StackRadar

CVE-2026-113732

High

Advisory

Published 21 Oct 2026In the index since 22 Oct 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.002
11th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
131
of 18,232 indexed, latest versions
Container images
166
deployed by those charts
Fix available
1 of 2
affected packages

virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote

Carried by container images the latest versions of 131 of 18,232 indexed charts deploy, on 166 images.

Affected packageAffected versionsFixed inImages
virtualenvpypi1.11.4, 15.1.0, 16.3.0, 16.6.0+58 more21.14.2166
python-virtualenvdeb20.17.1+ds-1no fix listed1
OSV records
DEBIAN-CVE-2026-113732GHSA-c947-3pg5-gm8q

Charts affected

131 by stars
ChartLatestAffected imagesRadar Score
terminal-serverkrateo0.1.61 of 1See more

terminal-server krateo 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
virtualenv@20.26.3
21.14.2

Open the chart page →

73,334
lnbitskronkltdVerified publisher0.1.01 of 1See more

lnbits kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:latest26fae6327477
virtualenv@20.25.0
21.14.2

Open the chart page →

2,066
kube-janitorkube-janitor0.3.31 of 1See more

kube-janitor kube-janitor 0.3.3

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
hjacobs/kube-janitor:23.7.0fbb303ed463c
virtualenv@20.23.1
21.14.2

Open the chart page →

88,003
forkliftkubevirt-forkliftVerified publisher0.4.01 of 2See more

forklift kubevirt-forklift 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
quay.io/kubev2v/forklift-operator:release-2.12c879733fd77e
virtualenv@21.7.0
21.14.2

Open the chart page →

2,233
large-systems-djangolarge-systems-djangoVerified publisher1.0.01 of 1See more

large-systems-django large-systems-django 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
ha33ona/python:test6affdfc644d0
virtualenv@20.17.1
21.14.2

Open the chart page →

5,626
home-assistantlmatfyVerified publisher0.1.381 of 1See more

home-assistant lmatfy 0.1.38

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.75a531753cea9
virtualenv@21.7.0
21.14.2

Open the chart page →

4,282
lnbitslnbits0.2.11 of 1See more

lnbits lnbits 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
lnbitsdocker/lnbits-legend:0.10.6a11aaa6d2b21
virtualenv@20.21.1
21.14.2

Open the chart page →

2,828
meerschaummeerschaumVerified publisher0.2.01 of 1See more

meerschaum meerschaum 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
bmeares/meerschaum:2.8.48e9c5bacaa82
virtualenv@20.29.1
21.14.2

Open the chart page →

64,516
servicesmicroslacVerified publisher0.4.07 of 8See more

services microslac 0.4.0

7 of the 8 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
microslac/auth:latest5c1eb1f5c64d
virtualenv@20.25.0
21.14.2
microslac/chat:latest417317e4e4e8
virtualenv@20.25.1
21.14.2
microslac/client:latestff6d6c7968dd
virtualenv@20.25.1
21.14.2
microslac/conversations:latest1b24afcd71ff
virtualenv@20.25.0
21.14.2
microslac/realtime:latest7bde633b4158
virtualenv@20.25.1
21.14.2
microslac/teams:latest0f75997fcbe5
virtualenv@20.25.0
21.14.2
microslac/users:latest216ea6832a56
virtualenv@20.25.0
21.14.2

Open the chart page →

357,905
mlflowncsaVerified publisher1.2.11 of 4See more

mlflow ncsa 1.2.1

1 of the 4 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
evk02/mlflow:2.2.1ef6ff257ef35
virtualenv@20.20.0
21.14.2

Open the chart page →

6,835
home-assistantnewbenji-chartsVerified publisher0.7.21 of 1See more

home-assistant newbenji-charts 0.7.2

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
homeassistant/home-assistant:2026.8.0a21689ef0510
virtualenv@21.7.1
21.14.2

Open the chart page →

4,027
headphonesnicholaswildeVerified publisher1.0.11 of 1See more

headphones nicholaswilde 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/headphones:version-58edc60443f2d40be460
virtualenv@20.8.1
21.14.2

Open the chart page →

2,136
automx2oleds-helm-chartsVerified publisher1.0.51 of 1See more

automx2 oleds-helm-charts 1.0.5

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
oled01/automx2:2025.1.105d3e398e675
virtualenv@20.31.2
21.14.2

Open the chart page →

58,973
openwhiskopenwhisk1.0.01 of 10See more

openwhisk openwhisk 1.0.0

1 of the 10 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
openwhisk/kafkaprovider:2.1.063dc3d2a0904
virtualenv@16.7.6
21.14.2

Open the chart page →

104,721
osdfir-infrastructureosdfir-infrastructureVerified publisher2.15.04 of 40See more

osdfir-infrastructure osdfir-infrastructure 2.15.0

4 of the 40 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
ghcr.io/openrelik/openrelik-worker-analyzer-config:latest1269d3d8d2c2
virtualenv@20.25.0+ds
21.14.2
ghcr.io/openrelik/openrelik-worker-analyzer-logs:latestbd496fa8c9df
virtualenv@20.25.0+ds
21.14.2
ghcr.io/openrelik/openrelik-worker-containers:latesta6d5abe94706
virtualenv@20.25.0+ds
21.14.2
ghcr.io/openrelik/openrelik-worker-os-creds:latest7fc7ec101f08
virtualenv@20.25.0+ds
21.14.2

Open the chart page →

307,056
home-assistantpascaliskeVerified publisher0.1.11 of 1See more

home-assistant pascaliske 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2025.12.59a5a3eb4a213
virtualenv@20.35.4
21.14.2

Open the chart page →

6,937
phronetisphronetis0.1.271 of 2See more

phronetis phronetis 0.1.27

1 of the 2 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
knspar/phronetis:0.1.4609499d2dc91a
virtualenv@20.31.2
21.14.2

Open the chart page →

87,474
tenant-namespace-operatorpnnl-miscscripts0.1.281 of 1See more

tenant-namespace-operator pnnl-miscscripts 0.1.28

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
pnnlmiscscripts/tenant-namespace-operator:0.1.24-18af4b7551d40
virtualenv@20.24.5
21.14.2

Open the chart page →

14,223
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
virtualenv@20.26.4
21.14.2

Open the chart page →

24,438
revwallet-apirevwallet0.7.121 of 1See more

revwallet-api revwallet 0.7.12

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
arthurjguerra18/revwallet:v0.7.12f540af20b307
virtualenv@20.26.3
21.14.2

Open the chart page →

72,406
kube-web-viewrlex0.5.01 of 1See more

kube-web-view rlex 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
hjacobs/kube-web-view:23.8.0431f1bf013d0
virtualenv@20.24.3
21.14.2

Open the chart page →

86,174
ai-agentromholdings0.0.11 of 1See more

ai-agent romholdings 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
virtualenv@20.27.1
21.14.2

Open the chart page →

11,025
agentdatarss30.1.01 of 1See more

agentdata rss3 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
virtualenv@20.29.3
21.14.2

Open the chart page →

4,083
noderss30.7.21 of 3See more

node rss3 0.7.2

1 of the 3 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
virtualenv@20.29.3
21.14.2

Open the chart page →

6,160
airflowsb-helm-charts0.3.01 of 1See more

airflow sb-helm-charts 0.3.0

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
apache/airflow:2.8.1e5560ad0b86e
virtualenv@20.25.0
21.14.2

Open the chart page →

11,988
backendsignalen4.25.01 of 4See more

backend signalen 4.25.0

1 of the 4 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
signalen/backend:2.50.1826bb090bc4e4
virtualenv@21.7.10
21.14.2

Open the chart page →

36,570
home-assistantsmall-hack2.1.01 of 1See more

home-assistant small-hack 2.1.0

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
ghcr.io/home-assistant/home-assistant:2026.3.10e091dfce306
virtualenv@21.1.0
21.14.2

Open the chart page →

6,004
mealiesmarthallVerified publisher0.0.101 of 1See more

mealie smarthall 0.0.10

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
ghcr.io/mealie-recipes/mealie:v1.4.0b56da41cf178
virtualenv@20.21.1
21.14.2

Open the chart page →

7,039
downscalersqream-chartsVerified publisher1.0.01 of 1See more

downscaler sqream-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
hjacobs/kube-downscaler:23.2.05d328c003efe
virtualenv@20.19.0
21.14.2

Open the chart page →

1,288
servicexssl-hep1.8.611 of 16See more

servicex ssl-hep 1.8.6

11 of the 16 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
sslhep/servicex_app:v1.8.6c935e123030d
virtualenv@20.39.1
21.14.2
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
virtualenv@20.39.1
21.14.2
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
virtualenv@20.39.1
21.14.2
sslhep/servicex_code_gen_python:v1.8.696805be717ff
virtualenv@20.39.1
21.14.2
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
virtualenv@20.39.1
21.14.2
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
virtualenv@20.39.1
21.14.2
sslhep/servicex-did-finder:v1.8.6e15e68307d33
virtualenv@20.39.1
21.14.2
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
virtualenv@21.9.0
21.14.2
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
virtualenv@20.39.1
21.14.2
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
virtualenv@20.39.1
21.14.2
sslhep/x509-secrets:v1.8.634e1c87cea8a
virtualenv@20.39.1
21.14.2

Open the chart page →

66,935
restful-distributed-lock-managerstakaterVerified publisher1.0.41 of 1See more

restful-distributed-lock-manager stakater 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-113732.

Container imageDigestPackageFixed in
stakater/restful-distributed-lock-manager:0.5.34f8e409f30c2
virtualenv@15.1.0
21.14.2

Open the chart page →

4,612

Container images carrying it

166 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/devtron/ai-agent:0.0.16545dac92173
virtualenv@20.27.1
21.14.2
3
hjacobs/kube-downscaler:23.2.0-6-gc9b88e84b2147f47425
virtualenv@20.23.1
21.14.2
2
ghcr.io/rss3-network/agentdata:0.1.0fd8d3e6e4cdf
virtualenv@20.29.3
21.14.2
2
airbyte/manifest-server:7.28.2deec511b51c3
virtualenv@20.39.1
21.14.2
1
alerta/alerta-web:8.5.04786b9eaa606
virtualenv@20.10.0
21.14.2
1
allegroai/clearml:2.0.0-613713ae38f7daf
virtualenv@20.28.0
21.14.2
1
allegroai/clearml-agent-k8s-base:1.24-21772827a01bb5
virtualenv@20.15.0
21.14.2
1
apache/airflow:2.8.4-python3.964e58748b6b9
virtualenv@20.25.1
21.14.2
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
virtualenv@20.26.4
21.14.2
1
apache/airflow:2.8.1e5560ad0b86e
virtualenv@20.25.0
21.14.2
1
arthurjguerra18/revwallet:v0.7.12f540af20b307
virtualenv@20.26.3
21.14.2
1
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
virtualenv@20.35.4
21.14.2
1
bitnamilegacy/cassandra:4.1.7-debian-12-r32b7a217999a1
virtualenv@20.28.0
21.14.2
1
bmeares/meerschaum:2.8.48e9c5bacaa82
virtualenv@20.29.1
21.14.2
1
camerahub/camerahub:0.36.23a5af37dd6e1b
virtualenv@20.21.1
21.14.2
1
castai/hibernate:v0.14da62858c8381
virtualenv@21.6.1
21.14.2
1
cdignam/kodiak:v0.54.05a6a55b39cee
virtualenv@20.15.1
21.14.2
1
codecov/self-hosted-api:24.4.10475cb1c3136
virtualenv@20.4.3
21.14.2
1
codecov/self-hosted-worker:24.4.1837f546b479b
virtualenv@20.24.5
21.14.2
1
djjudas21/autonodelabel:0.0.6f17233350c4f
virtualenv@20.24.2
21.14.2
1
evk02/mlflow:2.2.1ef6ff257ef35
virtualenv@20.20.0
21.14.2
1
factly/hunting:0.2.0-stagv1.2ca5bc71d1d5c
virtualenv@20.17.1
21.14.2
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
virtualenv@21.3.3
21.14.2
1
galaxy/galaxy-init:v18.010267bad550e6
virtualenv@1.11.4
21.14.2
1
galaxy/galaxy-stable:v18.018e577a626dfd
virtualenv@1.11.4
21.14.2
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
python-virtualenv@20.17.1+ds-1
virtualenv@20.17.1+ds
no fix listed
21.14.2
1
gethue/hue:4.11.011b649636e68
virtualenv@20.16.5
21.14.2
1
gethue/hue:4.10.05702b2c37ff9
virtualenv@20.4.7
21.14.2
1
gethue/hue:latest7d5c1b9f8a79
virtualenv@20.36.1
21.14.2
1
growthbook/growthbook:5.1.0c8a124f55dca
virtualenv@20.39.1
21.14.2
1
ha33ona/python:test6affdfc644d0
virtualenv@20.17.1
21.14.2
1
hansehe/locust:1.1.0bc8e45262bc4
virtualenv@20.29.3
21.14.2
1
hayk96/alerta-web:9.0.486377705e9e3
virtualenv@20.26.3
21.14.2
1
hhyo/archery:v1.9.11aa41843419e
virtualenv@20.15.1
21.14.2
1
hjacobs/kube-downscaler:23.2.05d328c003efe
virtualenv@20.19.0
21.14.2
1
hjacobs/kube-janitor:23.7.0fbb303ed463c
virtualenv@20.23.1
21.14.2
1
hjacobs/kube-ops-view:23.5.0a4fae38f93d7
virtualenv@20.21.1
21.14.2
1
hjacobs/kube-resource-report:22.11.0c173cd02f5af
virtualenv@20.17.0
21.14.2
1
hjacobs/kube-web-view:23.8.0431f1bf013d0
virtualenv@20.24.3
21.14.2
1
hkotel/mealie:api-v1.0.0beta-2a7e6b6abe087
virtualenv@20.14.1
21.14.2
1
homeassistant/home-assistant:2023.10.3021e2afc6e57
virtualenv@20.24.5
21.14.2
1
homeassistant/home-assistant:2022.3.5565751f33794
virtualenv@20.13.3
21.14.2
1
homeassistant/home-assistant:2026.75a531753cea9
virtualenv@21.7.0
21.14.2
1
homeassistant/home-assistant:2023.12.48d000332b09b
virtualenv@20.25.0
21.14.2
1
homeassistant/home-assistant:2026.8.0a21689ef0510
virtualenv@21.7.1
21.14.2
1
ibmcom/icp-sert-bats:3.2.0b558f2b444ae
virtualenv@16.6.0
21.14.2
1
jaedb/iris:latest048cfbf58d57
virtualenv@20.30.0
21.14.2
1
knspar/phronetis:0.1.4609499d2dc91a
virtualenv@20.31.2
21.14.2
1
kong/httpbin:latesta6ac46531193
virtualenv@20.28.1
21.14.2
1
langgenius/dify-api:1.0.0066035f93856
virtualenv@20.29.2
21.14.2
1

syft 1.42.1 · advisories as of 22 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.