StackRadar

CVE-2026-102474

Medium

Advisory

Published 29 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,656
of 17,985 indexed, latest versions
Container images
2,632
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,656 of 17,985 indexed charts deploy, on 2,632 images.

Affected packageAffected versionsFixed inImages
dashdeb0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+6 moreno fix listed2,632
OSV records
DEBIAN-CVE-2026-102474ECHO-a40f-fcbc-6816UBUNTU-CVE-2026-102474
Trending
Rank 12 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,656 by stars
ChartLatestAffected imagesRadar Score
changedetection-iozekker6Verified publisher1.103.01 of 1See more

changedetection-io zekker6 1.103.0

1 of the 1 container images this version deploys carry CVE-2026-102474.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.834df3680db1c
dash@0.5.12-2
no fix listed

Open the chart page →

2,932
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-102474.

Container imageDigestPackageFixed in
library/nginx:latestabe47724e466
dash@0.5.12-12
no fix listed

Open the chart page →

1,859
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102474.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
dash@0.5.12-2
no fix listed

Open the chart page →

5,018
zimagizimagi2.7.171 of 6See more

zimagi zimagi 2.7.17

1 of the 6 container images this version deploys carry CVE-2026-102474.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.15.331407c0e8e32
dash@0.5.12-2
no fix listed

Open the chart page →

2,135
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-102474.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
dash@0.5.8-2.10
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
dash@0.5.10.2-6
no fix listed

Open the chart page →

9,696
zoo-project-druzoo-projectOfficialVerified publisher0.10.81 of 6See more

zoo-project-dru zoo-project 0.10.8

1 of the 6 container images this version deploys carry CVE-2026-102474.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

6,744

Container images carrying it

2,632 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
library/mariadb:12.3.3:lts805c8e104bd5
dash@0.5.12-6ubuntu5
no fix listed
1
library/mariadb:10.6.218a16204dc96c
dash@0.5.10.2-6
no fix listed
1
library/mariadb:10.79a48ac9f196f
dash@0.5.10.2-6
no fix listed
1
library/mariadb:12.3.2a02fe89cb597
dash@0.5.12-6ubuntu5
no fix listed
1
library/mariadb:12.2.2b1cb255a9939
dash@0.5.12-6ubuntu5
no fix listed
1
library/mariadb:10.10.2bfc25a68e113
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
library/mariadb:12.3.3:latest:ltsdd9b303aed4f
dash@0.5.12-6ubuntu5
no fix listed
1
library/mariadb:10.6.15e22328f4d714
dash@0.5.10.2-6
no fix listed
1
library/mariadb:10.9.4fbb8456ebdb1
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
library/mariadb:11.7.2fcc7fcd7114a
dash@0.5.12-6ubuntu5
no fix listed
1
library/matomo:5.14.0-apache0b4d0c328722
dash@0.5.12-12
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
dash@0.5.12-2
no fix listed
1
library/mediawiki:1.43.08b19e819f2e1
dash@0.5.12-2
no fix listed
1
library/memcached:1.6.4226983a43c918
dash@0.5.12-12
no fix listed
1
library/memcached:1.6.409ae868852d0b
dash@0.5.12-12
no fix listed
1
library/memcached:1.6.40cc523a19da58
dash@0.5.12-12
no fix listed
1
library/memcached:1.6.45dc561d52bb8a
dash@0.5.12-12
no fix listed
1
library/mongo:7.0.140032d2ca20db
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
library/mongo:noble02eb14a1130c
dash@0.5.12-6ubuntu5
no fix listed
1
library/mongo:4.4.1305678ae4e5e1
dash@0.5.10.2-6
no fix listed
1
library/mongo:3.6146c1fd999a6
dash@0.5.8-2.1ubuntu2
no fix listed
1
library/mongo:5.0.32-focal3b6c281e1c08
dash@0.5.10.2-6
no fix listed
1
library/mongo:4.4-bionic3d0e6df9fd5b
dash@0.5.8-2.10
no fix listed
1
library/mongo:8.04968f22d0c6c
dash@0.5.12-6ubuntu5
no fix listed
1
library/mongo:5.0.14-focal50cae5081ab4
dash@0.5.10.2-6
no fix listed
1
library/mongo:6.0.12646902910d6a
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
library/mongo:4.2699d652ed674
dash@0.5.8-2.10
no fix listed
1
library/mongo:6.0.271a63fc2438e
dash@0.5.10.2-6
no fix listed
1
library/mongo:5.0.217c81758cb295
dash@0.5.10.2-6
no fix listed
1
library/mongo:7.0-jammy:7-jammy84c4a18b60a0
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
library/mongo:7.0.28-jammy88785f6f665a
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
library/mongo:4.2.21-bionic9cb28f7291d9
dash@0.5.8-2.10
no fix listed
1
library/mongo:7.0.12ae1cf99fa7bf
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
library/mongo:4.4.18d23ec07162ca
dash@0.5.10.2-6
no fix listed
1
library/mongo:8.0.11dca8d11fe467
dash@0.5.12-6ubuntu5
no fix listed
1
library/mongo:8.2.12e0ce8c35124d
dash@0.5.12-6ubuntu5
no fix listed
1
library/mongo:7-jammyf71f6d0913c9
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
library/mysql:8.0-debian9382e4f6f7f0
dash@0.5.12-2
no fix listed
1
library/neo4j:2026.05.0-enterprise2caf944aa4a5
dash@0.5.12-12
no fix listed
1
library/neo4j:2026.02.25ab4ab0358cf
dash@0.5.12-12
no fix listed
1
library/neo4j:2026.05.06c162e2432f8
dash@0.5.12-12
no fix listed
1
library/nextcloud:35.0.1-apache276547e033df
dash@0.5.12-12
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
dash@0.5.12-2
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
dash@0.5.12-12
no fix listed
1
library/nginx:1.31:1.31.5:latest:trixie05b8cb60c354
dash@0.5.12-12
no fix listed
1
library/nginx:1.27.409369da6b103
dash@0.5.12-2
no fix listed
1
library/nginx:1.28146adea4768b
dash@0.5.12-12
no fix listed
1
library/nginx:1.291881968aff6f
dash@0.5.12-12
no fix listed
1
library/nginx:1.276784fb0834aa
dash@0.5.12-2
no fix listed
1
library/nginx:1.25.167f9a4f10d14
dash@0.5.12-2
no fix listed
1

syft 1.42.1 · advisories as of 3 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.