22 Jun 2026In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.3
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 12
- of 17,781 indexed, latest versions
- Container images
- 9
- deployed by those charts
- Fix available
- 1 of 1
- affected package
package pkcs12: Authentication bypass in Decode functions
Carried by container images the latest versions of 12 of 17,781 indexed charts deploy, on 9 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| software.sslmate.com/ | v0.6.0, v0.7.0, v0.7.1 | 0.7.2 | 9 |
- OSV records
- GHSA-mpwr-8vm7-h73fGO-2026-5052
Charts affected
12 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| lgtm-stacklgtm-stackVerified publisher | 0.1.3 | 1 of 8See more | 5,576 |
| opentelemetry-demoopentelemetry-helmVerified publisher | 0.41.1 | 1 of 34See more | 22,420 |
| otel-collectorarieotechVerified publisher | 0.1.0 | 1 of 1See more | 245 |
| mla-external-secretscluster-deploy | 0.3.0 | 1 of 1See more | 716 |
| dnation-kubernetes-monitoring-stackdnationcloud | 4.0.2 | 1 of 17See more | 21,641 |
| farm-observabilityfarm-observabilityOfficialVerified publisher | 0.27.2 | 1 of 18See more | 13,255 |
| kube-prometheus-stackgpg-dev | 84.0.0 | 1 of 6See more | 4,288 |
| secrets-operatorinfisical-charts | 0.11.9 | 1 of 1See more | 96 |
| newtjeffrescVerified publisher | 0.2.1 | 1 of 1See more | 1,097 |
| secret-operatorkubedoopVerified publisher | 0.4.0 | 1 of 5See more | 4,341 |
| kube-prometheus-stackmesosphere | 87.16.0 | 1 of 7See more | 7,398 |
| tfy-agenttruefoundryVerified publisher | 0.2.103 | 1 of 5See more | 681 |
Container images carrying it
9 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| grafana/ | 121a7a9ece6d | software.sslmate.com/ software.sslmate.com/ | 0.7.2 0.7.2 | 4 |
| fosrl/ | ccd2b0e9a049 | software.sslmate.com/ software.sslmate.com/ | 0.7.2 0.7.2 | 1 |
| grafana/ | 0f86bada30d6 | software.sslmate.com/ software.sslmate.com/ | 0.7.2 0.7.2 | 1 |
| grafana/ | 2d1f9ae67c17 | software.sslmate.com/ software.sslmate.com/ | 0.7.2 0.7.2 | 1 |
| infisical/ | 769ad1630a13 | software.sslmate.com/ software.sslmate.com/ | 0.7.2 0.7.2 | 1 |
| otel/ | b3079f45e19b | software.sslmate.com/ software.sslmate.com/ | 0.7.2 0.7.2 | 1 |
| ghcr.io/ | 9440a40b3947 | software.sslmate.com/ software.sslmate.com/ | 0.7.2 0.7.2 | 1 |
| ghcr.io/ | ec40c3d9c48f | software.sslmate.com/ software.sslmate.com/ | 0.7.2 0.7.2 | 1 |
| quay.io/ | 604a7d98ab58 | software.sslmate.com/ software.sslmate.com/ | 0.7.2 0.7.2 | 1 |