StackRadar

CVE-2026-115207

Medium

Advisory

Published 22 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
234
of 18,232 indexed, latest versions
Container images
240
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 234 of 18,232 indexed charts deploy, on 240 images.

Affected packageAffected versionsFixed inImages
patchdeb2.7.6-7, 2.8-2no fix listed240
OSV records
DEBIAN-CVE-2026-115207

Charts affected

234 by stars
ChartLatestAffected imagesRadar Score
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
patch@2.7.6-7
no fix listed

Open the chart page →

57,399
kyoorubxkubeVerified publisher0.1.102 of 9See more

kyoo rubxkube 0.1.10

2 of the 9 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/zoriya/kyoo_autosync:4.7.1fbba58ddb1a6
patch@2.7.6-7
no fix listed
ghcr.io/zoriya/kyoo_scanner:4.7.17dc0ee57b628
patch@2.7.6-7
no fix listed

Open the chart page →

157,255
sigscale-csesigscale-cseOfficialVerified publisher1.4.221 of 1See more

sigscale-cse sigscale-cse 1.4.22

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
sigscale/cse:latestdfa75c395b95
patch@2.7.6-7
no fix listed

Open the chart page →

2,631
sigscale-ocssigscale-ocsOfficialVerified publisher1.1.171 of 1See more

sigscale-ocs sigscale-ocs 1.1.17

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
sigscale/ocs:latest3b8ec91d359d
patch@2.7.6-7
no fix listed

Open the chart page →

2,573
sogosogoVerified publisher0.3.51 of 2See more

sogo sogo 0.3.5

1 of the 2 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
patch@2.8-2
no fix listed

Open the chart page →

9,202
supabasesupabse0.8.01 of 11See more

supabase supabse 0.8.0

1 of the 11 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
patch@2.7.6-7
no fix listed

Open the chart page →

56,496
tocktock0.7.01 of 9See more

tock tock 0.7.0

1 of the 9 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
tock/gen-ai-orchestrator-server:26.9.036fdf931ca00
patch@2.8-2
no fix listed

Open the chart page →

7,760
typemilltypemill-helm-chart2.3.12 of 2See more

typemill typemill-helm-chart 2.3.1

2 of the 2 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
kixote/typemilldigest-pinned628f79a08cc7
patch@2.8-2
no fix listed
kixote/typemilldigest-pinneda1982fcfdde1
patch@2.8-2
no fix listed

Open the chart page →

6,188
u-storeunifieVerified publisher1.2.01 of 1See more

u-store unifie 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
patch@2.7.6-7
no fix listed

Open the chart page →

87,695
unitycatalogunitycatalogVerified publisher0.0.21 of 4See more

unitycatalog unitycatalog 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
patch@2.7.6-7
no fix listed

Open the chart page →

73,241
waldurwaldur-chartsVerified publisher8.1.31 of 3See more

waldur waldur-charts 8.1.3

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
opennode/waldur-mastermind:8.1.382e8f276c5ed
patch@2.8-2
no fix listed

Open the chart page →

5,065
wordpress-e2e-setupwoocommerce-e2e-setup0.1.11 of 2See more

wordpress-e2e-setup woocommerce-e2e-setup 0.1.1

1 of the 2 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/wordpress:6.8-apache30bff39330d1
patch@2.8-2
no fix listed

Open the chart page →

9,964
wordpress-helmwordpress-helm0.2.111 of 4See more

wordpress-helm wordpress-helm 0.2.11

1 of the 4 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
aapjeisbaas/wp-frankenphp:v0.3.19c09a3563ca3
patch@2.8-2
no fix listed

Open the chart page →

6,702
gotenbergadnoctemVerified publisher0.6.01 of 1See more

gotenberg adnoctem 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.38.1aa552cc115db
patch@2.8-2
no fix listed

Open the chart page →

9,305
airbyteairbyte-v2Verified publisher2.4.01 of 10See more

airbyte airbyte-v2 2.4.0

1 of the 10 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
airbyte/manifest-server:7.28.2deec511b51c3
patch@2.7.6-7
no fix listed

Open the chart page →

16,214
esphomealekcVerified publisher2.10.01 of 1See more

esphome alekc 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
esphome/esphome:2026.10.03a32372dfbd6
patch@2.8-2
no fix listed

Open the chart page →

4,253
komodoalekcVerified publisher4.0.11 of 1See more

komodo alekc 4.0.1

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/moghtech/komodo-core:2.3.4bc2f9ae27030
patch@2.8-2
no fix listed

Open the chart page →

1,868
esphomealexmorbo-esphomeVerified publisher1.0.01 of 1See more

esphome alexmorbo-esphome 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
esphome/esphome:2024.12.2b2c6322700ac
patch@2.7.6-7
no fix listed

Open the chart page →

7,459
mathesarandrenarchyVerified publisher1.8.01 of 1See more

mathesar andrenarchy 1.8.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
mathesar/mathesar:0.12.0091757cb01fe
patch@2.7.6-7
no fix listed

Open the chart page →

49,656
speech-to-phraseandrenarchyVerified publisher1.3.01 of 1See more

speech-to-phrase andrenarchy 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
rhasspy/wyoming-speech-to-phrase:1.4.3e532f0dbc6b2
patch@2.7.6-7
no fix listed

Open the chart page →

49,558
appriseapprise0.2.11 of 1See more

apprise apprise 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
caronc/apprise:latest0b2913b15c8e
patch@2.8-2
no fix listed

Open the chart page →

2,107
platform-apiappscodeVerified publisher2026.11.301 of 3See more

platform-api appscode 2026.11.30

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
patch@2.8-2
no fix listed

Open the chart page →

49,447
dokuwikiarea-42Verified publisher0.1.81 of 1See more

dokuwiki area-42 0.1.8

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
dokuwiki/dokuwiki:2025-05-14af08ecfdda239
patch@2.8-2
no fix listed

Open the chart page →

9,254
arlas-aiasarlas-stackVerified publisher28.10.01 of 22See more

arlas-aias arlas-stack 28.10.0

1 of the 22 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
patch@2.7.6-7
no fix listed

Open the chart page →

157,418
assemblylineassemblylineVerified publisher7.4.243 of 12See more

assemblyline assemblyline 7.4.24

3 of the 12 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
cccs/assemblyline-core:4.7.4.stable24ba0f28d759cd
patch@2.7.6-7
no fix listed
cccs/assemblyline-socketio:4.7.4.stable249a6fe665bd13
patch@2.7.6-7
no fix listed
cccs/assemblyline-ui:4.7.4.stable24cad7e7a4c95d
patch@2.7.6-7
no fix listed

Open the chart page →

8,896
smartorchestratorassist-iot-smart-orchestrator4.0.01 of 14See more

smartorchestrator assist-iot-smart-orchestrator 4.0.0

1 of the 14 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
patch@2.7.6-7
no fix listed

Open the chart page →

278,561
astrotrekastria0.0.21 of 4See more

astrotrek astria 0.0.2

1 of the 4 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
patch@2.7.6-7
no fix listed

Open the chart page →

103,851
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
patch@2.7.6-7
no fix listed

Open the chart page →

70,860
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
patch@2.7.6-7
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
patch@2.7.6-7
no fix listed

Open the chart page →

141,199
node-appbryopsida0.5.11 of 2See more

node-app bryopsida 0.5.1

1 of the 2 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/node:lts6449e19d8184
patch@2.7.6-7
no fix listed

Open the chart page →

95,079
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
patch@2.7.6-7
no fix listed

Open the chart page →

70,383
chart-dnazarenochart-dnazareno0.1.01 of 3See more

chart-dnazareno chart-dnazareno 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.16e75aa8f767c
patch@2.7.6-7
no fix listed

Open the chart page →

65,636
phpmyadmincloudpirates-phpmyadmin0.1.01 of 1See more

phpmyadmin cloudpirates-phpmyadmin 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/phpmyadmin:5.2.3-apacheda3c72f9886f
patch@2.8-2
no fix listed

Open the chart page →

2,810
chowdacluster-deploy0.2.01 of 1See more

chowda cluster-deploy 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/chowda:maina63dadf119be
patch@2.8-2
no fix listed

Open the chart page →

2,027
pbcore-utilcluster-deploy0.0.11 of 1See more

pbcore-util cluster-deploy 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
patch@2.7.6-7
no fix listed

Open the chart page →

58,470
cortezacorteza1.1.01 of 3See more

corteza corteza 1.1.0

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
cortezaproject/corteza-server-corredor:2024.9.44ea78dfe5364
patch@2.7.6-7
no fix listed

Open the chart page →

10,587
dev-code-servercosmoVerified publisher0.0.71 of 2See more

dev-code-server cosmo 0.0.7

1 of the 2 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
patch@2.7.6-7
no fix listed

Open the chart page →

74,342
cspconsolecspconsole1.3.111 of 5See more

cspconsole cspconsole 1.3.11

1 of the 5 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
cspconsole/csp-control-center:1.0.1046dda4a31bd6
patch@2.7.6-7
no fix listed

Open the chart page →

59,091
jupyterhubd4nVerified publisher3.3.71 of 7See more

jupyterhub d4n 3.3.7

1 of the 7 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
aristidetm/basic-notebook:3.6.5469dbc951224
patch@2.7.6-7
no fix listed

Open the chart page →

90,919
damap-chartdamapVerified publisher0.4.01 of 5See more

damap-chart damap 0.4.0

1 of the 5 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8f29984bd1e22
patch@2.8-2
no fix listed

Open the chart page →

20,973
redashdasmeta0.1.01 of 1See more

redash dasmeta 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
redash/redash:26.3.0c5c9148f5c38
patch@2.7.6-7
no fix listed

Open the chart page →

51,713
ai-agentdevtron0.0.11 of 1See more

ai-agent devtron 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
patch@2.7.6-7
no fix listed

Open the chart page →

11,500
devtron-enterprisedevtron48.0.01 of 28See more

devtron-enterprise devtron 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
patch@2.7.6-7
no fix listed

Open the chart page →

219,746
ai-agentdevtron-labs0.0.11 of 1See more

ai-agent devtron-labs 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
quay.io/devtron/ai-agent:0.0.16545dac92173
patch@2.7.6-7
no fix listed

Open the chart page →

11,500
devtron-enterprisedevtron-labs48.0.01 of 28See more

devtron-enterprise devtron-labs 48.0.0

1 of the 28 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
quay.io/devtron/notifier:9804331c-372-39294709c7da19c5a
patch@2.7.6-7
no fix listed

Open the chart page →

219,746
domainmoddjjudas21Verified publisher1.0.11 of 1See more

domainmod djjudas21 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
domainmod/domainmod:4.23.09d50d450ad4d
patch@2.8-2
no fix listed

Open the chart page →

2,219
webtreesdjjudas21Verified publisher3.0.11 of 1See more

webtrees djjudas21 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/nathanvaughn/webtrees:2.2.627597e9f4664
patch@2.8-2
no fix listed

Open the chart page →

4,263
wizarrdjjudas21Verified publisher0.1.61 of 1See more

wizarr djjudas21 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
patch@2.7.6-7
no fix listed

Open the chart page →

93,963
iotaeclipse-aeriosVerified publisher1.0.21 of 4See more

iota eclipse-aerios 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
patch@2.8-2
no fix listed

Open the chart page →

17,623
esphomeegebackVerified publisher2.0.271 of 1See more

esphome egeback 2.0.27

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
esphome/esphome:2026.9.14ad55931c018
patch@2.8-2
no fix listed

Open the chart page →

4,439

Container images carrying it

240 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
dolibarr/dolibarr:24.0.217692e7315b3
patch@2.7.6-7
no fix listed
1
dolibarr/dolibarr:22.0.47ad88fc9b13c
patch@2.7.6-7
no fix listed
1
domainmod/domainmod:4.23.09d50d450ad4d
patch@2.8-2
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
patch@2.8-2
no fix listed
1
esphome/esphome:2026.10.03a32372dfbd6
patch@2.8-2
no fix listed
1
esphome/esphome:2026.9.14ad55931c018
patch@2.8-2
no fix listed
1
esphome/esphome:2024.3.09ab8cc88b28c
patch@2.7.6-7
no fix listed
1
esphome/esphome:2024.12.2b2c6322700ac
patch@2.7.6-7
no fix listed
1
esphome/esphome:2025.3.0def8b6e4f517
patch@2.7.6-7
no fix listed
1
espocrm/espocrm:9.3.101b5a24504ed9
patch@2.8-2
no fix listed
1
falcosecurity/falco-driver-loader:0.45.16cfd7418907e
patch@2.7.6-7
no fix listed
1
filegator/filegator:latesta40a23c383c6
patch@2.8-2
no fix listed
1
fireflyiii/core:version-6.7.94409f9f0f873
patch@2.8-2
no fix listed
1
fireflyiii/core:version-6.6.6ae69fdd95cde
patch@2.8-2
no fix listed
1
fireflyiii/core:version-6.5.9fe4ecec4c2ba
patch@2.8-2
no fix listed
1
fireflyiii/data-importer:version-2.3.559f2f26ddf6e
patch@2.8-2
no fix listed
1
fireflyiii/data-importer:version-2.2.3ab52bf932546
patch@2.8-2
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
patch@2.7.6-7
no fix listed
1
fluent/fluent-bit:4.0-debuge76397ef3983
patch@2.7.6-7
no fix listed
1
getwud/wud:8.1.1b1cd01c43839
patch@2.7.6-7
no fix listed
1
glpi/glpi:latestc90bc626bcf4
patch@2.8-2
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
patch@2.8-2
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
patch@2.8-2
no fix listed
1
gotenberg/gotenberg:8.36.087c16b9f3642
patch@2.8-2
no fix listed
1
gotenberg/gotenberg:8:8.37.0f29984bd1e22
patch@2.8-2
no fix listed
1
gulacedia/web-dvwa-new:v367b467d961ca
patch@2.7.6-7
no fix listed
1
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
patch@2.7.6-7
no fix listed
1
hirosystems/stacks-blockchain-api:8.13.29c98b23c1515
patch@2.7.6-7
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
patch@2.7.6-7
no fix listed
1
jaedb/iris:latest048cfbf58d57
patch@2.7.6-7
no fix listed
1
kimai/kimai2:2.70.20db3af96f0da
patch@2.7.6-7
no fix listed
1
kitware/cdash:v5.5.16fab5f5ec6f2
patch@2.8-2
no fix listed
1
kixote/typemill628f79a08cc7
patch@2.8-2
no fix listed
1
kixote/typemilla1982fcfdde1
patch@2.8-2
no fix listed
1
knspar/phronetis-operator:0.1.60c4f0543ee58
patch@2.7.6-7
no fix listed
1
laly9999/node-app:1dd0e503913e1
patch@2.7.6-7
no fix listed
1
library/drupal:11.4.10-php8.5-apache-bookworm116fbf35120e
patch@2.7.6-7
no fix listed
1
library/matomo:5.1.2-apache2415789e1602
patch@2.7.6-7
no fix listed
1
library/matomo:5.14.0-apache40680f8e7ab6
patch@2.8-2
no fix listed
1
library/mediawiki:1.43.08b19e819f2e1
patch@2.7.6-7
no fix listed
1
library/nextcloud:31.0.6-apache588609d76b21
patch@2.7.6-7
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
patch@2.8-2
no fix listed
1
library/node:lts6449e19d8184
patch@2.7.6-7
no fix listed
1
library/node:208f693eaa7e0a
patch@2.7.6-7
no fix listed
1
library/node:latesta98e6fda54fd
patch@2.8-2
no fix listed
1
library/php:8.4-fpmcc7cdfe4da7d
patch@2.8-2
no fix listed
1
library/phpmyadmin:5.2.3-apache:latest7ebeef41095c
patch@2.8-2
no fix listed
1
library/python:3.10c10791e6f690
patch@2.8-2
no fix listed
1
library/python:3.8d41127070014
patch@2.7.6-7
no fix listed
1
library/python:3.9da5aee29682d
patch@2.8-2
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.