StackRadar

CVE-2026-110924

Medium

Advisory

Published 16 Oct 2026In the index since 18 Oct 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
171
of 18,176 indexed, latest versions
Container images
152
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 171 of 18,176 indexed charts deploy, on 152 images.

Affected packageAffected versionsFixed inImages
opensshdeb1:6.6p1-2ubuntu2, 1:6.6p1-2ubuntu2.13, 1:7.2p2-4ubuntu2.2, 1:7.2p2-4ubuntu2.4+41 moreno fix listed152
OSV records
UBUNTU-CVE-2026-110924

Charts affected

171 by stars
ChartLatestAffected imagesRadar Score
argo-cdargoOfficialVerified publisher10.10.51 of 3See more

argo-cd argo 10.10.5

1 of the 3 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.513db7b10db23
openssh@1:10.2p1-2ubuntu3.7
no fix listed

Open the chart page →

2,816
argo-cdargo-cd-oci10.10.51 of 3See more

argo-cd argo-cd-oci 10.10.5

1 of the 3 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.513db7b10db23
openssh@1:10.2p1-2ubuntu3.7
no fix listed

Open the chart page →

2,816
netboxnetboxOfficialVerified publisher8.3.921 of 5See more

netbox netbox 8.3.92

1 of the 5 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
ghcr.io/netbox-community/netbox:v4.7.33a1e8d317c63
openssh@1:10.2p1-2ubuntu3.6
no fix listed

Open the chart page →

1,802
weblateweblateOfficialVerified publisher0.5.431 of 3See more

weblate weblate 0.5.43

1 of the 3 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
weblate/weblate:2026.10.1.1b0f200f38d70
openssh@1:10.2p1-2ubuntu3.7
no fix listed

Open the chart page →

7,752
difydoubanVerified publisher0.10.01 of 6See more

dify douban 0.10.0

1 of the 6 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.5.1-local8269050f192e
openssh@1:9.6p1-3ubuntu13.14
no fix listed

Open the chart page →

83,456
code-servernicholaswildeVerified publisher1.1.11 of 1See more

code-server nicholaswilde 1.1.1

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/code-server:version-v3.11.1a385ba5cb161
openssh@1:7.6p1-4ubuntu0.5
no fix listed

Open the chart page →

18,479
difydify-helmVerified publisher0.39.01 of 11See more

dify dify-helm 0.39.0

1 of the 11 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
langgenius/dify-plugin-daemon:0.6.10-local34412a22d1e1
openssh@1:9.6p1-3ubuntu13.18
no fix listed

Open the chart page →

62,784
argocdnicklasfrahm-argocdVerified publisher0.3.01 of 2See more

argocd nicklasfrahm-argocd 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.1.1a36ab0c0860c
openssh@1:9.6p1-3ubuntu13.13
no fix listed

Open the chart page →

7,520
bitbucketatlassian-data-centerVerified publisher2.0.171 of 1See more

bitbucket atlassian-data-center 2.0.17

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
atlassian/bitbucket:10.2.85aed3d8cb4bc
openssh@1:9.6p1-3ubuntu13.19
no fix listed

Open the chart page →

34,799
stackstorm-hastackstormVerified publisher1.1.011 of 17See more

stackstorm-ha stackstorm 1.1.0

11 of the 17 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
stackstorm/st2actionrunner:3.888235ba70cad
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2api:3.86f56d239d280
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2auth:3.833ecfda16608
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2garbagecollector:3.84e3f8c7ca52d
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2notifier:3.8f190a6212195
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2rulesengine:3.8259503496ff9
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2scheduler:3.8b1de2055c362
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2sensorcontainer:3.8b1a338f64773
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2stream:3.81c8904a3bf67
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2timersengine:3.81bf35bfaf00c
openssh@1:8.2p1-4ubuntu0.9
no fix listed
stackstorm/st2workflowengine:3.819fdfffdbba8
openssh@1:8.2p1-4ubuntu0.9
no fix listed

Open the chart page →

730,429
transmission-openvpnutkuozdemirVerified publisher2.5.01 of 1See more

transmission-openvpn utkuozdemir 2.5.0

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
haugene/transmission-openvpn:4.0059216cfae4b
openssh@1:8.2p1-4ubuntu0.3
no fix listed

Open the chart page →

12,316
dependabot-gitlabdependabot-gitlabVerified publisher6.3.01 of 3See more

dependabot-gitlab dependabot-gitlab 6.3.0

1 of the 3 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
andrcuns/dependabot-gitlab:7.7.0-alpha.143060f159f4c
openssh@1:9.6p1-3ubuntu13.18
no fix listed

Open the chart page →

42,949
bambooatlassian-data-centerVerified publisher2.0.171 of 2See more

bamboo atlassian-data-center 2.0.17

1 of the 2 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
atlassian/bamboo:12.1.12eb98d6fbeee7
openssh@1:9.6p1-3ubuntu13.19
no fix listed

Open the chart page →

35,671
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
openssh@1:8.9p1-3ubuntu0.13
no fix listed

Open the chart page →

84,592
karakeephelmforgeVerified publisher1.2.91 of 3See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
openssh@1:9.6p1-3ubuntu13.18
no fix listed

Open the chart page →

12,434
hertzbeathertzbeatOfficialVerified publisher1.8.12 of 4See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
apache/hertzbeat:1.8.075d48a62748f
openssh@1:9.6p1-3ubuntu13.14
no fix listed
apache/hertzbeat-collector:1.8.0a2bab1be574c
openssh@1:9.6p1-3ubuntu13.14
no fix listed

Open the chart page →

17,198
code-serveralekcVerified publisher0.1.11 of 1See more

code-server alekc 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
linuxserver/code-server:4.10.1a5e43a05ae79
openssh@1:8.9p1-3ubuntu0.1
no fix listed

Open the chart page →

9,149
kubeservice-lxcfs-webhookkubservice-chartsVerified publisher1.6.01 of 6See more

kubeservice-lxcfs-webhook kubservice-charts 1.6.0

1 of the 6 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
dongjiang1989/lxcfs:v6.0.34bf9ae391948
openssh@1:8.2p1-4ubuntu0.13
no fix listed

Open the chart page →

61,309
machinarislib42Verified publisher0.2.01 of 1See more

machinaris lib42 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
ghcr.io/guydavis/machinaris:test50a71a30f18e
openssh@1:9.6p1-3ubuntu13.19
no fix listed

Open the chart page →

39,185
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
openssh@1:7.2p2-4ubuntu2.10
no fix listed

Open the chart page →

112,637
nominatimrobjuz6.4.31 of 4See more

nominatim robjuz 6.4.3

1 of the 4 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
openssh@1:9.6p1-3ubuntu13.16
no fix listed

Open the chart page →

56,770
argocdtwomartensVerified publisher0.1.11 of 3See more

argocd twomartens 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.8.6acaf37352569
openssh@1:8.9p1-3ubuntu0.4
no fix listed

Open the chart page →

12,801
argo-cdwenerme10.10.51 of 3See more

argo-cd wenerme 10.10.5

1 of the 3 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.5.513db7b10db23
openssh@1:10.2p1-2ubuntu3.7
no fix listed

Open the chart page →

2,816
clearml-agentallegroaiVerified publisher5.3.31 of 1See more

clearml-agent allegroai 5.3.3

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
openssh@1:7.6p1-4ubuntu0.7
no fix listed

Open the chart page →

71,254
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
openssh@1:8.9p1-3ubuntu0.13
no fix listed

Open the chart page →

8,593
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
openssh@1:7.2p2-4ubuntu2.4
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
openssh@1:7.2p2-4ubuntu2.8
no fix listed

Open the chart page →

192,453
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
openssh@1:7.2p2-4ubuntu2.4
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
openssh@1:7.2p2-4ubuntu2.8
no fix listed

Open the chart page →

192,433
aramid-indexerbiatec-repoVerified publisher3.9.03 of 5See more

aramid-indexer biatec-repo 3.9.0

3 of the 5 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-follow-node:v4.3.0-stable1ec63eca86b6
openssh@1:9.6p1-3ubuntu13.14
no fix listed
scholtz2/aramid-conduit:v1.9.0-stable3a3b3d3277d2
openssh@1:10.2p1-2ubuntu3.2
no fix listed
scholtz2/aramid-indexer:v3.9.0-stable6770214bc881
openssh@1:10.2p1-2ubuntu3.2
no fix listed

Open the chart page →

17,829
aramid-participationbiatec-repoVerified publisher4.4.11 of 1See more

aramid-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-aramidmain-extended:4.4.1-stablef12ce1cfb72e
openssh@1:8.9p1-3ubuntu0.10
no fix listed

Open the chart page →

8,813
aramid-relaybiatec-repoVerified publisher4.4.11 of 1See more

aramid-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
scholtz2/aramid-algo-node:v4.4.1-stable70263d8fab5b
openssh@1:9.6p1-3ubuntu13.14
no fix listed

Open the chart page →

6,362
voimain-participationbiatec-repoVerified publisher4.4.11 of 1See more

voimain-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-voimain-extended:4.4.1-stable64966de56d9f
openssh@1:8.9p1-3ubuntu0.10
no fix listed

Open the chart page →

8,813
cluster-setupcluster-setup1.5.01 of 8See more

cluster-setup cluster-setup 1.5.0

1 of the 8 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v3.0.395b5cf7ba6fe
openssh@1:9.6p1-3ubuntu13.11
no fix listed

Open the chart page →

15,305
powershelluniversaldigitalhubVerified publisher0.1.21 of 1See more

powershelluniversal digitalhub 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
ironmansoftware/universal:3.3.1-ubuntu-20.041943c73cce31
openssh@1:8.2p1-4ubuntu0.5
no fix listed

Open the chart page →

76,286
seafiledr300481Verified publisher0.12.11 of 1See more

seafile dr300481 0.12.1

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
seafileltd/seafile-mc:11.0.12d0c66e4621bd
openssh@1:8.9p1-3ubuntu0.10
no fix listed

Open the chart page →

76,071
flink-operatorflink-operator0.1.11 of 2See more

flink-operator flink-operator 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
gcr.io/flink-operator/deployer:webhook-cert809338a69bd5
openssh@1:7.6p1-4ubuntu0.3
no fix listed

Open the chart page →

78,085
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
openssh@1:7.6p1-4ubuntu0.3
no fix listed

Open the chart page →

24,973
homebridgegeek-cookbookVerified publisher5.3.21 of 1See more

homebridge geek-cookbook 5.3.2

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
ghcr.io/oznu/homebridge:2022-07-08ff2af53897e7
openssh@1:8.2p1-4ubuntu0.5
no fix listed

Open the chart page →

86,510
tdarrgeek-cookbookVerified publisher4.6.21 of 2See more

tdarr geek-cookbook 4.6.2

1 of the 2 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
haveagitgat/tdarr:2.00.181256348872ce
openssh@1:8.2p1-4ubuntu0.4
no fix listed

Open the chart page →

103,900
IMgrycapOfficialVerified publisher1.8.01 of 3See more

IM grycap 1.8.0

1 of the 3 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
ghcr.io/grycap/im:latest06a16d4f279f
openssh@1:9.6p1-3ubuntu13.14
no fix listed

Open the chart page →

5,289
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
openssh@1:8.9p1-3ubuntu0.13
no fix listed

Open the chart page →

66,971
kubefarmkvaps0.13.41 of 6See more

kubefarm kvaps 0.13.4

1 of the 6 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
ghcr.io/kvaps/kubefarm-ltsp:v0.13.424efef013a53
openssh@1:8.2p1-4ubuntu0.4
no fix listed

Open the chart page →

13,232
opennebulakvaps2.1.15 of 9See more

opennebula kvaps 2.1.1

5 of the 9 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
ghcr.io/kvaps/opennebula:v5.12.0.4-1e28e0e7de11b
openssh@1:8.2p1-4ubuntu0.2
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.401563adc95fd
openssh@1:8.2p1-4ubuntu0.2
no fix listed
ghcr.io/kvaps/opennebula-exporter:v5.12.0.4-12b92df1143b9
openssh@1:8.2p1-4ubuntu0.2
no fix listed
ghcr.io/kvaps/opennebula-flow:v5.12.0.4-1600221f0f43f
openssh@1:8.2p1-4ubuntu0.2
no fix listed
ghcr.io/kvaps/opennebula-gate:v5.12.0.4-1a85e03d8bc1d
openssh@1:8.2p1-4ubuntu0.2
no fix listed

Open the chart page →

271,147
mend-renovate-enterprise-editionmend-renovateVerified publisher10.7.01 of 2See more

mend-renovate-enterprise-edition mend-renovate 10.7.0

1 of the 2 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
ghcr.io/mend/renovate-ee-server:15.7.063e0ca823222
openssh@1:9.6p1-3ubuntu13.19
no fix listed

Open the chart page →

35,738
phpqonstruktVerified publisher0.2.01 of 1See more

php qonstrukt 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
qonstrukt/php:8.4-v8-apache089af7925aa1
openssh@1:9.6p1-3ubuntu13.18
no fix listed

Open the chart page →

63,781
ckanstatcan0.0.351 of 8See more

ckan statcan 0.0.35

1 of the 8 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
statcan/ckan:2.93921305425b8
openssh@1:8.2p1-4ubuntu0.2
no fix listed

Open the chart page →

103,296
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
openssh@1:6.6p1-2ubuntu2
no fix listed

Open the chart page →

42,268
bootaerokube1.0.12 of 4See more

boot aerokube 1.0.1

2 of the 4 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
quay.io/aerokube/jumphost:1.0.170fd7c00418d
openssh@1:8.9p1-3ubuntu0.6
no fix listed
quay.io/aerokube/keygen:1.0.1578934444f04
openssh@1:8.9p1-3ubuntu0.6
no fix listed

Open the chart page →

10,498
alibaba-rsocket-brokeralibaba-rsocket-brokerVerified publisher0.1.31 of 1See more

alibaba-rsocket-broker alibaba-rsocket-broker 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
linuxchina/alibaba-rsocket-broker:1.1.3-k8sf758e2e567ee
openssh@1:7.6p1-4ubuntu0.6
no fix listed

Open the chart page →

92,749
argocdargo-helm-charts1.0.01 of 3See more

argocd argo-helm-charts 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
quay.io/argoproj/argocd:v2.14.115fc69e31c755
openssh@1:9.6p1-3ubuntu13.9
no fix listed

Open the chart page →

10,434
arma-reforgerarma-reforger0.5.31 of 8See more

arma-reforger arma-reforger 0.5.3

1 of the 8 container images this version deploys carry CVE-2026-110924.

Container imageDigestPackageFixed in
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
openssh@1:8.2p1-4ubuntu0.5
no fix listed

Open the chart page →

30,958

Container images carrying it

152 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
quay.io/argoproj/argocd:v3.5.3dd3f47d5a5e4
openssh@1:10.2p1-2ubuntu3.6
no fix listed
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
openssh@1:7.2p2-4ubuntu2.10
no fix listed
1

syft 1.42.1 · advisories as of 18 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.