StackRadar

CVE-2026-1002

Medium

Advisory

Published 15 Jan 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
0.004
32nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
102
of 17,781 indexed, latest versions
Container images
90
deployed by those charts
Fix available
1 of 1
affected package

Vert.x Web static handler component cache can be manipulated to deny the access to static files

Carried by container images the latest versions of 102 of 17,781 indexed charts deploy, on 90 images.

Affected packageAffected versionsFixed inImages
vertx-coremaven3.4.1, 3.5.0, 3.5.3, 3.5.4+36 more4.5.24, 5.0.790
OSV records
GHSA-cphf-4846-3xx9

Charts affected

102 by stars
ChartLatestAffected imagesRadar Score
mod-loginfolio-org0.1.341 of 1See more

mod-login folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-login:latest88de493f86db
vertx-core@4.5.23
4.5.24

Open the chart page →

1,151
mod-marccatfolio-org0.1.301 of 1See more

mod-marccat folio-org 0.1.30

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-marccat:latest1b57d690d568
vertx-core@3.5.4
4.5.24

Open the chart page →

6,988
mod-oai-pmhfolio-org0.1.341 of 1See more

mod-oai-pmh folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-oai-pmh:latest5cd5ef063f2a
vertx-core@5.0.5
5.0.7

Open the chart page →

962
mod-patronfolio-org0.1.341 of 1See more

mod-patron folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-patron:latest5f213acfe2f8
vertx-core@5.0.5
5.0.7

Open the chart page →

827
mod-rtacfolio-org0.1.341 of 1See more

mod-rtac folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-rtac:latestc959b2d6142f
vertx-core@5.0.4
5.0.7

Open the chart page →

665
mod-senderfolio-org0.1.341 of 1See more

mod-sender folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-sender:latestd88a675dddf0
vertx-core@5.0.6
5.0.7

Open the chart page →

818
mod-template-enginefolio-org0.1.341 of 1See more

mod-template-engine folio-org 0.1.34

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-template-engine:latestd105c585da30
vertx-core@5.0.6
5.0.7

Open the chart page →

818
mod-users-blfolio-org0.1.351 of 1See more

mod-users-bl folio-org 0.1.35

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
folioci/mod-users-bl:latest4e2d96c9340d
vertx-core@5.0.6
5.0.7

Open the chart page →

1,321
galoy-depsgaloymoney0.10.201 of 9See more

galoy-deps galoymoney 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
vertx-core@4.5.0
4.5.24

Open the chart page →

11,961
galoy-depsgaloymoney20.10.201 of 9See more

galoy-deps galoymoney2 0.10.20

1 of the 9 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.39.002f6f143fc6d
vertx-core@4.5.0
4.5.24

Open the chart page →

11,961
video-analytics-demogpu-operator0.1.91 of 3See more

video-analytics-demo gpu-operator 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
anguda/ant-media:2.5c435285fc241
vertx-core@4.2.3
4.5.24

Open the chart page →

15,722
cruise-controlhelm-cruise-controlVerified publisher2.1.11 of 2See more

cruise-control helm-cruise-control 2.1.1

1 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
ghcr.io/devops-ia/kafka-cruise-control:jdk17-cc2.5.146-iam2.3.8e310642de2e2
vertx-core@4.5.8
4.5.24

Open the chart page →

1,453
heronheron0.20.5-incubating1 of 2See more

heron heron 0.20.5-incubating

1 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
apache/bookkeeper:4.14.5a7d9970c148f
vertx-core@3.9.8
4.5.24

Open the chart page →

1,449
eoloplanthttpd-eoloplant0.1.01 of 7See more

eoloplant httpd-eoloplant 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
4.5.24

Open the chart page →

32,205
eoloserverihuertas2021-vmartinp2021-helm0.1.01 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
4.5.24

Open the chart page →

27,721
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
vertx-core@4.5.11
4.5.24

Open the chart page →

45,239
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
vertx-core@4.4.4
4.5.24

Open the chart page →

4,098
microcks-operatormicrocksVerified publisher0.0.111 of 1See more

microcks-operator microcks 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
vertx-core@4.5.22
4.5.24

Open the chart page →

1,261
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
vertx-core@3.9.8
4.5.24

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
vertx-core@3.9.8
4.5.24

Open the chart page →

15,675
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.5.68d44614c7479
vertx-core@4.5.23
4.5.24

Open the chart page →

2,901
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
vertx-core@4.3.2
4.5.24

Open the chart page →

9,149
Practica_4_helmmy-heml-appVerified publisher0.1.01 of 7See more

Practica_4_helm my-heml-app 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
4.5.24

Open the chart page →

27,721
incorencsaVerified publisher1.38.01 of 29See more

incore ncsa 1.38.0

1 of the 29 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
vertx-core@4.5.7
4.5.24

Open the chart page →

15,369
neuralbank-stackneuralbank-stack0.1.01 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
vertx-core@4.5.21
4.5.24

Open the chart page →

5,191
my-bloody-jenkinsodavid0.1.2181 of 1See more

my-bloody-jenkins odavid 0.1.218

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
vertx-core@4.5.0
4.5.24

Open the chart page →

5,826
pulsarolehrgfVerified publisher0.0.51 of 2See more

pulsar olehrgf 0.0.5

1 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
apachepulsar/pulsar:3.1.016f9fdab3fa6
vertx-core@4.3.8
4.5.24

Open the chart page →

9,005
apicurioone-acre-fundVerified publisher2.3.03 of 5See more

apicurio one-acre-fund 2.3.0

3 of the 5 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
vertx-core@4.3.7
4.5.24
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
vertx-core@4.3.7
4.5.24
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
vertx-core@4.3.7
4.5.24

Open the chart page →

18,667
raspberrymaticopenccuVerified publisher3.83.61 of 1See more

raspberrymatic openccu 3.83.6

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
ghcr.io/jens-maus/raspberrymatic:3.83.6.202508244b22b4f407c4
vertx-core@4.1.3
4.5.24

Open the chart page →

2,421
cdn-remoteopencord0.2.41 of 3See more

cdn-remote opencord 0.2.4

1 of the 3 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
omecproject/cdn-antmedia:1.0.0b4ae7d0d6b74
vertx-core@3.5.3
4.5.24

Open the chart page →

63,223
voltha-infraopencord2.14.01 of 10See more

voltha-infra opencord 2.14.0

1 of the 10 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
atomix/atomix:3.1.127738ff4f5c63
vertx-core@3.5.0
4.5.24

Open the chart page →

41,044
p4p40.1.01 of 7See more

p4 p4 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
mastercloudapps/server:v2.23f3d24dfe2686
vertx-core@4.3.4
4.5.24

Open the chart page →

27,537
keycloakpascaliskeVerified publisher0.2.01 of 1See more

keycloak pascaliske 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.74388e2379b7e
vertx-core@4.5.10
4.5.24

Open the chart page →

2,097
Practica_4_helmpr04helm0.1.01 of 7See more

Practica_4_helm pr04helm 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
4.5.24

Open the chart page →

27,558
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
ghcr.io/projectnessie/nessie:0.92.19efe3c74d55f
vertx-core@4.5.7
4.5.24

Open the chart page →

21,211
radar-cp-ksql-serverradar-baseVerified publisher0.0.21 of 2See more

radar-cp-ksql-server radar-base 0.0.2

1 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
vertx-core@4.3.8
4.5.24

Open the chart page →

5,269
radar-kafkaradar-baseVerified publisher0.4.11 of 2See more

radar-kafka radar-base 0.4.1

1 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
vertx-core@4.5.14
4.5.24

Open the chart page →

4,219
strimzi-kafka-operatorradar-baseVerified publisher0.46.01 of 1See more

strimzi-kafka-operator radar-base 0.46.0

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.46.0ac434a48ac2b
vertx-core@4.5.14
4.5.24

Open the chart page →

1,951
keycloaksb-helm-charts0.3.01 of 2See more

keycloak sb-helm-charts 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.0.6a93d22e13b86
vertx-core@4.5.10
4.5.24

Open the chart page →

2,590
shenyushenyu0.6.32 of 2See more

shenyu shenyu 0.6.3

2 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
apache/shenyu-admin:2.5.1e2be712fc4f4
vertx-core@4.3.2
4.5.24
apache/shenyu-bootstrap:2.5.11bd5756f6273
vertx-core@4.3.2
4.5.24

Open the chart page →

8,804
keycloaksikalabs0.1.01 of 1See more

keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.3.36a7217a100bd
vertx-core@4.5.18
4.5.24

Open the chart page →

1,690
simple-keycloaksikalabs0.1.01 of 1See more

simple-keycloak sikalabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:20.0.18830f76112b6
vertx-core@4.3.4
4.5.24

Open the chart page →

6,443
strimzi-user-operatorspartan0.4.01 of 1See more

strimzi-user-operator spartan 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.45.158c727cd2e68
vertx-core@4.5.13
4.5.24

Open the chart page →

1,836
teku-validatorstakewise4.3.21 of 2See more

teku-validator stakewise 4.3.2

1 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
consensys/teku:25.4.1bf6ecd2ea716
vertx-core@4.5.14
4.5.24

Open the chart page →

3,153
wonder-mesh-netstrrl-helm2026.629.01 of 3See more

wonder-mesh-net strrl-helm 2026.629.0

1 of the 3 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.009a381c715ab
vertx-core@4.5.10
4.5.24

Open the chart page →

5,063
krokiteochenglim1.0.11 of 5See more

kroki teochenglim 1.0.1

1 of the 5 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
yuzutech/kroki:0.17.0192b7b27c857
vertx-core@4.2.6
4.5.24

Open the chart page →

8,715
hermestoukVerified publisher0.6.01 of 3See more

hermes touk 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
vertx-core@3.9.6
4.5.24

Open the chart page →

12,455
opencloudunxwaresVerified publisher0.2.31 of 13See more

opencloud unxwares 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:26.1.4044a457e0498
vertx-core@4.5.11
4.5.24

Open the chart page →

45,239
webhookie-allwebhookie0.1.21 of 3See more

webhookie-all webhookie 0.1.2

1 of the 3 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
vertx-core@4.0.2
4.5.24

Open the chart page →

28,605
keycloakwiremindVerified publisher25.3.11 of 2See more

keycloak wiremind 25.3.1

1 of the 2 container images this version deploys carry CVE-2026-1002.

Container imageDigestPackageFixed in
ghcr.io/wiremind/bitnami/keycloak:26.5.0-debian-12-r38622ea9e43c0
vertx-core@4.5.22
4.5.24

Open the chart page →

7,624

Container images carrying it

90 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
codeurjc/server:v1.0310bea5b1ee7
vertx-core@4.3.4
4.5.24
8
mastercloudapps/server:v2.23f3d24dfe2686
vertx-core@4.3.4
4.5.24
4
quay.io/strimzi/operator:0.37.052f376e64b9b
vertx-core@4.4.4
4.5.24
4
hyperledger/besu:22.4-openjdk-latesta674d35eec9a
vertx-core@4.2.7
4.5.24
2
quay.io/keycloak/keycloak:26.1.4044a457e0498
vertx-core@4.5.11
4.5.24
2
quay.io/keycloak/keycloak:20.0054ef67eb7da
vertx-core@4.3.4
4.5.24
2
quay.io/keycloak/keycloak:17.0.1-legacy68f9f38c8f30
vertx-core@4.2.1
4.5.24
2
quay.io/strimzi/operator:0.39.002f6f143fc6d
vertx-core@4.5.0
4.5.24
2
quay.io/strimzi/operator:0.46.0ac434a48ac2b
vertx-core@4.5.14
4.5.24
2
aktosecurity/akto-threat-detection-backend:latest15ebb75b94dc
vertx-core@4.5.11
4.5.24
1
aktosecurity/akto-threat-detection-backend:1.15.7a6c1b933517f
vertx-core@4.5.11
4.5.24
1
anguda/ant-media:2.5c435285fc241
vertx-core@4.2.3
4.5.24
1
apache/bookkeeper:4.14.5a7d9970c148f
vertx-core@3.9.8
4.5.24
1
apachepulsar/pulsar:3.1.016f9fdab3fa6
vertx-core@4.3.8
4.5.24
1
apachepulsar/pulsar:2.10.03b262ab7a7d9
vertx-core@3.9.8
4.5.24
1
apachepulsar/pulsar:2.6.14db6ff0b4045
vertx-core@3.4.1
4.5.24
1
apachepulsar/pulsar:3.0.79c9947de139d
vertx-core@4.5.10
4.5.24
1
apachepulsar/pulsar:2.9.0d056c89b7131
vertx-core@3.9.8
4.5.24
1
apachepulsar/pulsar:2.8.2d538416d5afe
vertx-core@3.9.8
4.5.24
1
apache/shenyu-admin:2.5.1e2be712fc4f4
vertx-core@4.3.2
4.5.24
1
apache/shenyu-bootstrap:2.5.11bd5756f6273
vertx-core@4.3.2
4.5.24
1
apicurio/apicurio-registry-jpa:1.3.2.Final44eeddd3562c
vertx-core@3.9.3
4.5.24
1
apicurio/apicurio-registry-kafkasql:2.1.0.Finala97d67487532
vertx-core@3.9.6
4.5.24
1
apicurio/apicurio-studio-api:0.2.62.Final302d202ed149
vertx-core@4.3.7
4.5.24
1
apicurio/apicurio-studio-ui:0.2.62.Final349c845270c2
vertx-core@4.3.7
4.5.24
1
apicurio/apicurio-studio-ws:0.2.62.Final27a91978a388
vertx-core@4.3.7
4.5.24
1
assistiot/identity-manager_kc:latest0df4b4fa899a
vertx-core@4.2.1
4.5.24
1
atomix/atomix:3.1.127738ff4f5c63
vertx-core@3.5.0
4.5.24
1
bitnamilegacy/keycloak:20.0.5cb04e49e6eb1
vertx-core@4.3.4
4.5.24
1
bitnamilegacy/keycloak:24.0.4cc599cbd15ff
vertx-core@4.5.7
4.5.24
1
bitnamilegacy/keycloak:26.3.3-debian-12-r0da3df0976a9f
vertx-core@4.5.18
4.5.24
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
vertx-core@3.9.1
4.5.24
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
vertx-core@4.3.8
4.5.24
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
vertx-core@3.9.1
4.5.24
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
vertx-core@3.9.1
4.5.24
1
consensys/teku:25.4.1bf6ecd2ea716
vertx-core@4.5.14
4.5.24
1
esperotech/yaade:latest24d2d692d948
vertx-core@4.5.1
4.5.24
1
folioci/edge-oai-pmh:latesteedfcbc29792
vertx-core@5.0.5
5.0.7
1
folioci/edge-patron:latest682b852e056d
vertx-core@5.0.5
5.0.7
1
folioci/mod-aes:latest6d67e9564270
vertx-core@4.0.3
4.5.24
1
folioci/mod-authtoken:latest995a25a33133
vertx-core@4.5.13
4.5.24
1
folioci/mod-codex-ekb:latest235a3fa4adc9
vertx-core@4.3.3
4.5.24
1
folioci/mod-codex-inventory:latest6d53ed758fd1
vertx-core@4.1.0.CR1
4.5.24
1
folioci/mod-codex-mux:latestd4138abfd30d
vertx-core@4.3.4
4.5.24
1
folioci/mod-courses:latest68ca414f5596
vertx-core@5.0.6
5.0.7
1
folioci/mod-data-import-converter-storage:latest3028f333778f
vertx-core@4.3.4
4.5.24
1
folioci/mod-email:latest79ea8e2e7ebf
vertx-core@5.0.6
5.0.7
1
folioci/mod-feesfines:latestfe3a7049f2fb
vertx-core@5.0.5
5.0.7
1
folioci/mod-inventory-update:latestba84812b4d58
vertx-core@5.0.4
5.0.7
1
folioci/mod-login:latest88de493f86db
vertx-core@4.5.23
4.5.24
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.