CVE-2026-4427
NoneCVSS
—
EPSS
—
Published
Mar 19, 2026
CISA due date
—
The record
Rejected reason: Duplicate of CVE-2026-32286
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | argo-workflow-controller-3.6 | 0 | 3.6.19-r4 |
| Chainguard | argo-workflow-controller-fips-3.6 | 0 | 3.6.19-r5 |
| Chainguard | argo-workflow-executor-3.6 | 0 | 3.6.19-r4 |
| Chainguard | argo-workflow-executor-fips-3.6 | 0 | 3.6.19-r5 |
| Chainguard | argo-workflows-3.6 | 0 | 3.6.19-r4 |
| Chainguard | argo-workflows-fips-3.6 | 0 | 3.6.19-r5 |
| Chainguard | bento | 0 | 1.16.1-r1 |
| Chainguard | bento-fips | 0 | 1.16.1-r1 |
| Chainguard | flyte | 0 | 1.16.4-r3 |
| Chainguard | gotrue | 0 | 2.188.1-r0 |
| Chainguard | gotrue-fips | 0 | 2.188.1-r0 |
| Chainguard | grafana-alloy | 0 | 1.15.0-r0 |
| Chainguard | grafana-alloy-fips | 0 | 1.15.0-r0 |
| Chainguard | harbor-2.12 | 0 | 2.12.4-r33 |
| Chainguard | harbor-2.12-exporter | 0 | 2.12.4-r33 |
| Chainguard | harbor-2.12-jobservice | 0 | 2.12.4-r33 |
| Chainguard | harbor-2.12-registryctl | 0 | 2.12.4-r33 |
| Chainguard | harbor-2.13 | 0 | 2.13.5-r5 |
| Chainguard | harbor-2.13-exporter | 0 | 2.13.5-r5 |
| Chainguard | harbor-2.13-jobservice | 0 | 2.13.5-r5 |
| Chainguard | harbor-2.13-registryctl | 0 | 2.13.5-r5 |
| Chainguard | harbor-2.14 | 0 | 2.14.3-r4 |
| Chainguard | harbor-2.14-exporter | 0 | 2.14.3-r4 |
| Chainguard | harbor-2.14-jobservice | 0 | 2.14.3-r4 |
| Chainguard | harbor-2.14-registryctl | 0 | 2.14.3-r4 |
| Chainguard | harbor-fips-2.12 | 0 | 2.12.4-r31 |
| Chainguard | harbor-fips-2.12-exporter | 0 | 2.12.4-r31 |
| Chainguard | harbor-fips-2.12-jobservice | 0 | 2.12.4-r31 |
| Chainguard | harbor-fips-2.12-registryctl | 0 | 2.12.4-r31 |
| Chainguard | harbor-fips-2.13 | 0 | 2.13.5-r5 |
| Chainguard | harbor-fips-2.13-exporter | 0 | 2.13.5-r5 |
| Chainguard | harbor-fips-2.13-jobservice | 0 | 2.13.5-r5 |
| Chainguard | harbor-fips-2.13-registryctl | 0 | 2.13.5-r5 |
| Chainguard | harbor-fips-2.14 | 0 | 2.14.3-r5 |
| Chainguard | harbor-fips-2.14-exporter | 0 | 2.14.3-r5 |
| Chainguard | harbor-fips-2.14-jobservice | 0 | 2.14.3-r5 |
| Chainguard | harbor-fips-2.14-registryctl | 0 | 2.14.3-r5 |
| Chainguard | hydra | 0 | 26.2.0-r0 |
| Chainguard | hydra-fips | 0 | 26.2.0-r0 |
| Chainguard | kots | 0 | 1.129.4-r5 |
| Chainguard | migrate | 0 | 4.19.1-r8 |
| Chainguard | ory-kratos | 0 | 26.2.0-r0 |
| Chainguard | ory-kratos-fips | 0 | 26.2.0-r0 |
| Chainguard | splunk-otel-collector-fips | 0 | 0.148.0-r0 |
| Chainguard | src | 0 | 7.0.2-r0 |
| Chainguard | steampipe | 0 | 2.4.0-r4 |
| Chainguard | telegraf-1.35 | 0 | 1.35.4-r6 |
| Chainguard | telegraf-1.36 | 0 | 1.36.4-r8 |
| Chainguard | telegraf-1.37 | 0 | 1.37.3-r7 |
| Chainguard | telegraf-1.38 | 0 | 1.38.1-r2 |
| Chainguard | teleport-15 | 0 | 15.5.4-r14 |
| Chainguard | teleport-16 | 0 | 16.5.18-r9 |
| Chainguard | teleport-16-operator | 0 | 16.5.18-r9 |
| Chainguard | teleport-17 | 0 | 17.7.20-r4 |
| Chainguard | teleport-17-operator | 0 | 17.7.20-r4 |
| Chainguard | teleport-18 | 0 | 18.7.2-r5 |
| Chainguard | teleport-18-operator | 0 | 18.7.2-r5 |
| Chainguard | teleport-18.6 | 0 | 18.6.8-r8 |
| Chainguard | teleport-18.6-operator | 0 | 18.6.8-r8 |
| Chainguard | teleport-operator-fips-16 | 0 | 16.5.18-r9 |
| Chainguard | teleport-operator-fips-17 | 0 | 17.7.20-r3 |
| Chainguard | teleport-operator-fips-18 | 0 | 18.7.2-r3 |
| Chainguard | trillian-fips-logserver | 0 | 1.7.3-r0 |
| Chainguard | trillian-fips-logsigner | 0 | 1.7.3-r0 |
| Chainguard | trillian-logserver | 0 | 1.7.3-r0 |
| Chainguard | trillian-logsigner | 0 | 1.7.3-r0 |
| Chainguard | vault-1.16 | 0 | 1.16.3-r30 |
| Chainguard | vault-1.17 | 0 | 1.17.6-r23 |
| Chainguard | vault-1.18 | 0 | 1.18.5-r18 |
| Chainguard | vault-1.19 | 0 | 1.19.5-r10 |
| Chainguard | vault-1.20 | 0 | 1.20.4-r3 |
| Chainguard | vault-1.21 | 0 | 1.21.4-r2 |
| Chainguard | vault-fips-1.20 | 0 | 1.20.4-r6 |
| Chainguard | vault-fips-1.21 | 0 | 1.21.4-r2 |
| Chainguard | wavefront-collector-for-kubernetes-1.12 | 0 | 1.12.1-r36 |
| Chainguard | wavefront-collector-for-kubernetes-1.13 | 0 | 1.13.0-r37 |
| Wolfi | bento | 0 | 1.16.1-r1 |
| Wolfi | flyte | 0 | 1.16.4-r3 |
| Wolfi | grafana-alloy | 0 | 1.15.0-r0 |
| Wolfi | harbor-2.12 | 0 | 2.12.4-r33 |
| Wolfi | harbor-2.12-jobservice | 0 | 2.12.4-r33 |
| Wolfi | harbor-2.12-registryctl | 0 | 2.12.4-r33 |
| Wolfi | harbor-2.13 | 0 | 2.13.5-r5 |
| Wolfi | harbor-2.13-exporter | 0 | 2.13.5-r5 |
| Wolfi | harbor-2.13-jobservice | 0 | 2.13.5-r5 |
| Wolfi | harbor-2.13-registryctl | 0 | 2.13.5-r5 |
| Wolfi | harbor-2.14 | 0 | 2.14.3-r4 |
| Wolfi | harbor-2.14-exporter | 0 | 2.14.3-r4 |
| Wolfi | harbor-2.14-jobservice | 0 | 2.14.3-r4 |
| Wolfi | harbor-2.14-registryctl | 0 | 2.14.3-r4 |
| Wolfi | hydra | 0 | 26.2.0-r0 |
| Wolfi | kots | 0 | 1.129.4-r5 |
| Wolfi | migrate | 0 | 4.19.1-r8 |
| Wolfi | src | 0 | 7.0.2-r0 |
| Wolfi | steampipe | 0 | 2.4.0-r4 |
| Wolfi | telegraf-1.35 | 0 | 1.35.4-r6 |
| Wolfi | telegraf-1.36 | 0 | 1.36.4-r8 |
| Wolfi | telegraf-1.37 | 0 | 1.37.3-r7 |
| Wolfi | telegraf-1.38 | 0 | 1.38.1-r2 |
| Wolfi | teleport-17 | 0 | 17.7.20-r4 |
| Wolfi | teleport-18 | 0 | 18.7.2-r5 |
| Wolfi | teleport-18-operator | 0 | 18.7.2-r5 |
| Wolfi | teleport-18.6 | 0 | 18.6.8-r8 |
| Wolfi | teleport-18.6-operator | 0 | 18.6.8-r8 |
| Wolfi | trillian-logserver | 0 | 1.7.3-r0 |
| Wolfi | trillian-logsigner | 0 | 1.7.3-r0 |
| openSUSE:Tumbleweed | alloy | 0 | 1.16.0-2.1 |
| openSUSE:Tumbleweed | teleport | 0 | 17.7.23-1.1 |
Related vulnerabilities
- CVE-2026-33186 gRPC-Go is the Go language implementation of gRPC. Also affects argo-workflow-controller-3.6
- CVE-2025-15558 Docker CLI for Windows searches for plugin binaries in C:\ProgramData\Docker\cli-plugins… Also affects argo-workflow-controller-3.6
- CVE-2025-68121 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or… Also affects argo-workflow-controller-3.6
- CVE-2025-61732 A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling… Also affects argo-workflow-controller-3.6
- CVE-2026-24051 OpenTelemetry-Go is the Go implementation of OpenTelemetry. Also affects argo-workflow-controller-3.6
- GHSA-6rw7-vpxm-498p qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion Also affects argo-workflow-controller-3.6
- CVE-2025-15284 Improper Input Validation vulnerability in qs (parse modules) allows HTTP DoS.This issue… Also affects argo-workflow-controller-3.6
- CVE-2025-68156 Expr is an expression language and expression evaluation for Go. Also affects argo-workflow-controller-3.6