StackRadar

CVE-2026-0636

Medium

Advisory

Published 15 Apr 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.005
43rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
124
of 17,781 indexed, latest versions
Container images
131
deployed by those charts
Fix available
2 of 3
affected packages

Bouncy Castle has an LDAP injection

Carried by container images the latest versions of 124 of 17,781 indexed charts deploy, on 131 images.

Affected packageAffected versionsFixed inImages
bcprov-jdk18onmaven1.74, 1.75, 1.76, 1.77+9 more1.84124
bcprov-jdk15to18maven1.74, 1.75, 1.76, 1.78+4 more1.8415
bouncycastledeb1.61-1no fix listed1
OSV records
GHSA-c3fc-8qff-9hwxUBUNTU-CVE-2026-0636

Charts affected

124 by stars
ChartLatestAffected imagesRadar Score
graylogkong-zVerified publisher3.0.321 of 5See more

graylog kong-z 3.0.32

1 of the 5 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.19.68690b204fe91
bcprov-jdk15to18@1.79
1.84

Open the chart page →

2,699
nacosygqygq2Verified publisher2.1.101 of 4See more

nacos ygqygq2 2.1.10

1 of the 4 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
nacos/nacos-server:v3.0.20e951a1d07bb
bcprov-jdk18on@1.79
1.84

Open the chart page →

4,983
guacamoleberyju-org1.4.21 of 3See more

guacamole beryju-org 1.4.2

1 of the 3 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
bcprov-jdk15to18@1.80
1.84

Open the chart page →

3,606
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
wazuh/wazuh-indexer:4.14.3b149b30da686
bcprov-jdk15to18@1.79
bcprov-jdk18on@1.82
1.84
1.84

Open the chart page →

11,384
glasskube-operatorglasskubeOfficialVerified publisher0.12.21 of 3See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
glasskube/operator:0.12.2be5133100d63
bcprov-jdk15to18@1.76
bcprov-jdk18on@1.74
1.84
1.84

Open the chart page →

11,933
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
bcprov-jdk18on@1.78.1
1.84

Open the chart page →

10,670
druiddruid-helmVerified publisher37.0.21 of 3See more

druid druid-helm 37.0.2

1 of the 3 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
apache/druid:37.0.00116fb802786
bcprov-jdk18on@1.82
1.84

Open the chart page →

3,812
guacamoledmunozv04Verified publisher0.3.41 of 2See more

guacamole dmunozv04 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
bcprov-jdk15to18@1.80
1.84

Open the chart page →

3,606
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
bcprov-jdk18on@1.78.1
1.84

Open the chart page →

7,268
elasticsearch-clusterwiremindVerified publisher4.5.21 of 2See more

elasticsearch-cluster wiremind 4.5.2

1 of the 2 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.1289729a95066a
bcprov-jdk18on@1.79
1.84

Open the chart page →

2,283
janssenjanssen-auth-serverOfficialVerified publisher0.0.0-nightly4 of 8See more

janssen janssen-auth-server 0.0.0-nightly

4 of the 8 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly7752874e71d8
bcprov-jdk18on@1.79
1.84
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly900e2b88bd08
bcprov-jdk18on@1.79
1.84
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly2a797804f08c
bcprov-jdk18on@1.79
1.84
ghcr.io/janssenproject/jans/scim:0.0.0-nightly096b8bcbbe45
bcprov-jdk18on@1.79
1.84

Open the chart page →

1,068
thehivestrangebee-helmOfficialVerified publisher1.0.61 of 7See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
bcprov-jdk18on@1.78.1
1.84

Open the chart page →

16,210
wazuhwazuh-helmVerified publisher0.0.81 of 4See more

wazuh wazuh-helm 0.0.8

1 of the 4 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
wazuh/wazuh-indexer:4.11.1a7a2076b167e
bcprov-jdk15to18@1.78
1.84

Open the chart page →

6,168
druidwiremindVerified publisher1.22.11 of 3See more

druid wiremind 1.22.1

1 of the 3 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
apache/druid:29.0.10cef139b6bf1
bcprov-jdk18on@1.76
1.84

Open the chart page →

7,930
axelixaxelixVerified publisher1.1.01 of 1See more

axelix axelix 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
ghcr.io/axelixlabs/axelix:1.1.0449dc880bbfb
bcprov-jdk18on@1.81.1
1.84

Open the chart page →

21
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
bcprov-jdk18on@1.76
1.84

Open the chart page →

27,267
geonode-k8sgeonode-k8sVerified publisher2.0.01 of 10See more

geonode-k8s geonode-k8s 2.0.0

1 of the 10 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
geonode/geoserver:2.28.4-latest81b1d431b7e9
bcprov-jdk18on@1.79
1.84

Open the chart page →

13,953
kubernetes-loggingkubernetes-logging4.8.01 of 6See more

kubernetes-logging kubernetes-logging 4.8.0

1 of the 6 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.10.0c8f3ebd2a934
bcprov-jdk15to18@1.75
1.84

Open the chart page →

10,530
musicocielmusicocielVerified publisher0.0.01 of 3See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
bcprov-jdk18on@1.74
1.84

Open the chart page →

4,406
geoservercloudcamptocamp23.0.17 of 7See more

geoservercloud camptocamp2 3.0.1

7 of the 7 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
bcprov-jdk18on@1.81.1
1.84
geoservercloud/geoserver-cloud-gwc:3.0.1.1b04ed89b5d2b
bcprov-jdk18on@1.81.1
1.84
geoservercloud/geoserver-cloud-rest:3.0.1.1318254b52f96
bcprov-jdk18on@1.81.1
1.84
geoservercloud/geoserver-cloud-wcs:3.0.1.14f077124f591
bcprov-jdk18on@1.81.1
1.84
geoservercloud/geoserver-cloud-webui:3.0.1.14f91e3048ac8
bcprov-jdk18on@1.81.1
1.84
geoservercloud/geoserver-cloud-wfs:3.0.1.1299f0d6232d1
bcprov-jdk18on@1.81.1
1.84
geoservercloud/geoserver-cloud-wms:3.0.1.15164f687ce4d
bcprov-jdk18on@1.81.1
1.84

Open the chart page →

10,546
opensearchcaptnbpVerified publisher3.1.11 of 2See more

opensearch captnbp 3.1.1

1 of the 2 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
opensearchproject/opensearch:2.19.269588c664014
bcprov-jdk15to18@1.78.1
bcprov-jdk18on@1.80
1.84
1.84

Open the chart page →

998
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
bcprov-jdk18on@1.78.1
1.84

Open the chart page →

5,235
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
bcprov-jdk18on@1.82
1.84

Open the chart page →

28,839
flowableflowable-oss7.1.01 of 2See more

flowable flowable-oss 7.1.0

1 of the 2 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
flowable/flowable-rest:7.1.0b7ae287502cd
bcprov-jdk18on@1.77
1.84

Open the chart page →

2,784
nacosgujunxiang0.1.51 of 1See more

nacos gujunxiang 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
bcprov-jdk18on@1.79
1.84

Open the chart page →

1,767
hazelcasthazelcastVerified publisher5.10.21 of 2See more

hazelcast hazelcast 5.10.2

1 of the 2 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
hazelcast/management-center:5.5.2991ddb27c251
bcprov-jdk18on@1.78.1
1.84

Open the chart page →

2,634
oesopsmxVerified publisher4.0.323 of 25See more

oes opsmx 4.0.32

3 of the 25 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
bcprov-jdk18on@1.74
1.84
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
bcprov-jdk18on@1.74
1.84
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
bcprov-jdk18on@1.74
1.84

Open the chart page →

107,811
repoflowrepoflow-helm-public0.9.11 of 8See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
library/elasticsearch:8.15.0310b9fc03b06
bcprov-jdk18on@1.78.1
1.84

Open the chart page →

13,521
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
bouncycastle@1.61-1
no fix listed

Open the chart page →

24,488
structurizrvirtualrootVerified publisher0.5.01 of 1See more

structurizr virtualroot 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
structurizr/onpremises:2025.11.094b5ffb5119c8
bcprov-jdk18on@1.78.1
1.84

Open the chart page →

4,378
nacosbytectl0.1.61 of 1See more

nacos bytectl 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
nacos/nacos-server:latest1c191c30c8cd
bcprov-jdk18on@1.79
1.84

Open the chart page →

1,767
cbioportalcbioportalOfficialVerified publisher1.1.01 of 1See more

cbioportal cbioportal 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
bcprov-jdk18on@1.78
1.84

Open the chart page →

3,674
cert-vaultcert-vaultOfficialVerified publisher2.12.01 of 7See more

cert-vault cert-vault 2.12.0

1 of the 7 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
ghcr.io/gregperlinli/certvault:2.12.0a7d0cc9e260a
bcprov-jdk18on@1.80
1.84

Open the chart page →

15,863
nifid4nVerified publisher2.0.01 of 5See more

nifi d4n 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
apache/nifi-registry:1.26.07cdfd8deec92
bcprov-jdk18on@1.78.1
1.84

Open the chart page →

5,398
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
bcprov-jdk15to18@1.78.1
bcprov-jdk18on@1.78
1.84
1.84

Open the chart page →

52,635
enavenav-service-architectureVerified publisher0.0.76 of 10See more

enav enav-service-architecture 0.0.7

6 of the 10 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
ghcr.io/gla-rad/enav-api-gateway:latest8f4345c77dda
bcprov-jdk18on@1.81
1.84
ghcr.io/gla-rad/enav-aton-admin-service:latestcf85570b1324
bcprov-jdk18on@1.81
1.84
ghcr.io/gla-rad/enav-aton-service:latest3be878690629
bcprov-jdk18on@1.81
1.84
ghcr.io/gla-rad/enav-eureka:latest05002092c621
bcprov-jdk18on@1.81
1.84
ghcr.io/gla-rad/enav-msg-broker:latest6fe372e4e481
bcprov-jdk18on@1.81
1.84
ghcr.io/gla-rad/enav-vdes-controller:latestc4c52955814f
bcprov-jdk18on@1.81
1.84

Open the chart page →

15,860
atlas-cmmsf3k-techVerified publisher0.151.51 of 4See more

atlas-cmms f3k-tech 0.151.5

1 of the 4 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
intelloop/atlas-cmms-backend:v1.5.14c61bc3dd3f8
bcprov-jdk18on@1.77
1.84

Open the chart page →

5,291
gluugluu-flexOfficialVerified publisher0.0.0-nightly4 of 9See more

gluu gluu-flex 0.0.0-nightly

4 of the 9 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly7752874e71d8
bcprov-jdk18on@1.79
1.84
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly900e2b88bd08
bcprov-jdk18on@1.79
1.84
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly2a797804f08c
bcprov-jdk18on@1.79
1.84
ghcr.io/janssenproject/jans/scim:0.0.0-nightly096b8bcbbe45
bcprov-jdk18on@1.79
1.84

Open the chart page →

1,507
guacamolehelmforgeVerified publisher1.5.21 of 5See more

guacamole helmforge 1.5.2

1 of the 5 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
bcprov-jdk15to18@1.80
1.84

Open the chart page →

8,716
jenkinsjkimVerified publisher5.5.141 of 2See more

jenkins jkim 5.5.14

1 of the 2 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
jenkins/jenkins:2.462.2-jdk1795313257a8cd
bcprov-jdk18on@1.78.1
1.84

Open the chart page →

7,387
mcpmcp-chartsVerified publisher0.0.231 of 7See more

mcp mcp-charts 0.0.23

1 of the 7 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
glarad/mc-service-registry:latest7b02b9e7f1ef
bcprov-jdk18on@1.82
1.84

Open the chart page →

6,929
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:8.12.215d4647fd491
bcprov-jdk18on@1.76
1.84

Open the chart page →

37,373
data-prepperopensearch-project-helm-chartsVerified publisher0.3.11 of 1See more

data-prepper opensearch-project-helm-charts 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
opensearchproject/data-prepper:2.8.057c25fa01d3c
bcprov-jdk18on@1.76
1.84

Open the chart page →

1,692
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
treskon/portrait:DEV-latest88e813f22347
bcprov-jdk18on@1.76
1.84

Open the chart page →

31,844
querysiakhooiVerified publisher1.0.01 of 1See more

query siakhooi 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
siakhooi/query:1.0.0f1f4b5b1b870
bcprov-jdk18on@1.80
1.84

Open the chart page →

1,792
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
bcprov-jdk18on@1.80
1.84

Open the chart page →

2,406
airbyteairbyte-v2Verified publisher2.2.01 of 10See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
airbyte/workload-launcher:2.2.0119be7bfb719
bcprov-jdk18on@1.79
1.84

Open the chart page →

12,473
airbyte-data-planeairbyte-v2Verified publisher2.2.01 of 1See more

airbyte-data-plane airbyte-v2 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
airbyte/workload-launcher:2.2.0119be7bfb719
bcprov-jdk18on@1.79
1.84

Open the chart page →

790
airsonic-advancedairsonic-advancedVerified publisher0.3.11 of 1See more

airsonic-advanced airsonic-advanced 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
linuxserver/airsonic-advanced:11.1.4d286a7f55a59
bcprov-jdk18on@1.78.1
1.84

Open the chart page →

1,748
amorphieamorphie0.1.21 of 18See more

amorphie amorphie 0.1.2

1 of the 18 container images this version deploys carry CVE-2026-0636.

Container imageDigestPackageFixed in
camunda/zeebe:8.4.5ab5abc09e407
bcprov-jdk18on@1.77
1.84

Open the chart page →

28,131

Container images carrying it

131 by charts deploying them

A fixed version is listed for 2 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
guacamole/guacamole:1.6.0f344085e618b
bcprov-jdk15to18@1.80
1.84
3
jacobalberty/unifi:v10.0.162896c0ab82d33
bcprov-jdk18on@1.78.1
1.84
3
airbyte/workload-launcher:2.2.0119be7bfb719
bcprov-jdk18on@1.79
1.84
2
apache/druid:37.0.00116fb802786
bcprov-jdk18on@1.82
1.84
2
apache/nifi-registry:1.26.07cdfd8deec92
bcprov-jdk18on@1.78.1
1.84
2
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
bcprov-jdk18on@1.78.1
1.84
2
hazelcast/management-center:5.5.2991ddb27c251
bcprov-jdk18on@1.78.1
1.84
2
inaccel/coral:2.18c53744ed70b
bcprov-jdk18on@1.77
1.84
2
jenkins/jenkins:2.541.3-jdk21c4098086090c
bcprov-jdk18on@1.82
1.84
2
library/elasticsearch:8.19.1289729a95066a
bcprov-jdk18on@1.79
1.84
2
nacos/nacos-server:latest1c191c30c8cd
bcprov-jdk18on@1.79
1.84
2
opensearchproject/opensearch:2.18.07f6fa1efee8f
bcprov-jdk15to18@1.78.1
bcprov-jdk18on@1.78.1
1.84
1.84
2
ghcr.io/appscode/inbox-server:latest:postgres-latest536358d7b17e
bcprov-jdk18on@1.82
1.84
2
ghcr.io/janssenproject/jans/auth-server:0.0.0-nightly7752874e71d8
bcprov-jdk18on@1.79
1.84
2
ghcr.io/janssenproject/jans/config-api:0.0.0-nightly900e2b88bd08
bcprov-jdk18on@1.79
1.84
2
ghcr.io/janssenproject/jans/fido2:0.0.0-nightly2a797804f08c
bcprov-jdk18on@1.79
1.84
2
ghcr.io/janssenproject/jans/scim:0.0.0-nightly096b8bcbbe45
bcprov-jdk18on@1.79
1.84
2
quay.io/keycloak/keycloak:26.1.4044a457e0498
bcprov-jdk18on@1.78.1
1.84
2
1dev/server:11.9.0cd5b12fe5471
bcprov-jdk18on@1.74
1.84
1
2martens/configserver:latestbf1cdb80239d
bcprov-jdk18on@1.78
1.84
1
2martens/timetable:latestbd1ba6ab84c9
bcprov-jdk18on@1.80
1.84
1
2martens/wahlrecht:latestba2c3040dab0
bcprov-jdk18on@1.80
1.84
1
48n6e/camellia-redis-proxy:1.4.0-jdk-21-0.0.1a6ed886fddfc
bcprov-jdk18on@1.83
1.84
1
adityaprasadpathak/myapp:3.07e3b9777362c
bcprov-jdk18on@1.78.1
1.84
1
apache/activemq-artemis:2.37.0bae523439ee3
bcprov-jdk18on@1.78.1
1.84
1
apache/druid:29.0.10cef139b6bf1
bcprov-jdk18on@1.76
1.84
1
apache/nifi-registry:1.27.063b8e3e40742
bcprov-jdk18on@1.78.1
1.84
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
bcprov-jdk18on@1.75
1.84
1
apachepulsar/pulsar:3.0.79c9947de139d
bcprov-jdk18on@1.78.1
1.84
1
bitnamilegacy/elasticsearch:8.12.215d4647fd491
bcprov-jdk18on@1.76
1.84
1
bitnamilegacy/elasticsearch:8.12.1-debian-11-r29cfd2df1294d
bcprov-jdk18on@1.76
1.84
1
bitnamilegacy/elasticsearch:9.0.1-debian-12-r0e6f6ddcce2f1
bcprov-jdk18on@1.78.1
1.84
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
bcprov-jdk18on@1.77
1.84
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
bcprov-jdk18on@1.81
1.84
1
bitnamilegacy/opensearch:2.18.0-debian-12-r0d8440eb6b290
bcprov-jdk15to18@1.78.1
bcprov-jdk18on@1.78
1.84
1.84
1
bluerange/bluerange:26.1.307c8f73b55df
bcprov-jdk18on@1.79
1.84
1
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
bouncycastle@1.61-1
no fix listed
1
camunda/zeebe:8.4.5ab5abc09e407
bcprov-jdk18on@1.77
1.84
1
cbioportal/cbioportal:6.4.1-web-shenandoah08debbd2dbf9
bcprov-jdk18on@1.78
1.84
1
conductoross/conductor:3.31.09fba127693e6
bcprov-jdk18on@1.78.1
1.84
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
bcprov-jdk18on@1.77
1.84
1
consensys/teku:25.4.1bf6ecd2ea716
bcprov-jdk18on@1.80
1.84
1
eclipseaerios/entrypoint-balancer:1.3.043cd999a008d
bcprov-jdk18on@1.77
1.84
1
flowable/flowable-rest:7.1.0b7ae287502cd
bcprov-jdk18on@1.77
1.84
1
folioci/mod-data-export:latest0cc86bf09755
bcprov-jdk18on@1.81
1.84
1
folioci/mod-data-export-worker:latest1ad1811c9b37
bcprov-jdk18on@1.81
1.84
1
folioci/mod-entities-links:latest3e2412815c0f
bcprov-jdk18on@1.81
1.84
1
folioci/mod-search:latest44d7ee9acdf6
bcprov-jdk18on@1.81
1.84
1
geonode/geoserver:2.28.4-latest81b1d431b7e9
bcprov-jdk18on@1.79
1.84
1
geoservercloud/geoserver-cloud-gateway:3.0.1.1de0b20bd2a43
bcprov-jdk18on@1.81.1
1.84
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.