StackRadar

CVE-2026-115774

Medium

Advisory

Published 23 Oct 2026In the index since 24 Oct 2026
Severity
Medium
worst across findings
CVSS
4.9
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
43
of 18,232 indexed, latest versions
Container images
48
deployed by those charts
Fix available
1 of 1
affected package

Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH

Carried by container images the latest versions of 43 of 18,232 indexed charts deploy, on 48 images.

Affected packageAffected versionsFixed inImages
twistedpypi16.6.0, 16.7.0rc2, 17.9.0, 18.9.0+13 more26.10.0rc148
OSV records
GHSA-2qrf-pqgx-qh9v

Charts affected

43 by stars
ChartLatestAffected imagesRadar Score
weblateweblateOfficialVerified publisher0.5.441 of 3See more

weblate weblate 0.5.44

1 of the 3 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
weblate/weblate:2026.10.1.26663a7c8b444
twisted@26.4.0
26.10.0rc1

Open the chart page →

8,034
synapsehalkeye0.40.01 of 2See more

synapse halkeye 0.40.0

1 of the 2 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
twisted@24.3.0
26.10.0rc1

Open the chart page →

8,198
netris-controllernetrisai2.8.21 of 14See more

netris-controller netrisai 2.8.2

1 of the 14 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
twisted@20.3.0
26.10.0rc1

Open the chart page →

39,830
openvpn-asas-helm-chartOfficialVerified publisher0.2.11 of 1See more

openvpn-as as-helm-chart 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
openvpn/openvpn-as:latest921b38fb12d2
twisted@25.5.0
26.10.0rc1

Open the chart page →

2,370
baserowbaserow-chartVerified publisher1.1.11 of 6See more

baserow baserow-chart 1.1.1

1 of the 6 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
baserow/backend:2.4.1497347d0ba74
twisted@26.4.0
26.10.0rc1

Open the chart page →

20,099
matrixzekker6Verified publisher3.34.01 of 4See more

matrix zekker6 3.34.0

1 of the 4 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.163.141d8a4edfdc6
twisted@26.4.0
26.10.0rc1

Open the chart page →

6,555
convertigoconvertigoOfficialVerified publisher8.4.61 of 5See more

convertigo convertigo 8.4.6

1 of the 5 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
baserow/baserow:1.30.1df0c42eb67e8
twisted@24.3.0
26.10.0rc1

Open the chart page →

79,283
psonoankra-chartsVerified publisher1.2.01 of 2See more

psono ankra-charts 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
psono/psono-server:5.0.03b974b43ea03
twisted@24.7.0
26.10.0rc1

Open the chart page →

3,034
anteonanteonVerified publisher2.6.42 of 13See more

anteon anteon 2.6.4

2 of the 13 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
twisted@24.7.0
26.10.0rc1
ddosify/selfhosted_backend:3.2.93c11e3182652
twisted@24.3.0
26.10.0rc1

Open the chart page →

99,577
obicogabe565Verified publisher0.6.01 of 3See more

obico gabe565 0.6.0

1 of the 3 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
ghcr.io/gabe565/obico/web:latest6acb4a5903eb
twisted@24.11.0
26.10.0rc1

Open the chart page →

2,913
paperlessgeek-cookbookVerified publisher9.2.01 of 1See more

paperless geek-cookbook 9.2.0

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
twisted@22.4.0
26.10.0rc1

Open the chart page →

5,317
huehue1.0.31 of 3See more

hue hue 1.0.3

1 of the 3 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
gethue/hue:latest7d5c1b9f8a79
twisted@25.5.0
26.10.0rc1

Open the chart page →

67,295
vmware-exporterkremers2.3.01 of 1See more

vmware-exporter kremers 2.3.0

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
pryorda/vmware_exporter:v0.18.479925e63e59f
twisted@22.8.0
26.10.0rc1

Open the chart page →

1,298
delugerubxkubeVerified publisher1.2.11 of 1See more

deluge rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
linuxserver/deluge:18.04.10ac871624394
twisted@17.9.0
26.10.0rc1

Open the chart page →

14,847
prometheus-pve-exporterstenicVerified publisher0.1.11 of 1See more

prometheus-pve-exporter stenic 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
twisted@20.3.0
26.10.0rc1

Open the chart page →

2,609
synapsesudermanjr1.1.51 of 1See more

synapse sudermanjr 1.1.5

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
twisted@22.1.0
26.10.0rc1

Open the chart page →

4,643
ddosifyanteonVerified publisher1.7.52 of 13See more

ddosify anteon 1.7.5

2 of the 13 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
twisted@24.3.0
26.10.0rc1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
twisted@24.3.0
26.10.0rc1

Open the chart page →

181,358
argonix-apiargonix0.6.51 of 4See more

argonix-api argonix 0.6.5

1 of the 4 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
twisted@26.4.0
26.10.0rc1

Open the chart page →

7,438
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
twisted@21.2.0
26.10.0rc1

Open the chart page →

85,358
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
twisted@24.3.0
26.10.0rc1

Open the chart page →

70,860
duoauthproxy-radius-simplecaerus0.1.01 of 1See more

duoauthproxy-radius-simple caerus 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
twisted@20.3.0
26.10.0rc1

Open the chart page →

3,290
vmware-exporterdniel0.0.11 of 1See more

vmware-exporter dniel 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
pryorda/vmware_exporter:v0.18.3e0f5ba8b7856
twisted@22.2.0
26.10.0rc1

Open the chart page →

1,471
pritunldysnixVerified publisher0.2.71 of 3See more

pritunl dysnix 0.2.7

1 of the 3 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
dysnix/pritunl:v1.29-r819951e3e7a32
twisted@20.3.0
26.10.0rc1

Open the chart page →

7,109
demo-workflowsfrinx-helm-charts2.0.01 of 3See more

demo-workflows frinx-helm-charts 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
frinx/sample-topology:6.1.01a19658415b6
twisted@16.7.0rc2
26.10.0rc1

Open the chart page →

2,868
sample-topologyfrinx-helm-charts3.1.11 of 1See more

sample-topology frinx-helm-charts 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
frinx/sample-topology:6.1.01a19658415b6
twisted@16.7.0rc2
26.10.0rc1

Open the chart page →

1,312
delugegeek-cookbookVerified publisher5.4.21 of 1See more

deluge geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
twisted@17.9.0
26.10.0rc1

Open the chart page →

14,857
librechat-exporterhajowielandVerified publisher1.0.01 of 1See more

librechat-exporter hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
twisted@24.11.0
26.10.0rc1

Open the chart page →

2,628
archiveboxhelmforgeVerified publisher1.1.151 of 1See more

archivebox helmforge 1.1.15

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
archivebox/archivebox:0.9.73d4720d86c0e9
twisted@26.4.0
26.10.0rc1

Open the chart page →

7,111
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
twisted@25.5.0
26.10.0rc1

Open the chart page →

98,094
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
twisted@20.3.0
26.10.0rc1

Open the chart page →

10,856
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
twisted@22.10.0
26.10.0rc1

Open the chart page →

82,822
delugelib42Verified publisher1.3.01 of 1See more

deluge lib42 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
lib42/deluge:20c4d1d326f95
twisted@22.10.0
26.10.0rc1

Open the chart page →

1,097
delugelinkding0.2.31 of 1See more

deluge linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
twisted@24.11.0
26.10.0rc1

Open the chart page →

2,497
splashntppoolVerified publisher1.0.41 of 1See more

splash ntppool 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
scrapinghub/splash:3.4.1a5f89bc84606
twisted@19.7.0
26.10.0rc1

Open the chart page →

93,400
anchore-engineopencloudcx1.13.01 of 2See more

anchore-engine opencloudcx 1.13.0

1 of the 2 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.10.0bde9eedf639d
twisted@20.3.0
26.10.0rc1

Open the chart page →

20,093
comacopencord1.0.03 of 9See more

comac opencord 1.0.0

3 of the 9 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
twisted@18.9.0
26.10.0rc1
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
twisted@16.6.0
26.10.0rc1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
twisted@16.6.0
26.10.0rc1

Open the chart page →

249,713
comac-platformopencord0.0.172 of 11See more

comac-platform opencord 0.0.17

2 of the 11 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
twisted@18.9.0
26.10.0rc1
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
twisted@16.6.0
26.10.0rc1

Open the chart page →

79,321
ponsimv2opencord1.2.31 of 2See more

ponsimv2 opencord 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
voltha/voltha-tester:1.7.0655c3048a602
twisted@17.9.0
26.10.0rc1

Open the chart page →

64,303
sebaopencord1.0.04 of 17See more

seba opencord 1.0.0

4 of the 17 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
voltha/voltha-cli:1.6.0c4e41e92f046
twisted@17.9.0
26.10.0rc1
voltha/voltha-netconf:1.6.037f80524c207
twisted@17.9.0
26.10.0rc1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
twisted@17.9.0
26.10.0rc1
voltha/voltha-voltha:1.6.0ff596b62de59
twisted@17.9.0
26.10.0rc1

Open the chart page →

351,627
delugeretsamedocVerified publisher26.9.01 of 1See more

deluge retsamedoc 26.9.0

1 of the 1 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
linuxserver/deluge:2.2.0bf306ddd5e6d
twisted@26.4.0
26.10.0rc1

Open the chart page →

636
matrix-stackrock8sVerified publisher0.8.11 of 7See more

matrix-stack rock8s 0.8.1

1 of the 7 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
twisted@24.7.0
26.10.0rc1

Open the chart page →

12,822
synapsetranhailongVerified publisher0.1.01 of 2See more

synapse tranhailong 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
matrixdotorg/synapse:v1.78.0def97fd537d8
twisted@22.10.0
26.10.0rc1

Open the chart page →

4,044
dingtalk-botxxl-job-adminVerified publisher0.1.31 of 2See more

dingtalk-bot xxl-job-admin 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-115774.

Container imageDigestPackageFixed in
dellnoantechnp/dingtalk-bot:v1.0.1034000bbcad5
twisted@25.5.0
26.10.0rc1

Open the chart page →

4,012

Container images carrying it

48 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
frinx/sample-topology:6.1.01a19658415b6
twisted@16.7.0rc2
26.10.0rc1
2
omecproject/kubernetes-synchronizer:comac-1.0.07c17a7b1d1ef
twisted@18.9.0
26.10.0rc1
2
omecproject/mcord-synchronizer:comac-1.0.0cfdb566dd949
twisted@16.6.0
26.10.0rc1
2
anchore/anchore-engine:v0.10.0bde9eedf639d
twisted@20.3.0
26.10.0rc1
1
anchore/anchore-engine:v0.7.1ed9b3badd17c
twisted@20.3.0
26.10.0rc1
1
archivebox/archivebox:0.9.73d4720d86c0e9
twisted@26.4.0
26.10.0rc1
1
baserow/backend:2.4.1497347d0ba74
twisted@26.4.0
26.10.0rc1
1
baserow/backend:1.31.1e0b3c8130b91
twisted@24.3.0
26.10.0rc1
1
baserow/baserow:1.30.1df0c42eb67e8
twisted@24.3.0
26.10.0rc1
1
ddosify/selfhosted_alaz_backend:1.0.6a43c5155fa1c
twisted@24.3.0
26.10.0rc1
1
ddosify/selfhosted_alaz_backend:2.3.11e5be48b37348
twisted@24.7.0
26.10.0rc1
1
ddosify/selfhosted_backend:3.2.93c11e3182652
twisted@24.3.0
26.10.0rc1
1
ddosify/selfhosted_backend:2.6.11ac323d52bfb4
twisted@24.3.0
26.10.0rc1
1
dellnoantechnp/dingtalk-bot:v1.0.1034000bbcad5
twisted@25.5.0
26.10.0rc1
1
dysnix/pritunl:v1.29-r819951e3e7a32
twisted@20.3.0
26.10.0rc1
1
ethanbergstrom/duoauthproxy:5.5.0345c2a46c103
twisted@20.3.0
26.10.0rc1
1
gethue/hue:4.11.011b649636e68
twisted@22.10.0
26.10.0rc1
1
gethue/hue:4.10.05702b2c37ff9
twisted@21.2.0
26.10.0rc1
1
gethue/hue:latest7d5c1b9f8a79
twisted@25.5.0
26.10.0rc1
1
graphiteapp/graphite-statsd:1.1.7-604a0037cc2ae
twisted@20.3.0
26.10.0rc1
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
twisted@25.5.0
26.10.0rc1
1
lib42/deluge:20c4d1d326f95
twisted@22.10.0
26.10.0rc1
1
linuxserver/deluge:libtorrentv1-2.2.0-ls40052eac68ccc0
twisted@24.11.0
26.10.0rc1
1
linuxserver/deluge:18.04.10ac871624394
twisted@17.9.0
26.10.0rc1
1
linuxserver/deluge:version-2.0.3-2201906121747ubuntu18.04.12ce561a95e7b
twisted@17.9.0
26.10.0rc1
1
linuxserver/deluge:2.2.0bf306ddd5e6d
twisted@26.4.0
26.10.0rc1
1
matrixdotorg/synapse:v1.163.141d8a4edfdc6
twisted@26.4.0
26.10.0rc1
1
matrixdotorg/synapse:v1.127.1c3c4a9de2a0b
twisted@24.7.0
26.10.0rc1
1
matrixdotorg/synapse:v1.53.0cb89c0f17ba1
twisted@22.1.0
26.10.0rc1
1
matrixdotorg/synapse:v1.78.0def97fd537d8
twisted@22.10.0
26.10.0rc1
1
omecproject/progran-synchronizer:comac-1.0.0d109a8e57e71
twisted@16.6.0
26.10.0rc1
1
openvpn/openvpn-as:latest921b38fb12d2
twisted@25.5.0
26.10.0rc1
1
prompve/prometheus-pve-exporter:2.0.1ff6749eb03b0
twisted@20.3.0
26.10.0rc1
1
pryorda/vmware_exporter:v0.18.479925e63e59f
twisted@22.8.0
26.10.0rc1
1
pryorda/vmware_exporter:v0.18.3e0f5ba8b7856
twisted@22.2.0
26.10.0rc1
1
psono/psono-server:5.0.03b974b43ea03
twisted@24.7.0
26.10.0rc1
1
scrapinghub/splash:3.4.1a5f89bc84606
twisted@19.7.0
26.10.0rc1
1
voltha/voltha-cli:1.6.0c4e41e92f046
twisted@17.9.0
26.10.0rc1
1
voltha/voltha-netconf:1.6.037f80524c207
twisted@17.9.0
26.10.0rc1
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
twisted@17.9.0
26.10.0rc1
1
voltha/voltha-tester:1.7.0655c3048a602
twisted@17.9.0
26.10.0rc1
1
voltha/voltha-voltha:1.6.0ff596b62de59
twisted@17.9.0
26.10.0rc1
1
weblate/weblate:2026.10.1.26663a7c8b444
twisted@26.4.0
26.10.0rc1
1
ghcr.io/argonix-io/argonix-api:0.6.5431abcce7c1e
twisted@26.4.0
26.10.0rc1
1
ghcr.io/element-hq/synapse:v1.111.022ae556e0de4
twisted@24.3.0
26.10.0rc1
1
ghcr.io/gabe565/obico/web:latest6acb4a5903eb
twisted@24.11.0
26.10.0rc1
1
ghcr.io/paperless-ngx/paperless-ngx:1.8.09bbc9a90641e
twisted@22.4.0
26.10.0rc1
1
ghcr.io/virtuos/librechat_exporter:2.0.050ea1cf0086f
twisted@24.11.0
26.10.0rc1
1

syft 1.42.1 · advisories as of 24 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.