StackRadar

CVE-2026-102473

Medium

Advisory

Published 29 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,660
of 18,035 indexed, latest versions
Container images
2,664
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,660 of 18,035 indexed charts deploy, on 2,664 images.

Affected packageAffected versionsFixed inImages
dashdeb0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+6 moreno fix listed2,664
OSV records
DEBIAN-CVE-2026-102473ECHO-f9f7-0739-3421UBUNTU-CVE-2026-102473
Trending
Rank 12 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,660 by stars
ChartLatestAffected imagesRadar Score
hedgedocadfinisVerified publisher0.6.11 of 2See more

hedgedoc adfinis 0.6.1

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/postgres:18.48ff36f3c6637
dash@0.5.12-12
no fix listed

Open the chart page →

3,946
jellyfinbeluga-cloudVerified publisher2.3.01 of 1See more

jellyfin beluga-cloud 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/beluga-cloud/jellyfin/jellyfin:10.8.1368f52b993a7f
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

4,624
penpotcodechemVerified publisher1.0.102 of 3See more

penpot codechem 1.0.10

2 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
penpotapp/backend:1.16.0-betae978e871be07
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
penpotapp/exporter:1.16.0-betafa7086ad92b1
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

30,466
connaisseurconnaisseurVerified publisher2.13.01 of 2See more

connaisseur connaisseur 2.13.0

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/redisdigest-pinned83edc2b8e9ff
dash@0.5.12-2
no fix listed

Open the chart page →

3,867
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

41,795
devtron-operatordevtron0.23.35 of 11See more

devtron-operator devtron 0.23.3

5 of the 11 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
quay.io/devtron/chart-sync:3b3d6d0e-836-39296721b5c9634d4
dash@0.5.12-6ubuntu5
no fix listed
quay.io/devtron/devtron-utils:dup-chart-repo-v1.1.095d6f0e05636
dash@0.5.12-2
no fix listed
quay.io/devtron/hyperion:0874dcaf-280-3928701d5d8c4cecb
dash@0.5.12-6ubuntu5
no fix listed
quay.io/devtron/kubelink:09867a9c-564-39289ea6dd1e4ce71
dash@0.5.12-6ubuntu5
no fix listed
quay.io/devtron/postgres:14.91b594392f7cb
dash@0.5.12-2
no fix listed

Open the chart page →

40,287
guacamoledmunozv04Verified publisher0.3.41 of 2See more

guacamole dmunozv04 0.3.4

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
guacamole/guacamole:1.6.0f344085e618b
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

4,167
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

5,934
grayloggroundhog2k0.13.101 of 1See more

graylog groundhog2k 0.13.10

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
graylog/graylog:7.1.9598bd41fefd5
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

1,458
nextcloudgroundhog2k0.22.81 of 3See more

nextcloud groundhog2k 0.22.8

1 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1:35.0.1-apacheb1ae671e9815
dash@0.5.12-12
no fix listed

Open the chart page →

4,663
ilumilumOfficialVerified publisher6.7.34 of 19See more

ilum ilum 6.7.3

4 of the 19 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
bitnamilegacy/minio:2025.3.12-debian-12-r0ba9f3b4b0b00
dash@0.5.12-2
no fix listed
bitnamilegacy/postgresql:16233f361c5819
dash@0.5.12-2
no fix listed
ilum/api:6.7.3624fd09528c8
dash@0.5.12-12
no fix listed
ilum/marquez:0.54.06e1d709d41f8
dash@0.5.12-2
no fix listed

Open the chart page →

26,857
kafkakafka18.0.11 of 1See more

kafka kafka 18.0.1

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
kafkace/kafka:v3.7.1-63ba8d27adc206bf5a4
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

3,821
lakekeeperlakekeeperVerified publisher0.12.01 of 2See more

lakekeeper lakekeeper 0.12.0

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
dash@0.5.12-12
no fix listed

Open the chart page →

2,528
litmuslitmuschaos3.30.02 of 6See more

litmus litmuschaos 3.30.0

2 of the 6 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
bitnamilegacy/mongodb:8.0.13-debian-12-r02579e968033e
dash@0.5.12-2
no fix listed
bitnamilegacy/os-shell:12-debian-12-r5177e65e9d633e
dash@0.5.12-2
no fix listed

Open the chart page →

8,574
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8a02508cbdcf
dash@0.5.12-12
no fix listed

Open the chart page →

3,179
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
dash@0.5.12-12
no fix listed

Open the chart page →

5,102
netris-controllernetrisai2.8.24 of 14See more

netris-controller netrisai 2.8.2

4 of the 14 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
netrisai/controller-grpc:4.6.0.00753178bf173c2
dash@0.5.10.2-6
no fix listed
netrisai/controller-telescope:4.6.0.00414d82948a8b2
dash@0.5.10.2-6
no fix listed
netrisai/controller-telescope-notifier:3.0.455e826ef9a5d
dash@0.5.10.2-6
no fix listed
netrisai/controller-web-session-generator:0.2.0a030a31289f4
dash@0.5.10.2-6
no fix listed

Open the chart page →

37,622
hedgedocnicholaswildeVerified publisher1.1.01 of 1See more

hedgedoc nicholaswilde 1.1.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/hedgedoc:version-1.9.0792a12ee976a
dash@0.5.8-2.10
no fix listed

Open the chart page →

13,339
smtpntppoolVerified publisher2.4.11 of 1See more

smtp ntppool 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/egos-tech/smtp:1.2.304330a8ab3d5
dash@0.5.12-12
no fix listed

Open the chart page →

2,725
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/postgres:16.109f23e02d766
dash@0.5.12-2
no fix listed

Open the chart page →

20,741
paperless-ngxpaperless-ngxVerified publisher0.3.233 of 3See more

paperless-ngx paperless-ngx 0.3.23

3 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
dash@0.5.12-2
no fix listed
valkey/valkey:9.1.2418652cfb58e
dash@0.5.12-12
no fix listed
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
dash@0.5.12-12
no fix listed

Open the chart page →

9,020
spring-petclinic-cloudplatform9-communityVerified publisher0.2.05 of 6See more

spring-petclinic-cloud platform9-community 0.2.0

5 of the 6 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
platform9community/admin-server:latestde3fa9b70df1
dash@0.5.8-2.10
no fix listed
platform9community/api-gateway:latest40a4970de568
dash@0.5.8-2.10
no fix listed
platform9community/customers-service:latest2089811e5cc6
dash@0.5.8-2.10
no fix listed
platform9community/vets-service:latestd1165c94dfb3
dash@0.5.8-2.10
no fix listed
platform9community/visits-service:latest8d11b50368c6
dash@0.5.8-2.10
no fix listed

Open the chart page →

48,297
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

15,694
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
dash@0.5.10.2-6
no fix listed

Open the chart page →

12,435
tbmq-clustertbmq-helm-chartOfficialVerified publisher2.3.02 of 3See more

tbmq-cluster tbmq-helm-chart 2.3.0

2 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
thingsboard/tbmq-integration-executor:2.4.0b5a9c1addf80
dash@0.5.12-12
no fix listed
thingsboard/tbmq-node:2.4.070661025dba5
dash@0.5.12-12
no fix listed

Open the chart page →

3,817
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
dash@0.5.10.2-6
no fix listed

Open the chart page →

8,267
plexutkuozdemirVerified publisher2.1.11 of 1See more

plex utkuozdemir 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
linuxserver/plex:1.25.24a13ced2326c
dash@0.5.10.2-6
no fix listed

Open the chart page →

6,654
elasticsearch-clusterwiremindVerified publisher4.5.41 of 2See more

elasticsearch-cluster wiremind 4.5.4

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/elasticsearch:8.19.22d071f96fab6c
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

826
istio-operatorwiremindVerified publisher1.18.21 of 1See more

istio-operator wiremind 1.18.2

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
istio/operator:1.18.270f9d1fe5fff
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

6,401
zabbix-serveraekondratievVerified publisher1.0.63 of 4See more

zabbix-server aekondratiev 1.0.6

3 of the 4 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
zabbix/zabbix-agent:ubuntu-5.4.62127168cab03
dash@0.5.10.2-6
no fix listed
zabbix/zabbix-server-pgsql:ubuntu-5.4.66c946b1f45cd
dash@0.5.10.2-6
no fix listed
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
dash@0.5.10.2-6
no fix listed

Open the chart page →

31,906
phpmyadminalekcVerified publisher0.3.11 of 1See more

phpmyadmin alekc 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apachee1d42a6985a9
dash@0.5.12-12
no fix listed

Open the chart page →

2,735
crowdatlassian-data-centerVerified publisher2.0.171 of 2See more

crowd atlassian-data-center 2.0.17

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
atlassian/crowd:7.2.4c7c8e2423952
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

1,456
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
dash@0.5.12-2
no fix listed

Open the chart page →

7,087
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
dash@0.5.10.2-6
no fix listed

Open the chart page →

12,826
memcachedcloudpirates-memcachedVerified publisher0.14.121 of 1See more

memcached cloudpirates-memcached 0.14.12

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/memcached:1.6.45405a445c7c81
dash@0.5.12-12
no fix listed

Open the chart page →

764
cluster-secretclutersecretVerified publisher0.7.01 of 1See more

cluster-secret clutersecret 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
quay.io/clustersecret/clustersecret:0.0.14a9f835d1b241
dash@0.5.12-2
no fix listed

Open the chart page →

3,362
convoyconvoyVerified publisher3.7.132 of 3See more

convoy convoy 3.7.13

2 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
bitnamilegacy/postgresql:17.6.0-debian-12-r4926356130b77
dash@0.5.12-2
no fix listed
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
dash@0.5.12-2
no fix listed

Open the chart page →

6,983
cortexcortex3.4.02 of 4See more

cortex cortex 3.4.0

2 of the 4 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/memcached:1.6.452046d6d2eb7c
dash@0.5.12-12
no fix listed
library/nginx:1.31f9ea18bfa4fa
dash@0.5.12-12
no fix listed

Open the chart page →

3,602
grayloggraylog2OfficialVerified publisher2.1.01 of 2See more

graylog graylog2 2.1.0

1 of the 2 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
graylog/graylog-enterprise:7.1.88a1f641cd7aa
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

1,940
valkeygroundhog2k2.3.41 of 1See more

valkey groundhog2k 2.3.4

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
valkey/valkey:9.1.2418652cfb58e
dash@0.5.12-12
no fix listed

Open the chart page →

764
hasurahasura-extraVerified publisher3.0.11 of 1See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
hasura/graphql-engine:v2.34.0-ce0111b0204136
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

5,323
docmosthelmforgeVerified publisher1.4.13 of 4See more

docmost helmforge 1.4.1

3 of the 4 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
docmost/docmost:0.96.0b56947fcfd08
dash@0.5.12-12
no fix listed
library/postgres:18.6-trixiefc973eb97c9f
dash@0.5.12-12
no fix listed
library/redis:8.10.2c94085d298b7
dash@0.5.12-12
no fix listed

Open the chart page →

4,393
wordpresshelmforgeVerified publisher3.0.91 of 3See more

wordpress helmforge 3.0.9

1 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
library/wordpress:7.1.2-apachee04cf657f248
dash@0.5.12-12
no fix listed

Open the chart page →

4,032
coturnjaconiVerified publisher1.0.51 of 1See more

coturn jaconi 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
coturn/coturn:4.10.0-r1f4c2af06c3c5
dash@0.5.12-12
no fix listed

Open the chart page →

3,490
mongooseimmongoose0.4.111 of 1See more

mongooseim mongoose 0.4.11

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
erlangsolutions/mongooseim:6.6.0cc5bf032931f
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

1,481
jira-softwaremoxVerified publisher2.7.11 of 3See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
atlassian/jira-software:9.7.264a75aa4ec4e
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

9,109
nginx-ingressnginx-ingress-chartVerified publisher0.0.0-edge1 of 1See more

nginx-ingress nginx-ingress-chart 0.0.0-edge

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
nginx/nginx-ingress:edged127d1013198
dash@0.5.12-12
no fix listed

Open the chart page →

1,437
technitium-dnsserverobeoneVerified publisher1.13.31 of 1See more

technitium-dnsserver obeone 1.13.3

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
technitium/dns-server:15.6.01045db38fd2f
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

691
passboltpassbolt2.2.06 of 6See more

passbolt passbolt 2.2.0

6 of the 6 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
bitnamilegacy/mariadb:12.0.2-debian-12-r0888cdaae3cb9
dash@0.5.12-2
no fix listed
bitnamilegacy/redis:8.2.1-debian-12-r025bf63f3caf7
dash@0.5.12-2
no fix listed
bitnamilegacy/redis-sentinel:8.2.1-debian-12-r00ca3ea1d2f82
dash@0.5.12-2
no fix listed
library/haproxy:3.4.3135f3e6d5a12
dash@0.5.12-12
no fix listed
library/mariadb:latestd4fdec0510ad
dash@0.5.12-12ubuntu3
no fix listed
passbolt/passbolt:5.16.0-1-ce1768916a04b1
dash@0.5.12-12
no fix listed

Open the chart page →

13,721
reposilitereposilite1.4.21 of 1See more

reposilite reposilite 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-102473.

Container imageDigestPackageFixed in
dzikoysk/reposilite:3.6.390de4c8e6c0e
dash@0.5.12-6ubuntu5
no fix listed

Open the chart page →

1,251

Container images carrying it

2,664 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3180688274b2c
dash@0.5.12-12
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.17419aa33eb17
dash@0.5.12-12
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/kubectl:v19.4.1a072f0a41f28
dash@0.5.12-12
no fix listed
1
registry.gitlab.com/infinitydon/registry/open5gs-aio:v2.2.2f6385712935f
dash@0.5.10.2-6
no fix listed
1
registry.gitlab.com/school_guy/docker-typo3:13.4.30-197d868ed76185d7270d
dash@0.5.12-2
no fix listed
1
registry.k8s.io/csi-secrets-store/driver:v1.6.1b48d7d13dd06
dash@0.5.12-2
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.5.00e64aedb0d0a
dash@0.5.12-12
no fix listed
1
registry.k8s.io/git-sync/git-sync:v4.1.0fd9722fd02e3
dash@0.5.12-2
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v0.8.2052f0618e9bc2
dash@0.5.12-2
no fix listed
1
registry.k8s.io/node-problem-detector/node-problem-detector:v1.35.1c380751accc5
dash@0.5.12-2
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.8.03e2bf2eaef9f
dash@0.5.12-2
no fix listed
1
registry.k8s.io/sig-storage/local-volume-provisioner:v2.9.0f9d65db8bda2
dash@0.5.12-2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.13.41eb5a85180a4
dash@0.5.12-2
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
dash@0.5.12-2
no fix listed
1

syft 1.42.1 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.