StackRadar

CVE-2019-18276

High

Advisory

Published 28 Nov 2019In the index since 6 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.026
85th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
384
of 17,781 indexed, latest versions
Container images
322
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: bash security and bug fix update

Carried by container images the latest versions of 384 of 17,781 indexed charts deploy, on 322 images.

Affected packageAffected versionsFixed inImages
bashdeb4.3-7ubuntu1.5, 4.3-7ubuntu1.7, 4.3-14ubuntu1.1, 4.3-14ubuntu1.2+7 more4.3-7ubuntu1.8+esm2, 4.3-14ubuntu1.4+esm1, 4.4.18-2ubuntu1.3, 5.0-6ubuntu1.2299
bashrpm4.4.19-7.el8, 4.4.19-10.el8, 4.4.19-12.el8, 4.4.19-12.el8_20:4.4.19-14.el823
OSV records
RHSA-2021:1679UBUNTU-CVE-2019-18276
Also known as
USN-5380-1

Charts affected

384 by stars
ChartLatestAffected imagesRadar Score
pndasmo-helm-chart6.0.01 of 3See more

pnda smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

27,477
pombasmo-helm-chart6.0.01 of 17See more

pomba smo-helm-chart 6.0.0

1 of the 17 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

29,220
portalsmo-helm-chart6.0.01 of 8See more

portal smo-helm-chart 6.0.0

1 of the 8 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.07daa08b81954
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

27,477
sdcsmo-helm-chart6.0.01 of 14See more

sdc smo-helm-chart 6.0.0

1 of the 14 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

25,769
sdnc-ansible-serversmo-helm-chart6.0.01 of 3See more

sdnc-ansible-server smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

25,769
sdnc-portalsmo-helm-chart6.0.01 of 3See more

sdnc-portal smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

25,769
sdnc-promsmo-helm-chart6.0.01 of 2See more

sdnc-prom smo-helm-chart 6.0.0

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

24,776
sdnc-websmo-helm-chart6.0.01 of 3See more

sdnc-web smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

24,776
ueb-listenersmo-helm-chart6.0.01 of 3See more

ueb-listener smo-helm-chart 6.0.0

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
oomk8s/readiness-check:2.0.2875814cc853d
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

25,769
space-engineerssoblivionscall1.0.21 of 2See more

space-engineers soblivionscall 1.0.2

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
library/ubuntu:xenial1f1a2d56de1d
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1

Open the chart page →

2,766
pagessrinipages1.0.02 of 3See more

pages srinipages 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
operatorstakewise2.1.11 of 5See more

operator stakewise 2.1.1

1 of the 5 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
sigp/lighthouse:v2.1.2ad501f02cfef
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

6,545
pagesstephendillondell1.0.02 of 3See more

pages stephendillondell 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
pagessunilb2590-pages1.0.02 of 3See more

pages sunilb2590-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
freeradiussvtech-public-helm-charts0.1.51 of 4See more

freeradius svtech-public-helm-charts 0.1.5

1 of the 4 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

12,655
explorersynapse0.2.161 of 6See more

explorer synapse 0.2.16

1 of the 6 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
yandex/clickhouse-server:latest1cbf75aabe1e
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

8,518
istio-discoverytemp-charts0.3.31 of 1See more

istio-discovery temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/pilot:1.10.0294ca55bd1cc
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

10,568
istio-ingresstemp-charts0.3.31 of 1See more

istio-ingress temp-charts 0.3.3

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/proxyv2:1.10.088c6c693e67a
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

10,514
pagestest43221.0.02 of 3See more

pages test4322 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
standard-applicationthebitgram1.0.121 of 1See more

standard-application thebitgram 1.0.12

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

11,007
trafficlight-apithecampagnards0.1.11 of 1See more

trafficlight-api thecampagnards 0.1.1

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
thecampagnards/trafficlight-api:main7dca9d973837
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

4,357
pagesthiru-pages1.0.02 of 3See more

pages thiru-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
pagesthuy-pages1.0.02 of 3See more

pages thuy-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
lightstepupdater-lightstep-satellite1.2.21 of 1See more

lightstep updater-lightstep-satellite 1.2.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
lightstep/collector:2021-01-26_23-02-36Z11c5569aaf3b
bash@4.3-14ubuntu1.2
4.3-14ubuntu1.4+esm1

Open the chart page →

15,330
pagesvictor-pages1.0.02 of 3See more

pages victor-pages 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
kube-monitoring-telegram-botviento-repository1.0.01 of 1See more

kube-monitoring-telegram-bot viento-repository 1.0.0

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
vientoprojects/kubernetes-monitoring-telegram-bot:latesteb2a71531741
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

7,885
pageswalter1.0.02 of 3See more

pages walter 1.0.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
dellcloud/pages:monitor6ba7b22caacd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
flyway/flyway:6.4.422d97ceb0c47
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

20,190
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

11,119
webhookiewebhookie0.1.21 of 1See more

webhookie webhookie 0.1.2

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

14,364
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
hookiesolutions/webhookie:latest0629694246ba
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

28,605
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
istio/kubectl:1.5.10dbb7726d1bf0
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3

Open the chart page →

10,843
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

15,230
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
bash@4.4.19-12.el8
0:4.4.19-14.el8

Open the chart page →

6,915
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2019-18276.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
yandex/clickhouse-server:21.3.204eccfffb01d7
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2

Open the chart page →

9,207

Container images carrying it

322 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/k8s-at-home/readarr:v0.1.0.715ad943e9309e4
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
ghcr.io/k8s-at-home/sabnzbd:v3.3.1c2d6e775db5a
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
ghcr.io/k8s-at-home/tautulli:v2.7.74ea617c30397
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
ghcr.io/k8s-at-home/wireguard:v1.0.20210424448045c4270b
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
ghcr.io/linuxserver/booksonic-air:version-v2009.1.0baa4fa9549dc
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
ghcr.io/linuxserver/resilio-sync:version-2.7.2.1375605b6d544028
bash@4.4.18-2ubuntu1.2
4.4.18-2ubuntu1.3
1
mcr.microsoft.com/mssql/server:2019-CU16-ubuntu-20.0449a57dc220b1
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
public.ecr.aws/supportpal/helpdesk-monolithic:4.0.4573779e57fae
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
bash@4.4.19-10.el8
0:4.4.19-14.el8
1
quay.io/mcouliba/quarkus-serverless:1.0c2851757eca4
bash@4.4.19-10.el8
0:4.4.19-14.el8
1
quay.io/mongodb/mongodb-enterprise-operator:1.8.2a1c3843b03bc
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1
1
quay.io/mongodb/mongodb-kubernetes-operator:0.3.0107a7c73af59
bash@4.4.19-12.el8
0:4.4.19-14.el8
1
quay.io/openshift/origin-cli:4.66722d5041b47
bash@4.4.19-12.el8_2
0:4.4.19-14.el8
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
bash@4.4.19-12.el8_2
0:4.4.19-14.el8
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
bash@4.3-14ubuntu1.4
4.3-14ubuntu1.4+esm1
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
bash@5.0-6ubuntu1.1
5.0-6ubuntu1.2
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.