StackRadar

CVE-2026-102827

High

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
High
worst across findings
CVSS
8.1
base score, highest
EPSS
0.004
28th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
41
of 18,035 indexed, latest versions
Container images
38
deployed by those charts
Fix available
1 of 1
affected package

simple-git: unsafe-operations plugin bypass via git long-option abbreviation (--receive-p/--exe) -> command execution (residual of CVE-2026-28291)

Carried by container images the latest versions of 41 of 18,035 indexed charts deploy, on 38 images.

Affected packageAffected versionsFixed inImages
simple-gitnpm1.92.0, 1.122.0, 1.132.0, 2.21.0+14 more4.0.038
OSV records
GHSA-858h-whjf-mvg5

Charts affected

41 by stars
ChartLatestAffected imagesRadar Score
n8ncommunity-chartsVerified publisher1.24.431 of 1See more

n8n community-charts 1.24.43

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.687e0bab2c931
simple-git@3.36.0
4.0.0

Open the chart page →

1,436
n8nopen-8gears2.1.11 of 1See more

n8n open-8gears 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.8cfe2704ff858
simple-git@3.36.0
4.0.0

Open the chart page →

2,298
n8nn8n0.23.01 of 1See more

n8n n8n 0.23.0

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
n8nio/n8n:1.33.1dd171d45102a
simple-git@3.17.0
4.0.0

Open the chart page →

6,261
n8nhelmforgeVerified publisher2.1.31 of 2See more

n8n helmforge 2.1.3

1 of the 2 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
n8nio/n8n:2.41.3fdce8f852ac7
simple-git@3.36.0
4.0.0

Open the chart page →

1,797
n8nlinogicsVerified publisher0.136.01 of 1See more

n8n linogics 0.136.0

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
n8nio/n8n:0.136.0e8302e8bd402
simple-git@2.45.0
4.0.0

Open the chart page →

7,582
etherpadnicholaswildeVerified publisher1.0.21 of 1See more

etherpad nicholaswilde 1.0.2

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/etherpad:version-1.8.1426bbd45110d5
simple-git@2.40.0
4.0.0

Open the chart page →

4,295
wikijsgeek-cookbookVerified publisher6.4.21 of 1See more

wikijs geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
simple-git@2.21.0
4.0.0

Open the chart page →

6,280
community-solid-servercommunity-solid-server3.0.01 of 1See more

community-solid-server community-solid-server 3.0.0

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
solidproject/community-server:6.0.2ccc4acb7e9a1
simple-git@3.18.0
4.0.0

Open the chart page →

1,816
activepiecesmeyerchartsVerified publisher0.1.61 of 1See more

activepieces meyercharts 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
activepieces/activepieces:0.23.0c26188b44e62
simple-git@3.21.0
4.0.0

Open the chart page →

3,448
n8none-acre-fundVerified publisher0.1.521 of 3See more

n8n one-acre-fund 0.1.52

1 of the 3 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
n8nio/n8n:0.212.0a9195bc499a3
simple-git@3.16.0
4.0.0

Open the chart page →

8,500
nocodbzekker6Verified publisher1.10.01 of 1See more

nocodb zekker6 1.10.0

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
nocodb/nocodb:0.301.5d9516f0bf546
simple-git@3.33.0
4.0.0

Open the chart page →

5,239
directusdirectus-io2.1.01 of 3See more

directus directus-io 2.1.0

1 of the 3 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
directus/directus:12.0.29c8470ea465c
simple-git@3.36.0
4.0.0

Open the chart page →

9,382
magic-mirrorgeek-cookbookVerified publisher4.4.21 of 1See more

magic-mirror geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
simple-git@2.37.0
4.0.0

Open the chart page →

5,717
mend-renovate-enterprise-editionmend-renovateVerified publisher10.7.01 of 2See more

mend-renovate-enterprise-edition mend-renovate 10.7.0

1 of the 2 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
ghcr.io/mend/renovate-ee-server:15.7.063e0ca823222
simple-git@3.36.0
4.0.0

Open the chart page →

37,125
n8nn8n-helm2.25.71 of 1See more

n8n n8n-helm 2.25.7

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
n8nio/n8n:2.25.7761374d4eb84
simple-git@3.36.0
4.0.0

Open the chart page →

3,858
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
treskon/portrait-ui:DEV-lateste7970783bc8d
simple-git@3.36.0
4.0.0

Open the chart page →

36,191
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
simple-git@3.36.0
4.0.0

Open the chart page →

21,571
wikiwenerme2.2.01 of 2See more

wiki wenerme 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
simple-git@3.30.0
4.0.0

Open the chart page →

2,618
activepiecesadnoctemVerified publisher0.7.01 of 1See more

activepieces adnoctem 0.7.0

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
activepieces/activepieces:0.92.1d22e3f36f78d
simple-git@3.36.0
4.0.0

Open the chart page →

1,814
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
simple-git@3.22.0
4.0.0

Open the chart page →

36,229
mx-apibicarus-labs0.1.01 of 4See more

mx-api bicarus-labs 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
simple-git@2.48.0
4.0.0

Open the chart page →

5,451
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
simple-git@1.122.0
4.0.0

Open the chart page →

26,551
activepiecesfmjstudios0.2.31 of 1See more

activepieces fmjstudios 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
activepieces/activepieces:0.28.0a12efde0c535
simple-git@3.21.0
4.0.0

Open the chart page →

3,854
wikijshomeenterpriseinc1.4.01 of 1See more

wikijs homeenterpriseinc 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
requarks/wiki:canary-2.5.2438b5865a7386c
simple-git@2.21.0
4.0.0

Open the chart page →

4,614
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
ibmcom/microclimate-portal:latested5505e5c7ec
simple-git@1.92.0
4.0.0

Open the chart page →

117,403
interbtc-hydrainterlay0.1.151 of 4See more

interbtc-hydra interlay 0.1.15

1 of the 4 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
simple-git@2.45.1
4.0.0

Open the chart page →

7,785
n8njanip81-helm-chartsVerified publisher0.1.41 of 1See more

n8n janip81-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
n8nio/n8n:1.86.08b39ed5a2de9
simple-git@3.17.0
4.0.0

Open the chart page →

7,077
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
simple-git@3.30.0
4.0.0

Open the chart page →

9,674
n8nn8n-openshiftVerified publisher1.18.01 of 1See more

n8n n8n-openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
simple-git@3.36.0
4.0.0

Open the chart page →

2,298
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
simple-git@3.33.0
4.0.0

Open the chart page →

4,613
n8nopenshift1.18.01 of 1See more

n8n openshift 1.18.0

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
n8nio/n8n:2.36.714c4285bc303
simple-git@3.36.0
4.0.0

Open the chart page →

2,298
prismeai-coreprismeai1.12.31 of 7See more

prismeai-core prismeai 1.12.3

1 of the 7 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-workspaces:prode64a1cb3aa42
simple-git@3.36.0
4.0.0

Open the chart page →

5,689
elkrivals-spaceVerified publisher0.1.11 of 1See more

elk rivals-space 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
ghcr.io/elk-zone/elk:maind31e95cf9a89
simple-git@3.36.0
4.0.0

Open the chart page →

410
elk-frontendschoenwald0.2.221 of 1See more

elk-frontend schoenwald 0.2.22

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
ghcr.io/elk-zone/elk:v1.0.1236faedcb68a
simple-git@3.36.0
4.0.0

Open the chart page →

683
fdi-dotstatsuite-dlmstatcan0.3.11 of 1See more

fdi-dotstatsuite-dlm statcan 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
simple-git@1.132.0
4.0.0

Open the chart page →

4,157
fdi-dotstatsuite-sfs-solrstatcan1.0.21 of 4See more

fdi-dotstatsuite-sfs-solr statcan 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
simple-git@1.132.0
4.0.0

Open the chart page →

7,006
fdi-dotstatsuite-sfs-solr-statefulstatcan1.0.21 of 2See more

fdi-dotstatsuite-sfs-solr-stateful statcan 1.0.2

1 of the 2 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
simple-git@1.132.0
4.0.0

Open the chart page →

1,331
supabaseteochenglim0.1.21 of 13See more

supabase teochenglim 0.1.2

1 of the 13 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
supabase/studio:latestfdb56cfa1705
simple-git@3.36.0
4.0.0

Open the chart page →

10,711
n8nvictorlane1.0.181 of 1See more

n8n victorlane 1.0.18

1 of the 1 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
n8nio/n8n:1.115.1ed16e560c40e
simple-git@3.28.0
4.0.0

Open the chart page →

7,534
wikiwener2.2.01 of 2See more

wiki wener 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
requarks/wiki:latestfffff288a52f
simple-git@3.30.0
4.0.0

Open the chart page →

2,618
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-102827.

Container imageDigestPackageFixed in
requarks/wiki:2af71a17dc27c
simple-git@3.30.0
4.0.0

Open the chart page →

4,340

Container images carrying it

38 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
n8nio/n8n:2.36.714c4285bc303
simple-git@3.36.0
4.0.0
2
requarks/wiki:latestfffff288a52f
simple-git@3.30.0
4.0.0
2
siscc/dotstatsuite-sdmx-faceted-search:master12c5048f7402
simple-git@1.132.0
4.0.0
2
activepieces/activepieces:0.28.0a12efde0c535
simple-git@3.21.0
4.0.0
1
activepieces/activepieces:0.23.0c26188b44e62
simple-git@3.21.0
4.0.0
1
activepieces/activepieces:0.92.1d22e3f36f78d
simple-git@3.36.0
4.0.0
1
bastilimbach/docker-magicmirror:v2.15.041b0835ab31e
simple-git@2.37.0
4.0.0
1
bicarus/mx-api-service:1.0.2-hf1dab88659ae3b
simple-git@2.48.0
4.0.0
1
directus/directus:12.0.29c8470ea465c
simple-git@3.36.0
4.0.0
1
ibmcom/microclimate-portal:latested5505e5c7ec
simple-git@1.92.0
4.0.0
1
interlayhq/interbtc-hydra-processor:master-2c6e16e-1637088364423d567d47aa
simple-git@2.45.1
4.0.0
1
mautic/mautic:7-apacheeb8cc73d97e1
simple-git@3.30.0
4.0.0
1
n8nio/n8n:2.25.7761374d4eb84
simple-git@3.36.0
4.0.0
1
n8nio/n8n:2.41.687e0bab2c931
simple-git@3.36.0
4.0.0
1
n8nio/n8n:1.86.08b39ed5a2de9
simple-git@3.17.0
4.0.0
1
n8nio/n8n:0.212.0a9195bc499a3
simple-git@3.16.0
4.0.0
1
n8nio/n8n:2.36.8cfe2704ff858
simple-git@3.36.0
4.0.0
1
n8nio/n8n:1.33.1dd171d45102a
simple-git@3.17.0
4.0.0
1
n8nio/n8n:0.136.0e8302e8bd402
simple-git@2.45.0
4.0.0
1
n8nio/n8n:1.115.1ed16e560c40e
simple-git@3.28.0
4.0.0
1
n8nio/n8n:2.41.3fdce8f852ac7
simple-git@3.36.0
4.0.0
1
nocodb/nocodb:0.301.5d9516f0bf546
simple-git@3.33.0
4.0.0
1
requarks/wiki:canary-2.5.2438b5865a7386c
simple-git@2.21.0
4.0.0
1
requarks/wiki:2af71a17dc27c
simple-git@3.30.0
4.0.0
1
siscc/dotstatsuite-data-lifecycle-manager:v14.0.0b6f9a7c888fc
simple-git@1.132.0
4.0.0
1
solidproject/community-server:6.0.2ccc4acb7e9a1
simple-git@3.18.0
4.0.0
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
simple-git@3.36.0
4.0.0
1
supabase/studio:latestfdb56cfa1705
simple-git@3.36.0
4.0.0
1
treskon/portrait-ui:DEV-lateste7970783bc8d
simple-git@3.36.0
4.0.0
1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
simple-git@3.33.0
4.0.0
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
simple-git@3.22.0
4.0.0
1
ghcr.io/elk-zone/elk:v1.0.1236faedcb68a
simple-git@3.36.0
4.0.0
1
ghcr.io/elk-zone/elk:maind31e95cf9a89
simple-git@3.36.0
4.0.0
1
ghcr.io/linuxserver/wikijs:version-2.5.20158d377933678
simple-git@2.21.0
4.0.0
1
ghcr.io/mend/renovate-ee-server:15.7.063e0ca823222
simple-git@3.36.0
4.0.0
1
ghcr.io/nicholaswilde/etherpad:version-1.8.1426bbd45110d5
simple-git@2.40.0
4.0.0
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
simple-git@1.122.0
4.0.0
1
registry.gitlab.com/prisme.ai/prisme.ai/prisme.ai-workspaces:prode64a1cb3aa42
simple-git@3.36.0
4.0.0
1

syft 1.42.1 · advisories as of 7 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.