StackRadar

CVE-2026-102473

Medium

Advisory

Published 29 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,656
of 18,026 indexed, latest versions
Container images
2,652
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,656 of 18,026 indexed charts deploy, on 2,652 images.

Affected packageAffected versionsFixed inImages
dashdeb0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+6 moreno fix listed2,652
OSV records
DEBIAN-CVE-2026-102473ECHO-f9f7-0739-3421UBUNTU-CVE-2026-102473
Trending
Rank 8 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,656 by stars
ChartLatestAffected imagesRadar Score
changedetection-iozekker6Verified publisher1.103.01 of 1See more

changedetection-io zekker6 1.103.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.834df3680db1c
dash@0.5.12-2
no fix listed

Open the chart page →

2,932
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/nginx:latestf9ea18bfa4fa
dash@0.5.12-12
no fix listed

Open the chart page →

1,655
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
dash@0.5.12-2
no fix listed

Open the chart page →

5,028
zimagizimagi2.7.171 of 6See more

zimagi zimagi 2.7.17

1 of the 6 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.15.331407c0e8e32
dash@0.5.12-2
no fix listed

Open the chart page →

2,139
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
dash@0.5.8-2.10
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
dash@0.5.10.2-6
no fix listed

Open the chart page →

9,700
zoo-project-druzoo-projectOfficialVerified publisher0.10.81 of 6See more

zoo-project-dru zoo-project 0.10.8

1 of the 6 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

6,746

Container images carrying it

2,652 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/defguard/defguard-proxy:2.1.08765a28e383e
dash@0.5.12-12
no fix listed
1
ghcr.io/defguard/gateway:2.1.0738b2b6f413b
dash@0.5.12-12
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
dash@0.5.12-12
no fix listed
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
dash@0.5.12-2
no fix listed
1
ghcr.io/deven96/ahnlich-db:latest01157101ebff
dash@0.5.12-12
no fix listed
1
ghcr.io/devops-dojo7/fauxgpu/api:0.2.428f706597c2f
dash@0.5.12-12
no fix listed
1
ghcr.io/devops-dojo7/fauxgpu/trainer:0.2.47a304b60c95e
dash@0.5.12-12
no fix listed
1
ghcr.io/devops-dojo7/fauxgpu/web:0.2.4691dd15d6bca
dash@0.5.12-2
no fix listed
1
ghcr.io/devops-ia/steampipe:v2.4.1a982103d91d3
dash@0.5.12-2
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
dash@0.5.12-12
no fix listed
1
ghcr.io/ding113/claude-code-hub:latestfa7c6f5428c2
dash@0.5.12-12
no fix listed
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/donkie/spoolman:0.24.042135965c42d
dash@0.5.12-2
no fix listed
1
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
dash@0.5.12-2
no fix listed
1
ghcr.io/dragoangel/mcrouter:v2026.06.29.0042afcffe67d0
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/drakkan/sftpgo:v2.7.59011fe608d33
dash@0.5.12-12
no fix listed
1
ghcr.io/drewburr-labs/evobot:3.0.04ddbb244c82f
dash@0.5.12-2
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
dash@0.5.12-2
no fix listed
1
ghcr.io/dysnix/docker-bitcoind:0.29.0490ca8e3dd21
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
dash@0.5.8-2.10
no fix listed
1
ghcr.io/edgelesssys/edgelessdb-sgx-1gb:v0.3.27e1d7a11a11a
dash@0.5.10.2-6
no fix listed
1
ghcr.io/edgelesssys/marblerun/coordinator:v1.9.2e589db0d0a2c
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
ghcr.io/eenchev/prometheus-universal-exporter:1.5.05281d78bbea9
dash@0.5.12-12
no fix listed
1
ghcr.io/egos-tech/smtp:1.2.304330a8ab3d5
dash@0.5.12-12
no fix listed
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
dash@0.5.12-2
no fix listed
1
ghcr.io/enderdash-com/enderdash-agent:latest818a0773d686
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/ente/web:5ab0c5b4c7a89c4e470ef6f793600da33cebf35d3f4864eb7f11
dash@0.5.12-12
no fix listed
1
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
dash@0.5.12-12
no fix listed
1
ghcr.io/eslupmi/impulse:v3.7.1186a24030e82
dash@0.5.12-12
no fix listed
1
ghcr.io/esphome/esphome:latest776a845d5089
dash@0.5.12-12
no fix listed
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
dash@0.5.12-2
no fix listed
1
ghcr.io/ferama/rospo:v0.12.0ab40c1745534
dash@0.5.12-2
no fix listed
1
ghcr.io/ferama/vipien:v0.5.3923a3f704b21
dash@0.5.10.2-6
no fix listed
1
ghcr.io/feresberbeche/alertigate:2.0.07b9bba80f207
dash@0.5.12-12
no fix listed
1
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
dash@0.5.12-12
no fix listed
1
ghcr.io/firecrawl/playwright-service:latest1f6eba640320
dash@0.5.12-2
no fix listed
1
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
dash@0.5.12-2
no fix listed
1
ghcr.io/flanksource/mission-control-ai-assistant:1.0.1229a635cbeeb5
dash@0.5.12-2
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
dash@0.5.12-2
no fix listed
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
dash@0.5.12-2
no fix listed
1
ghcr.io/fluent/fluentd-aggregator-docker-image:2.1.0ad25916eebbb
dash@0.5.12-12
no fix listed
1
ghcr.io/fluxerapp/fluxer-admin:2026.818.35650a5182e0e4a4d
dash@0.5.12-2
no fix listed
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
dash@0.5.12-2
no fix listed
1
ghcr.io/fluxerapp/fluxer-app-proxy-self-hosted:2026.820.1549337d59465eb5ab
dash@0.5.12-2
no fix listed
1
ghcr.io/fluxerapp/fluxer-gateway:2026.818.14094351d6f973843f
dash@0.5.12-12
no fix listed
1
ghcr.io/fluxerapp/fluxer-gifs:2026.814.1740580628c11c0eab
dash@0.5.12-2
no fix listed
1
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
dash@0.5.12-12
no fix listed
1
ghcr.io/fluxerapp/fluxer-messages:2026.702.21452936bd7c3b0b70
dash@0.5.12-2
no fix listed
1
ghcr.io/fluxerapp/fluxer-snowflakes:2026.630.207360450e2bf7ace
dash@0.5.12-2
no fix listed
1
ghcr.io/fluxerapp/fluxer-unfurl:2026.816.212224c7ff9bd53baa
dash@0.5.12-2
no fix listed
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.