StackRadar

CVE-2026-102473

Medium

Advisory

Published 29 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,656
of 17,985 indexed, latest versions
Container images
2,632
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,656 of 17,985 indexed charts deploy, on 2,632 images.

Affected packageAffected versionsFixed inImages
dashdeb0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+6 moreno fix listed2,632
OSV records
DEBIAN-CVE-2026-102473ECHO-f9f7-0739-3421UBUNTU-CVE-2026-102473
Trending
Rank 6 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,656 by stars
ChartLatestAffected imagesRadar Score
changedetection-iozekker6Verified publisher1.103.01 of 1See more

changedetection-io zekker6 1.103.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.834df3680db1c
dash@0.5.12-2
no fix listed

Open the chart page →

2,932
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
dash@0.5.12-12
no fix listed

Open the chart page →

1,859
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
dash@0.5.12-2
no fix listed

Open the chart page →

5,018
zimagizimagi2.7.171 of 6See more

zimagi zimagi 2.7.17

1 of the 6 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.15.331407c0e8e32
dash@0.5.12-2
no fix listed

Open the chart page →

2,135
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
dash@0.5.8-2.10
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
dash@0.5.10.2-6
no fix listed

Open the chart page →

9,696
zoo-project-druzoo-projectOfficialVerified publisher0.10.81 of 6See more

zoo-project-dru zoo-project 0.10.8

1 of the 6 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

6,744

Container images carrying it

2,632 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
haveagitgat/tdarr_node:2.00.101e3f9328327d
dash@0.5.10.2-6
no fix listed
1
haveagitgat/tdarr_node:2.17.013ff0913202dd
dash@0.5.10.2-6
no fix listed
1
hazegoodlife/haaze:veggiesite50f02d2d5d4d
dash@0.5.12-2
no fix listed
1
hazegoodlife/haaze:milksite8d4c63169e14
dash@0.5.12-2
no fix listed
1
headwindmdm/hmdm:0.1.93550b4840840
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
healthchecks/healthchecks:latestaa08a61b0dcf
dash@0.5.12-12
no fix listed
1
hecrom/myweatherangularclient:1.3.11bb0372939c19
dash@0.5.12-2
no fix listed
1
helicone/clickhouse-migration-runner:v2025.03.05-14c69b971a7e4
dash@0.5.10.2-6
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
dash@0.5.12-2
no fix listed
1
helmforge/fastmcp-server:0.2.061f759a1421f
dash@0.5.12-12
no fix listed
1
helmforge/fastmcp-server:0.11.2fcb7017327d6
dash@0.5.12-12
no fix listed
1
hiboxsystems/marge-bot:0.16.0b59f01bc0418
dash@0.5.12-12
no fix listed
1
hiboxsystems/marge-bot:0.14.0dcffb926e563
dash@0.5.12-2
no fix listed
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
dash@0.5.12-2
no fix listed
1
hivemq/hivemq-edge:2026.14d8250a233cea
dash@0.5.12-6ubuntu5
no fix listed
1
hivemq/hivemq-operator:4.7.10241d6a8e1963
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
hivemq/hivemq-platform-operator:2.2.2a919f990141b
dash@0.5.12-12ubuntu3
no fix listed
1
hivemq/hivemq-swarm:4.56.08d5f6a6f48b0
dash@0.5.12-12ubuntu3
no fix listed
1
hiversh/antigravity:0.1.45-microvm0e36d98402bc
dash@0.5.12-2
no fix listed
1
hiversh/browser:0.1.45-microvmb5048c6342ce
dash@0.5.12-2
no fix listed
1
hiversh/claude:0.1.45-microvm2fbf9f264498
dash@0.5.12-2
no fix listed
1
hiversh/codex:0.1.45-microvm4f43130f51e5
dash@0.5.12-2
no fix listed
1
hiversh/controller:0.1.45b0b85f8942c7
dash@0.5.12-2
no fix listed
1
hiversh/copilot:0.1.45-microvm50c07b84f298
dash@0.5.12-2
no fix listed
1
hiversh/gateway:0.1.45839226cc6e41
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
hiversh/node:0.1.45-alpine-microvm836a37641941
dash@0.5.12-2
no fix listed
1
hiversh/openclaw:0.1.45-microvm958b7ebb4eb4
dash@0.5.12-2
no fix listed
1
hiversh/python:0.1.45-3.13-alpine-microvm63a5ae179a9f
dash@0.5.12-2
no fix listed
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
dash@0.5.12-2
no fix listed
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
dash@0.5.12-2
no fix listed
1
hmediade/printserver:latest481a552c8e1c
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
hmediade/printserver-init:latest7f005eb6c718
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
housewrecker/gaps:latestf417dd0a7547
dash@0.5.10.2-6
no fix listed
1
huginn/huginn:4df1217d3055db980a04f293e28016b77826e3caeab0db98264e
dash@0.5.8-2.10
no fix listed
1
huginn/huginn-single-process:4d17829cf6b15b004ad3f4be196303dca4944810c794eddc7b47
dash@0.5.8-2.10
no fix listed
1
hugohg34/toposervice:0.0.2812a03b3f274
dash@0.5.10.2-6
no fix listed
1
hyperglance/init:wildfly467ad8491bc3
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
hyperglance/init:postgres9fd5faf1fe80
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
hyperglance/init:apacheb2f8c6d52623
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
hyperglance/postgresql-v2:10.0.12ef5c0547a131
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
hyperledger/besu:latest6f3f21ce5333
dash@0.5.12-6ubuntu5
no fix listed
1
hyperledger/fabric-couchdb:0.4.10c65891b6c237
dash@0.5.8-2.1ubuntu2
no fix listed
1
hyperledger/fabric-orderer:1.3.06ee1abcfd840
dash@0.5.8-2.1ubuntu2
no fix listed
1
hyperledger/fabric-peer:1.3.06756c7c48234
dash@0.5.8-2.1ubuntu2
no fix listed
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
dash@0.5.8-2.1ubuntu2
no fix listed
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
dash@0.5.8-2.1ubuntu2
no fix listed
1
ibmcom/microclimate-theia:lateste17bdccc5030
dash@0.5.8-2.1ubuntu2
no fix listed
1
ibmcom/skydive:0.22.0395e60cc6e3d
dash@0.5.8-2.10
no fix listed
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
dash@0.5.12-2
no fix listed
1
ilum/streamlit-example:1.0.0ce5dcdeb22ba
dash@0.5.12-12
no fix listed
1

syft 1.42.1 · advisories as of 3 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.