StackRadar

CVE-2026-115207

Medium

Advisory

Published 22 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.001
2nd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
234
of 18,232 indexed, latest versions
Container images
240
deployed by those charts
Fix available
None
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 234 of 18,232 indexed charts deploy, on 240 images.

Affected packageAffected versionsFixed inImages
patchdeb2.7.6-7, 2.8-2no fix listed240
OSV records
DEBIAN-CVE-2026-115207

Charts affected

234 by stars
ChartLatestAffected imagesRadar Score
wordpresseoc-chartsVerified publisher0.14.41 of 1See more

wordpress eoc-charts 0.14.4

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/wordpress:6.8.3-apache30bff39330d1
patch@2.8-2
no fix listed

Open the chart page →

9,056
matomoeosc-lot-1Verified publisher0.2.01 of 1See more

matomo eosc-lot-1 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/matomo:5.1.2-apache2415789e1602
patch@2.7.6-7
no fix listed

Open the chart page →

66,912
espocrmespocrmVerified publisher1.0.11 of 2See more

espocrm espocrm 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
espocrm/espocrm:9.3.101b5a24504ed9
patch@2.8-2
no fix listed

Open the chart page →

8,410
beeport-uiethersphereVerified publisher0.76.21 of 3See more

beeport-ui ethersphere 0.76.2

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/node:lts14078204b6bb
patch@2.7.6-7
no fix listed

Open the chart page →

30,628
multichain-uiethersphereVerified publisher0.73.11 of 3See more

multichain-ui ethersphere 0.73.1

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/node:lts14078204b6bb
patch@2.7.6-7
no fix listed

Open the chart page →

30,555
static-siteethersphereVerified publisher0.73.11 of 2See more

static-site ethersphere 0.73.1

1 of the 2 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/node:latesta98e6fda54fd
patch@2.8-2
no fix listed

Open the chart page →

6,881
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
patch@2.7.6-7
no fix listed

Open the chart page →

76,422
firefly-iiifirefly-iii1.10.21 of 1See more

firefly-iii firefly-iii 1.10.2

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.7.94409f9f0f873
patch@2.8-2
no fix listed

Open the chart page →

2,188
firefly-iii-stackfirefly-iii0.10.22 of 4See more

firefly-iii-stack firefly-iii 0.10.2

2 of the 4 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
fireflyiii/core:version-6.5.9fe4ecec4c2ba
patch@2.8-2
no fix listed
fireflyiii/data-importer:version-2.2.3ab52bf932546
patch@2.8-2
no fix listed

Open the chart page →

12,229
importerfirefly-iii1.6.11 of 1See more

importer firefly-iii 1.6.1

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
fireflyiii/data-importer:version-2.3.559f2f26ddf6e
patch@2.8-2
no fix listed

Open the chart page →

2,188
flask-contactsfirst-idror-chart1.0.11 of 3See more

flask-contacts first-idror-chart 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/phpmyadmin:latest62a50b1419fe
patch@2.8-2
no fix listed

Open the chart page →

6,392
business-api-ecosystemfiware1.2.01 of 4See more

business-api-ecosystem fiware 1.2.0

1 of the 4 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
patch@2.7.6-7
no fix listed

Open the chart page →

173,007
flask-contactsflask-contacts-generic1.0.11 of 3See more

flask-contacts flask-contacts-generic 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/phpmyadmin:latest62a50b1419fe
patch@2.8-2
no fix listed

Open the chart page →

6,392
flyteconnectorflyte2.0.01 of 1See more

flyteconnector flyte 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/flyteorg/flyte-connectors:py3.12-v2.3.6896fc7b18b1b
patch@2.7.6-7
no fix listed

Open the chart page →

44,480
esphomegabe565Verified publisher0.15.01 of 1See more

esphome gabe565 0.15.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:latest776a845d5089
patch@2.8-2
no fix listed

Open the chart page →

4,439
mopidygeek-cookbookVerified publisher0.1.21 of 1See more

mopidy geek-cookbook 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
jaedb/iris:latest048cfbf58d57
patch@2.7.6-7
no fix listed

Open the chart page →

69,783
skypilotgeek-cookbookVerified publisher0.0.11 of 3See more

skypilot geek-cookbook 0.0.1

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
berkeleyskypilot/skypilot-nightly:latest8da2f3cda472
patch@2.8-2
no fix listed

Open the chart page →

12,596
glpiglpi-chart0.1.12 of 3See more

glpi glpi-chart 0.1.1

2 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/phpmyadmin:latest62a50b1419fe
patch@2.8-2
no fix listed
vdiogov/glpi-conteiner:latest6945f84f0058
patch@2.7.6-7
no fix listed

Open the chart page →

80,098
opentelemetry-demogpg-dev0.33.81 of 27See more

opentelemetry-demo gpg-dev 0.33.8

1 of the 27 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/open-telemetry/demo:1.12.0-quoteservice87eb325d306f
patch@2.7.6-7
no fix listed

Open the chart page →

199,455
heliconehelicone0.1.421 of 14See more

helicone helicone 0.1.42

1 of the 14 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
helicone/supabase-migration-runner:v2025.03.05-14a913936c97b
patch@2.7.6-7
no fix listed

Open the chart page →

157,451
esphomehelm-chart-roeiVerified publisher2025.3.01 of 1See more

esphome helm-chart-roei 2025.3.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
esphome/esphome:2025.3.0def8b6e4f517
patch@2.7.6-7
no fix listed

Open the chart page →

7,126
castopodhelmforgeVerified publisher1.2.131 of 3See more

castopod helmforge 1.2.13

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
patch@2.8-2
no fix listed

Open the chart page →

11,481
chiefonboardinghelmforgeVerified publisher1.1.171 of 3See more

chiefonboarding helmforge 1.1.17

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
patch@2.8-2
no fix listed

Open the chart page →

9,393
dawarichhelmforgeVerified publisher1.0.81 of 4See more

dawarich helmforge 1.0.8

1 of the 4 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
freikin/dawarich:1.16.0b533e6eac446
patch@2.8-2
no fix listed

Open the chart page →

12,886
discount-bandithelmforgeVerified publisher2.0.121 of 3See more

discount-bandit helmforge 2.0.12

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.5bc327406db74
patch@2.8-2
no fix listed

Open the chart page →

41,958
drupalhelmforgeVerified publisher1.2.181 of 2See more

drupal helmforge 1.2.18

1 of the 2 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/drupal:11.4.10-php8.5-apache-bookworm116fbf35120e
patch@2.7.6-7
no fix listed

Open the chart page →

18,488
middlewarehelmforgeVerified publisher1.2.111 of 4See more

middleware helmforge 1.2.11

1 of the 4 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
patch@2.7.6-7
no fix listed

Open the chart page →

64,802
moodlehelmforgeVerified publisher1.1.51 of 2See more

moodle helmforge 1.1.5

1 of the 2 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
moodlehq/moodle-php-apache:8.4-bookworm922af5166835
patch@2.7.6-7
no fix listed

Open the chart page →

35,755
nextcloudhelmforgeVerified publisher2.0.41 of 3See more

nextcloud helmforge 2.0.4

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
library/nextcloud:35.0.2-apachea588aa535370
patch@2.8-2
no fix listed

Open the chart page →

7,214
opensignhelmforgeVerified publisher1.0.01 of 3See more

opensign helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
opensign/opensigndigest-pinned0ebc230eed21
patch@2.7.6-7
no fix listed

Open the chart page →

70,650
phpmyadminhelmforgeVerified publisher2.1.21 of 1See more

phpmyadmin helmforge 2.1.2

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
phpmyadmin/phpmyadmin:5.2.342a200db07b4
patch@2.8-2
no fix listed

Open the chart page →

5,716
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
patch@2.7.6-7
no fix listed

Open the chart page →

84,323
openaevhelm-openbasVerified publisher2.0.171 of 7See more

openaev helm-openbas 2.0.17

1 of the 7 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
patch@2.7.6-7
no fix listed

Open the chart page →

80,323
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
patch@2.7.6-7
no fix listed

Open the chart page →

85,165
paperlesshpVerified publisher0.1.21 of 5See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
patch@2.8-2
no fix listed

Open the chart page →

42,418
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
patch@2.7.6-7
no fix listed

Open the chart page →

68,389
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
patch@2.7.6-7
no fix listed

Open the chart page →

98,094
jasperjasperVerified publisher1.0.2111 of 2See more

jasper jasper 1.0.211

1 of the 2 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
patch@2.7.6-7
no fix listed

Open the chart page →

38,801
esphomejeffrescVerified publisher0.2.21 of 1See more

esphome jeffresc 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/esphome/esphome:2026.4.078a82d810709
patch@2.7.6-7
no fix listed

Open the chart page →

51,184
image-storage-servicejtektVerified publisher0.5.11 of 4See more

image-storage-service jtekt 0.5.1

1 of the 4 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
patch@2.7.6-7
no fix listed

Open the chart page →

90,442
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
patch@2.7.6-7
no fix listed
moreillon/group-manager:latest3caa8f710ee0
patch@2.7.6-7
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
patch@2.7.6-7
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
patch@2.7.6-7
no fix listed

Open the chart page →

320,051
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
patch@2.7.6-7
no fix listed

Open the chart page →

97,176
k8s-dummy-lbk8s-dummy-lb0.0.61 of 1See more

k8s-dummy-lb k8s-dummy-lb 0.0.6

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/nefelim4ag/k8s-dummy-lb:0.0.6f12291f7cce5
patch@2.8-2
no fix listed

Open the chart page →

5,512
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
patch@2.8-2
no fix listed

Open the chart page →

44,528
cdashkitwareVerified publisher0.21.11 of 3See more

cdash kitware 0.21.1

1 of the 3 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
kitware/cdash:v5.5.16fab5f5ec6f2
patch@2.8-2
no fix listed

Open the chart page →

12,842
deployment-servicekrateo1.2.591 of 1See more

deployment-service krateo 1.2.59

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/deployment-service:1.2.59da9f93f2f731
patch@2.7.6-7
no fix listed

Open the chart page →

85,072
finops-database-handlerkrateo0.5.41 of 1See more

finops-database-handler krateo 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
patch@2.7.6-7
no fix listed

Open the chart page →

84,249
finops-webservice-api-mockkrateo0.1.01 of 1See more

finops-webservice-api-mock krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
patch@2.7.6-7
no fix listed

Open the chart page →

88,974
terminal-clientkrateo0.1.31 of 1See more

terminal-client krateo 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-client:0.1.36c7c965e739c
patch@2.7.6-7
no fix listed

Open the chart page →

74,432
terminal-serverkrateo0.1.61 of 1See more

terminal-server krateo 0.1.6

1 of the 1 container images this version deploys carry CVE-2026-115207.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/terminal-server:0.1.3f5fd8ba6fea3
patch@2.7.6-7
no fix listed

Open the chart page →

74,361

Container images carrying it

240 by charts deploying them

A fixed version is listed for 0 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
patch@2.7.6-7
no fix listed
1
socialmediamacroscope/preprocessing:0.1.3ca863306314b
patch@2.7.6-7
no fix listed
1
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
patch@2.7.6-7
no fix listed
1
sonroyaalmerol/docker-sogo:5.12.43f60f3abe990
patch@2.8-2
no fix listed
1
sslhep/servicex_app:v1.8.6c935e123030d
patch@2.8-2
no fix listed
1
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
patch@2.8-2
no fix listed
1
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
patch@2.8-2
no fix listed
1
sslhep/servicex_code_gen_python:v1.8.696805be717ff
patch@2.8-2
no fix listed
1
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
patch@2.8-2
no fix listed
1
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
patch@2.8-2
no fix listed
1
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
patch@2.8-2
no fix listed
1
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
patch@2.8-2
no fix listed
1
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
patch@2.8-2
no fix listed
1
substratusai/verba:v0.4.0-baseURL261695be635eb
patch@2.7.6-7
no fix listed
1
supabase/studio:20241021-9f9b08326d8070c55e9
patch@2.7.6-7
no fix listed
1
supabase/studio:2026.08.03-sha-022b374606aca9fdaa7
patch@2.7.6-7
no fix listed
1
supabase/studio:latestd878dcd9dba7
patch@2.7.6-7
no fix listed
1
svtechnmaa/svtech_nagvis:v1.2.118394b08e6c3
patch@2.7.6-7
no fix listed
1
sysnet4admin/colosseum-cms:loge74b43c7f492
patch@2.7.6-7
no fix listed
1
sysnet4admin/colosseum-prm:log5802bfcd7fed
patch@2.7.6-7
no fix listed
1
teknas09/bird-pod:latest12a1fa85c4aa
patch@2.7.6-7
no fix listed
1
theradius/loggia:0.463ba348546ec
patch@2.7.6-7
no fix listed
1
thongngo3301/stakefish:latesta341af5976e3
patch@2.7.6-7
no fix listed
1
tock/gen-ai-orchestrator-server:26.9.036fdf931ca00
patch@2.8-2
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
patch@2.7.6-7
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
patch@2.7.6-7
no fix listed
1
vlebediantsev/notes-admin-front:latest007c6670ff48
patch@2.7.6-7
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
patch@2.7.6-7
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
patch@2.7.6-7
no fix listed
1
voska/hass-mcp:latest7142a431e2c5
patch@2.7.6-7
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
patch@2.7.6-7
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
patch@2.7.6-7
no fix listed
1
yetiplatform/yeti:latest8673609841e3
patch@2.8-2
no fix listed
1
yetiplatform/yeti:2.9.09bcbe2650a14
patch@2.8-2
no fix listed
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
patch@2.7.6-7
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
patch@2.8-2
no fix listed
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
patch@2.7.6-7
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
patch@2.7.6-7
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
patch@2.7.6-7
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
patch@2.7.6-7
no fix listed
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
patch@2.8-2
no fix listed
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
patch@2.7.6-7
no fix listed
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
patch@2.8-2
no fix listed
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
patch@2.7.6-7
no fix listed
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
patch@2.8-2
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
patch@2.7.6-7
no fix listed
1
ghcr.io/esphome/esphome:latest776a845d5089
patch@2.8-2
no fix listed
1
ghcr.io/esphome/esphome:2026.4.078a82d810709
patch@2.7.6-7
no fix listed
1
ghcr.io/esphome/esphome:2026.7.4e636269c6390
patch@2.8-2
no fix listed
1
ghcr.io/felddy/foundryvtt:14.369.076497e09a7ee
patch@2.8-2
no fix listed
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.