StackRadar

CVE-2026-0528

Medium

Advisory

Published 13 Jan 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
33rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1
of 17,957 indexed, latest versions
Container images
1
deployed by those charts
Fix available
1 of 1
affected package

Metricbeat affected by multiple denial of service vulnerabilities

Carried by container images the latest versions of 1 of 17,957 indexed charts deploy, on 1 image.

Affected packageAffected versionsFixed inImages
github.com/elastic/beats/v7golangv0.0.0-20221109130735-f81376bad5117.0.0-alpha2.0.20251217054608-6e42552a23ce1
OSV records
GHSA-w2gr-585j-r428
Also known as
GO-2026-4360

Charts affected

1 by stars
ChartLatestAffected imagesRadar Score
filebeatlog10x-elastic-helm-chartsVerified publisher1.5.11 of 1See more

filebeat log10x-elastic-helm-charts 1.5.1

1 of the 1 container images this version deploys carry CVE-2026-0528.

Container imageDigestPackageFixed in
log10x/filebeat-10x:1.1.39-native7d6a79dacd58
github.com/elastic/beats/v7@v0.0.0-20221109130735-f81376bad511
7.0.0-alpha2.0.20251217054608-6e42552a23ce

Open the chart page →

7,051

Container images carrying it

1 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
log10x/filebeat-10x:1.1.39-native7d6a79dacd58
github.com/elastic/beats/v7@v0.0.0-20221109130735-f81376bad511
7.0.0-alpha2.0.20251217054608-6e42552a23ce
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.