USN-8436-1

Unscored

Advisory

Published 16 Jun 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 396; of 17,787 indexed, latest versions
Container images: 365; deployed by those charts
Fix available: 1 of 1; affected package

ca-certificates update

Carried by container images the latest versions of 396 of 17,787 indexed charts deploy, on 365 images.

Affected package	Affected versions	Fixed in	Images
ca-certificatesdeb	20211016, 20211016ubuntu0.22.04.1, 20230311ubuntu0.22.04.1, 20240203+3 more	20260601~22.04.1, 20260601~24.04.1, 20260601~25.10.1, 20260601~26.04.1	365

OSV records: USN-8436-1

Charts affected

396 by stars

Chart	Latest	Affected images	Radar Score

Container images carrying it

365 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
mcr.microsoft.com/mssql/server :2025-CU5-ubuntu-24.04	cee0f4db03b5	ca-certificates@20240203	20260601~24.04.1	1
public.ecr.aws/spotinst/spot-network-client :1.0.14	86380a01587d	ca-certificates@20240203	20260601~24.04.1	1
quay.io/aerokube/keygen :1.0.1	578934444f04	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	1
quay.io/argoproj/argocd :v2.4.11	5b6701d8fb31	ca-certificates@20211016	20260601~22.04.1	1
quay.io/argoproj/argocd :v3.0.3	95b5cf7ba6fe	ca-certificates@20240203	20260601~24.04.1	1
quay.io/argoproj/argocd :v3.1.1	a36ab0c0860c	ca-certificates@20240203	20260601~24.04.1	1
quay.io/argoproj/argocd :v2.8.6	acaf37352569	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	1
quay.io/cilium/cilium :v1.15.1	351d6685dc6f	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	1
quay.io/cilium/cilium :v1.18.2	858f807ea4e2	ca-certificates@20240203	20260601~24.04.1	1
quay.io/cilium/cilium :v1.17.14	cdcfab5b4466	ca-certificates@20240203	20260601~24.04.1	1
quay.io/cilium/cilium-envoy :v1.35.9-1773656288-7b052e66eb2cfc5ac130ce0a5be66202a10d83be	60031f396695	ca-certificates@20240203	20260601~24.04.1	1
quay.io/cilium/cilium-envoy :v1.34.7-1757592137-1a52bb680a956879722f48c591a2ca90f7791324	7932d656b63f	ca-certificates@20240203	20260601~24.04.1	1
quay.io/evryfs/spring-boot-admin :2.7.10	60950ef63764	ca-certificates@20211016ubuntu0.22.04.1	20260601~22.04.1	1
quay.io/fiware/waltid :1.14.1-SNAPSHOT	93889c3d8a34	ca-certificates@20211016	20260601~22.04.1	1
quay.io/opsmxpublic/rabbitmq :4.2-management	3408107e5cc4	ca-certificates@20240203	20260601~24.04.1	1