StackRadar

CVE-2026-1002

Medium

Advisory

Published 15 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
102
of 17,781 indexed, latest versions
Container images
90
deployed by those charts
Fix available
1 of 1
affected package

Vert.x Web static handler component cache can be manipulated to deny the access to static files

Carried by container images the latest versions of 102 of 17,781 indexed charts deploy, on 90 images.

Affected packageAffected versionsFixed inImages
vertx-coremaven3.4.1, 3.5.0, 3.5.3, 3.5.4+36 more4.5.24, 5.0.790
OSV records
GHSA-cphf-4846-3xx9

Charts affected

102 by stars
ChartLatestAffected imagesRadar Score
keycloakcodecentricVerified publisher18.10.01 of 3See more

keycloak codecentric 18.10.0

1 of the 3 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
vertx-core@4.2.1
4.5.24

Open the chart page →

7,713
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
vertx-core@3.9.8
4.5.24

Open the chart page →

32,259
milvusmilvus-helm5.0.271 of 4See more

milvus milvus-helm 5.0.27

1 of the 4 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.0.79c9947de139d
vertx-core@4.5.10
4.5.24

Open the chart page →

10,670
apicurio-registryapicurio-registry-helmVerified publisher3.8.02 of 2See more

apicurio-registry apicurio-registry-helm 3.8.0

2 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
vertx-core@4.1.5
4.5.24
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
vertx-core@4.4.6
4.5.24

Open the chart page →

6,675
keycloak-operatorkeycloak-operatorVerified publisher0.0.41 of 1See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
vertx-core@4.3.4
4.5.24

Open the chart page →

4,652
musicocielmusicocielVerified publisher0.0.01 of 3See more

musicociel musicociel 0.0.0

1 of the 3 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
vertx-core@4.4.6
4.5.24

Open the chart page →

4,406
cosmocosmo-platformOfficialVerified publisher0.20.01 of 10See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
vertx-core@4.5.23
4.5.24

Open the chart page →

28,839
aegraviteeioVerified publisher3.0.21 of 1See more

ae graviteeio 3.0.2

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
graviteeio/ae-engine:3.0.24140932887e0
vertx-core@4.5.21
4.5.24

Open the chart page →

1,380
feedbacksystemthm-mni-iiVerified publisher0.47.11 of 10See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
thmmniii/fbs-runner:v1.27.186105349c1a3
vertx-core@3.9.1
4.5.24

Open the chart page →

28,534
cp-schema-registrycp-schema-registryVerified publisher1.0.01 of 1See more

cp-schema-registry cp-schema-registry 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
vertx-core@4.5.22
4.5.24

Open the chart page →

1,864
clowder2ncsaVerified publisher1.9.71 of 12See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
vertx-core@4.3.4
4.5.24

Open the chart page →

37,373
openccuopenccuVerified publisher3.89.81 of 1See more

openccu openccu 3.89.8

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
vertx-core@4.1.3
4.5.24

Open the chart page →

1,916
signserver-cesignserverOfficialVerified publisher2.3.51 of 1See more

signserver-ce signserver 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
keyfactor/signserver-ce:7.3.2798fbbe00283
vertx-core@4.5.10
4.5.24

Open the chart page →

2,406
keycloakaccount-serviceVerified publisher18.4.51 of 2See more

keycloak account-service 18.4.5

1 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
vertx-core@4.2.1
4.5.24

Open the chart page →

7,713
akto-central-setupakto1.1.101 of 5See more

akto-central-setup akto 1.1.10

1 of the 5 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
vertx-core@4.5.11
4.5.24

Open the chart page →

4,905
akto-threat-backendakto0.1.51 of 2See more

akto-threat-backend akto 0.1.5

1 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
aktosecurity/akto-threat-detection-backend:latest15ebb75b94dc
vertx-core@4.5.11
4.5.24

Open the chart page →

1,490
arlas-aiasarlas-stackVerified publisher28.8.01 of 22See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
vertx-core@4.5.18
4.5.24

Open the chart page →

40,238
idmassist-iot-identity-manager0.1.01 of 2See more

idm assist-iot-identity-manager 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
assistiot/identity-manager_kc:latest0df4b4fa899a
vertx-core@4.2.1
4.5.24

Open the chart page →

13,352
keycloakbarravarVerified publisher1.0.41 of 1See more

keycloak barravar 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:24.0.34d6f22991266
vertx-core@4.5.4
4.5.24

Open the chart page →

2,381
pulsarcnieg1.0.81 of 2See more

pulsar cnieg 1.0.8

1 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.6.14db6ff0b4045
vertx-core@3.4.1
4.5.24

Open the chart page →

16,860
sumo-besu-genesisconsensys0.1.751 of 1See more

sumo-besu-genesis consensys 0.1.75

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
vertx-core@4.2.7
4.5.24

Open the chart page →

7,963
sumo-besu-nodeconsensys0.1.751 of 4See more

sumo-besu-node consensys 0.1.75

1 of the 4 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
vertx-core@4.2.7
4.5.24

Open the chart page →

7,963
cp-helm-chartscp-helm-charts0.6.13 of 8See more

cp-helm-charts cp-helm-charts 0.6.1

3 of the 8 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
vertx-core@3.9.1
4.5.24
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
vertx-core@3.9.1
4.5.24
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
vertx-core@3.9.1
4.5.24

Open the chart page →

58,857
damap-chartdamapVerified publisher0.3.02 of 5See more

damap-chart damap 0.3.0

2 of the 5 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
vertx-core@4.5.7
4.5.24
quay.io/keycloak/keycloak:26.49409c59bdfb6
vertx-core@4.5.22
4.5.24

Open the chart page →

13,936
drogue-cloud-coredrogue-iotVerified publisher0.7.111 of 22See more

drogue-cloud-core drogue-iot 0.7.11

1 of the 22 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
vertx-core@4.3.4
4.5.24

Open the chart page →

55,666
drogue-cloud-twindrogue-iotVerified publisher0.7.111 of 8See more

drogue-cloud-twin drogue-iot 0.7.11

1 of the 8 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0054ef67eb7da
vertx-core@4.3.4
4.5.24

Open the chart page →

6,915
egeria-baseegeria-charts4.3.01 of 5See more

egeria-base egeria-charts 4.3.0

1 of the 5 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
vertx-core@4.4.4
4.5.24

Open the chart page →

4,046
egeria-ctsegeria-charts4.3.01 of 3See more

egeria-cts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
vertx-core@4.4.4
4.5.24

Open the chart page →

4,033
egeria-ptsegeria-charts4.3.01 of 3See more

egeria-pts egeria-charts 4.3.0

1 of the 3 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
vertx-core@4.4.4
4.5.24

Open the chart page →

4,033
odpi-egeria-labegeria-charts4.3.01 of 4See more

odpi-egeria-lab egeria-charts 4.3.0

1 of the 4 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.37.052f376e64b9b
vertx-core@4.4.4
4.5.24

Open the chart page →

4,033
yaadeencircle360-ossVerified publisher0.2.11 of 1See more

yaade encircle360-oss 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
esperotech/yaade:latest24d2d692d948
vertx-core@4.5.1
4.5.24

Open the chart page →

1,000
eoloPlanteolo-plannerVerified publisher0.1.01 of 7See more

eoloPlant eolo-planner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
vertx-core@4.3.4
4.5.24

Open the chart page →

27,537
eoloplannereoloplannerVerified publisher0.1.01 of 7See more

eoloplanner eoloplanner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
4.5.24

Open the chart page →

32,205
eoloPlannerCommunicationsKubernetes3eoloplannercommunicationskuberneteshelmVerified publisher0.1.01 of 7See more

eoloPlannerCommunicationsKubernetes3 eoloplannercommunicationskuberneteshelm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
vertx-core@4.3.4
4.5.24

Open the chart page →

27,537
eoloplannereoloplanner-molynx-gat0.1.01 of 7See more

eoloplanner eoloplanner-molynx-gat 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
4.5.24

Open the chart page →

28,482
eoloplanteoloplant1.0.01 of 7See more

eoloplant eoloplant 1.0.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
vertx-core@4.3.4
4.5.24

Open the chart page →

27,537
eoloplantseoloplants-urjcVerified publisher0.1.01 of 7See more

eoloplants eoloplants-urjc 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
4.5.24

Open the chart page →

27,721
servereoloserverVerified publisher0.1.01 of 7See more

server eoloserver 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
4.5.24

Open the chart page →

32,205
edge-oai-pmhfolio-org0.1.311 of 1See more

edge-oai-pmh folio-org 0.1.31

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/edge-oai-pmh:latesteedfcbc29792
vertx-core@5.0.5
5.0.7

Open the chart page →

874
edge-patronfolio-org0.1.281 of 1See more

edge-patron folio-org 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/edge-patron:latest682b852e056d
vertx-core@5.0.5
5.0.7

Open the chart page →

905
mod-aesfolio-org0.1.331 of 1See more

mod-aes folio-org 0.1.33

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-aes:latest6d67e9564270
vertx-core@4.0.3
4.5.24

Open the chart page →

2,281
mod-authtokenfolio-org0.1.351 of 1See more

mod-authtoken folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-authtoken:latest995a25a33133
vertx-core@4.5.13
4.5.24

Open the chart page →

1,558
mod-codex-ekbfolio-org0.1.341 of 1See more

mod-codex-ekb folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-codex-ekb:latest235a3fa4adc9
vertx-core@4.3.3
4.5.24

Open the chart page →

2,113
mod-codex-inventoryfolio-org0.1.341 of 1See more

mod-codex-inventory folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-codex-inventory:latest6d53ed758fd1
vertx-core@4.1.0.CR1
4.5.24

Open the chart page →

1,901
mod-codex-muxfolio-org0.1.341 of 1See more

mod-codex-mux folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-codex-mux:latestd4138abfd30d
vertx-core@4.3.4
4.5.24

Open the chart page →

1,755
mod-coursesfolio-org0.1.341 of 1See more

mod-courses folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-courses:latest68ca414f5596
vertx-core@5.0.6
5.0.7

Open the chart page →

1,533
mod-data-import-converter-storagefolio-org0.1.341 of 1See more

mod-data-import-converter-storage folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-data-import-converter-storage:latest3028f333778f
vertx-core@4.3.4
4.5.24

Open the chart page →

2,488
mod-emailfolio-org0.1.341 of 1See more

mod-email folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-email:latest79ea8e2e7ebf
vertx-core@5.0.6
5.0.7

Open the chart page →

866
mod-feesfinesfolio-org0.1.341 of 1See more

mod-feesfines folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-feesfines:latestfe3a7049f2fb
vertx-core@5.0.5
5.0.7

Open the chart page →

663
mod-inventory-updatefolio-org0.1.21 of 1See more

mod-inventory-update folio-org 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-inventory-update:latestba84812b4d58
vertx-core@5.0.4
5.0.7

Open the chart page →

878

Container images carrying it

90 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
folioci/mod-marccat:latest1b57d690d568
vertx-core@3.5.4
4.5.24
1
folioci/mod-oai-pmh:latest5cd5ef063f2a
vertx-core@5.0.5
5.0.7
1
folioci/mod-patron:latest5f213acfe2f8
vertx-core@5.0.5
5.0.7
1
folioci/mod-rtac:latestc959b2d6142f
vertx-core@5.0.4
5.0.7
1
folioci/mod-sender:latestd88a675dddf0
vertx-core@5.0.6
5.0.7
1
folioci/mod-template-engine:latestd105c585da30
vertx-core@5.0.6
5.0.7
1
folioci/mod-users-bl:latest4e2d96c9340d
vertx-core@5.0.6
5.0.7
1
graviteeio/ae-engine:3.0.24140932887e0
vertx-core@4.5.21
4.5.24
1
keyfactor/signserver-ce:7.3.2798fbbe00283
vertx-core@4.5.10
4.5.24
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
vertx-core@4.5.0
4.5.24
1
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
vertx-core@3.5.3
4.5.24
1
thmmniii/fbs-runner:v1.27.186105349c1a3
vertx-core@3.9.1
4.5.24
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
vertx-core@4.3.2
4.5.24
1
yuzutech/kroki:0.17.0192b7b27c857
vertx-core@4.2.6
4.5.24
1
ghcr.io/damap-org/damap-backend:5.0.0f3d0c7d35498
vertx-core@4.5.7
4.5.24
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
vertx-core@4.5.22
4.5.24
1
ghcr.io/devops-ia/kafka-cruise-control:jdk17-cc2.5.146-iam2.3.8e310642de2e2
vertx-core@4.5.8
4.5.24
1
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
vertx-core@4.1.3
4.5.24
1
ghcr.io/openccu/openccu:3.89.8.20260719b2de2ff6e8e0
vertx-core@4.1.3
4.5.24
1
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
vertx-core@4.5.7
4.5.24
1
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
vertx-core@4.5.22
4.5.24
1
ghcr.io/wundergraph/cosmo/keycloak:0.13.0b37408461b9b
vertx-core@4.5.23
4.5.24
1
quay.io/apicurio/apicurio-registry-kube-sync:1.0.170ef31840269
vertx-core@4.1.5
4.5.24
1
quay.io/apicurio/apicurio-registry-mem:2.5.8.Final3b036692d546
vertx-core@4.4.6
4.5.24
1
quay.io/keycloak/keycloak:26.009a381c715ab
vertx-core@4.5.10
4.5.24
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
vertx-core@4.0.2
4.5.24
1
quay.io/keycloak/keycloak:26.0.74388e2379b7e
vertx-core@4.5.10
4.5.24
1
quay.io/keycloak/keycloak:24.0.34d6f22991266
vertx-core@4.5.4
4.5.24
1
quay.io/keycloak/keycloak:23.0.34f72a5b0c076
vertx-core@4.4.6
4.5.24
1
quay.io/keycloak/keycloak:26.3.36a7217a100bd
vertx-core@4.5.18
4.5.24
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
vertx-core@4.3.4
4.5.24
1
quay.io/keycloak/keycloak:26.5.68d44614c7479
vertx-core@4.5.23
4.5.24
1
quay.io/keycloak/keycloak:26.49409c59bdfb6
vertx-core@4.5.22
4.5.24
1
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
vertx-core@4.5.10
4.5.24
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
vertx-core@4.3.4
4.5.24
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
vertx-core@4.3.4
4.5.24
1
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
vertx-core@4.5.21
4.5.24
1
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
vertx-core@4.5.22
4.5.24
1
quay.io/strimzi/operator:0.45.158c727cd2e68
vertx-core@4.5.13
4.5.24
1
quay.io/strimzi/operator:0.36.1e9e03b31007c
vertx-core@4.4.4
4.5.24
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.