StackRadar

CVE-2019-18276

High

Advisory

Published 28 Nov 2019In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.026
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
384
of 17,781 indexed, latest versions
Container images
322
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: bash security and bug fix update

Carried by container images the latest versions of 384 of 17,781 indexed charts deploy, on 322 images.

Affected packageAffected versionsFixed inImages
bashdeb4.3-7ubuntu1.5, 4.3-7ubuntu1.7, 4.3-14ubuntu1.1, 4.3-14ubuntu1.2+7 more4.3-7ubuntu1.8+esm2, 4.3-14ubuntu1.4+esm1, 4.4.18-2ubuntu1.3, 5.0-6ubuntu1.2299
bashrpm4.4.19-7.el8, 4.4.19-10.el8, 4.4.19-12.el8, 4.4.19-12.el8_20:4.4.19-14.el823
OSV records
RHSA-2021:1679UBUNTU-CVE-2019-18276
Also known as
USN-5380-1

Charts affected

384 by stars
ChartLatestAffected imagesRadar Score
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

32,259
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
bash@4.3-14ubuntu1.3
4.3-14ubuntu1.4+esm1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
bash@4.3-14ubuntu1.3
4.3-14ubuntu1.4+esm1

Open the chart page →

23,964
san-iscsi-csienixOfficialVerified publisher4.0.21 of 7See more

san-iscsi-csi enix 4.0.2

1 of the 7 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
enix/san-iscsi-csi:v4.0.2f963da81ecf7
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

4,154
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

15,592
jellyfinutkuozdemirVerified publisher2.0.01 of 1See more

jellyfin utkuozdemir 2.0.0

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
linuxserver/jellyfin:10.7.72427dde159a2
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

7,880
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

11,405
spring-petclinic-cloudplatform9-communityVerified publisher0.2.05 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
platform9community/api-gateway:latest40a4970de568
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
platform9community/customers-service:latest2089811e5cc6
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
platform9community/vets-service:latestd1165c94dfb3
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
platform9community/visits-service:latest8d11b50368c6
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

41,872
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

11,782
plexutkuozdemirVerified publisher2.1.11 of 1See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
linuxserver/plex:1.25.24a13ced2326c
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

6,348
zabbix-serveraekondratievVerified publisher1.0.63 of 4See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

30,668
fadicetic0.3.12 of 25See more

fadi cetic 0.3.1

2 of the 25 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

52,919
kubeflowkubeflow1.6.23 of 45See more

kubeflow kubeflow 1.6.2

3 of the 45 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/proxyv2:1.9.687a9db561d2e
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
gcr.io/ml-pipeline/metadata-envoy:2.0.0-alpha.5e8bc6cf08613
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1
gcr.io/tfx-oss-public/ml_metadata_store_server:1.5.0db8691752b4c
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

96,941
dexwiremindVerified publisher2.15.71 of 2See more

dex wiremind 2.15.7

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
gcr.io/google_containers/kubernetes-dashboard-init-amd64:v1.0.0fbe12aa24de6
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

13,562
auto-deploy-appav1o-chartsVerified publisher0.15.41 of 1See more

auto-deploy-app av1o-charts 0.15.4

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

11,007
openshift-consoleav1o-chartsVerified publisher0.3.61 of 1See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
bash@4.4.19-12.el8_2
0:4.4.19-14.el8

Open the chart page →

9,052
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

22,773
frigategeek-cookbookVerified publisher8.2.21 of 1See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

10,598
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

13,950
signal-cli-rest-apigeek-cookbookVerified publisher1.2.21 of 1See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

10,154
tautulligeek-cookbookVerified publisher11.4.21 of 1See more

tautulli geek-cookbook 11.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

10,628
typesensehmphuVerified publisher0.1.61 of 1See more

typesense hmphu 0.1.6

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
typesense/typesense:0.23.03accb727cbe2
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1

Open the chart page →

3,868
radondb-mysqlkubesphere-testVerified publisher1.0.11 of 3See more

radondb-mysql kubesphere-test 1.0.1

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
xenondb/percona:5.7.330e26872a2b67
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

7,342
lightsteplightstepsatellite1.2.41 of 1See more

lightstep lightstepsatellite 1.2.4

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

15,330
kafdroplsst-sqre0.1.31 of 1See more

kafdrop lsst-sqre 0.1.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
obsidiandynamics/kafdrop:3.30.05337c9e0e2de
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

7,901
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1

Open the chart page →

107,811
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

24,488
huginnutkuozdemirVerified publisher2.2.11 of 4See more

huginn utkuozdemir 2.2.1

1 of the 4 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

18,137
github-actions-runneradwerx0.10.31 of 1See more

github-actions-runner adwerx 0.10.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
adwerx/github-actions-runner:2.276.1-20.04-1840d2b078682
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

13,635
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
hyperledger/fabric-couchdb:0.4.15f6c724592abf
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
hyperledger/fabric-couchdb:0.4.15f6c724592abf
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

77,687
open-elevationbeeinventor0.1.01 of 2See more

open-elevation beeinventor 0.1.0

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
openelevation/open-elevation:latest82fb21612e86
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

13,145
geoserver-cloudcamptocamp20.0.56 of 11See more

geoserver-cloud camptocamp2 0.0.5

6 of the 11 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

84,444
geoserverCloudcamptocamp20.0.66 of 11See more

geoserverCloud camptocamp2 0.0.6

6 of the 11 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:1.0-RC3756559ee788a
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-rest:1.0-RC399540eef78ad
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-wcs:1.0-RC35c254c53a357
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-webui:1.0-RC3c687b1cbc891
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-wfs:1.0-RC35288f320cf36
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
geoservercloud/geoserver-cloud-wms:1.0-RC3a30a60ac6cd0
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

84,444
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

36,094
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

38,346
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

12,908
bazarrgeek-cookbookVerified publisher10.6.21 of 1See more

bazarr geek-cookbook 10.6.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/bazarr:v1.0.3fdb5501cdfb9
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

17,377
games-on-whalesgeek-cookbookVerified publisher1.8.23 of 7See more

games-on-whales geek-cookbook 1.8.2

3 of the 7 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/pulseaudio:1.0.0f34f98405c10
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
ghcr.io/games-on-whales/steam:1.0.09b6105be7ad0
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

35,305
lazylibrariangeek-cookbookVerified publisher7.4.21 of 1See more

lazylibrarian geek-cookbook 7.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
linuxserver/lazylibrarian:version-1152df82f93d2560e233
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

11,662
protonmail-bridgegeek-cookbookVerified publisher5.4.21 of 1See more

protonmail-bridge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
shenxn/protonmail-bridge:1.8.7-1acf31af7c111
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

8,029
prowlarrgeek-cookbookVerified publisher4.5.21 of 1See more

prowlarr geek-cookbook 4.5.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/prowlarr:v0.3.0.1710c863aa9875fa
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

11,558
sabnzbdgeek-cookbookVerified publisher9.4.21 of 1See more

sabnzbd geek-cookbook 9.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

10,231
stashgeek-cookbookVerified publisher3.4.21 of 1See more

stash geek-cookbook 3.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
stashapp/stash:latest24dbd7607174
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

15,856
tdarrgeek-cookbookVerified publisher4.6.22 of 2See more

tdarr geek-cookbook 4.6.2

2 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
haveagitgat/tdarr_node:2.00.101e3f9328327d
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

31,000
wireguardgeek-cookbookVerified publisher1.4.21 of 1See more

wireguard geek-cookbook 1.4.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

7,660
helm-operatorhelm-operatorVerified publisher0.0.21 of 1See more

helm-operator helm-operator 0.0.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
bsgrigorov/helm-operator:latest45ab095f09c8
bash@4.4.19-12.el8
0:4.4.19-14.el8

Open the chart page →

6,977
elasticinseefrlab2.2.02 of 2See more

elastic inseefrlab 2.2.0

2 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
library/kibana:7.17.3e2e2031c15be
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

17,284
cniistio1.10.31 of 1See more

cni istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/install-cni:1.10.32232f365aed6
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

10,400
discoveryistio1.10.31 of 1See more

discovery istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/pilot:1.10.3e7e110a421c2
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

10,475
egressistio1.10.31 of 1See more

egress istio 1.10.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.3a78b7a165744
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

10,421

Container images carrying it

322 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
jmferrer/azure-devops-agent:latest030f68ec6998
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
kennethreitz/httpbin:latest599fe5e50731
bash@4.4.18-2ubuntu1
4.4.18-2ubuntu1.3
1
kubeoperator/webkubectl:v2.4.0be8f0d624640
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
kubesphere/examples-bookinfo-reviews-v2:1.13.06d93129beb32
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
kudobuilder/controller:v0.9.069072d979708
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
library/cassandra:3.11.10b095ff3248c6
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
library/elasticsearch:7.17.0332c6d416808
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
library/kibana:7.17.3e2e2031c15be
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
library/mariadb:10.8.2-focal490f01279be1
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
library/mongo:3.6146c1fd999a6
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1
1
library/mongo:4.4-bionic3d0e6df9fd5b
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
library/mongo:4.2.16ca49afbcb2b
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
library/rabbitmq:3.7-managementb6dd45cc35b3
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
lightbend/curl:7.47.0b0c9894ac8dd
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
linuxserver/calibre:version-v5.21.0a847b5b2d860
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
linuxserver/calibre-web:version-0.6.12938810eca3d3
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
linuxserver/cloud9:latest45c5fe102ff3
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
linuxserver/codimd:latestb801bbcf6386
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
linuxserver/deluge:18.04.10ac871624394
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
linuxserver/jellyfin:10.7.72427dde159a2
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
linuxserver/lazylibrarian:version-1152df82f93d2560e233
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
linuxserver/ombi:3.0.4572-ls452fbb21fb4903
bash@4.4.18-2ubuntu1
4.4.18-2ubuntu1.3
1
linuxserver/plex:1.25.24a13ced2326c
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
litmuschaos/mongo:4.2.899961210d467
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
longhornio/longhorn-manager:v1.2.3dca34321452c
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
longhornio/longhorn-manager:v1.1.1ede61fe2a472
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
lsstsqre/nublado2:2.0.1b75bf8aaafa4
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
lumenvox/cloud-assure-api:2.0.0fcb9fb54a9fd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
lumenvox/cloud-assure-identity:2.0.0147854a3c916
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
lumenvox/cloud-audit:2.0.079428add7f38
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
lumenvox/cloud-binary-storage:2.0.053decadc102d
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
lumenvox/cloud-configuration:2.0.017fbce1a8bc6
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
lumenvox/cloud-deployment:2.0.0ea8110886d38
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
lumenvox/cloud-engine-resource:2.0.0e2e5abe27abc
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
lumenvox/cloud-management-api:2.0.0b9a23345eabd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
lumenvox/cloud-reporting:2.0.07a9ffdc2178a
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
lumenvox/cloud-reporting-api:2.0.0dbbaf5462ad6
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
lumenvox/cloud-transaction:2.0.08b74f9d3ba09
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
lumenvox/cloud-voice-verifier:2.0.014170ad34903
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
minio/mc:RELEASE.2021-02-14T04-28-06Z2a374c124d44
bash@4.4.19-12.el8
0:4.4.19-14.el8
1
muluder/prograncontrollermcord:0.1.843b597a93da7
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
ngick8stesting/c3po-mme:mwca-mme-debug8dd6dea45be4
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1
1
nvidia/dcgm-exporter:2.2.9-2.4.1-ubuntu20.0491b20b66d1cd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
nvidia/k8s-device-plugin:v0.9.0964847cc3fd8
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1
1
omecproject/c3po-hss:master-latest638671ef4842
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1
1
omecproject/c3po-hssdb:master-latest28a90cc26716
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.