StackRadar

CVE-2026-105460

Medium

Advisory

Published 13 Oct 2026In the index since 15 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
39
of 18,131 indexed, latest versions
Container images
51
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 39 of 18,131 indexed charts deploy, on 51 images.

Affected packageAffected versionsFixed inImages
bluezdeb5.66-1, 5.66-1+deb12u1, 5.66-1+deb12u2, 5.82-1.1no fix listed51
OSV records
DEBIAN-CVE-2026-105460

Charts affected

39 by stars
ChartLatestAffected imagesRadar Score
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
bluez@5.66-1
no fix listed

Open the chart page →

191,990
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
bluez@5.82-1.1
no fix listed

Open the chart page →

11,172
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
bluez@5.82-1.1
no fix listed

Open the chart page →

12,784
home-assistant-matter-servercharts-derwitt-devVerified publisher4.3.01 of 2See more

home-assistant-matter-server charts-derwitt-dev 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/matter-js/matterjs-server:1.4.054232d0d3e7d
bluez@5.82-1.1
no fix listed

Open the chart page →

2,988
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
bluez@5.82-1.1
no fix listed

Open the chart page →

13,229
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
bluez@5.82-1.1
no fix listed

Open the chart page →

13,623
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
bluez@5.66-1+deb12u2
no fix listed

Open the chart page →

37,375
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
bluez@5.66-1+deb12u2
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
bluez@5.66-1+deb12u2
no fix listed

Open the chart page →

34,873
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
bluez@5.66-1+deb12u2
no fix listed

Open the chart page →

8,796
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
bluez@5.66-1
no fix listed

Open the chart page →

52,640
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
bluez@5.66-1+deb12u2
no fix listed

Open the chart page →

12,254
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
bluez@5.66-1+deb12u2
no fix listed

Open the chart page →

10,578
wizarrdjjudas21Verified publisher0.1.51 of 1See more

wizarr djjudas21 0.1.5

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
bluez@5.66-1
no fix listed

Open the chart page →

16,114
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
bluez@5.82-1.1
no fix listed

Open the chart page →

17,081
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
bluez@5.82-1.1
no fix listed

Open the chart page →

9,047
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
bluez@5.66-1+deb12u1
no fix listed

Open the chart page →

14,054
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
bluez@5.66-1+deb12u1
no fix listed

Open the chart page →

21,219
finops-database-handlerkrateo0.5.41 of 1See more

finops-database-handler krateo 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
bluez@5.66-1+deb12u1
no fix listed

Open the chart page →

13,979
finops-webservice-api-mockkrateo0.1.01 of 1See more

finops-webservice-api-mock krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
bluez@5.66-1+deb12u1
no fix listed

Open the chart page →

14,186
kubeflowkromanow94-kubeflow0.5.12 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

2 of the 30 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
bluez@5.66-1
no fix listed
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
bluez@5.66-1+deb12u2
no fix listed

Open the chart page →

87,642
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
bluez@5.82-1.1
no fix listed

Open the chart page →

12,213
mcp-homeassistantmcp-helmVerified publisher0.2.41 of 1See more

mcp-homeassistant mcp-helm 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
voska/hass-mcp:latest7142a431e2c5
bluez@5.66-1+deb12u2
no fix listed

Open the chart page →

12,042
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
bluez@5.66-1+deb12u2
no fix listed

Open the chart page →

116,576
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
bluez@5.66-1
no fix listed

Open the chart page →

15,151
smilencsaVerified publisher1.1.04 of 23See more

smile ncsa 1.1.0

4 of the 23 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
bluez@5.66-1
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
bluez@5.66-1
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
bluez@5.66-1
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
bluez@5.66-1
no fix listed

Open the chart page →

291,065
opencost-parquet-exporteropencostVerified publisher0.3.11 of 1See more

opencost-parquet-exporter opencost 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
bluez@5.66-1+deb12u2
no fix listed

Open the chart page →

12,552
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
knspar/phronetis-operator:0.1.60c4f0543ee58
bluez@5.66-1+deb12u1
no fix listed

Open the chart page →

18,303
pingdom-operatorpingdom-operator0.0.201 of 1See more

pingdom-operator pingdom-operator 0.0.20

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
bluez@5.66-1+deb12u2
no fix listed

Open the chart page →

13,405
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
bluez@5.66-1+deb12u1
no fix listed

Open the chart page →

14,386
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
bluez@5.66-1
no fix listed

Open the chart page →

15,800
mychartpythonweb0.1.01 of 1See more

mychart pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
bluez@5.66-1+deb12u1
no fix listed

Open the chart page →

14,004
mypythonpythonweb0.1.01 of 1See more

mypython pythonweb 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
qichenxu4pd/pythonexample:1.0f3a8502bc21b
bluez@5.66-1+deb12u1
no fix listed

Open the chart page →

14,004
transmissionryuunosukeds31.7.01 of 2See more

transmission ryuunosukeds3 1.7.0

1 of the 2 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
bluez@5.82-1.1
no fix listed

Open the chart page →

11,234
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
bluez@5.66-1+deb12u2
no fix listed

Open the chart page →

13,755
servicexssl-hep1.8.610 of 16See more

servicex ssl-hep 1.8.6

10 of the 16 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
library/python:3.10c10791e6f690
bluez@5.82-1.1
no fix listed
sslhep/servicex_app:v1.8.6c935e123030d
bluez@5.82-1.1
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
bluez@5.82-1.1
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
bluez@5.82-1.1
no fix listed
sslhep/servicex_code_gen_python:v1.8.696805be717ff
bluez@5.82-1.1
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
bluez@5.82-1.1
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
bluez@5.82-1.1
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
bluez@5.82-1.1
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
bluez@5.82-1.1
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
bluez@5.82-1.1
no fix listed

Open the chart page →

67,630
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
bluez@5.66-1
no fix listed

Open the chart page →

25,488
verbasubstratusVerified publisher0.4.01 of 1See more

verba substratus 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
substratusai/verba:v0.4.0-baseURL261695be635eb
bluez@5.66-1+deb12u1
no fix listed

Open the chart page →

14,908
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
bluez@5.66-1+deb12u2
no fix listed

Open the chart page →

12,630
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-105460.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
bluez@5.66-1
no fix listed

Open the chart page →

15,782

Container images carrying it

51 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
bluez@5.66-1
no fix listed
1

syft 1.42.1 · advisories as of 15 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.