StackRadar

CVE-2025-15366

Medium

Advisory

Published 20 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
664
of 17,781 indexed, latest versions
Container images
652
deployed by those charts
Fix available
12 of 16
affected packages

IMAP command injection in user-controlled commands

Carried by container images the latest versions of 664 of 17,781 indexed charts deploy, on 652 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 more3.11.0~rc1-1~22.04.1~esm9181
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more3.8.10-0ubuntu1~20.04.18+esm6100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+11 more3.12.3-1ubuntu0.1289
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 more3.10.12-1~22.04.1580
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.7-1ubuntu0.13.13.7-1ubuntu0.474
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 moreno fix listed54
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more3.6.9-1~18.04ubuntu1.13+esm944
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.13+esm2225
python3apk3.12.12-r0, 3.14.3-r0, 3.14.5-r0, 3.14.5-r13.14.7-r012
python-3.12apk3.12.0-r1, 3.12.9-r1, 3.12.14-r2, 3.12.14-r6no fix listed8
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm207
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r03.14.7-r06
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.15.03
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.15-r03
python-3.11apk3.11.16-r5no fix listed1
python3rpm3.12.9-13.azl3no fix listed1
OSV records
ALPINE-CVE-2025-15366BIT-python-2025-15366CGA-22c2-ggw2-x8c7CGA-232h-86ff-rxm7CGA-26q2-45f4-w2r3CGA-fqhc-w2gg-fx34DEBIAN-CVE-2025-15366UBUNTU-CVE-2025-15366AZL-75029
Also known as
BIT-libpython-2025-15366, BIT-python-min-2025-15366, CGA-28qc-w9ph-8hcp, CGA-3wf5-mc2v-3252, CGA-5jmx-v33j-c9v4, CGA-g97j-hvj9-46w3, PSF-2026-3, USN-8018-1, USN-8018-2

Charts affected

664 by stars
ChartLatestAffected imagesRadar Score
nextcloudnextcloud9.2.61 of 1See more

nextcloud nextcloud 9.2.6

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3-apacheb97df9e0e1ee
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

4,507
argocd-image-updaterargoOfficialVerified publisher1.3.11 of 1See more

argocd-image-updater argo 1.3.1

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
quay.io/argoprojlabs/argocd-image-updater:v1.3.0cb009167015c
python3@3.14.5-r0
3.14.7-r0

Open the chart page →

718
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

30,159
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
python3.11@3.11.2-6
no fix listed

Open the chart page →

11,367
jiraatlassian-data-centerVerified publisher2.0.151 of 2See more

jira atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
atlassian/jira-software:11.3.11e5548cd4eea8
python3.12@3.12.3-1ubuntu0.16
no fix listed

Open the chart page →

1,490
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
python3.12@3.12.3-1ubuntu0.11
3.12.3-1ubuntu0.12

Open the chart page →

13,664
netdatanetdataVerified publisher3.7.1731 of 1See more

netdata netdata 3.7.173

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
netdata/netdata:v2.11.0c45c71eb23ff
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

3,092
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
boky/postfix:5.1.0aafc77238423
python3.13@3.13.5-2
no fix listed

Open the chart page →

5,366
csi-driver-nfscsi-driver-nfsVerified publisher4.13.41 of 6See more

csi-driver-nfs csi-driver-nfs 4.13.4

1 of the 6 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

3,324
datahubdatahubVerified publisher1.1.41 of 4See more

datahub datahub 1.1.4

1 of the 4 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
acryldata/datahub-actions:v1.7.0.1c5fd70130157
python-3.11@3.11.16-r5
no fix listed

Open the chart page →

635
netboxbootcVerified publisher4.1.11 of 4See more

netbox bootc 4.1.1

1 of the 4 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v3.2.83d652dca5351
python3.10@3.10.4-3ubuntu0.1
3.10.12-1~22.04.15

Open the chart page →

9,145
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.18+esm6

Open the chart page →

32,259
clearmlallegroaiOfficialVerified publisher7.15.01 of 4See more

clearml allegroai 7.15.0

1 of the 4 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
allegroai/clearml:2.0.0-613713ae38f7daf
python3.11@3.11.2-6+deb12u4
no fix listed

Open the chart page →

10,622
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
python3.12@3.12.3-1ubuntu0.9
3.12.3-1ubuntu0.12

Open the chart page →

19,391
dragonflydragonflyVerified publisher1.8.41 of 3See more

dragonfly dragonfly 1.8.4

1 of the 3 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
dragonflyoss/client:v1.5.4a1b52779c4dd
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

3,787
pulsarapache4.7.01 of 10See more

pulsar apache 4.7.0

1 of the 10 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
alpine/k8s:1.32.12048f8d9c8cc7
python3@3.12.12-r0
3.14.7-r0

Open the chart page →

9,864
difydify-helmVerified publisher0.38.02 of 11See more

dify dify-helm 0.38.0

2 of the 11 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
langgenius/dify-api:1.16.1dcefa5f7c47c
python3.11@3.11.2-6+deb12u8
no fix listed
langgenius/dify-plugin-daemon:0.6.3-local3c694329357b
python3.12@3.12.3-1ubuntu0.13
no fix listed

Open the chart page →

22,002
istiocloudposse1.1.02 of 8See more

istio cloudposse 1.1.0

2 of the 8 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
python3.5@3.5.2-2ubuntu0~16.04.5
3.5.2-2ubuntu0~16.04.13+esm22
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
python3.5@3.5.2-2ubuntu0~16.04.5
3.5.2-2ubuntu0~16.04.13+esm22

Open the chart page →

23,964
openprojectopenproject-helm-chartsOfficialVerified publisher13.11.01 of 5See more

openproject openproject-helm-charts 13.11.0

1 of the 5 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

19,926
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

11,384
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
python3.10@3.10.4-3ubuntu0.1
3.10.12-1~22.04.15

Open the chart page →

33,725
csi-driver-smbcsi-driver-smbVerified publisher1.20.31 of 6See more

csi-driver-smb csi-driver-smb 1.20.3

1 of the 6 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/smbplugin:v1.20.3dc7746bb081e
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

2,945
netbirdjaconiVerified publisher0.15.11 of 4See more

netbird jaconi 0.15.1

1 of the 4 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
library/golang:latest512690a56605
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

8,390
gotenbergmaikumoriVerified publisher1.25.01 of 1See more

gotenberg maikumori 1.25.0

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.36.087c16b9f3642
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

9,683
oneuptimeoneuptimeOfficialVerified publisher13.0.41 of 7See more

oneuptime oneuptime 13.0.4

1 of the 7 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
oneuptime/probe:release6b2d98713711
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

11,192
openclawopenclaw-helmVerified publisher1.5.401 of 2See more

openclaw openclaw-helm 1.5.40

1 of the 2 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
ghcr.io/openclaw/openclaw:2026.5.22dcfd14877740
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

5,660
openvpn-asstenicVerified publisher0.1.91 of 1See more

openvpn-as stenic 0.1.9

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/openvpn-as:version-2.8.6-916f8e7d-ubuntu184ee0764310e7
python2.7@2.7.17-1~18.04ubuntu1.2
no fix listed

Open the chart page →

15,592
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.15

Open the chart page →

10,670
snipeitt3n3.4.11 of 2See more

snipeit t3n 3.4.1

1 of the 2 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
snipe/snipe-it:v6.0.1455fb7636a98c
python3.8@3.8.10-0ubuntu1~20.04.5
3.8.10-0ubuntu1~20.04.18+esm6

Open the chart page →

18,509
bitbucketatlassian-data-centerVerified publisher2.0.151 of 1See more

bitbucket atlassian-data-center 2.0.15

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
atlassian/bitbucket:10.2.705933f2b1cfd
python3.12@3.12.3-1ubuntu0.16
no fix listed

Open the chart page →

1,444
memgraphmemgraphVerified publisher1.0.61 of 2See more

memgraph memgraph 1.0.6

1 of the 2 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
memgraph/memgraph:3.13.0a1dc375774ed
python3.12@3.12.3-1ubuntu0.16
no fix listed

Open the chart page →

1,373
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm6
stackstorm/st2api:3.86f56d239d280
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm6
stackstorm/st2auth:3.833ecfda16608
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm6
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm6
stackstorm/st2notifier:3.8f190a6212195
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm6
stackstorm/st2rulesengine:3.8259503496ff9
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm6
stackstorm/st2scheduler:3.8b1de2055c362
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm6
stackstorm/st2sensorcontainer:3.8b1a338f64773
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm6
stackstorm/st2stream:3.81c8904a3bf67
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm6
stackstorm/st2timersengine:3.81bf35bfaf00c
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm6
stackstorm/st2workflowengine:3.819fdfffdbba8
python3.8@3.8.10-0ubuntu1~20.04.9
3.8.10-0ubuntu1~20.04.18+esm6

Open the chart page →

96,419
supabasetokens-studioVerified publisher1.0.01 of 14See more

supabase tokens-studio 1.0.0

1 of the 14 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
supabase/studio:20241021-9f9b08326d8070c55e9
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

23,123
renterdartur9010Verified publisher1.4.41 of 2See more

renterd artur9010 1.4.4

1 of the 2 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
artur9010/wait-for:v1.0.06b4de3ce8b0e
python3.11@3.11.2-6
no fix listed

Open the chart page →

8,493
openclawopenclawVerified publisher1.91.31 of 2See more

openclaw openclaw 1.91.3

1 of the 2 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
python3.12@3.12.3-1ubuntu0.17
no fix listed

Open the chart page →

2,977
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.18+esm6

Open the chart page →

11,405
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
python3.12@3.12.3-1ubuntu0.15
no fix listed

Open the chart page →

4,556
devtron-operatordevtron0.23.31 of 11See more

devtron-operator devtron 0.23.3

1 of the 11 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
python3.11@3.11.2-6
no fix listed

Open the chart page →

32,902
nextcloudgroundhog2k0.22.51 of 3See more

nextcloud groundhog2k 0.22.5

1 of the 3 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
library/nextcloud:34.0.3:34.0.3-apacheb97df9e0e1ee
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

4,507
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
python-3.12@3.12.9-r1
no fix listed

Open the chart page →

17,245
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.18+esm6

Open the chart page →

11,782
zabbix-serveraekondratievVerified publisher1.0.61 of 4See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
python3.8@3.8.10-0ubuntu1~20.04.1
3.8.10-0ubuntu1~20.04.18+esm6

Open the chart page →

30,668
crowdatlassian-data-centerVerified publisher2.0.151 of 2See more

crowd atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
atlassian/crowd:7.2.3c81cc7d6bc9e
python3.12@3.12.3-1ubuntu0.16
no fix listed

Open the chart page →

1,415
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

6,457
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
python3.10@3.10.6-1~22.04.2ubuntu1.1
3.10.12-1~22.04.15

Open the chart page →

4,903
meshery-operatormesheryOfficialVerified publisher1.0.691 of 2See more

meshery-operator meshery 1.0.69

1 of the 2 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
alpine/k8s:1.35.6b7a12c5ddf26
python3@3.14.5-r1
3.14.7-r0

Open the chart page →

2,415
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.12

Open the chart page →

8,636
passboltpassbolt2.1.11 of 6See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
passbolt/passbolt:5.13.0-1-ceaf3a620902a0
python3.13@3.13.5-2+deb13u2
no fix listed

Open the chart page →

13,350
mssqlserver-2022simcube1.2.31 of 1See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
mcr.microsoft.com/mssql/server:2022-latestba4c8329f48f
python3.10@3.10.12-1~22.04.16
no fix listed

Open the chart page →

2,878
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2025-15366.

Container imageDigestPackageFixed in
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
python@3.11.11-0
3.15.0

Open the chart page →

16,210

Container images carrying it

652 by charts deploying them

A fixed version is listed for 12 of the 16 affected packages.

Container imageDigestPackageFixed inUsed by
archivebox/archivebox:0.7.41a5a37331091
python3.11@3.11.2-6+deb12u7
no fix listed
1
artur9010/wait-for:v1.0.06b4de3ce8b0e
python3.11@3.11.2-6
no fix listed
1
arunvelsriram/utils:latest655ad18fd8d6
python3.12@3.12.3-1ubuntu0.7
3.12.3-1ubuntu0.12
1
assistiot/cybersecurity-monitoring_ir-cas:latest6a107f224c34
python2.7@2.7.18-1~20.04.3
no fix listed
1
assistiot/open_api_backend:1.1.230812ba93555
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.15
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
python3.11@3.11.2-6
no fix listed
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
python3.11@3.11.2-6
no fix listed
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
python3.11@3.11.2-6
no fix listed
1
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
python3.8@3.8.10-0ubuntu1~20.04.7
3.8.10-0ubuntu1~20.04.18+esm6
1
atlassian/bamboo:12.1.114af4bb6c8d46
python3.12@3.12.3-1ubuntu0.16
no fix listed
1
atlassian/bamboo-agent-base:12.1.1151c2d7274eef
python3.12@3.12.3-1ubuntu0.16
no fix listed
1
atlassian/bitbucket:10.2.705933f2b1cfd
python3.12@3.12.3-1ubuntu0.16
no fix listed
1
atlassian/confluence-server:7.10.03b9222ab32ef
python3.10@3.10.6-1~22.04.1
3.10.12-1~22.04.15
1
atlassian/crowd:7.2.3c81cc7d6bc9e
python3.12@3.12.3-1ubuntu0.16
no fix listed
1
atlassian/crowd:5.2.2ebf761c7d437
python3.12@3.12.3-1ubuntu0.16
no fix listed
1
atlassian/jira-software:8.14.037bc46cbec1a
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.15
1
atlassian/jira-software:9.7.264a75aa4ec4e
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.12
1
atlassian/jira-software:11.3.11e5548cd4eea8
python3.12@3.12.3-1ubuntu0.16
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
python3.11@3.11.2-6
no fix listed
1
baserow/backend:1.31.1e0b3c8130b91
python3.11@3.11.2-6+deb12u5
no fix listed
1
baserow/baserow:1.30.1df0c42eb67e8
python3.11@3.11.2-6+deb12u4
no fix listed
1
bbernhard/signal-cli-rest-api:0.57549ad08d7e14
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.18+esm6
1
beanbag/reviewboard:latest6b840f546e1c
python3.10@3.10.12-1~22.04.17
python3.11@3.11.0~rc1-1~22.04.1
no fix listed
no fix listed
1
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
python3.11@3.11.2-6+deb12u6
no fix listed
1
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
python3.8@3.8.10-0ubuntu1~20.04.6
3.8.10-0ubuntu1~20.04.18+esm6
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
python@3.11.11-0
3.15.0
1
blakeblackshear/frigate:0.10.0-amd64ae269270ad9e
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.18+esm6
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
python3.11@3.11.2-6+deb12u5
no fix listed
1
bnjbvr/kresus:0.22.137e216b182c8
python3.11@3.11.2-6+deb12u4
no fix listed
1
boky/postfix:5.1.0aafc77238423
python3.13@3.13.5-2
no fix listed
1
boky/postfix:4.4.0f3f247fd4252
python3.11@3.11.2-6+deb12u5
no fix listed
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.18+esm6
1
byjg/easy-haproxy:6.1.1230fdb7b00ae
python3@3.14.5-r0
3.14.7-r0
1
camptocamp/mapserver:latestbf2e8e118c9b
python3.12@3.12.3-1ubuntu0.16
no fix listed
1
carlosmz87/test_helm_backend:latest8ffa63aa995d
python3.11@3.11.2-6+deb12u4
no fix listed
1
castopod/castopod:1.12.101fd37280cbb2
python3.11@3.11.2-6+deb12u3
no fix listed
1
cccs/assemblyline-rust:4.7.4.stable17468326853ec5
python3.11@3.11.2-6+deb12u8
no fix listed
1
checkmk/check-mk-community:2.5.0p6c11b422210c4
python3.10@3.10.12-1~22.04.15
no fix listed
1
chetangautamm/repo:Opensips_Buildb4b94155ff5a
python3.4@3.4.3-1ubuntu1~14.04.7
3.4.3-1ubuntu1~14.04.7+esm20
1
chetangautamm/repo:sipp.v3e7f7049e1544
python3.8@3.8.5-1~20.04
3.8.10-0ubuntu1~20.04.18+esm6
1
cheyang/distributed-tf:1.6.046cc34755493
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
3.5.2-2ubuntu0~16.04.13+esm22
1
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
python3.13@3.13.5-2
no fix listed
1
chocobozzz/peertube:v8.1.5052712130691
python3.13@3.13.5-2+deb13u2
no fix listed
1
chriseaton/adventureworks:latest54c3384ce701
python3.10@3.10.12-1~22.04.9
3.10.12-1~22.04.15
1
citizenstig/httpbin:latestb81c818ccb86
python3.5@3.5.2-2ubuntu0~16.04.1
3.5.2-2ubuntu0~16.04.13+esm22
1
cloudve/janis-terminal:latestaf56e77ca587
python3.6@3.6.9-1~18.04ubuntu1
3.6.9-1~18.04ubuntu1.13+esm9
1
cloudve/ttyd:latestd79c1c5881c0
python3.6@3.6.9-1~18.04ubuntu1
3.6.9-1~18.04ubuntu1.13+esm9
1
codedesignplus/ms-emails-grpc:lateste336012bc781
python3.11@3.11.2-6+deb12u8
no fix listed
1
codedesignplus/ms-emails-rest:latestac84661c605e
python3.11@3.11.2-6+deb12u8
no fix listed
1
countly/countly-server:25.05.4e3c238248f99
python2.7@2.7.18-1~20.04.4
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed
3.8.10-0ubuntu1~20.04.18+esm6
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.