StackRadar

CVE-2026-107818

High

Advisory

Published 9 Oct 2026In the index since 10 Oct 2026
Severity
High
worst across findings
CVSS
8.4
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
157
of 18,087 indexed, latest versions
Container images
153
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 157 of 18,087 indexed charts deploy, on 153 images.

Affected packageAffected versionsFixed inImages
mariadbdeb1:10.11.3-1, 1:10.11.4-1~deb12u1, 1:10.11.6-0+deb12u1, 1:10.11.7+maria~deb12+7 moreno fix listed153
OSV records
DEBIAN-CVE-2026-107818

Charts affected

157 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
mariadb@1:10.11.14-0+deb12u2
no fix listed

Open the chart page →

36,633
airflowairflow-helmVerified publisher8.9.01 of 4See more

airflow airflow-helm 8.9.0

1 of the 4 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
apache/airflow:2.8.4-python3.964e58748b6b9
mariadb@1:10.11.7+maria~deb12
no fix listed

Open the chart page →

12,712
netdatanetdataVerified publisher3.7.1751 of 1See more

netdata netdata 3.7.175

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
netdata/netdata:v2.12.01e50cc0b11f0
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

2,938
maildocker-postfixVerified publisher5.1.01 of 1See more

mail docker-postfix 5.1.0

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
boky/postfix:v5.1.0aafc77238423
mariadb@1:11.8.3-0+deb13u1
no fix listed

Open the chart page →

6,410
vaultwardengissilabs1.4.21 of 1See more

vaultwarden gissilabs 1.4.2

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.2094b5689ed81
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

2,135
openprojectopenproject-helm-chartsOfficialVerified publisher13.13.11 of 5See more

openproject openproject-helm-charts 13.13.1

1 of the 5 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
openproject/hocuspocus:release-338001b288dc1359dfb5
mariadb@1:10.11.11-0+deb12u1
no fix listed

Open the chart page →

21,839
redashredash4.2.01 of 3See more

redash redash 4.2.0

1 of the 3 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
redash/redash:25.8.000d813437db5
mariadb@1:10.11.11-0+deb12u1
no fix listed

Open the chart page →

6,887
paperless-ngxfmjstudios0.2.81 of 5See more

paperless-ngx fmjstudios 0.2.8

1 of the 5 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.10.1a132c2ac7c57
mariadb@1:10.11.6-0+deb12u1
no fix listed

Open the chart page →

35,065
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

5,214
paperless-ngxpaperless-ngxVerified publisher0.3.241 of 3See more

paperless-ngx paperless-ngx 0.3.24

1 of the 3 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

9,131
coturnjaconiVerified publisher1.0.51 of 1See more

coturn jaconi 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
coturn/coturn:4.10.0-r1f4c2af06c3c5
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

3,660
dolibarrcowboysysopVerified publisher9.0.31 of 3See more

dolibarr cowboysysop 9.0.3

1 of the 3 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
dolibarr/dolibarr:22.0.47ad88fc9b13c
mariadb@1:10.11.14-0+deb12u2
no fix listed

Open the chart page →

11,307
dolibarrhelmforgeVerified publisher1.2.191 of 3See more

dolibarr helmforge 1.2.19

1 of the 3 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
dolibarr/dolibarr:24.0.069ec52e3b7ef
mariadb@1:10.11.18-0+deb12u1
no fix listed

Open the chart page →

5,099
kubeflowkubeflow1.6.21 of 45See more

kubeflow kubeflow 1.6.2

1 of the 45 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
mariadb@1:10.11.3-1
no fix listed

Open the chart page →

190,240
vaultwardenandrenarchyVerified publisher6.28.01 of 1See more

vaultwarden andrenarchy 6.28.0

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.31587c45feaa4
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

1,855
dask-kubernetes-operatordask2026.3.01 of 1See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
mariadb@1:11.8.3-0+deb13u1
no fix listed

Open the chart page →

10,884
terrariahalkeye0.4.21 of 2See more

terraria halkeye 0.4.2

1 of the 2 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ryshe/terraria:latestb1c89f7f359a
mariadb@1:10.11.14-0+deb12u2
no fix listed

Open the chart page →

4,708
part-dbpart-dbVerified publisher0.1.21 of 1See more

part-db part-db 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
jbtronics/part-db1:latestec7d16cf30b9
mariadb@1:10.11.18-0+deb12u1
no fix listed

Open the chart page →

3,729
pretixtechwolf12Verified publisher2026.7.01 of 3See more

pretix techwolf12 2026.7.0

1 of the 3 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
pretix/standalone:2026.7.05df3b7aa852e
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

12,387
paperlesszekker6Verified publisher11.11.01 of 1See more

paperless zekker6 11.11.0

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

5,007
paperless-ngxadnoctemVerified publisher0.5.01 of 5See more

paperless-ngx adnoctem 0.5.0

1 of the 5 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:3.3.06b94799bc769
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

26,271
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
mariadb@1:11.8.3-0+deb13u1
no fix listed

Open the chart page →

14,335
passbolt-hachristianhuthVerified publisher6.0.11 of 4See more

passbolt-ha christianhuth 6.0.1

1 of the 4 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
proxysql/proxysql:3.0.110e95d1b7cc32
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

14,475
cosmotech-copilot-apicosmotech-apiVerified publisher0.1.11 of 1See more

cosmotech-copilot-api cosmotech-api 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
mariadb@1:11.8.3-0+deb13u1
no fix listed

Open the chart page →

12,940
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
mariadb@1:10.11.6-0+deb12u1
no fix listed

Open the chart page →

15,910
enbuildenbuildVerified publisher0.0.501 of 6See more

enbuild enbuild 0.0.50

1 of the 6 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
mariadb@1:10.11.14-0+deb12u2
no fix listed

Open the chart page →

36,742
uptime-kumahelmforgeVerified publisher1.5.151 of 1See more

uptime-kuma helmforge 1.5.15

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
mariadb@1:10.11.14-0+deb12u2
no fix listed

Open the chart page →

36,482
vaultwardenhelmforgeVerified publisher1.14.21 of 1See more

vaultwarden helmforge 1.14.2

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
vaultwarden/server:1.37.31587c45feaa4
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

1,855
iris-webappiris-webapp0.2.41 of 2See more

iris-webapp iris-webapp 0.2.4

1 of the 2 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
mariadb@1:11.8.3-0+deb13u1
no fix listed

Open the chart page →

13,335
glpikitsune-itopsVerified publisher1.0.71 of 3See more

glpi kitsune-itops 1.0.7

1 of the 3 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
glpi/glpi:latest8888c5d8aa46
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

4,790
food-managermoreillonVerified publisher0.5.01 of 2See more

food-manager moreillon 0.5.0

1 of the 2 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
moreillon/food-manager:lateste8fd856e593d
mariadb@1:10.11.11-0+deb12u1
no fix listed

Open the chart page →

15,939
redminemt1905027.3.41 of 3See more

redmine mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
library/redmine:6.1.204ac44a2595b
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

9,286
paperless-ngxpaperlessVerified publisher0.4.01 of 3See more

paperless-ngx paperless 0.4.0

1 of the 3 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngxdigest-pinnedaa810a36942c
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

10,841
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
mariadb@1:10.11.6-0+deb12u1
no fix listed

Open the chart page →

36,867
redmineredmine-helm-chartVerified publisher0.2.61 of 1See more

redmine redmine-helm-chart 0.2.6

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
library/redmine:6.1.3-trixief474a901faec
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

5,717
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
mariadb@1:10.11.6-0+deb12u1
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
mariadb@1:10.11.6-0+deb12u1
no fix listed

Open the chart page →

34,010
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
mariadb@1:10.11.14-0+deb12u2
no fix listed

Open the chart page →

45,022
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
mariadb@1:11.8.3-0+deb13u1
no fix listed

Open the chart page →

8,737
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
mariadb@1:10.11.6-0+deb12u1
no fix listed

Open the chart page →

17,093
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
mariadb@1:10.11.6-0+deb12u1
no fix listed

Open the chart page →

14,078
wordpress-helmwordpress-helm0.2.91 of 4See more

wordpress-helm wordpress-helm 0.2.9

1 of the 4 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

10,117
uptime-kumaadnoctemVerified publisher0.4.31 of 1See more

uptime-kuma adnoctem 0.4.3

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.69912da7d7d9b
mariadb@1:10.11.14-0+deb12u2
no fix listed

Open the chart page →

36,421
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
mariadb@1:10.11.14-0+deb12u2
no fix listed

Open the chart page →

8,531
haproxyappuio2.7.21 of 1See more

haproxy appuio 2.7.2

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/vshn/haproxy-with-mysql:1.0.0a3c27ee3fb2f
mariadb@1:10.11.3-1
no fix listed

Open the chart page →

6,653
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
mariadb@1:10.11.3-1
no fix listed

Open the chart page →

51,909
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
mariadb@1:10.11.6-0+deb12u1
no fix listed

Open the chart page →

36,999
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
mariadb@1:10.11.11-0+deb12u1
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
mariadb@1:10.11.11-0+deb12u1
no fix listed

Open the chart page →

30,929
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
library/node:lts3d27e5c11e57
mariadb@1:10.11.18-0+deb12u1
no fix listed

Open the chart page →

80,435
postgresqlbuall-charts0.1.21 of 1See more

postgresql buall-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
buall/postgres-stack:18.6881a785642cb
mariadb@1:11.8.6-0+deb13u1
no fix listed

Open the chart page →

4,737
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-107818.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
mariadb@1:10.11.6-0+deb12u1
no fix listed

Open the chart page →

11,984

Container images carrying it

153 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
public.ecr.aws/truefoundrycloud/async-service-distributor:5d48113bc678d694a0c8f8dabb2207c5aa2cfc53f74851ce31f5
mariadb@1:10.11.4-1~deb12u1
no fix listed
1
quay.io/yushiwho/api:e1f9d77e0d9b93dbf2b
mariadb@1:10.11.3-1
no fix listed
1
registry.gitlab.com/enbuild-staging/vivsoft-platform-ui/enbuild-mq-consumer:1.0.310e3cd8c7776d
mariadb@1:10.11.14-0+deb12u2
no fix listed
1

syft 1.42.1 · advisories as of 10 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.