StackRadar

CVE-2026-108119

Medium

Advisory

Published 9 Oct 2026In the index since 11 Oct 2026
Severity
Medium
worst across findings
CVSS
6.3
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
12
of 18,108 indexed, latest versions
Container images
16
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 12 of 18,108 indexed charts deploy, on 16 images.

Affected packageAffected versionsFixed inImages
busyboxdeb1:1.35.0-4+b3, 1:1.35.0-4+b4, 1:1.35.0-4+deb12u1+b1, 1:1.37.0-6+b3+2 moreno fix listed16
OSV records
DEBIAN-CVE-2026-108119

Charts affected

12 by stars
ChartLatestAffected imagesRadar Score
gitlabgitlabVerified publisher10.4.27 of 21See more

gitlab gitlab 10.4.2

7 of the 21 container images this version deploys carry CVE-2026-108119.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.234d6f158b84c
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.2a85b70c915e7
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.281f755390179
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.40.2-gitlabe813867b3749
busybox@1:1.35.0-4+deb12u1+b1
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.2b5c24e466636
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3e3bc352dec49
busybox@1:1.37.0-6+b9
no fix listed
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.2e05fea2e7ce7
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

21,333
nextcloudnextcloud9.4.01 of 1See more

nextcloud nextcloud 9.4.0

1 of the 1 container images this version deploys carry CVE-2026-108119.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1-apacheb1ae671e9815
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

5,108
nextcloudgroundhog2k0.22.81 of 3See more

nextcloud groundhog2k 0.22.8

1 of the 3 container images this version deploys carry CVE-2026-108119.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1:35.0.1-apacheb1ae671e9815
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

5,108
monicamonicaOfficialVerified publisher1.0.151 of 1See more

monica monica 1.0.15

1 of the 1 container images this version deploys carry CVE-2026-108119.

Container imageDigestPackageFixed in
ghcr.io/monicahq/monica-next:main8a02508cbdcf
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

3,278
openbaogitlabVerified publisher0.20.01 of 1See more

openbao gitlab 0.20.0

1 of the 1 container images this version deploys carry CVE-2026-108119.

Container imageDigestPackageFixed in
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab177907fa18465
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

1,869
csghubcsghubVerified publisher2.5.22 of 35See more

csghub csghub 2.5.2

2 of the 35 container images this version deploys carry CVE-2026-108119.

Container imageDigestPackageFixed in
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
busybox@1:1.35.0-4+b3
no fix listed
opencsghq/gitlab-shell:v19.2.580a65ac370da
busybox@1:1.35.0-4+deb12u1+b1
no fix listed

Open the chart page →

68,164
nextcloudhelmforgeVerified publisher2.0.01 of 3See more

nextcloud helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-108119.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1-apache276547e033df
busybox@1:1.37.0-6+b9
no fix listed

Open the chart page →

7,790
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-108119.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
busybox@1:1.37.0-6+b3
no fix listed

Open the chart page →

11,603
nextcloudth-chartsVerified publisher0.4.01 of 1See more

nextcloud th-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-108119.

Container imageDigestPackageFixed in
library/nextcloud:31.0.6-apache588609d76b21
busybox@1:1.35.0-4+b4
no fix listed

Open the chart page →

11,612
tyk-control-planetyk-helm5.4.11 of 7See more

tyk-control-plane tyk-helm 5.4.1

1 of the 7 container images this version deploys carry CVE-2026-108119.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
busybox@1:1.37.0-6+dhi3
no fix listed

Open the chart page →

5,261
tyk-data-planetyk-helm5.4.11 of 3See more

tyk-data-plane tyk-helm 5.4.1

1 of the 3 container images this version deploys carry CVE-2026-108119.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
busybox@1:1.37.0-6+dhi3
no fix listed

Open the chart page →

1,368
tyk-stacktyk-helm5.4.11 of 7See more

tyk-stack tyk-helm 5.4.1

1 of the 7 container images this version deploys carry CVE-2026-108119.

Container imageDigestPackageFixed in
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
busybox@1:1.37.0-6+dhi3
no fix listed

Open the chart page →

5,251

Container images carrying it

16 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
tykio/tyk-gateway-ee:v5.13.250b3e4f5398a
busybox@1:1.37.0-6+dhi3
no fix listed
3
library/nextcloud:35.0.1:35.0.1-apacheb1ae671e9815
busybox@1:1.37.0-6+b9
no fix listed
2
library/nextcloud:35.0.1-apache276547e033df
busybox@1:1.37.0-6+b9
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
busybox@1:1.35.0-4+b4
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
busybox@1:1.37.0-6+b3
no fix listed
1
opencsghq/gitlab-gitaly:v17.5.0bdd2c58b9744
busybox@1:1.35.0-4+b3
no fix listed
1
opencsghq/gitlab-shell:v19.2.580a65ac370da
busybox@1:1.35.0-4+deb12u1+b1
no fix listed
1
ghcr.io/monicahq/monica-next:main8a02508cbdcf
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/certificates:v19.4.234d6f158b84c
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitaly:v19.4.2a85b70c915e7
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-base:v19.4.281f755390179
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-container-registry:v4.40.2-gitlabe813867b3749
busybox@1:1.35.0-4+deb12u1+b1
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-exporter:17.0.2b5c24e466636
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-openbao:v2.6.2-gitlab177907fa18465
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-shell:v14.57.3e3bc352dec49
busybox@1:1.37.0-6+b9
no fix listed
1
registry.gitlab.com/gitlab-org/build/cng/gitlab-workhorse-ee:v19.4.2e05fea2e7ce7
busybox@1:1.37.0-6+b9
no fix listed
1

syft 1.42.1 · advisories as of 13 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.