StackRadar

CVE-2026-104851

High

Advisory

Published 5 Oct 2026In the index since 6 Oct 2026
Severity
High
worst across findings
CVSS
8.8
base score, highest
EPSS
0.003
22nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
90
of 18,026 indexed, latest versions
Container images
81
deployed by those charts
Fix available
1 of 1
affected package

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

Carried by container images the latest versions of 90 of 18,026 indexed charts deploy, on 81 images.

Affected packageAffected versionsFixed inImages
fsspecpypi2022.11.0, 2023.12.2, 2024.2.0, 2024.3.1+17 more2026.6.081
OSV records
GHSA-27vj-qcqg-25rc

Charts affected

90 by stars
ChartLatestAffected imagesRadar Score
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
fsspec@2024.3.1
2026.6.0

Open the chart page →

12,488
difydify-helmVerified publisher0.38.02 of 11See more

dify dify-helm 0.38.0

2 of the 11 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
langgenius/dify-agent-backend:1.16.1097d3fd27a7b
fsspec@2026.3.0
2026.6.0
langgenius/dify-api:1.16.1dcefa5f7c47c
fsspec@2025.10.0
2026.6.0

Open the chart page →

72,642
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
fsspec@2025.3.0
2026.6.0

Open the chart page →

6,700
daskdask2024.1.12 of 2See more

dask dask 2024.1.1

2 of the 2 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/dask/dask:2024.1.0080150de7d86
fsspec@2023.12.2
2026.6.0
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
fsspec@2023.12.2
2026.6.0

Open the chart page →

14,183
syftopenmined0.9.51 of 6See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
openmined/syft-backend:0.9.5b72f74a68b32
fsspec@2024.6.1
2026.6.0

Open the chart page →

20,740
paperless-ngxpaperless-ngxVerified publisher0.3.231 of 3See more

paperless-ngx paperless-ngx 0.3.23

1 of the 3 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
fsspec@2026.1.0
2026.6.0

Open the chart page →

9,012
daskhubdask2024.1.11 of 9See more

daskhub dask 2024.1.1

1 of the 9 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
pangeo/base-notebook:2024.01.155fbe688a4f80
fsspec@2023.12.2
2026.6.0

Open the chart page →

17,045
convertigoconvertigoOfficialVerified publisher8.4.51 of 5See more

convertigo convertigo 8.4.5

1 of the 5 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
fsspec@2024.10.0
2026.6.0

Open the chart page →

17,283
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
fsspec@2026.2.0
2026.6.0

Open the chart page →

10,531
flyte-binaryflyte2.0.501 of 4See more

flyte-binary flyte 2.0.50

1 of the 4 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
fsspec@2026.4.0
2026.6.0

Open the chart page →

4,907
observalobservalVerified publisher1.14.01 of 8See more

observal observal 1.14.0

1 of the 8 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/observal/observal-api:1.14.05a20125eafd4
fsspec@2026.4.0
2026.6.0

Open the chart page →

6,224
paperlesszekker6Verified publisher11.10.01 of 1See more

paperless zekker6 11.10.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
fsspec@2026.1.0
2026.6.0

Open the chart page →

4,917
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.1.3aa810a36942c
fsspec@2026.1.0
2026.6.0

Open the chart page →

24,589
agentareaagentareaVerified publisher0.0.262 of 17See more

agentarea agentarea 0.0.26

2 of the 17 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
agentarea/agentarea-api:latestf9033ebe2e00
fsspec@2026.2.0
2026.6.0
agentarea/agentarea-worker:latestf4745afdace1
fsspec@2026.2.0
2026.6.0

Open the chart page →

16,532
dagster-cloud-agentdagster-cloudVerified publisher1.13.251 of 1See more

dagster-cloud-agent dagster-cloud 1.13.25

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
dagster/dagster-cloud-agent:1.13.257c13aa1c9a7a
fsspec@2026.4.0
2026.6.0

Open the chart page →

1,259
datacube-explorerdatacube-charts0.5.341 of 1See more

datacube-explorer datacube-charts 0.5.34

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/opendatacube/explorer:latest7c25578068cd
fsspec@2026.4.0
2026.6.0

Open the chart page →

2,048
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
fsspec@2026.2.0
2026.6.0

Open the chart page →

68,187
immichimmich-helm0.3.01 of 4See more

immich immich-helm 0.3.0

1 of the 4 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
fsspec@2023.12.2
2026.6.0

Open the chart page →

18,204
difykubeblocksVerified publisher0.5.11 of 5See more

dify kubeblocks 0.5.1

1 of the 5 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
langgenius/dify-api:0.6.11fca918260dd6
fsspec@2024.6.0
2026.6.0

Open the chart page →

22,462
langflow-idelangflow0.1.21 of 2See more

langflow-ide langflow 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
langflowai/langflow:latest4304bd9e67db
fsspec@2026.2.0
2026.6.0

Open the chart page →

4,639
langflow-runtimelangflow0.1.11 of 1See more

langflow-runtime langflow 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
langflowai/langflow:latest4304bd9e67db
fsspec@2026.2.0
2026.6.0

Open the chart page →

436
litellmlitellm-helm0.2.01 of 1See more

litellm litellm-helm 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
fsspec@2025.7.0
2026.6.0

Open the chart page →

4,813
model-manager-loadermodel-manager-loader1.27.01 of 1See more

model-manager-loader model-manager-loader 1.27.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
fsspec@2025.9.0
2026.6.0

Open the chart page →

3,402
opentelemetry-demoopentelemetry-helmOfficialVerified publisher0.42.21 of 34See more

opentelemetry-demo opentelemetry-helm 0.42.2

1 of the 34 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:3.1.0-chatbot604b1f493c92
fsspec@2026.4.0
2026.6.0

Open the chart page →

24,500
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
fsspec@2026.1.0
2026.6.0

Open the chart page →

10,250
sentry-k8ssentry-k8sVerified publisher1.4.11 of 11See more

sentry-k8s sentry-k8s 1.4.1

1 of the 11 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
fsspec@2025.9.0
2026.6.0

Open the chart page →

20,212
streamlit-appstreamlit-appVerified publisher0.2.01 of 1See more

streamlit-app streamlit-app 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
sruthitanneru/pi-sample:ui-lateste565ea454ffd
fsspec@2024.10.0
2026.6.0

Open the chart page →

1,940
akto-ai-guardrails-v2akto0.3.01 of 6See more

akto-ai-guardrails-v2 akto 0.3.0

1 of the 6 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
aktosecurity/akto-agent-guard-embedder:1.1.4dbc566b2376c
fsspec@2026.4.0
2026.6.0

Open the chart page →

49,717
akto-regional-setupakto1.4.41 of 9See more

akto-regional-setup akto 1.4.4

1 of the 9 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
aktosecurity/akto-agent-guard-embedder:1.1.6be8b0e235ac6
fsspec@2026.4.0
2026.6.0

Open the chart page →

47,736
litellmalareira0.3.01 of 1See more

litellm alareira 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/berriai/litellm:main-stable32cfd7a427f6
fsspec@2026.4.0
2026.6.0

Open the chart page →

486
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
fsspec@2025.7.0
2026.6.0

Open the chart page →

8,124
immichbear0.1.11 of 2See more

immich bear 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-machine-learning:v3.1.05a0839dc5303
fsspec@2023.12.2
2026.6.0

Open the chart page →

7,816
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
fsspec@2024.10.0
2026.6.0

Open the chart page →

11,826
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
fsspec@2024.10.0
2026.6.0

Open the chart page →

17,923
paperless-ngxcharts-derwitt-devVerified publisher2.1.51 of 1See more

paperless-ngx charts-derwitt-dev 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.2.15fa76604a81d
fsspec@2026.1.0
2026.6.0

Open the chart page →

4,917
chat-searchchat-searchVerified publisher0.1.71 of 1See more

chat-search chat-search 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
ghcr.io/hemslo/chat-search:latest39d48995a5bd
fsspec@2024.6.1
2026.6.0

Open the chart page →

4,445
kube-acp-stackcloudentity2.29.11 of 7See more

kube-acp-stack cloudentity 2.29.1

1 of the 7 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
fsspec@2025.2.0
2026.6.0

Open the chart page →

24,278
galaxycloudve6.8.81 of 3See more

galaxy cloudve 6.8.8

1 of the 3 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
fsspec@2026.4.0
2026.6.0

Open the chart page →

7,039
csghubcsghubVerified publisher2.5.03 of 34See more

csghub csghub 2.5.0

3 of the 34 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opencsghq/agenticflow:ee-v0.6.5-241cba9c366f1
fsspec@2025.3.0
2026.6.0
opencsghq/csgbot:v0.6.9-ee7d0271e26521
fsspec@2026.1.0
2026.6.0
opencsghq/label-studio:v2.5.047e22aa71870
fsspec@2026.2.0
2026.6.0

Open the chart page →

58,956
csgshipcsghubVerified publisher0.4.62 of 10See more

csgship csghub 0.4.6

2 of the 10 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opencsghq/csgship-agentic:v0.4.02cd29671a03e
fsspec@2025.7.0
2026.6.0
opencsghq/csgship-web:v0.4.0c36a5bac3cf0
fsspec@2025.7.0
2026.6.0

Open the chart page →

13,762
dataflowcsghubVerified publisher2.5.01 of 7See more

dataflow csghub 2.5.0

1 of the 7 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opencsghq/label-studio:v2.5.047e22aa71870
fsspec@2026.2.0
2026.6.0

Open the chart page →

8,254
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
fsspec@2024.6.1
2026.6.0

Open the chart page →

19,384
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
fsspec@2025.3.0
2026.6.0

Open the chart page →

5,767
datacube-indexdatacube-charts0.4.41 of 2See more

datacube-index datacube-charts 0.4.4

1 of the 2 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opendatacube/ows:latest668cbb41473c
fsspec@2024.12.0
2026.6.0

Open the chart page →

6,834
datacube-wpsdatacube-charts0.9.01 of 1See more

datacube-wps datacube-charts 0.9.0

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
opendatacube/wps:latest80df355a660b
fsspec@2025.3.2
2026.6.0

Open the chart page →

6,842
datagrokdatagrok1.0.31 of 7See more

datagrok datagrok 1.0.3

1 of the 7 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
datagrok/grok_spawner:latest8c2d48c1545c
fsspec@2026.4.0
2026.6.0

Open the chart page →

2,720
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
fsspec@2024.10.0
2026.6.0

Open the chart page →

10,735
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
fsspec@2024.10.0
2026.6.0

Open the chart page →

10,735
difydify1.0.01 of 4See more

dify dify 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
langgenius/dify-api:1.0.0066035f93856
fsspec@2025.2.0
2026.6.0

Open the chart page →

56,689
huntingfactlyVerified publisher0.4.141 of 1See more

hunting factly 0.4.14

1 of the 1 container images this version deploys carry CVE-2026-104851.

Container imageDigestPackageFixed in
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
fsspec@2022.11.0
2026.6.0

Open the chart page →

5,300

Container images carrying it

81 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
opendatacube/wps:latest80df355a660b
fsspec@2025.3.2
2026.6.0
1
openmined/syft-backend:0.9.5b72f74a68b32
fsspec@2024.6.1
2026.6.0
1
pangeo/base-notebook:2024.01.155fbe688a4f80
fsspec@2023.12.2
2026.6.0
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
fsspec@2024.6.1
2026.6.0
1
redash/redash:25.8.000d813437db5
fsspec@2025.3.0
2026.6.0
1
redash/redash:26.3.0c5c9148f5c38
fsspec@2025.3.0
2026.6.0
1
sruthitanneru/pi-sample:ui-lateste565ea454ffd
fsspec@2024.10.0
2026.6.0
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
fsspec@2025.12.0
2026.6.0
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
fsspec@2025.2.0
2026.6.0
1
vabene1111/recipes:2.3.50f8d061895e9
fsspec@2025.10.0
2026.6.0
1
yetiplatform/yeti:2.9.09bcbe2650a14
fsspec@2026.3.0
2026.6.0
1
yetiplatform/yeti:latest9c3006cedcca
fsspec@2026.3.0
2026.6.0
1
ghcr.io/berriai/litellm:1.102.0:main-stable32cfd7a427f6
fsspec@2026.4.0
2026.6.0
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
fsspec@2025.7.0
2026.6.0
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
fsspec@2024.10.0
2026.6.0
1
ghcr.io/dask/dask:2024.1.0080150de7d86
fsspec@2023.12.2
2026.6.0
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
fsspec@2026.2.0
2026.6.0
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
fsspec@2023.12.2
2026.6.0
1
ghcr.io/getsentry/sentry:26.7.27c5052aa4e3c
fsspec@2025.9.0
2026.6.0
1
ghcr.io/hemslo/chat-search:latest39d48995a5bd
fsspec@2024.6.1
2026.6.0
1
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
fsspec@2025.12.0
2026.6.0
1
ghcr.io/immich-app/immich-machine-learning:v2.3.1379e31b8c751
fsspec@2023.12.2
2026.6.0
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
fsspec@2026.2.0
2026.6.0
1
ghcr.io/observal/observal-api:1.14.05a20125eafd4
fsspec@2026.4.0
2026.6.0
1
ghcr.io/opendatacube/explorer:latest7c25578068cd
fsspec@2026.4.0
2026.6.0
1
ghcr.io/open-telemetry/demo:3.1.0-chatbot604b1f493c92
fsspec@2026.4.0
2026.6.0
1
ghcr.io/unique-ag/ai/search-proxy:2026.40.02bd74586650d
fsspec@2026.4.0
2026.6.0
1
ghcr.io/vinny1892/octantis:latest45459c0910fc
fsspec@2026.2.0
2026.6.0
1
public.ecr.aws/cloudnatix/llmariner/model-manager-loader:1.27.026ac7263a823
fsspec@2025.9.0
2026.6.0
1
quay.io/ai-lab/llamacpp_python:latest70d138997acd
fsspec@2025.5.1
2026.6.0
1
quay.io/galaxyproject/galaxy-min:26.1.12c324c9789f5
fsspec@2026.4.0
2026.6.0
1

syft 1.42.1 · advisories as of 6 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.