USN-8436-1

Unscored

Advisory

Published 16 Jun 2026In the index since 5 Sept 2026

Severity: Unscored; worst across findings
CVSS: —; base score, highest
EPSS: —; probability of exploitation
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 403; of 17,781 indexed, latest versions
Container images: 371; deployed by those charts
Fix available: 1 of 1; affected package

ca-certificates update

Carried by container images the latest versions of 403 of 17,781 indexed charts deploy, on 371 images.

Affected package	Affected versions	Fixed in	Images
ca-certificatesdeb	20211016, 20211016ubuntu0.22.04.1, 20230311ubuntu0.22.04.1, 20240203+3 more	20260601~22.04.1, 20260601~24.04.1, 20260601~25.10.1, 20260601~26.04.1	371

OSV records: USN-8436-1

Charts affected

403 by stars

Chart

Latest

Affected images

Radar Score

jaegerwikimedia

3.1.2

1 of 4 See more

jaeger wikimedia 3.1.2

1 of the 4 container images this version deploys carry USN-8436-1.

Container image	Digest	Package	Fixed in
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1

Open the chart page →

9,248

elasticsearchwiremind

8.19.0

1 of 1 See more

elasticsearch wiremind 8.19.0

1 of the 1 container images this version deploys carry USN-8436-1.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.19.12	89729a95066a	ca-certificates@20240203	20260601~24.04.1

Open the chart page →

2,191

playwright-synthetic-monitoringwork-adventure

1.0.1

1 of 1 See more

playwright-synthetic-monitoring work-adventure 1.0.1

1 of the 1 container images this version deploys carry USN-8436-1.

Container image	Digest	Package	Fixed in
workadventure/playwright-synthetic-monitoring :main	92b664c2a06f	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1

Open the chart page →

14,100

Container images carrying it

371 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
library/rabbitmq :3.9-management	8a279e9396a8	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	10
library/rabbitmq :3.13-management :3-management	e582c0bc7766	ca-certificates@20240203	20260601~24.04.1	8
library/kong :3.6	a42d2b4503e7	ca-certificates@20240203~22.04.1	20260601~22.04.1	7
jaegertracing/jaeger-cassandra-schema :1.53.0	d48d6dab2c65	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	4
library/rabbitmq :3.11-management	c3f70098e01d	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	4
mastercloudapps/planner :v1.23	40a950b311b2	ca-certificates@20211016ubuntu0.22.04.1	20260601~22.04.1	4
codeurjc/planner :v1.0	800cf520c245	ca-certificates@20211016ubuntu0.22.04.1	20260601~22.04.1	3
envoyproxy/envoy :v1.31.0	2bf7f042e396	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	3
gchq/hdfs :3.3.3	5ec58edbb2db	ca-certificates@20240203	20260601~24.04.1	3
guacamole/guacamole :1.6.0	f344085e618b	ca-certificates@20240203	20260601~24.04.1	3
sigp/lighthouse :latest-amd64	50f66cfebb6d	ca-certificates@20240203~22.04.1	20260601~22.04.1	3
ghcr.io/tremolosecurity/kube-oidc-proxy :1.0.12	d7747f308042	ca-certificates@20240203	20260601~24.04.1	3
quay.io/devtron/argocd-cert-refresh :v10	2b6db27eaf3d	ca-certificates@20211016ubuntu0.22.04.1	20260601~22.04.1	3
quay.io/devtron/k8s-utils :807ca3c2-488-14005	f296c2ec5db7	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	3
quay.io/devtron/kubelink :94237c18-314-39417	9d25865295af	ca-certificates@20240203	20260601~24.04.1	3
alazidis/kube-netlag :1.1.0	0e8c84152201	ca-certificates@20240203	20260601~24.04.1	2
apache/nifi-registry :1.26.0	7cdfd8deec92	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	2
apache/rocketmq :5.4.0	319cd8a81ed1	ca-certificates@20240203	20260601~24.04.1	2
apache/tika :2.9.2.1-full	ae0b86d3c4d0	ca-certificates@20240203	20260601~24.04.1	2
grafana/alloy :v1.8.1	7790f6f7fbd8	ca-certificates@20240203	20260601~24.04.1	2
grafana/alloy :v1.12.2	f94b1c82957a	ca-certificates@20240203	20260601~24.04.1	2
istio/proxyv2 :1.18.0	757d28c24100	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	2
kurento/kurento-media-server :latest	03c0d34d0828	ca-certificates@20240203	20260601~24.04.1	2
library/cassandra :4.1.3	7cbcec0086ac	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	2
library/elasticsearch :8.19.12	89729a95066a	ca-certificates@20240203	20260601~24.04.1	2
library/mariadb :10.8.3	0abf60f81588	ca-certificates@20211016	20260601~22.04.1	2
library/mariadb :10.10	334b315c10e5	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	2
library/mariadb :12.0.2 :12.0-noble	607835cd628b	ca-certificates@20240203	20260601~24.04.1	2
library/mariadb :11.3.2	e101f9db3191	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	2
library/mongo :8.0.20	098862b1339f	ca-certificates@20240203	20260601~24.04.1	2
library/rabbitmq :4.1.0-management	935b3f84c1e4	ca-certificates@20240203	20260601~24.04.1	2
library/rabbitmq :3.12.1-management	f020c06da226	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	2
opendatacube/ows :latest	668cbb41473c	ca-certificates@20240203	20260601~24.04.1	2
piomin/sample-spring-kotlin-microservice :1.1	871f784dd6bc	ca-certificates@20211016	20260601~22.04.1	2
sigp/lighthouse :v8.1.3	44aa773dcf27	ca-certificates@20240203~22.04.1	20260601~22.04.1	2
svtechnmaa/svtech_debuger :v1.0.0	b2987abe57d3	ca-certificates@20211016	20260601~22.04.1	2
tzahi12345/youtubedl-material :4.3.2 :latest	2f943d584711	ca-certificates@20230311ubuntu0.22.04.1	20260601~22.04.1	2
wolveix/satisfactory-server :latest :v1.9.10	e103700ae6ae	ca-certificates@20240203~22.04.1	20260601~22.04.1	2
zabbix/zabbix-agent :ubuntu-6.4-latest	349b924472a7	ca-certificates@20240203	20260601~24.04.1	2
ghcr.io/appscode/inbox-server :latest :postgres-latest	536358d7b17e	ca-certificates@20240203~22.04.1	20260601~22.04.1	2
ghcr.io/bryopsida/k8s-dev-pod :main	82d0b161161d	ca-certificates@20240203	20260601~24.04.1	2
ghcr.io/codingducksrl/laravel :8.1	5be52524664c	ca-certificates@20211016	20260601~22.04.1	2
ghcr.io/danbooru/danbooru :9cab67c0ac72a8c52289302c519715ceec2372d9	5f545698e907	ca-certificates@20211016	20260601~22.04.1	2
ghcr.io/openunison/openunison-kubernetes-operator :1.0.11	f4feb3323a29	ca-certificates@20240203	20260601~24.04.1	2
ghcr.io/salaboy/fmtok8s-frontend :v0.1.1	03fd01b4f56e	ca-certificates@20211016	20260601~22.04.1	2
quay.io/argoproj/argocd :v2.14.11	5fc69e31c755	ca-certificates@20240203	20260601~24.04.1	2
1dev/server :11.9.0	cd5b12fe5471	ca-certificates@20240203	20260601~24.04.1	1
adorsys/keycloak-config-cli :6.3.0-26.1.0	85be7a45a94c	ca-certificates@20240203	20260601~24.04.1	1
adorsys/keycloak-config-cli :6.1.6-25.0.1	eb49a2dcbbb8	ca-certificates@20240203	20260601~24.04.1	1
ahmetfurkandemir/iceberg-rest-fixture-postgresql :1.10.0	142231a0b8b7	ca-certificates@20240203~22.04.1	20260601~22.04.1	1