StackRadar

CVE-2026-102474

Medium

Advisory

Published 29 Sept 2026In the index since 1 Oct 2026
Severity
Medium
worst across findings
CVSS
4.0
base score, highest
EPSS
0.001
3rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,654
of 18,026 indexed, latest versions
Container images
2,646
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 2,654 of 18,026 indexed charts deploy, on 2,646 images.

Affected packageAffected versionsFixed inImages
dashdeb0.5.7-4ubuntu1, 0.5.8-2.1ubuntu2, 0.5.8-2.10, 0.5.10.2-6+6 moreno fix listed2,646
OSV records
DEBIAN-CVE-2026-102474UBUNTU-CVE-2026-102474
Trending
Rank 12 in indexed charts, since 1 Oct 2026. See the ranking →

Charts affected

2,654 by stars
ChartLatestAffected imagesRadar Score
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-102474.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
dash@0.5.12-2
no fix listed

Open the chart page →

5,028
zimagizimagi2.7.171 of 6See more

zimagi zimagi 2.7.17

1 of the 6 container images this version deploys carry CVE-2026-102474.

Container imageDigestPackageFixed in
qdrant/qdrant:v1.15.331407c0e8e32
dash@0.5.12-2
no fix listed

Open the chart page →

2,139
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-102474.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
dash@0.5.8-2.10
no fix listed
yandex/clickhouse-server:21.3.204eccfffb01d7
dash@0.5.10.2-6
no fix listed

Open the chart page →

9,700
zoo-project-druzoo-projectOfficialVerified publisher0.10.81 of 6See more

zoo-project-dru zoo-project 0.10.8

1 of the 6 container images this version deploys carry CVE-2026-102474.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-51e7d55383f24594959b69e58518961c6aa66740da112e8d03f1
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed

Open the chart page →

6,746

Container images carrying it

2,646 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/maritimeconnectivity/identityregistry:latest91de8dfffafe
dash@0.5.12-12ubuntu3
no fix listed
1
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
dash@0.5.12-12
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
dash@0.5.12-2
no fix listed
1
ghcr.io/mcp-hangar/mcp-hangar:2.23.0b731546941ce
dash@0.5.12-12
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/app:mainfae3c1f04311
dash@0.5.12-12
no fix listed
1
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
dash@0.5.12-2
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
dash@0.5.12-12
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
dash@0.5.12-12
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.28.08b02290f4d18
dash@0.5.12-12
no fix listed
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
dash@0.5.12-2
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
dash@0.5.12-12
no fix listed
1
ghcr.io/media-streaming-mesh/msm-admission-webhook:latest3e811d67189c
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/media-streaming-mesh/msm-cni:latestfe0b89b818a6
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/media-streaming-mesh/msm-cp:latest8cb08fc7010b
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/media-streaming-mesh/msm-dp:latest7ffcb25b4cfc
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/media-streaming-mesh/msm-nc:latest296fe4970e38
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/mend/renovate-ee-server:15.6.087b77989f48d
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/microboxlabs/miot-harness:0.1.0d548e9ae4b84
dash@0.5.12-12
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:1.21.507011b628e6b
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/middleware-labs/mw-kube-agent:1.12.09c7bc0f9bb35
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/mitos-run/mitos-forkd:v1.6.0979b462ab7d6
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
ghcr.io/mlflow-oidc/mlflow-tracking-server:3.16.1-9.0.2-20261001970ba1cc1e69
dash@0.5.12-12
no fix listed
1
ghcr.io/moghtech/komodo-core:2.3.3bca73d0eee14
dash@0.5.12-12
no fix listed
1
ghcr.io/mollyim/mollysocket:1.1.12a687393f8c8
dash@0.5.12-2
no fix listed
1
ghcr.io/mollyim/mollysocket:1.7.156bce620ff04
dash@0.5.12-2
no fix listed
1
ghcr.io/monicahq/monica-next:main8a02508cbdcf
dash@0.5.12-12
no fix listed
1
ghcr.io/mosn/htnn-controller:v0.3.1c379e66246be
dash@0.5.11+git20210903+057cd650a4ed-3build1
no fix listed
1
ghcr.io/mskazemi/kubeintellect:2.5.0b5d7681d1b9d
dash@0.5.12-12
no fix listed
1
ghcr.io/mumble-voip/mumble-server:v1.6.8703da59810c075
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/music-assistant/server:2.10.528023f8c0d96
dash@0.5.12-12
no fix listed
1
ghcr.io/music-assistant/server:2.7.53522e8a7a8f0
dash@0.5.12-2
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
dash@0.5.12-12
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
dash@0.5.12-2
no fix listed
1
ghcr.io/mweinelt/kea-exporter:v0.7.1d7b77020e924
dash@0.5.12-12
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
dash@0.5.12-12
no fix listed
1
ghcr.io/nefelim4ag/k8s-ssh-bastion:0.5.04d337e14c80b
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
dash@0.5.12-2
no fix listed
1
ghcr.io/netbox-community/netbox:v4.7.26f7177d3ff4d
dash@0.5.12-12ubuntu3
no fix listed
1
ghcr.io/nicholaswilde/writefreely:version-0.13.1c3c8481b7e56
dash@0.5.8-2.10
no fix listed
1
ghcr.io/nicolargo/klances:0.1.374d6d33376eb
dash@0.5.12-12
no fix listed
1
ghcr.io/nmshd/backbone-admin-cli:7.2.1f7d095c04a75
dash@0.5.12-6ubuntu5
no fix listed
1
ghcr.io/noahburrell0/sealed-secrets-ui:v0.1.47e7368fb472d
dash@0.5.12-2
no fix listed
1
ghcr.io/nowakeai/svc-lb-mux:0.1.37d8fb8e996b6
dash@0.5.12-12
no fix listed
1
ghcr.io/obeone/ollama-exporter:latestf43af285c6e0
dash@0.5.12-12
no fix listed
1
ghcr.io/obeone/parcelapp-mcp:0.2.17073131db60b
dash@0.5.12-12
no fix listed
1
ghcr.io/observal/observal-api:1.14.05a20125eafd4
dash@0.5.12-12
no fix listed
1
ghcr.io/oguzhan-yilmaz/argocd-backup-s3:latestb61c750ade19
dash@0.5.12-2
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.2035bc5ca66d55a
dash@0.5.12-2
no fix listed
1
ghcr.io/oguzhan-yilmaz/kdiff-snapshots:0.0.55d7f93d2182fe
dash@0.5.12-2
no fix listed
1
ghcr.io/oguzhan-yilmaz/steampipe-powerpipe-kubernetes--powerpipe:latesta16ab5ca10a7
dash@0.5.12-2
no fix listed
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.