StackRadarChart IndexLive demo

CVE-2024-26939

High

Advisory

Published 1 May 2024In the index since 6 Sept 2026

Severity: High; worst across findings
CVSS: 7.0; base score, highest
EPSS: 0.002; 15th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 62; of 18,232 indexed, latest versions
Container images: 60; deployed by those charts
Fix available: 1 of 1; affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 62 of 18,232 indexed charts deploy, on 60 images.

Affected package	Affected versions	Fixed in	Images
linuxdeb	6.1.27-1, 6.1.37-1, 6.1.38-4, 6.1.52-1+5 more	6.1.90-1	60

OSV records: DEBIAN-CVE-2024-26939

Charts affected

62 by stars

Chart

Latest

Affected images

Radar Score

wordpresssb-helm-charts

1 of 2 See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2024-26939.

Container image	Digest	Package	Fixed in
library/wordpress :6.4.3-apache	8ae66efb09a2	linux@6.1.76-1	6.1.90-1

Open the chart page →

90,433

stakefishstakefish

1 of 8 See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2024-26939.

Container image	Digest	Package	Fixed in
thongngo3301/stakefish :latest	a341af5976e3	linux@6.1.52-1	6.1.90-1

Open the chart page →

104,791

verbasubstratus

1 of 1 See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2024-26939.

Container image	Digest	Package	Fixed in
substratusai/verba :v0.4.0-baseURL2	61695be635eb	linux@6.1.85-1	6.1.90-1

Open the chart page →

86,137

icinga2svtech-public-helm-charts

1 of 4 See more

icinga2 svtech-public-helm-charts 1.0.0

1 of the 4 container images this version deploys carry CVE-2024-26939.

Container image	Digest	Package	Fixed in
library/redis :7.2.3	a7cee7c8178f	linux@6.1.67-1	6.1.90-1

Open the chart page →

83,062

nagvissvtech-public-helm-charts

1 of 1 See more

nagvis svtech-public-helm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-26939.

Container image	Digest	Package	Fixed in
svtechnmaa/svtech_nagvis :v1.2.1	18394b08e6c3	linux@6.1.76-1	6.1.90-1

Open the chart page →

84,631

codegentest-opea

1 of 5 See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-26939.

Container image	Digest	Package	Fixed in
opea/codegen-ui :1.0	2bee4eb66f3e	linux@6.1.76-1	6.1.90-1

Open the chart page →

108,485

codetranstest-opea

1 of 5 See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-26939.

Container image	Digest	Package	Fixed in
opea/codetrans-ui :1.0	3ef121f34610	linux@6.1.76-1	6.1.90-1

Open the chart page →

108,010

docsumtest-opea

1 of 5 See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2024-26939.

Container image	Digest	Package	Fixed in
opea/docsum-ui :1.0	7f854e9bffaf	linux@6.1.76-1	6.1.90-1

Open the chart page →

108,512

tfy-distributortruefoundry

1 of 4 See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2024-26939.

Container image	Digest	Package	Fixed in
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	linux@6.1.69-1	6.1.90-1

Open the chart page →

96,471

demo-backendv2fly

1 of 1 See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2024-26939.

Container image	Digest	Package	Fixed in
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	linux@6.1.38-4	6.1.90-1

Open the chart page →

97,326

supersetwbstack

1 of 1 See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2024-26939.

Container image	Digest	Package	Fixed in
apache/superset :4.0.1	ab9467fd712c	linux@6.1.85-1	6.1.90-1

Open the chart page →

79,276

web-dvwaweb-dvwa

1 of 2 See more

web-dvwa web-dvwa 1.16.0

1 of the 2 container images this version deploys carry CVE-2024-26939.

Container image	Digest	Package	Fixed in
gulacedia/web-dvwa-new :v3	67b467d961ca	linux@6.1.27-1	6.1.90-1

Open the chart page →

95,117

Container images carrying it

60 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
vlebediantsev/registration-ms-front-app-host :latest	54f69d116c50	linux@6.1.38-4	6.1.90-1	1
ghcr.io/drewburr-labs/mum-discord-bot :3.1.2	6e82914e1051	linux@6.1.67-1	6.1.90-1	1
ghcr.io/krateoplatformops/deployment-service :1.2.59	da9f93f2f731	linux@6.1.76-1	6.1.90-1	1
ghcr.io/krateoplatformops/finops-webservice-api-mock :0.1.0	0877e9452d14	linux@6.1.76-1	6.1.90-1	1
ghcr.io/open-telemetry/demo :1.12.0-emailservice	a1f5cebb5240	linux@6.1.69-1	6.1.90-1	1
ghcr.io/rodg/rtmp-controller :latest	67f99a5beab7	linux@6.1.27-1	6.1.90-1	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	linux@6.1.55-1	6.1.90-1	1
public.ecr.aws/jtekt-corporation/time-series-storage-service :v1.5.1	046ef5c9ed50	linux@6.1.55-1	6.1.90-1	1
public.ecr.aws/truefoundrycloud/async-service-distributor :5d48113bc678d694a0c8f8dabb2207c5aa2cfc53	f74851ce31f5	linux@6.1.69-1	6.1.90-1	1
quay.io/yushiwho/api :e1f9d77	e0d9b93dbf2b	linux@6.1.38-4	6.1.90-1	1