StackRadar

CVE-2026-111125

Medium

Advisory

Published 15 Oct 2026In the index since 16 Oct 2026
Severity
Medium
worst across findings
CVSS
6.1
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
8
of 18,137 indexed, latest versions
Container images
9
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 8 of 18,137 indexed charts deploy, on 9 images.

Affected packageAffected versionsFixed inImages
cfitsiodeb4.2.0-3, 4.6.2-2no fix listed9
OSV records
DEBIAN-CVE-2026-111125

Charts affected

8 by stars
ChartLatestAffected imagesRadar Score
postgresqlbuall-charts0.1.21 of 1See more

postgresql buall-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-111125.

Container imageDigestPackageFixed in
buall/postgres-stack:18.6881a785642cb
cfitsio@4.6.2-2
no fix listed

Open the chart page →

4,906
caninecanine0.1.101 of 7See more

canine canine 0.1.10

1 of the 7 container images this version deploys carry CVE-2026-111125.

Container imageDigestPackageFixed in
ghcr.io/caninehq/canine:latest68b19aee1c64
cfitsio@4.2.0-3
no fix listed

Open the chart page →

18,808
adventurelogdjjudas21Verified publisher0.1.11 of 3See more

adventurelog djjudas21 0.1.1

1 of the 3 container images this version deploys carry CVE-2026-111125.

Container imageDigestPackageFixed in
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
cfitsio@4.6.2-2
no fix listed

Open the chart page →

10,246
fluxer-helmfluxer-helm0.3.02 of 18See more

fluxer-helm fluxer-helm 0.3.0

2 of the 18 container images this version deploys carry CVE-2026-111125.

Container imageDigestPackageFixed in
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
cfitsio@4.2.0-3
no fix listed
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
cfitsio@4.6.2-2
no fix listed

Open the chart page →

34,222
dawarichhelmforgeVerified publisher1.0.51 of 4See more

dawarich helmforge 1.0.5

1 of the 4 container images this version deploys carry CVE-2026-111125.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
cfitsio@4.6.2-2
no fix listed

Open the chart page →

12,584
deltabadgerk8s-chartsVerified publisher2.0.01 of 1See more

deltabadger k8s-charts 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-111125.

Container imageDigestPackageFixed in
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
cfitsio@4.6.2-2
no fix listed

Open the chart page →

7,386
backendsignalen4.25.01 of 4See more

backend signalen 4.25.0

1 of the 4 container images this version deploys carry CVE-2026-111125.

Container imageDigestPackageFixed in
signalen/backend:2.50.1826bb090bc4e4
cfitsio@4.2.0-3
no fix listed

Open the chart page →

14,629
maybe-financevicsuferVerified publisher0.2.71 of 3See more

maybe-finance vicsufer 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-111125.

Container imageDigestPackageFixed in
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
cfitsio@4.2.0-3
no fix listed

Open the chart page →

12,183

Container images carrying it

9 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
buall/postgres-stack:18.6881a785642cb
cfitsio@4.6.2-2
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
cfitsio@4.6.2-2
no fix listed
1
signalen/backend:2.50.1826bb090bc4e4
cfitsio@4.2.0-3
no fix listed
1
ghcr.io/caninehq/canine:latest68b19aee1c64
cfitsio@4.2.0-3
no fix listed
1
ghcr.io/deltabadger/deltabadger:2.23.3bffe3c22fabc
cfitsio@4.6.2-2
no fix listed
1
ghcr.io/fluxerapp/fluxer-api:2026.820.164808f683541d5374
cfitsio@4.2.0-3
no fix listed
1
ghcr.io/fluxerapp/fluxer-media-proxy:2026.820.164955ced7544e6b3f
cfitsio@4.6.2-2
no fix listed
1
ghcr.io/maybe-finance/maybe:0.5.0c6ab95ca9130
cfitsio@4.2.0-3
no fix listed
1
ghcr.io/seanmorley15/adventurelog-backend:v0.13.00250d9cb0d74
cfitsio@4.6.2-2
no fix listed
1

syft 1.42.1 · advisories as of 16 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.