StackRadar

CVE-2026-107818

High

Advisory

Published 9 Oct 2026In the index since 10 Oct 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
157
of 18,087 indexed, latest versions
Container images
153
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 157 of 18,087 indexed charts deploy, on 153 images.

Affected packageAffected versionsFixed inImages
mariadbdeb1:10.11.3-1, 1:10.11.4-1~deb12u1, 1:10.11.6-0+deb12u1, 1:10.11.7+maria~deb12+7 moreno fix listed153
OSV records
DEBIAN-CVE-2026-107818

Charts affected

157 by stars
ChartLatestAffected imagesRadar Score
codegentest-opea1.0.01 of 5See more

codegen test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
opea/codegen-ui:1.02bee4eb66f3e
mariadb@1:10.11.6-0+deb12u1
no fix listed

Open the chart page →

32,015
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
mariadb@1:10.11.6-0+deb12u1
no fix listed

Open the chart page →

31,509
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
mariadb@1:10.11.6-0+deb12u1
no fix listed

Open the chart page →

32,011
tfy-distributortruefoundryVerified publisher0.0.11 of 4See more

tfy-distributor truefoundry 0.0.1

1 of the 4 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
mariadb@1:10.11.4-1~deb12u1
no fix listed

Open the chart page →

20,072
demo-backendv2flyVerified publisher0.0.31 of 1See more

demo-backend v2fly 0.0.3

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
mariadb@1:10.11.3-1
no fix listed

Open the chart page →

15,519
bugsinkvictorlane0.3.71 of 2See more

bugsink victorlane 0.3.7

1 of the 2 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
bugsink/bugsink:2c5e3657451f4
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

4,527
supersetwbstack0.1.01 of 1See more

superset wbstack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
apache/superset:4.0.1ab9467fd712c
mariadb@1:10.11.6-0+deb12u1
no fix listed

Open the chart page →

7,725

Container images carrying it

153 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
sysnet4admin/colosseum-prm:log5802bfcd7fed
mariadb@1:10.11.11-0+deb12u1
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
theradius/loggia:0.463ba348546ec
mariadb@1:10.11.4-1~deb12u1
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
mariadb@1:10.11.3-1
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
mariadb@1:10.11.11-0+deb12u1
no fix listed
1
vaultwarden/server:1.35.443498a94b22f
mariadb@1:11.8.3-0+deb13u1
no fix listed
1
vaultwarden/server:1.34.384fd8a47f58d
mariadb@1:10.11.11-0+deb12u1
no fix listed
1
vaultwarden/server:1.35.79a8eec71f4a5
mariadb@1:11.8.6-0+deb13u1
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
mariadb@1:10.11.3-1
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
mariadb@1:10.11.3-1
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
mariadb@1:10.11.3-1
no fix listed
1
voska/hass-mcp:latest7142a431e2c5
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
mariadb@1:10.11.10+maria~deb12
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
mariadb@1:11.8.3-0+deb13u1
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
mariadb@1:10.11.11-0+deb12u1
no fix listed
1
ghcr.io/dani-garcia/vaultwarden:1.35.2d89a6d21e361
mariadb@1:11.8.3-0+deb13u1
no fix listed
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
mariadb@1:11.8.3-0+deb13u1
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
mariadb@1:11.8.3-0+deb13u1
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
mariadb@1:10.11.4-1~deb12u1
no fix listed
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
mariadb@1:11.8.6-0+deb13u1
no fix listed
1
ghcr.io/nefelim4ag/pingdom-operator:0.0.15f8c7afdcf439
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/opencost/opencost-parquet-exporter:v0.2.1ce85ef0ce665
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.134b05bcd28e69
mariadb@1:11.8.6-0+deb13u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.357ad9565bff3
mariadb@1:11.8.3-0+deb13u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
mariadb@1:11.8.3-0+deb13u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.0.1ab255bea133e
mariadb@1:10.11.4-1~deb12u1
no fix listed
1
ghcr.io/paperless-ngx/paperless-ngx:2.20.14b89f83345532
mariadb@1:11.8.6-0+deb13u1
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
mariadb@1:11.8.6-0+deb13u1
no fix listed
1
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
mariadb@1:10.11.3-1
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
mariadb@1:10.11.14-0+deb12u2
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
mariadb@1:10.11.4-1~deb12u1
no fix listed
1
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
mariadb@1:10.11.6-0+deb12u1
no fix listed
1
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
mariadb@1:10.11.4-1~deb12u1
no fix listed
1

syft 1.42.1 · advisories as of 10 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.