CVE-2026-102474
MediumAdvisory
Published 29 Sept 2026In the index since 1 Oct 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.0
- base score, highest
- EPSS
- 0.001
- 3rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 2,620
- of 17,985 indexed, latest versions
- Container images
- 2,578
- deployed by those charts
- Fix available
- None
- affected package
The matching OSV records carry no description.
Carried by container images the latest versions of 2,620 of 17,985 indexed charts deploy, on 2,578 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| dashdeb | 0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+5 more | no fix listed | 2,578 |
- OSV records
- DEBIAN-CVE-2026-102474UBUNTU-CVE-2026-102474ECHO-a40f-fcbc-6816
- Trending
- Rank 35 in indexed charts, since 1 Oct 2026. See the ranking →
Charts affected
2,620 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| moodlehelmforgeVerified publisher | 1.1.2 | 2 of 2See more | 6,444 |
| netboxhelmforgeVerified publisher | 2.0.2 | 3 of 4See more | 4,349 |
| nextcloudhelmforgeVerified publisher | 2.0.0 | 3 of 3See more | 6,554 |
| notediscoveryhelmforgeVerified publisher | 2.0.3 | 1 of 1See more | 1,215 |
| opencuthelmforgeVerified publisher | 1.1.10 | 2 of 5See more | 3,412 |
| paprahelmforgeVerified publisher | 1.0.0 | 1 of 1See more | 3,072 |
| phpmyadminhelmforgeVerified publisher | 2.0.1 | 1 of 1See more | 5,221 |
| pimcorehelmforgeVerified publisher | 2.0.3 | 1 of 6See more | 2,798 |
| qdranthelmforgeVerified publisher | 1.0.5 | 1 of 1See more | 1,048 |
| reactive-resumehelmforgeVerified publisher | 1.0.0 | 2 of 4See more | 3,100 |
| ryothelmforgeVerified publisher | 1.0.0 | 2 of 2See more | 6,218 |
| strapihelmforgeVerified publisher | 2.3.15 | 1 of 3See more | 2,206 |
| supersethelmforgeVerified publisher | 1.3.7 | 3 of 5See more | 5,693 |
| text-embeddings-inferencehelmforgeVerified publisher | 1.0.1 | 1 of 2See more | 1,994 |
| tomcathelmforgeVerified publisher | 1.0.7 | 1 of 2See more | 811 |
| twentyhelmforgeVerified publisher | 1.0.3 | 2 of 5See more | 2,763 |
| wallabaghelmforgeVerified publisher | 1.3.7 | 1 of 3See more | 2,605 |
| webodmhelmforgeVerified publisher | 1.0.0 | 1See more | — |
| zookeeperhelmforgeVerified publisher | 1.0.2 | 1 of 1See more | 3,280 |
| mywebhelm-httpdVerified publisher | 0.3.0 | 1 of 1See more | 1,426 |
| myapphelmingapp | 0.1.0 | 1 of 1See more | 13,411 |
| jellyfinhelm-l3st86Verified publisher | 0.1.8 | 1 of 1See more | 1,800 |
| openaevhelm-openbasVerified publisher | 2.0.8 | 3 of 7See more | 7,757 |
| openbashelm-openbasVerified publisher | 1.8.14 | 4 of 7See more | 27,052 |
| pageshelm-repo | 1.0.0 | 2 of 3See more | 20,785 |
| steampipehelm-steampipeVerified publisher | 2.4.1 | 1 of 1See more | 3,390 |
| svacerhelm-svacer | 0.6.0 | 1 of 1See more | 6,620 |
| my-nginxhelmtaiwo | 0.1.0 | 1 of 1See more | 1,822 |
| samplehelmapphelmtraining | 3.0.0 | 1 of 1See more | 6,324 |
| openvpn-ashenkiz | 0.0.2 | 1 of 1See more | 11,627 |
| nominatimheywood8-helm-chartsVerified publisher | 3.10.8 | 1 of 3See more | 15,149 |
| hivemq-edgehivemqOfficialVerified publisher | 0.1.36 | 1 of 1See more | 1,517 |
| printserverhmediadeVerified publisher | 1.0.2 | 2 of 4See more | 11,500 |
| cloudbeaverhomeenterpriseinc | 0.6.0 | 1 of 1See more | 9,296 |
| homebridgehomeenterpriseinc | 0.5.0 | 1 of 1See more | 82,018 |
| huginnhomeenterpriseinc | 0.2.0 | 1 of 1See more | 78,058 |
| jacketthomeenterpriseinc | 0.2.0 | 1 of 1See more | 6,419 |
| plexhomeenterpriseinc | 0.14.0 | 1 of 1See more | 7,136 |
| radarrhomeenterpriseinc | 0.2.0 | 1 of 1See more | 6,703 |
| sonarrhomeenterpriseinc | 0.2.0 | 1 of 1See more | 10,842 |
| home-ha-mockhome-ha-mockVerified publisher | 2.0.5 | 1 of 1See more | 3,300 |
| paperlesshomelabcihelmchartstestVerified publisher | 9.1.9 | 1 of 1See more | 17,357 |
| home-security-demohome-security-demoVerified publisher | 2.0.12 | 1 of 3See more | 3,382 |
| paperlesshpVerified publisher | 0.1.2 | 3 of 5See more | 30,498 |
| httpbin2022httpbin2022Verified publisher | 0.1.1 | 1 of 1See more | 77,682 |
| eoloplanthttpd-eoloplant | 0.1.0 | 4 of 7See more | 33,887 |
| jenkinshuangchengwu-helm-chart | 0.1.0 | 1 of 2See more | 499 |
| mariadbhuangchengwu-helm-chart | 0.1.0 | 1 of 1See more | 1,582 |
| prometheushuangchengwu-helm-chart | 0.1.0 | 2 of 3See more | 17,206 |
| skywalking-v1huangchengwu-helm-chart | 0.1.0 | 2 of 4See more | 21,236 |
Container images carrying it
2,578 by charts deploying them
A fixed version is listed for 0 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| joplin/ | 3f7b852959aa | dash | no fix listed | 3 |
| library/ | 6ca49afbcb2b | dash | no fix listed | 3 |
| library/ | a484819eb602 | dash | no fix listed | 3 |
| library/ | 64af3819f927 | dash | no fix listed | 3 |
| library/ | 008173c23f95 | dash | no fix listed | 3 |
| library/ | 7d0f24ebb67b | dash | no fix listed | 3 |
| mcp/ | 9362bcf6aa0e | dash | no fix listed | 3 |
| meshery/ | 44b64ee128fb | dash | no fix listed | 3 |
| omecproject/ | d59ccb138ffb | dash | no fix listed | 3 |
| opencloudeu/ | 6e8b2df6c5a4 | dash | no fix listed | 3 |
| opencsghq/ | b98600564e07 | dash | no fix listed | 3 |
| openebs/ | f6c18b0f8c8a | dash | no fix listed | 3 |
| openebs/ | 6afe2123c457 | dash | no fix listed | 3 |
| selenium/ | 02f251d48d5f | dash | no fix listed | 3 |
| sigp/ | 50f66cfebb6d | dash | no fix listed | 3 |
| vaultwarden/ | 1587c45feaa4 | dash | no fix listed | 3 |
| vaultwarden/ | ebdfe70701c6 | dash | no fix listed | 3 |
| ghcr.io/ | f65f53dd9668 | dash | no fix listed | 3 |
| ghcr.io/ | 19ebe07b4daf | dash | no fix listed | 3 |
| ghcr.io/ | 6a5594b7b32c | dash | no fix listed | 3 |
| ghcr.io/ | 34df3680db1c | dash | no fix listed | 3 |
| ghcr.io/ | 896fc7b18b1b | dash | no fix listed | 3 |
| ghcr.io/ | 0502794a4d86 | dash | no fix listed | 3 |
| ghcr.io/ | be083133dfe0 | dash | no fix listed | 3 |
| ghcr.io/ | 5fa76604a81d | dash | no fix listed | 3 |
| ghcr.io/ | 673d5229df1f | dash | no fix listed | 3 |
| ghcr.io/ | c5153b5f079c | dash | no fix listed | 3 |
| public.ecr.aws/ | 8b9208c09d76 | dash | no fix listed | 3 |
| quay.io/ | 2939231d0d3e | dash | no fix listed | 3 |
| quay.io/ | 6545dac92173 | dash | no fix listed | 3 |
| quay.io/ | 2b6db27eaf3d | dash | no fix listed | 3 |
| quay.io/ | 5bf041aacadd | dash | no fix listed | 3 |
| quay.io/ | 60566529446a | dash | no fix listed | 3 |
| quay.io/ | 721b5c9634d4 | dash | no fix listed | 3 |
| quay.io/ | 9795f3f9f031 | dash | no fix listed | 3 |
| quay.io/ | 39f2c6e0af38 | dash | no fix listed | 3 |
| quay.io/ | 01d5d8c4cecb | dash | no fix listed | 3 |
| quay.io/ | 4c3b91bebd3d | dash | no fix listed | 3 |
| quay.io/ | f296c2ec5db7 | dash | no fix listed | 3 |
| quay.io/ | 9d25865295af | dash | no fix listed | 3 |
| quay.io/ | ea6dd1e4ce71 | dash | no fix listed | 3 |
| quay.io/ | 709c7da19c5a | dash | no fix listed | 3 |
| actualbudget/ | 552beab3dec8 | dash | no fix listed | 2 |
| alazidis/ | 0e8c84152201 | dash | no fix listed | 2 |
| alexandreroman/ | 4b79473442be | dash | no fix listed | 2 |
| apache/ | afa47bf1692a | dash | no fix listed | 2 |
| apache/ | 7cdfd8deec92 | dash | no fix listed | 2 |
| apache/ | 319cd8a81ed1 | dash | no fix listed | 2 |
| apache/ | 92d055a84e9e | dash | no fix listed | 2 |
| apache/ | ae0b86d3c4d0 | dash | no fix listed | 2 |