StackRadar

CVE-2019-18276

High

Advisory

Published 28 Nov 2019In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.026
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
384
of 17,781 indexed, latest versions
Container images
322
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: bash security and bug fix update

Carried by container images the latest versions of 384 of 17,781 indexed charts deploy, on 322 images.

Affected packageAffected versionsFixed inImages
bashdeb4.3-7ubuntu1.5, 4.3-7ubuntu1.7, 4.3-14ubuntu1.1, 4.3-14ubuntu1.2+7 more4.3-7ubuntu1.8+esm2, 4.3-14ubuntu1.4+esm1, 4.4.18-2ubuntu1.3, 5.0-6ubuntu1.2299
bashrpm4.4.19-7.el8, 4.4.19-10.el8, 4.4.19-12.el8, 4.4.19-12.el8_20:4.4.19-14.el823
OSV records
RHSA-2021:1679UBUNTU-CVE-2019-18276
Also known as
USN-5380-1

Charts affected

384 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

32,259
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
bash@4.3-14ubuntu1.3
4.3-14ubuntu1.4+esm1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
bash@4.3-14ubuntu1.3
4.3-14ubuntu1.4+esm1

Open the chart page →

23,964
san-iscsi-csienixOfficialVerified publisher4.0.21 of 7See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
enix/san-iscsi-csi:v4.0.2f963da81ecf7
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

4,154
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

15,592
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

7,880
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

11,405
spring-petclinic-cloudplatform9-communityVerified publisher0.2.05 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
platform9community/api-gateway:latest40a4970de568
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
platform9community/customers-service:latest2089811e5cc6
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
platform9community/vets-service:latestd1165c94dfb3
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
platform9community/visits-service:latest8d11b50368c6
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

41,872
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

11,782
plexutkuozdemirVerified publisher2.1.11 of 1See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
linuxserver/plex:1.25.24a13ced2326c
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

6,348
zabbix-serveraekondratievVerified publisher1.0.63 of 4See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

30,668
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

52,919
kubeflowkubeflow1.6.23 of 45See more

kubeflow kubeflow 1.6.2

3 of the 45 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

96,941
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

13,562
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

11,007
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
bash@4.4.19-12.el8_2
0:4.4.19-14.el8

Open the chart page →

9,052
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

22,773
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

10,598
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

13,950
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

10,154
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

10,628
typesensehmphuVerified publisher0.1.61 of 1See more

typesense hmphu 0.1.6

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
typesense/typesense:0.23.03accb727cbe2
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1

Open the chart page →

3,868
radondb-mysqlkubesphere-testVerified publisher1.0.11 of 3See more

radondb-mysql kubesphere-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

7,342
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

15,330
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

7,901
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1

Open the chart page →

107,811
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

24,488
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

18,137
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

13,635
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
hyperledger/fabric-couchdb:0.4.15f6c724592abf
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
hyperledger/fabric-couchdb:0.4.15f6c724592abf
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

77,687
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

13,145
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

84,444
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

36,094
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

38,346
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

12,908
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

17,377
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

35,305
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

11,662
protonmail-bridgegeek-cookbookVerified publisher5.4.21 of 1See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

8,029
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

11,558
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

10,231
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

15,856
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
haveagitgat/tdarr_node:2.00.101e3f9328327d
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

31,000
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

7,660
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
bash@4.4.19-12.el8
0:4.4.19-14.el8

Open the chart page →

6,977
elasticinseefrlab2.2.02 of 2See more

elastic inseefrlab 2.2.0

2 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
library/kibana:7.17.3e2e2031c15be
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

17,284
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

10,400
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

10,421

Container images carrying it

322 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
foldingathome/fah-gpu:latest5ef7742d1eb4
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
free5gmano/nextepc-mongodb:latest36f806935519
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
galaxy/galaxy-init:v18.010267bad550e6
bash@4.3-7ubuntu1.7
4.3-7ubuntu1.8+esm2
1
galaxy/galaxy-stable:v18.018e577a626dfd
bash@4.3-7ubuntu1.7
4.3-7ubuntu1.8+esm2
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
geoservercloud/geoserver-cloud-gateway:1.0-RC2ca58b74529cd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
geoservercloud/geoserver-cloud-rest:1.0-RC25dc0c93a1710
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
geoservercloud/geoserver-cloud-wcs:1.0-RC247ae1bdb4bcc
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
geoservercloud/geoserver-cloud-webui:1.0-RC228c3e5a8c5a3
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
geoservercloud/geoserver-cloud-wfs:1.0-RC28c70ee06d5ab
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
geoservercloud/geoserver-cloud-wms:1.0-RC242775ba6a4da
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
gethue/hue:4.10.05702b2c37ff9
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
gopinatht/ovs-plugin-installer:latest632cb2e9c399
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
gotson/komga:0.99.49b15ea6bfc30
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
haugene/transmission-openvpn:4.0059216cfae4b
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
haveagitgat/tdarr:2.00.181256348872ce
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
housewrecker/gaps:latestf417dd0a7547
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
hugohg34/toposervice:0.0.2812a03b3f274
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
hyperledger/fabric-orderer:1.3.06ee1abcfd840
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
hyperledger/fabric-peer:1.3.06756c7c48234
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
bash@4.4.19-10.el8
0:4.4.19-14.el8
1
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
bash@4.4.19-10.el8
0:4.4.19-14.el8
1
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
bash@4.4.19-12.el8
0:4.4.19-14.el8
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
ibmcom/microclimate-theia:lateste17bdccc5030
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
ibmcom/opencontent-common-utils:1.1.2cd5065df7304
bash@4.4.19-7.el8
0:4.4.19-14.el8
1
ibmcom/skydive:0.22.0395e60cc6e3d
bash@4.4.18-2ubuntu1
4.4.18-2ubuntu1.3
1
iofog/router:2.0.17260cf861479
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
iomesh/node-disk-manager:1.8.0002c4b92fd34
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
iomesh/node-disk-operator:1.8.0f6c76380db34
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
istio/install-cni:1.10.32232f365aed6
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
istio/node-agent-k8s:1.2.9268ab879ea51
bash@4.3-14ubuntu1.3
4.3-14ubuntu1.4+esm1
1
istio/operator:1.10.3655eefa11c84
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
istio/operator:1.12.06cfce8a071b9
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
istio/pilot:1.10.0294ca55bd1cc
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
istio/pilot:1.2.9c09319753454
bash@4.3-14ubuntu1.3
4.3-14ubuntu1.4+esm1
1
istio/pilot:1.10.3e7e110a421c2
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
istio/proxyv2:1.2.90c78be035e98
bash@4.3-14ubuntu1.3
4.3-14ubuntu1.4+esm1
1
istio/proxyv2:1.9.687a9db561d2e
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
istio/proxyv2:1.10.088c6c693e67a
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
jacobalberty/unifi:5.10.19c409924e2463
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
jakowenko/double-take:1.6.0b858bac9e32a
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.