StackRadar

CVE-2026-102991

Medium

Advisory

Published 2 Oct 2026In the index since 3 Oct 2026
Severity
Medium
worst across findings
CVSS
6.5
base score, highest
EPSS
0.004
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
169
of 18,026 indexed, latest versions
Container images
169
deployed by those charts
Fix available
1 of 2
affected packages

Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

Carried by container images the latest versions of 169 of 18,026 indexed charts deploy, on 169 images.

Affected packageAffected versionsFixed inImages
makopypi0.8.1, 1.0.2, 1.0.6.dev0, 1.0.7+28 more1.4.2169
makodeb1.0.7+ds1-1, 1.1.0+ds1-1ubuntu2.1, 1.3.2-1no fix listed4
OSV records
GHSA-5639-2j2p-m4mxUBUNTU-CVE-2026-102991

Charts affected

169 by stars
ChartLatestAffected imagesRadar Score
pgadmin4runixVerified publisher1.70.41 of 1See more

pgadmin4 runix 1.70.4

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
dpage/pgadmin4:9.18c332c5f6dfba
mako@1.4.1
1.4.2

Open the chart page →

93
jupyterhubjupyterhubOfficialVerified publisher4.4.22 of 7See more

jupyterhub jupyterhub 4.4.2

2 of the 7 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
quay.io/jupyterhub/k8s-hub:4.4.2108fbb01c3fe
mako@1.4.1
1.4.2
quay.io/jupyterhub/k8s-singleuser-sample:4.4.265e1b09fc8c9
mako@1.4.1
1.4.2

Open the chart page →

9,657
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
mako@1.3.2
1.4.2

Open the chart page →

12,488
mlflowcommunity-chartsVerified publisher1.11.71 of 1See more

mlflow community-charts 1.11.7

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
burakince/mlflow:3.16.0ab4b566644b9
mako@1.4.1
1.4.2

Open the chart page →

1,044
difydify-helmVerified publisher0.38.01 of 11See more

dify dify-helm 0.38.0

1 of the 11 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
langgenius/dify-api:1.16.1dcefa5f7c47c
mako@1.3.12
1.4.2

Open the chart page →

72,642
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
mako@1.3.9
1.4.2

Open the chart page →

6,700
supersetcloudposse1.2.01 of 1See more

superset cloudposse 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
mako@1.0.14
1.4.2

Open the chart page →

7,585
fadicetic0.3.13 of 25See more

fadi cetic 0.3.1

3 of the 25 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
amancevice/superset:0.35.212a0a9e66550
mako@1.0.14
1.4.2
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
mako@1.1.3
1.4.2
jupyterhub/k8s-singleuser-sample:0.11.1e3e6f3051df8
mako@1.1.3
1.4.2

Open the chart page →

141,242
pgadmincetic0.1.121 of 1See more

pgadmin cetic 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
dpage/pgadmin4:latestc332c5f6dfba
mako@1.4.1
1.4.2

Open the chart page →

93
daskhubdask2024.1.12 of 9See more

daskhub dask 2024.1.1

2 of the 9 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
mako@1.3.0
1.4.2
quay.io/jupyterhub/k8s-hub:3.2.12528c6e57587
mako@1.3.0
1.4.2

Open the chart page →

17,045
openshift-secured-pgadmineximiaitVerified publisher0.2.01 of 2See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
dpage/pgadmin4:7.537946e4f3e7b
mako@1.2.4
1.4.2

Open the chart page →

15,398
mealiegeek-cookbookVerified publisher5.1.21 of 2See more

mealie geek-cookbook 5.1.2

1 of the 2 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
mako@1.2.0
1.4.2

Open the chart page →

9,161
mlflowgetindataVerified publisher0.1.21 of 1See more

mlflow getindata 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
mako@1.3.3
1.4.2

Open the chart page →

2,669
machinarislib42Verified publisher0.2.01 of 1See more

machinaris lib42 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/guydavis/machinaris:test50a71a30f18e
mako@1.4.1
1.4.2

Open the chart page →

38,381
observalobservalVerified publisher1.14.01 of 8See more

observal observal 1.14.0

1 of the 8 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/observal/observal-api:1.14.05a20125eafd4
mako@1.3.12
1.4.2

Open the chart page →

6,224
prometheus-prefect-exporterprefectVerified publisher2026.9.162012261 of 1See more

prometheus-prefect-exporter prefect 2026.9.16201226

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
prefecthq/prometheus-prefect-exporter:4.1.06e0e79cabdc2
mako@1.4.1
1.4.2

Open the chart page →

1,092
mealieth-chartsVerified publisher0.5.11 of 1See more

mealie th-charts 0.5.1

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
mako@1.3.10
1.4.2

Open the chart page →

4,621
agentareaagentareaVerified publisher0.0.262 of 17See more

agentarea agentarea 0.0.26

2 of the 17 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latestf9033ebe2e00
mako@1.3.12
1.4.2
agentarea/agentarea-worker:latestf4745afdace1
mako@1.3.12
1.4.2

Open the chart page →

16,532
pysequilabiodatageeks0.1.31 of 7See more

pysequila biodatageeks 0.1.3

1 of the 7 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:0.9.1ec78bdae0fed
mako@1.1.2
1.4.2

Open the chart page →

87,922
rommcrystalnetVerified publisher0.2.201 of 3See more

romm crystalnet 0.2.20

1 of the 3 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
zurdi15/romm:2.3.12db88fe44c89
mako@1.2.4
1.4.2

Open the chart page →

2,052
dagster-cloud-agentdagster-cloudVerified publisher1.13.251 of 1See more

dagster-cloud-agent dagster-cloud 1.13.25

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
dagster/dagster-cloud-agent:1.13.257c13aa1c9a7a
mako@1.4.1
1.4.2

Open the chart page →

1,259
datacube-explorerdatacube-charts0.5.341 of 1See more

datacube-explorer datacube-charts 0.5.34

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/opendatacube/explorer:latest7c25578068cd
mako@1.3.12
1.4.2

Open the chart page →

2,048
mealiedeimosfr-charts1.0.161 of 1See more

mealie deimosfr-charts 1.0.16

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.28.08b02290f4d18
mako@1.4.1
1.4.2

Open the chart page →

3,693
kubedashdevopstalesOfficialVerified publisher4.0.01 of 8See more

kubedash devopstales 4.0.0

1 of the 8 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
devopstales/kubedash:3.1.08bb837da5aec
mako@1.3.10
1.4.2

Open the chart page →

11,978
dominodominoVerified publisher0.1.111 of 3See more

domino domino 0.1.11

1 of the 3 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/tauffer-consulting/domino-rest:latest8bf880fe8c73
mako@1.3.2
1.4.2

Open the chart page →

9,875
pgadmin4folio-org1.2.301 of 1See more

pgadmin4 folio-org 1.2.30

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
dpage/pgadmin4:4.22b1f00b8163cf
mako@1.1.2
1.4.2

Open the chart page →

2,035
bazarrhalkeye0.2.01 of 1See more

bazarr halkeye 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
linuxserver/bazarr:latest8b30e81c4aec
mako@1.3.12
1.4.2

Open the chart page →

246
powerdnsadminhalkeye0.3.11 of 1See more

powerdnsadmin halkeye 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ngoduykhanh/powerdns-admin:0.2.3099371dd9ba6
mako@1.1.3
1.4.2

Open the chart page →

3,455
harp-proxyharp0.8.11 of 1See more

harp-proxy harp 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
makersquad/harp-proxy:0.8.1a40dd258c527
mako@1.3.10
1.4.2

Open the chart page →

7,051
hasher-matcher-actionerhasher-matcher-actioner1.0.01 of 1See more

hasher-matcher-actioner hasher-matcher-actioner 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
mako@1.3.10
1.4.2

Open the chart page →

1,163
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
mako@1.2.3
1.4.2

Open the chart page →

68,187
spoolmanideaplexusVerified publisher2.10.21 of 1See more

spoolman ideaplexus 2.10.2

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/donkie/spoolman:0.27.07aba565eff77
mako@1.3.12
1.4.2

Open the chart page →

2,433
supersetinseefrlab1.4.01 of 4See more

superset inseefrlab 1.4.0

1 of the 4 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
apache/superset:9cdaa280429ec297db16d56c94fd77b5d2aff107975ab033580d
mako@1.1.4
1.4.2

Open the chart page →

9,113
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
mako@1.3.10
1.4.2

Open the chart page →

12,993
jessejesse-chartVerified publisher0.0.461 of 6See more

jesse jesse-chart 0.0.46

1 of the 6 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
salehmir/jesse:1.10.101afa95f979e9
mako@1.3.10
1.4.2

Open the chart page →

3,197
jupyterhub-outpostjupyter-jscVerified publisher2.4.11 of 1See more

jupyterhub-outpost jupyter-jsc 2.4.1

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
jupyterjsc/jupyterhub-outpost:2.3.1aea53b13f235
mako@1.3.11
1.4.2

Open the chart page →

1,925
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
mako@1.3.5
1.4.2

Open the chart page →

22,462
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
langflowai/langflow:latest4304bd9e67db
mako@1.3.12
1.4.2

Open the chart page →

4,639
langflow-runtimelangflow0.1.11 of 1See more

langflow-runtime langflow 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
langflowai/langflow:latest4304bd9e67db
mako@1.3.12
1.4.2

Open the chart page →

436
medusamedusaVerified publisher1.3.111 of 1See more

medusa medusa 1.3.11

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
linuxserver/medusa:v1.0.26-ls29109c553453b32
mako@1.3.12
1.4.2

Open the chart page →

444
mlflow-controllermlflow-deployment-controller0.1.82 of 2See more

mlflow-controller mlflow-deployment-controller 0.1.8

2 of the 2 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
mako@1.2.4
1.4.2
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
mako@1.2.4
1.4.2

Open the chart page →

10,182
mlflow-servermlflowserver0.1.91 of 3See more

mlflow-server mlflowserver 0.1.9

1 of the 3 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
buntha/mlflow:2.1.1154542cc3083
mako@1.2.4
1.4.2

Open the chart page →

7,164
firefox-syncservernicholaswildeVerified publisher0.1.31 of 1See more

firefox-syncserver nicholaswilde 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/crazy-max/firefox-syncserver:1.8.0ab1a959d8105
mako@1.1.3
1.4.2

Open the chart page →

1,455
odoonicholaswildeVerified publisher1.0.01 of 1See more

odoo nicholaswilde 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/nicholaswilde/odoo:version-14.07cff9672ce07
mako@1.0.7
1.4.2

Open the chart page →

7,471
opencveopencve1.2.01 of 3See more

opencve opencve 1.2.0

1 of the 3 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
cleveritcz/opencve:1.5.0c75c1636e0b7
mako@1.3.3
1.4.2

Open the chart page →

2,377
privacyideaprivacyidea1.0.61 of 2See more

privacyidea privacyidea 1.0.6

1 of the 2 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
gpappsoft/privacyidea-docker:3.12.2af7841adad26
mako@1.3.9
1.4.2

Open the chart page →

6,736
mealiertomik-helm-chartsVerified publisher0.0.21 of 1See more

mealie rtomik-helm-charts 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
mako@1.2.4
1.4.2

Open the chart page →

4,711
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
mako@1.0.7+ds1-1
mako@1.0.7
no fix listed
1.4.2

Open the chart page →

14,096
sceptresceptreai0.1.122 of 5See more

sceptre sceptreai 0.1.12

2 of the 5 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
maponyacharles/sceptreai:mlflow-0.1.1242d418654ebd
mako@1.3.12
1.4.2
maponyacharles/sceptreai:api-0.1.127b37b092130a
mako@1.3.12
1.4.2

Open the chart page →

5,408
securosecuroVerified publisher0.16.31 of 4See more

securo securo 0.16.3

1 of the 4 container images this version deploys carry CVE-2026-102991.

Container imageDigestPackageFixed in
ghcr.io/securo-finance/securo-backend:0.16.332db1a9409e1
mako@1.4.1
1.4.2

Open the chart page →

3,647

Container images carrying it

169 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
openstackhelm/keystone:wallaby-ubuntu_focale07d75953d2e
mako@1.1.4
1.4.2
1
pangeo/base-notebook:2024.01.155fbe688a4f80
mako@1.3.0
1.4.2
1
photoprism/photoprism:240711-cefc6fd632ca74
mako@1.3.2-1
mako@1.3.2.dev0
no fix listed
1.4.2
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
mako@1.3.5
1.4.2
1
prefecthq/prometheus-prefect-exporter:4.1.06e0e79cabdc2
mako@1.4.1
1.4.2
1
pschiffe/pdns-admin:0.4.137ebba8c2b8f
mako@1.3.12
1.4.2
1
redash/redash:25.8.000d813437db5
mako@1.3.9
1.4.2
1
redash/redash:10.0.0.b503639392753c0376
mako@1.1.5
1.4.2
1
redash/redash:26.3.0c5c9148f5c38
mako@1.3.9
1.4.2
1
rommapp/romm:5.2.03512f2ca4557
mako@1.3.12
1.4.2
1
rommapp/romm:4.4.1b909e95d1aab
mako@1.3.10
1.4.2
1
salehmir/jesse:1.10.101afa95f979e9
mako@1.3.10
1.4.2
1
sashastudent/uptime-platform:latest37a82b4e598e
mako@1.4.1
1.4.2
1
sslhep/servicex_app:v1.8.6c935e123030d
mako@1.3.12
1.4.2
1
statcan/ckan:2.93921305425b8
mako@1.1.0
1.4.2
1
szurubooru/server:2.5accf2ad9fbc3
mako@1.3.12
1.4.2
1
tachyongroup/mlflow-deployment-controller:mlflow-controller-0.1.87e79b9000856
mako@1.2.4
1.4.2
1
tachyongroup/mlflow-deployment-controller-ui:mlflow-controller-0.1.8f4f7fabe1037
mako@1.2.4
1.4.2
1
tombursch/kitchenowl-backend:v0.7.104a7ed693531b
mako@1.3.12
1.4.2
1
truebyteinnovationllp/jupyterhub-k8s:5.5.06bf978b96279
mako@1.3.12
1.4.2
1
youssef11gaber10/flask-service:latest9c727fcfde76
mako@1.3.12
1.4.2
1
zenmldocker/kitaru-server:0.27.1f1c4675a188b
mako@1.3.12
1.4.2
1
zurdi15/romm:2.3.12db88fe44c89
mako@1.2.4
1.4.2
1
gcr.io/getindata-images-public/mlflow:latest25d6975951f1
mako@1.3.3
1.4.2
1
ghcr.io/afairgiant/medikeep:v0.71.0086579173033
mako@1.4.1
1.4.2
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
mako@1.3.8
1.4.2
1
ghcr.io/crazy-max/firefox-syncserver:1.8.0ab1a959d8105
mako@1.1.3
1.4.2
1
ghcr.io/ctfd/ctfd:3.8.2870e396fddf8
mako@1.3.10
1.4.2
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
mako@1.3.10
1.4.2
1
ghcr.io/donkie/spoolman:0.24.042135965c42d
mako@1.3.12
1.4.2
1
ghcr.io/donkie/spoolman:0.26.1cf9b41e17b93
mako@1.3.12
1.4.2
1
ghcr.io/erlkoenig91/prompt-db-backend:1.0.7ab120359810d
mako@1.3.12
1.4.2
1
ghcr.io/facebook/threatexchange/hma:1.0.1784d09c6b75a7
mako@1.3.10
1.4.2
1
ghcr.io/guydavis/machinaris:test50a71a30f18e
mako@1.4.1
1.4.2
1
ghcr.io/home-operations/bazarr:1.6.217dc1cff22e9
mako@1.3.12
1.4.2
1
ghcr.io/home-operations/bazarr:1.5.680cb090162b4
mako@1.3.8
1.4.2
1
ghcr.io/home-operations/beets:2.3.1cc4975f1a0be
mako@1.3.10
1.4.2
1
ghcr.io/iisas/domino-rest:latest3009350bfc11
mako@1.3.10
1.4.2
1
ghcr.io/kubevoip/kubevoip:v0.6.841c603a93642
mako@1.3.12
1.4.2
1
ghcr.io/linuxserver/mylar3:version-v0.5.3b96f0e97ab3f
mako@1.1.4
1.4.2
1
ghcr.io/linuxserver/sickchill:2021.5.10-1-ls63a607452a692a
mako@1.1.4
1.4.2
1
ghcr.io/mealie-recipes/mealie:v3.2.1322369a5b748
mako@1.2.4
1.4.2
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
mako@1.4.1
1.4.2
1
ghcr.io/mealie-recipes/mealie:v3.28.08b02290f4d18
mako@1.4.1
1.4.2
1
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
mako@1.2.4
1.4.2
1
ghcr.io/mealie-recipes/mealie:v3.7.0bb2939094eed
mako@1.3.10
1.4.2
1
ghcr.io/mlops-for-all/mlflow-tracking-server:3.8-1.30.1-v1.0.0d30e631684c3
mako@1.2.4
1.4.2
1
ghcr.io/nicholaswilde/odoo:version-14.07cff9672ce07
mako@1.0.7
1.4.2
1
ghcr.io/observal/observal-api:1.14.05a20125eafd4
mako@1.3.12
1.4.2
1
ghcr.io/opendatacube/explorer:latest7c25578068cd
mako@1.3.12
1.4.2
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.