StackRadar

CVE-2026-102473

Medium

Advisory

Published 29 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,656
of 18,026 indexed, latest versions
Container images
2,652
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,656 of 18,026 indexed charts deploy, on 2,652 images.

Affected packageAffected versionsFixed inImages
dashdeb0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+6 moreno fix listed2,652
OSV records
DEBIAN-CVE-2026-102473ECHO-f9f7-0739-3421UBUNTU-CVE-2026-102473
Trending
Rank 8 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,656 by stars
ChartLatestAffected imagesRadar Score
changedetection-iozekker6Verified publisher1.103.01 of 1See more

changedetection-io zekker6 1.103.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.834df3680db1c
dash@0.5.12-2
no fix listed

Open the chart page →

2,932
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
dash@0.5.12-12
no fix listed

Open the chart page →

1,655
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
dash@0.5.12-2
no fix listed

Open the chart page →

5,028
zimagizimagi2.7.171 of 6See more

zimagi zimagi 2.7.17

1 of the 6 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.15.331407c0e8e32
dash@0.5.12-2
no fix listed

Open the chart page →

2,139
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
dash@0.5.8-2.10
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
dash@0.5.10.2-6
no fix listed

Open the chart page →

9,700
zoo-project-druzoo-projectOfficialVerified publisher0.10.81 of 6See more

zoo-project-dru zoo-project 0.10.8

1 of the 6 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

6,746

Container images carrying it

2,652 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
xeotek/kadeck:4.2.94c6b04d9ce55
dash@0.5.10.2-6
no fix listed
1
xingse/kubernetes-oom-event-generator:v1.2.09f9d5492e4bf
dash@0.5.8-2.1ubuntu2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
dash@0.5.12-2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
dash@0.5.12-2
no fix listed
1
yandex/clickhouse-client:21.3863f94a0f607
dash@0.5.8-2.10
no fix listed
1
yandex/clickhouse-server:latest1cbf75aabe1e
dash@0.5.10.2-6
no fix listed
1
yandex/clickhouse-server:21.3.204eccfffb01d7
dash@0.5.10.2-6
no fix listed
1
yandex/clickhouse-server:19.17ab1738a64b70
dash@0.5.8-2.10
no fix listed
1
yandex/clickhouse-server:19.14ccf9c2b5e3f2
dash@0.5.8-2.10
no fix listed
1
yandex/clickhouse-server:19.16d210dc69321e
dash@0.5.8-2.10
no fix listed
1
yanickxia/recho:latest117516fc2e46
dash@0.5.12-2
no fix listed
1
ybucci/traefik-external-dns-controller:2.3.0cc22a16fac81
dash@0.5.12-12
no fix listed
1
yetiplatform/yeti:2.9.09bcbe2650a14
dash@0.5.12-12
no fix listed
1
yetiplatform/yeti:latest9c3006cedcca
dash@0.5.12-12
no fix listed
1
yetiplatform/yeti-frontend:latest709064278c7e
dash@0.5.12-12
no fix listed
1
yetiplatform/yeti-frontend:2.9.0873ef15d267b
dash@0.5.12-12
no fix listed
1
youkadev/api-snap:0.1.14db0f9428e67
dash@0.5.12-2
no fix listed
1
youssef11gaber10/flask-service:latest9c727fcfde76
dash@0.5.12-12
no fix listed
1
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
dash@0.5.10.2-6
no fix listed
1
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
dash@0.5.12-6ubuntu5
no fix listed
1
zabbix/zabbix-agent2:ubuntu-6.0.8e5b594057c9c
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
zabbix/zabbix-server-mysql:ubuntu-6.4-latest55d074b6b031
dash@0.5.12-6ubuntu5
no fix listed
1
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
dash@0.5.10.2-6
no fix listed
1
zabbix/zabbix-server-pgsql:ubuntu-7.0.237e8c8e059533
dash@0.5.12-6ubuntu5
no fix listed
1
zabbix/zabbix-server-pgsql:ubuntu-6.0.8d59ffa07f615
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
dash@0.5.12-6ubuntu5
no fix listed
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
dash@0.5.10.2-6
no fix listed
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
dash@0.5.12-6ubuntu5
no fix listed
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
dash@0.5.12-6ubuntu5
no fix listed
1
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
zenmldocker/kitaru-server:0.27.1f1c4675a188b
dash@0.5.12-2
no fix listed
1
zenmldocker/zenml-server:0.97.0aaa74934d606
dash@0.5.12-2
no fix listed
1
zepai/knowledge-graph-mcp:v0.2.16ab0ee79926b
dash@0.5.12-2
no fix listed
1
zer0tonin/mikochi:1.12.0f7ee3fe7ee6b
dash@0.5.12-12ubuntu3
no fix listed
1
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
gcr.io/abacus-labs-dev/hyperlane-agent:10c0ab1-20231215-220639f33e88324a40
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
dash@0.5.12-6ubuntu5
no fix listed
1
gcr.io/datadoghq/observability-pipelines-worker:2.23.165a4ff7952cd
dash@0.5.12-6ubuntu5
no fix listed
1
gcr.io/datadoghq/private-action-runner:v1.21.05f5918f843a4
dash@0.5.12-6ubuntu5
no fix listed
1
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
dash@0.5.8-2.10
no fix listed
1
gcr.io/google-containers/echoserver:1.910f4dbc8eeeb
dash@0.5.8-2.1ubuntu2
no fix listed
1
gcr.io/google_containers/echoserver:1.10cb5c1bddd1b5
dash@0.5.8-2.1ubuntu2
no fix listed
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
dash@0.5.8-2.1ubuntu2
no fix listed
1
gcr.io/istio-release/pilot:1.11.1c552478f8f11
dash@0.5.10.2-6
no fix listed
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
dash@0.5.8-2.1ubuntu2
no fix listed
1
gcr.io/istio-release/proxyv2:1.11.19538fabe49fd
dash@0.5.10.2-6
no fix listed
1
gcr.io/istio-testing/install-cni:latestec6f9ea5757b
dash@0.5.12-6ubuntu5
no fix listed
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
dash@0.5.12-6ubuntu5
no fix listed
1
gcr.io/kubecost1/cost-model:prod-1.108.1852f7923fad3
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.