StackRadar

CVE-2026-102473

Medium

Advisory

Published 29 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,660
of 18,035 indexed, latest versions
Container images
2,664
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,660 of 18,035 indexed charts deploy, on 2,664 images.

Affected packageAffected versionsFixed inImages
dashdeb0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+6 moreno fix listed2,664
OSV records
DEBIAN-CVE-2026-102473ECHO-f9f7-0739-3421UBUNTU-CVE-2026-102473
Trending
Rank 12 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,660 by stars
ChartLatestAffected imagesRadar Score
clickhousesinextraVerified publisher0.22.01 of 1See more

clickhouse sinextra 0.22.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
clickhouse/clickhouse-server:26.3.1092098d3b31dd
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

2,308
mongodb-backupsinextraVerified publisher1.1.01 of 1See more

mongodb-backup sinextra 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/mongodb:8.0.101eee8e20a87f
dash@0.5.12-2
no fix listed

Open the chart page →

5,336
postgresql-singlesinextraVerified publisher1.15.21 of 1See more

postgresql-single sinextra 1.15.2

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
dash@0.5.12-2
no fix listed

Open the chart page →

5,945
gitlab-omnibusslamdev0.1.61 of 2See more

gitlab-omnibus slamdev 0.1.6

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
daedalusproject/base_kubectl:latest6f72b5119eda
dash@0.5.10.2-6
no fix listed

Open the chart page →

3,010
slo-reportingslo-reportingVerified publisher0.3.341 of 2See more

slo-reporting slo-reporting 0.3.34

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/colenio/slo-reporting:0.3.316b64d194a27d
dash@0.5.12-2
no fix listed

Open the chart page →

3,353
smarter-demosmarterOfficialVerified publisher0.1.53 of 7See more

smarter-demo smarter 0.1.5

3 of the 7 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/audio-client:v3.1.23c8375dc5487
dash@0.5.10.2-6
no fix listed
ghcr.io/smarter-project/gstreamer:v1.0.25ecb16015aa8
dash@0.5.10.2-6
no fix listed
ghcr.io/smarter-project/image-detector:v2.5.31dcca70c6446
dash@0.5.10.2-6
no fix listed

Open the chart page →

254,386
snappasssnappassVerified publisher0.4.32 of 3See more

snappass snappass 0.4.3

2 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
lmacka/snappass:2.1.293f5c048b7d4
dash@0.5.12-12
no fix listed
valkey/valkey:8.1.61f84517eca8e
dash@0.5.12-12
no fix listed

Open the chart page →

3,621
artifact-hubsoftonic1.19.01 of 8See more

artifact-hub softonic 1.19.0

1 of the 8 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
artifacthub/postgres:latest4fd34fa635cc
dash@0.5.12-12
no fix listed

Open the chart page →

17,573
redis-shardedsoftonic0.5.01 of 2See more

redis-sharded softonic 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/redis:8.10.18a1efc5f4795
dash@0.5.12-12
no fix listed

Open the chart page →

3,057
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
dash@0.5.12-12
no fix listed

Open the chart page →

8,532
postgresql-ha-chartsoldevelo-postgresql-ha-chart16.3.42 of 2See more

postgresql-ha-chart soldevelo-postgresql-ha-chart 16.3.4

2 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
soldevelo/pgpool:4.6.3-debian-12-r0044d16a65129
dash@0.5.12-2
no fix listed
soldevelo/postgresql-repmgr:17.6.0-debian-12-r03eaab21e40e5
dash@0.5.12-2
no fix listed

Open the chart page →

5,193
rabbitmqsolidchartsVerified publisher0.7.61 of 2See more

rabbitmq solidcharts 0.7.6

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/rabbitmq:4.3.6-management751bf4eeaa69
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

1,208
nginx-chartsomnath-chartVerified publisher0.1.91 of 1See more

nginx-chart somnath-chart 0.1.9

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
somnathmore/custom-nginx:v2bdfc06cad4ec
dash@0.5.12-2
no fix listed

Open the chart page →

6,051
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
dash@0.5.12-2
no fix listed

Open the chart page →

11,864
squidsquid-helmVerified publisher0.1.01 of 1See more

squid squid-helm 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ubuntu/squid:5.2-22.04_beta723891b5bc74
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

2,947
graph-nodestakewise3.1.01 of 3See more

graph-node stakewise 3.1.0

1 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
graphprotocol/graph-node:v0.37.0f4452cdedd68
dash@0.5.12-2
no fix listed

Open the chart page →

5,759
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
dash@0.5.10.2-6
no fix listed

Open the chart page →

14,245
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
dash@0.5.10.2-6
no fix listed

Open the chart page →

104,908
stornxstornxVerified publisher1.1.13 of 9See more

stornx stornx 1.1.1

3 of the 9 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
alazidis/kube-netlag:1.1.00e8c84152201
dash@0.5.12-6ubuntu5
no fix listed
alazidis/stornx:1.1.1602d4f7f090c
dash@0.5.12-2
no fix listed
istio/pilot:1.29.1f8b0e412ac4a
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

14,651
streamvisorstreamvisorVerified publisher4.1.61 of 1See more

streamvisor streamvisor 4.1.6

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/streamvisor/streamvisor:4.1.40bc598b2ac9a
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

3,252
supabasesupabse0.8.06 of 11See more

supabase supabse 0.8.0

6 of the 11 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
darthsim/imgproxy:v3.30.13b709e4a0e5e
dash@0.5.12-6ubuntu5
no fix listed
kong/kong:3.9.16addf50e6bd8
dash@0.5.12-6ubuntu5
no fix listed
supabase/edge-runtime:v1.74.02781daf92394
dash@0.5.12-2
no fix listed
supabase/postgres-meta:v0.96.6a84cc713585e
dash@0.5.12-2
no fix listed
supabase/realtime:v2.102.3aa1c92c0cf32
dash@0.5.12-2
no fix listed
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
dash@0.5.12-2
no fix listed

Open the chart page →

21,571
supersonicsupersonicVerified publisher0.3.11 of 2See more

supersonic supersonic 0.3.1

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
envoyproxy/envoy:v1.30.92956bd9de830
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

2,374
app-fullsynkubeVerified publisher1.0.01 of 1See more

app-full synkube 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/nginx:latest6e23479198b9
dash@0.5.12-12
no fix listed

Open the chart page →

3,723
mumblesyntaxerror404Verified publisher1.0.51 of 1See more

mumble syntaxerror404 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/mumble-voip/mumble-server:v1.6.8703da59810c075
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

1,062
kubedeploysysbee1.2.21 of 1See more

kubedeploy sysbee 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
dash@0.5.12-12
no fix listed

Open the chart page →

1,856
apptaxmd-helm-chart0.0.21 of 1See more

app taxmd-helm-chart 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
dash@0.5.12-12
no fix listed

Open the chart page →

1,856
teamcity-serverteamcity-server3.3.51 of 2See more

teamcity-server teamcity-server 3.3.5

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/haproxy:3.2e2b397cdbd61
dash@0.5.12-12
no fix listed

Open the chart page →

764
jenkinstestchart0.1.91 of 2See more

jenkins testchart 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
dash@0.5.12-2
no fix listed

Open the chart page →

10,037
jenkinstest-jenkins9.1.01 of 2See more

jenkins test-jenkins 9.1.0

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
jenkins/jenkins:2.426.1-jdk11b470bcdc4ecd
dash@0.5.12-2
no fix listed

Open the chart page →

10,037
tocktock0.6.31 of 9See more

tock tock 0.6.3

1 of the 9 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
tock/gen-ai-orchestrator-server:25.10.7abf7880e0449
dash@0.5.12-12
no fix listed

Open the chart page →

16,042
guardrails-agent-kubernetesturbotVerified publisher0.3.01 of 1See more

guardrails-agent-kubernetes turbot 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/turbot/guardrails-agent-kubernetes:0.3.09d01bf9c9224
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

4,663
typemilltypemill-helm-chart2.3.02 of 2See more

typemill typemill-helm-chart 2.3.0

2 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned628f79a08cc7
dash@0.5.12-12
no fix listed
kixote/typemilldigest-pinned7dfb517d24f0
dash@0.5.12-12
no fix listed

Open the chart page →

6,159
typesensetypesenseVerified publisher1.1.51 of 1See more

typesense typesense 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
typesense/typesense:30.191604dc128e2
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

2,138
ueransim-gnbueransim-gnbVerified publisher0.2.61 of 1See more

ueransim-gnb ueransim-gnb 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
gradiant/ueransim:3.2.6015b30d5fa0f
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

4,263
ueransim-uesueransim-uesVerified publisher0.1.21 of 1See more

ueransim-ues ueransim-ues 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
gradiant/ueransim:3.2.6015b30d5fa0f
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

4,263
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
dash@0.5.12-2
no fix listed

Open the chart page →

16,614
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
dash@0.5.12-2
no fix listed

Open the chart page →

13,664
taigaunxwaresVerified publisher2026.3.82 of 6See more

taiga unxwares 2026.3.8

2 of the 6 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
taigaio/taiga-back:latest4beed8f62c9f
dash@0.5.12-12
no fix listed
taigaio/taiga-protected:latestfd4568a97a59
dash@0.5.12-12
no fix listed

Open the chart page →

10,506
varnish-cachevarnishVerified publisher1.1.11 of 1See more

varnish-cache varnish 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/varnish:7.5.04d0bb287d87b
dash@0.5.12-2
no fix listed

Open the chart page →

4,776
varnish-ingress-controllervarnish-ingress-controllerVerified publisher0.5.01 of 1See more

varnish-ingress-controller varnish-ingress-controller 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
mariusm/vingress:0.5.0b3db186c3d72
dash@0.5.12-12
no fix listed

Open the chart page →

2,617
vaultwarden-kubernetes-secretsvaultwarden-kubernetes-secrets0.0.0-main1 of 2See more

vaultwarden-kubernetes-secrets vaultwarden-kubernetes-secrets 0.0.0-main

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

4,536
devportal-admin-uiveecode-platformVerified publisher0.5.41 of 1See more

devportal-admin-ui veecode-platform 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
veecode/devportal-admin-ui:0.4.30c69fd286b489
dash@0.5.12-2
no fix listed

Open the chart page →

5,982
phpipamvquieVerified publisher1.0.31 of 3See more

phpipam vquie 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/mariadb:10.11.21c33370a599c
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

8,173
waldurwaldur-chartsVerified publisher8.1.22 of 3See more

waldur waldur-charts 8.1.2

2 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/postgres:17d74eeac9a635
dash@0.5.12-12
no fix listed
opennode/waldur-mastermind:8.1.24c82b15d9042
dash@0.5.12-12
no fix listed

Open the chart page →

5,803
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
dash@0.5.8-2.10
no fix listed

Open the chart page →

16,671
reflectorwener10.0.651 of 1See more

reflector wener 10.0.65

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
emberstack/kubernetes-reflector:10.0.6551dbd5880929
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

857
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
dash@0.5.7-4ubuntu1
no fix listed

Open the chart page →

42,113
spark-operatorwikimedia2.2.71 of 1See more

spark-operator wikimedia 2.2.7

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/kubeflow/spark-operator/controller:2.2.1865ff4da5686
dash@0.5.10.2-6
no fix listed

Open the chart page →

57,449
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
dash@0.5.12-12
no fix listed

Open the chart page →

9,036
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
dash@0.5.12-12
no fix listed

Open the chart page →

9,498

Container images carrying it

2,664 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3180688274b2c
dash@0.5.12-12
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.17419aa33eb17
dash@0.5.12-12
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.1a072f0a41f28
dash@0.5.12-12
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
dash@0.5.10.2-6
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
dash@0.5.12-2
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
dash@0.5.12-2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
dash@0.5.12-12
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
dash@0.5.12-2
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
dash@0.5.12-2
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
dash@0.5.12-2
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
dash@0.5.12-2
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
dash@0.5.12-2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
dash@0.5.12-2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
dash@0.5.12-2
no fix listed
1

syft 1.42.1 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.