StackRadar

CVE-2026-0672

Medium

Advisory

Published 20 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.0
base score, highest
EPSS
0.004
36th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
489
of 17,781 indexed, latest versions
Container images
465
deployed by those charts
Fix available
13 of 13
affected packages

Header injection in http.cookies.Morsel

Carried by container images the latest versions of 489 of 17,781 indexed charts deploy, on 465 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.2-6, 3.11.2-6+deb12u2, 3.11.2-6+deb12u3+3 more3.11.0~rc1-1~22.04.1~esm8, 3.11.2-6+deb12u7144
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more3.8.10-0ubuntu1~20.04.18+esm5100
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+13 more3.10.12-1~22.04.1463
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more3.6.9-1~18.04ubuntu1.13+esm844
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+9 more2.7.6-8ubuntu0.6+esm29, 2.7.12-1ubuntu0~16.04.18+esm19, 2.7.17-1~18.04ubuntu1.13+esm14, 2.7.18-13ubuntu1.5+esm843
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+5 more3.12.3-1ubuntu0.1134
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.93.5.2-2ubuntu0~16.04.13+esm2125
python3.13deb3.13.5-2, 3.13.5-2+e30, 3.13.7-1ubuntu0.13.13.5-2+deb13u1, 3.13.5-2+e36, 3.13.7-1ubuntu0.323
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.73.4.3-1ubuntu1~14.04.7+esm197
python-3.14apk3.14.2-r23.14.3-r14
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.203
python-3.12apk3.12.0-r1, 3.12.9-r13.12.12-r52
python-3.13apk3.13.7-r0, 3.13.10-r03.13.12-r12
OSV records
BIT-python-2026-0672CGA-2hf2-rc2c-xw6qCGA-6fw2-r724-96qvCGA-8hp9-5qj7-x26rDEBIAN-CVE-2026-0672UBUNTU-CVE-2026-0672ECHO-7075-ddfd-72a9
Also known as
BIT-libpython-2026-0672, BIT-python-min-2026-0672, CGA-38cc-g4pg-4r49, CGA-995q-cfgv-6rjf, CGA-qq84-mwmm-6679, PSF-2026-5, USN-8018-1, USN-8018-3, USN-8509-1

Charts affected

489 by stars
ChartLatestAffected imagesRadar Score
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
python3.10@3.10.12-1~22.04.9
3.10.12-1~22.04.14

Open the chart page →

6,075
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
python3.12@3.12.3-1ubuntu0.5
3.12.3-1ubuntu0.11

Open the chart page →

8,811
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
python3.10@3.10.6-1~22.04.2ubuntu1
3.10.12-1~22.04.14

Open the chart page →

9,783
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7

Open the chart page →

7,081
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
python3.8@3.8.10-0ubuntu1~20.04.6
3.8.10-0ubuntu1~20.04.18+esm5

Open the chart page →

16,417
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
python3.13@3.13.5-2
3.13.5-2+deb13u1

Open the chart page →

32,509
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
python3.6@3.6.9-1~18.04ubuntu1.9
3.6.9-1~18.04ubuntu1.13+esm8

Open the chart page →

12,527
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
python3.8@3.8.10-0ubuntu1~20.04.6
3.8.10-0ubuntu1~20.04.18+esm5

Open the chart page →

10,248
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
python3.6@3.6.6-1~18.04
3.6.9-1~18.04ubuntu1.13+esm8

Open the chart page →

14,813
kubeflowkromanow94-kubeflow0.5.12 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

2 of the 30 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
python3.11@3.11.2-6
3.11.2-6+deb12u7
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
python3.11@3.11.2-6+deb12u3
3.11.2-6+deb12u7

Open the chart page →

70,530
adventureworkskronkltdVerified publisher0.1.01 of 1See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
chriseaton/adventureworks:latest54c3384ce701
python3.10@3.10.12-1~22.04.9
3.10.12-1~22.04.14

Open the chart page →

4,414
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
python3.13@3.13.5-2
3.13.5-2+deb13u1

Open the chart page →

9,620
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
python3.12@3.12.3-1ubuntu0.7
3.12.3-1ubuntu0.11

Open the chart page →

4,940
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7

Open the chart page →

6,356
iomeshkubesphere-stable1.1.01 of 25See more

iomesh kubesphere-stable 1.1.0

1 of the 25 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.7.25d3f9bf9240b
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.14

Open the chart page →

48,665
IOMeshkubesphere-stable1.2.01 of 25See more

IOMesh kubesphere-stable 1.2.0

1 of the 25 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.8.01a151f602451
python3.10@3.10.12-1~22.04.4
3.10.12-1~22.04.14

Open the chart page →

46,341
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
python3.8@3.8.5-1~20.04.3
3.8.10-0ubuntu1~20.04.18+esm5

Open the chart page →

14,320
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.14
penpotapp/exporter:2.2.15c835ffd87ab
python3.10@3.10.12-1~22.04.6
3.10.12-1~22.04.14

Open the chart page →

16,877
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
python3.13@3.13.5-2
3.13.5-2+deb13u1

Open the chart page →

20,204
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
python3.10@3.10.12-1~22.04.8
3.10.12-1~22.04.14

Open the chart page →

6,824
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm8

Open the chart page →

16,520
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
python3.6@3.6.9-1~18.04ubuntu1
3.6.9-1~18.04ubuntu1.13+esm8

Open the chart page →

26,356
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7

Open the chart page →

33,242
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7

Open the chart page →

37,942
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7

Open the chart page →

33,242
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
python3.11@3.11.2-6+deb12u2
3.11.2-6+deb12u7

Open the chart page →

6,506
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
python3.11@3.11.2-6+deb12u3
3.11.2-6+deb12u7

Open the chart page →

23,613
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7

Open the chart page →

5,025
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.18+esm5

Open the chart page →

17,779
elastictranscoderluiscajl0.46.02 of 4See more

elastictranscoder luiscajl 0.46.0

2 of the 4 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
elastictranscoder/transcoder:627e21dcb4a0327029e6
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm8
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm8

Open the chart page →

58,160
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.14

Open the chart page →

24,400
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
library/rabbitmq:3.9-management8a279e9396a8
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.14

Open the chart page →

29,588
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7

Open the chart page →

9,668
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
python3.13@3.13.5-2
3.13.5-2+deb13u1

Open the chart page →

7,944
localpathprovisionermesosphere-stable0.1.21 of 1See more

localpathprovisioner mesosphere-stable 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm19
3.5.2-2ubuntu0~16.04.13+esm21

Open the chart page →

17,942
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
python3.6@3.6.9-1~18.04ubuntu1.8
3.6.9-1~18.04ubuntu1.13+esm8

Open the chart page →

12,847
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7

Open the chart page →

13,010
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
python3.11@3.11.2-6+deb12u5
3.11.2-6+deb12u7

Open the chart page →

43,341
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
python3.11@3.11.2-6
3.11.2-6+deb12u7

Open the chart page →

25,704
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
python3.11@3.11.2-6
3.11.2-6+deb12u7

Open the chart page →

30,363
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
python3.8@3.8.10-0ubuntu1~20.04.1
3.8.10-0ubuntu1~20.04.18+esm5

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.18+esm5

Open the chart page →

15,675
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
python3.11@3.11.2-6
3.11.2-6+deb12u7

Open the chart page →

13,686
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
library/rabbitmq:3.9-management8a279e9396a8
python3.10@3.10.12-1~22.04.3
3.10.12-1~22.04.14

Open the chart page →

27,721
myweatherhelmmyweather1.3.112 of 7See more

myweatherhelm myweather 1.3.11

2 of the 7 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
python3.12@3.12.3-1ubuntu0.9
3.12.3-1ubuntu0.11
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
python2.7@2.7.17-1~18.04ubuntu1.11
python3.6@3.6.9-1~18.04ubuntu1.12
2.7.17-1~18.04ubuntu1.13+esm14
3.6.9-1~18.04ubuntu1.13+esm8

Open the chart page →

17,929
smilencsaVerified publisher1.1.07 of 23See more

smile ncsa 1.1.0

7 of the 23 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
python3.8@3.8.10-0ubuntu1~20.04.8
3.8.10-0ubuntu1~20.04.18+esm5
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
python3.6@3.6.9-1~18.04ubuntu1.12
3.6.9-1~18.04ubuntu1.13+esm8
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
python3.11@3.11.2-6
3.11.2-6+deb12u7
socialmediamacroscope/image_crawler:0.1.2f508216be63c
python3.6@3.6.9-1~18.04ubuntu1.12
3.6.9-1~18.04ubuntu1.13+esm8
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
python3.11@3.11.2-6
3.11.2-6+deb12u7
socialmediamacroscope/preprocessing:0.1.3ca863306314b
python3.11@3.11.2-6
3.11.2-6+deb12u7
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
python3.11@3.11.2-6
3.11.2-6+deb12u7

Open the chart page →

109,294
neurofaceneurofaceVerified publisher1.4.21 of 3See more

neuroface neuroface 1.4.2

1 of the 3 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
openvino/model_server:2025.2.11e7cd1d70cc1
python3.12@3.12.3-1ubuntu0.7
3.12.3-1ubuntu0.11

Open the chart page →

7,310
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7

Open the chart page →

10,218
firehose-corenodeifyVerified publisher1.2.61 of 2See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
python3.12@3.12.3-1ubuntu0.9
3.12.3-1ubuntu0.11

Open the chart page →

6,455
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-0672.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
python3.12@3.12.3-1ubuntu0.10
3.12.3-1ubuntu0.11

Open the chart page →

5,565

Container images carrying it

465 by charts deploying them

A fixed version is listed for 13 of the 13 affected packages.

Container imageDigestPackageFixed inUsed by
cloudve/janis-terminal:latestaf56e77ca587
python3.6@3.6.9-1~18.04ubuntu1
3.6.9-1~18.04ubuntu1.13+esm8
1
cloudve/ttyd:latestd79c1c5881c0
python3.6@3.6.9-1~18.04ubuntu1
3.6.9-1~18.04ubuntu1.13+esm8
1
countly/countly-server:25.05.4e3c238248f99
python3.8@3.8.10-0ubuntu1~20.04.2
3.8.10-0ubuntu1~20.04.18+esm5
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7
1
dariomader/twampy:v0.0.2d2f4a8c5e690
python-3.12@3.12.0-r1
3.12.12-r5
1
daskdev/dask-notebook:1.1.0052630f5ca04
python3.6@3.6.7-1~18.04
3.6.9-1~18.04ubuntu1.13+esm8
1
datamate/seafile-professional:11.0.202dd66b722464
python3.10@3.10.12-1~22.04.11
3.10.12-1~22.04.14
1
deconzcommunity/deconz:2.29.2062de2362641
python3.11@3.11.2-6+deb12u5
3.11.2-6+deb12u7
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
python3.13@3.13.5-2
3.13.5-2+deb13u1
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
python3.8@3.8.10-0ubuntu1~20.04.18
3.8.10-0ubuntu1~20.04.18+esm5
1
dragonflyoss/client:v0.1.82edf3e921f4e0
python3.11@3.11.2-6
3.11.2-6+deb12u7
1
drumsergio/genieacs:1.2.16.028244054e1bf
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7
1
dserio83/velero-api:0.3.16b3d9115fee2
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
python3.13@3.13.5-2
3.13.5-2+deb13u1
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm8
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
python3.6@3.6.9-1~18.04ubuntu1.4
3.6.9-1~18.04ubuntu1.13+esm8
1
esphome/esphome:2024.3.09ab8cc88b28c
python3.11@3.11.2-6
3.11.2-6+deb12u7
1
esphome/esphome:2024.12.2b2c6322700ac
python3.11@3.11.2-6+deb12u4
3.11.2-6+deb12u7
1
esphome/esphome:2025.3.0def8b6e4f517
python3.11@3.11.2-6+deb12u5
3.11.2-6+deb12u7
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
python2.7@2.7.12-1ubuntu0~16.04.2
2.7.12-1ubuntu0~16.04.18+esm19
1
felipecs8/app-db-connection-test:v129e06c9c6385
python3.11@3.11.2-6+deb12u4
3.11.2-6+deb12u7
1
firefart/requesttracker:5.0.40d6249906d8c
python3.11@3.11.2-6
3.11.2-6+deb12u7
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
python3.8@3.8.10-0ubuntu1~20.04.18
3.8.10-0ubuntu1~20.04.18+esm5
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7
1
flanksource/batch-runner:v1.0.44689687a7cf95
python3.12@3.12.3-1ubuntu0.8
3.12.3-1ubuntu0.11
1
fluent/fluent-bit:4.0-debuge76397ef3983
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7
1
flyway/flyway:9.1545b5d7cdc75a
python3.8@3.8.10-0ubuntu1~20.04.6
3.8.10-0ubuntu1~20.04.18+esm5
1
frankescobar/allure-docker-service:2.21.08a4d7e9308de
python3.6@3.6.9-1~18.04ubuntu1.9
3.6.9-1~18.04ubuntu1.13+esm8
1
frankescobar/allure-docker-service:2.19.0cafa03b94dac
python3.6@3.6.9-1~18.04ubuntu1.8
3.6.9-1~18.04ubuntu1.13+esm8
1
freeradius/freeradius-server:3.2.8af6fd34a5b78
python2.7@2.7.18-13ubuntu1.5
python3.10@3.10.12-1~22.04.10
2.7.18-13ubuntu1.5+esm8
3.10.12-1~22.04.14
1
galaxy/cloudman-server:lateste5c265fe9fcd
python3.8@3.8.10-0ubuntu1~20.04.5
3.8.10-0ubuntu1~20.04.18+esm5
1
galaxy/galaxy-init:v18.010267bad550e6
python2.7@2.7.6-8ubuntu0.4
python3.4@3.4.3-1ubuntu1~14.04.6
2.7.6-8ubuntu0.6+esm29
3.4.3-1ubuntu1~14.04.7+esm19
1
galaxy/galaxy-stable:v18.018e577a626dfd
python2.7@2.7.6-8ubuntu0.4
python3.4@3.4.3-1ubuntu1~14.04.6
2.7.6-8ubuntu0.6+esm29
3.4.3-1ubuntu1~14.04.7+esm19
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
python3.11@3.11.2-6+deb12u5
3.11.2-6+deb12u7
1
geopython/pycsw:3.0.0-beta284662ea6b78b
python3.11@3.11.2-6+deb12u6
3.11.2-6+deb12u7
1
geoscienceaustralia/dea-k8s-data:latestf4039b45572a
python3.6@3.6.9-1~18.04ubuntu1.1
3.6.9-1~18.04ubuntu1.13+esm8
1
gethue/hue:4.11.011b649636e68
python3.8@3.8.10-0ubuntu1~20.04.6
3.8.10-0ubuntu1~20.04.18+esm5
1
gethue/hue:4.10.05702b2c37ff9
python2.7@2.7.17-1~18.04ubuntu1.6
python3.6@3.6.9-1~18.04ubuntu1.4
2.7.17-1~18.04ubuntu1.13+esm14
3.6.9-1~18.04ubuntu1.13+esm8
1
gethue/hue:latest7d5c1b9f8a79
python3.10@3.10.12-1~22.04.10
python3.11@3.11.0~rc1-1~22.04
3.10.12-1~22.04.14
3.11.0~rc1-1~22.04.1~esm8
1
gotenberg/gotenberg:8.30206a6c708fc6
python3.13@3.13.5-2
3.13.5-2+deb13u1
1
gpappsoft/privacyidea-docker:3.12.2af7841adad26
python-3.13@3.13.10-r0
3.13.12-r1
1
hasura/graphql-engine:v2.34.0-ce0111b0204136
python3.10@3.10.6-1~22.04.2ubuntu1.1
3.10.12-1~22.04.14
1
hasura/graphql-engine:v2.48.10f6c1c4b957d2
python3.10@3.10.12-1~22.04.11
3.10.12-1~22.04.14
1
haugene/transmission-openvpn:4.0059216cfae4b
python3.8@3.8.10-0ubuntu1~20.04
3.8.10-0ubuntu1~20.04.18+esm5
1
haveagitgat/tdarr:2.00.181256348872ce
python3.8@3.8.10-0ubuntu1~20.04.4
3.8.10-0ubuntu1~20.04.18+esm5
1
haveagitgat/tdarr_node:2.00.101e3f9328327d
python3.8@3.8.5-1~20.04
3.8.10-0ubuntu1~20.04.18+esm5
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
python3.8@3.8.10-0ubuntu1~20.04.8
3.8.10-0ubuntu1~20.04.18+esm5
1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
python3.8@3.8.10-0ubuntu1~20.04.13
3.8.10-0ubuntu1~20.04.18+esm5
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
python3.11@3.11.2-6
3.11.2-6+deb12u7
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
2.7.12-1ubuntu0~16.04.18+esm19
3.5.2-2ubuntu0~16.04.13+esm21
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.