StackRadar

CVE-2026-11940

High

Advisory

Published 23 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
888
of 17,787 indexed, latest versions
Container images
919
deployed by those charts
Fix available
9 of 18
affected packages

tarfile extraction filter bypass allows escaping the destination directory

Carried by container images the latest versions of 888 of 17,787 indexed charts deploy, on 919 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 moreno fix listed181
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 moreno fix listed100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3+12 moreno fix listed89
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 moreno fix listed80
python3apk3.11.12-r1, 3.12.8-r1, 3.12.9-r0, 3.12.10-r0+7 more3.12.14-r0, 3.14.7-r075
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.7-1ubuntu0.13.13.5-2+deb13u575
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 moreno fix listed54
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 moreno fix listed44
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9no fix listed25
python3.14deb3.14.4-1, 3.14.4-1ubuntu0.1, 3.14.4-1ubuntu0.2no fix listed9
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7no fix listed7
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r03.14.6-r36
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.213
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.14-r23
python-3.12apk3.12.0-r1, 3.12.9-r13.12.13-r102
python3rpm3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+27 more0:3.6.8-78.el8_10, 0:3.6.8-78.el8_10.rocky.0136
python3.9rpm3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+16 more0:3.9.25-7.el9_8.361
python3.12rpm3.12.5-2.el9_5.2, 3.12.13-2.el10_2.1, 3.12.13-3.el8_10, 3.12.13-3.el9_8.10:3.12.14-1.el8_10, 0:3.12.14-1.el9_8, 0:3.12.14-1.el10_25
OSV records
ALPINE-CVE-2026-11940BIT-python-2026-11940CGA-2877-fmjf-8j5qCGA-cr9q-h4v8-hfgpCGA-qmm2-954x-xmxrDEBIAN-CVE-2026-11940RHSA-2026:54268RHSA-2026:56219RHSA-2026:58902RHSA-2026:58971RHSA-2026:59009RLSA-2026:54268RLSA-2026:56219RLSA-2026:58902UBUNTU-CVE-2026-11940
Also known as
BIT-libpython-2026-11940, BIT-python-min-2026-11940, CGA-5363-9r7r-rr55, CGA-p86c-g5pg-rvpw, CGA-w3m6-c9vj-wm85, PSF-2026-30, RHSA-2026:64806, RHSA-2026:64816

Charts affected

888 by stars
ChartLatestAffected imagesRadar Score
jx-app-anchorejenkins-x0.0.41 of 2See more

jx-app-anchore jenkins-x 0.0.4

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
anchore/anchore-engine:v0.7.1ed9b3badd17c
python3@3.6.8-15.1.el8
0:3.6.8-78.el8_10

Open the chart page →

9,853
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
python3@3.6.8-23.el8
0:3.6.8-78.el8_10

Open the chart page →

12,856
dayz-dedicated-server-razorbladex401jespernohrVerified publisher1.0.31 of 1See more

dayz-dedicated-server-razorbladex401 jespernohr 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
razorbladex401/dayz:latest6a4d79248e7d
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

5,256
homebridgejespernohrVerified publisher0.2.01 of 1See more

homebridge jespernohr 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
python3.12@3.12.3-1ubuntu0.16
no fix listed

Open the chart page →

2,203
discord-experiencebotjfwenischVerified publisher0.7.41 of 1See more

discord-experiencebot jfwenisch 0.7.4

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/discord-experiencebot:latestb52ff07f9f0c
python3.6@3.6.9-1~18.04ubuntu1.12
no fix listed

Open the chart page →

7,842
steamcmd-managerjfwenischVerified publisher0.4.51 of 1See more

steamcmd-manager jfwenisch 0.4.5

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/steamcmd-manager:v0.4.5dab685e668d9
python3.12@3.12.3-1ubuntu0.3
no fix listed

Open the chart page →

6,648
webtoolsjfwenischVerified publisher0.1.41 of 1See more

webtools jfwenisch 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/jfwenisch/webtools:v0.1.44569cae83c70
python3.12@3.12.3-1ubuntu0.3
no fix listed

Open the chart page →

6,629
proxmox-exporterjhofer-cloud1.4.01 of 1See more

proxmox-exporter jhofer-cloud 1.4.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.10.04867684c0a93
python3@3.14.5-r0
3.14.7-r0

Open the chart page →

349
image-storage-servicejtektVerified publisher0.4.31 of 4See more

image-storage-service jtekt 0.4.3

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/image-storage-service:v1.16.17b1493760c716
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

22,665
shinsei-managerjtektVerified publisher0.2.04 of 8See more

shinsei-manager jtekt 0.2.0

4 of the 8 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
moreillon/api-proxy:latestd7d4a5463525
python3.11@3.11.2-6+deb12u6
no fix listed
moreillon/group-manager:latest3caa8f710ee0
python3.11@3.11.2-6+deb12u6
no fix listed
moreillon/user-manager:v5.0.2e1c9bfab5c16
python3.11@3.11.2-6
no fix listed
public.ecr.aws/jtekt-corporation/shinsei-manager:v2.8.15cd62142d6ed
python3.11@3.11.2-6
no fix listed

Open the chart page →

59,560
time-series-storagejtektVerified publisher0.1.101 of 2See more

time-series-storage jtekt 0.1.10

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
public.ecr.aws/jtekt-corporation/time-series-storage-service:v1.5.1046ef5c9ed50
python3.11@3.11.2-6
no fix listed

Open the chart page →

16,626
palworld-serverk8s-chartsVerified publisher1.2.11 of 1See more

palworld-server k8s-charts 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u5

Open the chart page →

3,433
valheim-serverk8s-chartsVerified publisher1.3.01 of 1See more

valheim-server k8s-charts 1.3.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
mbround18/valheim:3.1.070bd4da591cd
python3.10@3.10.12-1~22.04.9
no fix listed

Open the chart page →

6,136
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
python3.12@3.12.3-1ubuntu0.5
no fix listed

Open the chart page →

8,879
syslog-ngk8s-home-lab-repo3.1.11 of 1See more

syslog-ng k8s-home-lab-repo 3.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/linuxserver/syslog-ng:4.10.247fae7f540f9
python3@3.12.13-r0
3.12.14-r0

Open the chart page →

1,299
youtubedl-materialk8s-home-lab-repo5.1.11 of 1See more

youtubedl-material k8s-home-lab-repo 5.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
tzahi12345/youtubedl-material:4.3.22f943d584711
python3.10@3.10.6-1~22.04.2ubuntu1
no fix listed

Open the chart page →

9,832
zileank8s-home-lab-repo1.0.11 of 1See more

zilean k8s-home-lab-repo 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/thoroslives/zilean:v3.10.1bce6aca0f6ca
python3@3.11.12-r1
3.12.14-r0

Open the chart page →

2,025
karbkarbVerified publisher1.0.31 of 1See more

karb karb 1.0.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/xeor/karb:main647a3c938d31
python-3.14@3.14.6-r0
3.14.6-r3

Open the chart page →

625
karb-chartkarbVerified publisher1.0.61 of 1See more

karb-chart karb 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/xeor/karb:1.0.6647a3c938d31
python-3.14@3.14.6-r0
3.14.6-r3

Open the chart page →

625
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

6,836
huekatool1.0.81 of 1See more

hue katool 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
gethue/hue:4.11.011b649636e68
python3.8@3.8.10-0ubuntu1~20.04.6
no fix listed

Open the chart page →

16,464
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
python3.13@3.13.5-2
3.13.5-2+deb13u5

Open the chart page →

32,522
allurekfirfer0.1.81 of 2See more

allure kfirfer 0.1.8

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.21.08a4d7e9308de
python3.6@3.6.9-1~18.04ubuntu1.9
no fix listed

Open the chart page →

12,541
phppgadminkfirfer0.1.121 of 1See more

phppgadmin kfirfer 0.1.12

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
python3.8@3.8.10-0ubuntu1~20.04.6
no fix listed

Open the chart page →

10,303
cdashkitwareVerified publisher0.19.01 of 3See more

cdash kitware 0.19.0

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
kitware/cdash:v5.3.0d7767d9b9da4
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5

Open the chart page →

12,131
metallbkomailo-helm-charts1.2.41 of 4See more

metallb komailo-helm-charts 1.2.4

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
quay.io/frrouting/frr:10.4.38745af1f9bbb
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

2,129
kovi-appkovi-charts0.8.11 of 1See more

kovi-app kovi-charts 0.8.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
kennethreitz/httpbin:latest599fe5e50731
python3.6@3.6.6-1~18.04
no fix listed

Open the chart page →

14,827
kubeflowkromanow94-kubeflow0.5.12 of 30See more

kubeflow kromanow94-kubeflow 0.5.1

2 of the 30 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/python:3.7eedf63967cdb
python3.11@3.11.2-6
no fix listed
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

68,994
adventureworkskronkltdVerified publisher0.1.01 of 1See more

adventureworks kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
chriseaton/adventureworks:latest54c3384ce701
python3.10@3.10.12-1~22.04.9
no fix listed

Open the chart page →

4,462
mindsdbkronkltdVerified publisher0.1.01 of 1See more

mindsdb kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
mindsdb/mindsdb:latest163011c09299
python3.13@3.13.5-2
3.13.5-2+deb13u5

Open the chart page →

9,652
pangolinkrzwiatrzyk0.11.01 of 1See more

pangolin krzwiatrzyk 0.11.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
fosrl/pangolin:1.13.0c32ad797ab96
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

3,442
smartfs-csi-driverkubeblocksVerified publisher0.1.21 of 6See more

smartfs-csi-driver kubeblocks 0.1.2

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
apecloud/smartfs-csi-driver:0.1.1ff2858eab9cc
python3@3.6.8-51.el8_8.2
0:3.6.8-78.el8_10

Open the chart page →

9,249
kube-ovnkube-ovn-test1.14.01 of 1See more

kube-ovn kube-ovn-test 1.14.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
kubeovn/kube-ovn:v1.14.06722b54eb5c0
python3.12@3.12.3-1ubuntu0.7
no fix listed

Open the chart page →

4,991
pve-exporterkubernetes-homelab-helm-chartsVerified publisher0.1.01 of 1See more

pve-exporter kubernetes-homelab-helm-charts 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.8.2e3d501a82df5
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

994
uptime-kumakubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

uptime-kuma kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.2.1-slim059b49d64739
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

6,363
kubernetes-netskope-publisherkubernetes-netskope-publisherVerified publisher1.5.01 of 2See more

kubernetes-netskope-publisher kubernetes-netskope-publisher 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
netskopeprivateaccess/publisher_u22:latest93e2fd164a93
python3.10@3.10.12-1~22.04.16
no fix listed

Open the chart page →

3,583
iomeshkubesphere-stable1.1.01 of 25See more

iomesh kubesphere-stable 1.1.0

1 of the 25 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.7.25d3f9bf9240b
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

48,833
IOMeshkubesphere-stable1.2.01 of 25See more

IOMesh kubesphere-stable 1.2.0

1 of the 25 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
iomesh/csi-driver:v2.8.01a151f602451
python3.10@3.10.12-1~22.04.4
no fix listed

Open the chart page →

46,507
pulsarkubesphere-stable2.7.131 of 3See more

pulsar kubesphere-stable 2.7.13

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
streamnative/apache-pulsar-grafana-dashboard-k8s:0.0.1611bceacec8fb
python3.8@3.8.5-1~20.04.3
no fix listed

Open the chart page →

14,368
kubestellar-consolekubestellar-consoleVerified publisher0.3.411 of 2See more

kubestellar-console kubestellar-console 0.3.41

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
alpine/k8s:1.32.47e1e7d5b7a96
python3@3.12.10-r0
3.12.14-r0

Open the chart page →

4,440
forkliftkubevirt-forkliftVerified publisher0.3.01 of 2See more

forklift kubevirt-forklift 0.3.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
quay.io/kubev2v/forklift-operator:release-2.1268657c36c086
python3.12@3.12.13-3.el9_8.1
0:3.12.14-1.el9_8

Open the chart page →

1,435
penpotkubitodevVerified publisher1.2.12 of 5See more

penpot kubitodev 1.2.1

2 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
penpotapp/backend:2.2.147853d9bb9dd
python3.10@3.10.12-1~22.04.6
no fix listed
penpotapp/exporter:2.2.15c835ffd87ab
python3.10@3.10.12-1~22.04.6
no fix listed

Open the chart page →

17,002
kubiya-runnerkubiya-helm-chartsOfficialVerified publisher0.9.41 of 9See more

kubiya-runner kubiya-helm-charts 0.9.4

1 of the 9 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/kubiyabot/agent-manager:v0.4.13757bdd779345
python3.13@3.13.5-2
3.13.5-2+deb13u5

Open the chart page →

20,299
kusionkusionstackVerified publisher0.14.11 of 3See more

kusion kusionstack 0.14.1

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
kusionstack/kusion:v0.14.0126c8f0b0976
python3.10@3.10.12-1~22.04.8
no fix listed

Open the chart page →

6,879
longhornkvalitetsitVerified publisher1.1.1-01 of 2See more

longhorn kvalitetsit 1.1.1-0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.1.1ede61fe2a472
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed

Open the chart page →

16,537
strimzi-kafka-operatorkvalitetsitVerified publisher0.36.11 of 1See more

strimzi-kafka-operator kvalitetsit 0.36.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
quay.io/strimzi/operator:0.36.1e9e03b31007c
python3@3.6.8-51.el8_8.1
0:3.6.8-78.el8_10

Open the chart page →

4,097
ladeitladeit0.4.01 of 2See more

ladeit ladeit 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
kubeoperator/webkubectl:v2.4.0be8f0d624640
python3.6@3.6.9-1~18.04ubuntu1
no fix listed

Open the chart page →

26,371
homebridgelbenicio-communityVerified publisher0.1.151 of 1See more

homebridge lbenicio-community 0.1.15

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
homebridge/homebridge:latest77c685a40911
python3.12@3.12.3-1ubuntu0.16
no fix listed

Open the chart page →

2,203
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

32,893
amplinguamatics0.12.01 of 4See more

amp linguamatics 0.12.0

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/rabbitmq:3-management-alpine606d8c0d6b3c
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

2,105

Container images carrying it

919 by charts deploying them

A fixed version is listed for 9 of the 18 affected packages.

Container imageDigestPackageFixed inUsed by
thongngo3301/stakefish:latesta341af5976e3
python3.11@3.11.2-6
no fix listed
1
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
python3.10@3.10.6-1~22.04.2ubuntu1
no fix listed
1
timescale/timescaledb-ha:pg14.6-ts2.9.1-p1cdb9ae118899
python3.10@3.10.6-1~22.04.2
no fix listed
1
timescale/timescaledb-ha:pg16d7db8f1085a3
python3.10@3.10.12-1~22.04.17
no fix listed
1
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
python3.10@3.10.12-1~22.04.9
no fix listed
1
timescale/timescaledb-ha:pg14-ts2.6-latested719c0cd19d
python3.10@3.10.4-3
no fix listed
1
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
python3.13@3.13.5-2
3.13.5-2+deb13u5
1
tomsquest/docker-radicale:3.6.1.0a594c624c5a6
python3@3.12.12-r0
3.12.14-r0
1
tpdock/freeradius:2.2.93da600c95a49
python2.7@2.7.12-1ubuntu0~16.04.2
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
1
treskon/portrait-web-setup:DEV-latesta475d80e4ecf
python3.11@3.11.2-6+deb12u5
no fix listed
1
trinodb/trino:45038c6f24ab1a4
python3.9@3.9.18-3.el9
0:3.9.25-7.el9_8.3
1
trinodb/trino:405ee80ab5eeab2
python3.10@3.10.6-1~22.04.2
no fix listed
1
trueosiris/vrising:latest9356f98ad561
python3.10@3.10.12-1~22.04.15
no fix listed
1
twentycrm/twenty-postgres-spilo:latest2f78405a78be
python3.10@3.10.12-1~22.04.3
no fix listed
1
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
python3.11@3.11.2-6+deb12u6
no fix listed
1
vinanrra/7dtd-server:v0.4.4f9534490bd2b
python3.6@3.6.9-1~18.04ubuntu1.9
no fix listed
1
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
python3@3.6.8-41.el8
0:3.6.8-78.el8_10
1
vividplanet/swr-cache-proxy:v1ae1c5b1cbecb
python3@3.6.8-56.el8_9
0:3.6.8-78.el8_10
1
vlebediantsev/notes-admin-front:latest007c6670ff48
python3.11@3.11.2-6
no fix listed
1
vlebediantsev/notes-project-front:latest945675fd2636
python3.11@3.11.2-6
no fix listed
1
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
python3.11@3.11.2-6
no fix listed
1
voltha/voltha-cli:1.6.0c4e41e92f046
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
no fix listed
1
voltha/voltha-envoy:1.6.059ab2a00f712
python3.4@3.4.3-1ubuntu1~14.04.5
no fix listed
1
voltha/voltha-netconf:1.6.037f80524c207
python2.7@2.7.12-1ubuntu0~16.04.3
no fix listed
1
voltha/voltha-ofagent:1.6.09ee8c1f4428c
python2.7@2.7.12-1ubuntu0~16.04.3
no fix listed
1
voltha/voltha-tester:1.7.0655c3048a602
python2.7@2.7.12-1ubuntu0~16.04.4
no fix listed
1
voltha/voltha-voltha:1.6.0ff596b62de59
python2.7@2.7.12-1ubuntu0~16.04.3
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5
1
wazuh/wazuh-manager:4.4.121994f40e0da
python3.8@3.8.10-0ubuntu1~20.04.7
no fix listed
1
wettyoss/wetty:latest7423b3d40ba2
python3@3.14.5-r0
3.14.7-r0
1
wger/server:2.6997ead43aabd
python3.12@3.12.3-1ubuntu0.13
no fix listed
1
wiktorn/overpass-api:latest9bb5f4a9b54c
python3.11@3.11.2-6+deb12u8
no fix listed
1
woojoong/wowza:latestec230db19652
python2.7@2.7.15~rc1-1ubuntu0.1
no fix listed
1
workadventure/playwright-synthetic-monitoring:main92b664c2a06f
python3.10@3.10.12-1~22.04.3
no fix listed
1
xeladock/mysql_dns:latest4baf531453f1
python3.10@3.10.4-3
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
python3.11@3.11.2-6+deb12u2
no fix listed
1
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
python3.11@3.11.2-6+deb12u2
no fix listed
1
ymuski/geo-checker:5.0.05ba7fd8c7bdc
python3@3.12.12-r0
3.12.14-r0
1
zabbix/zabbix-web-nginx-mysql:ubuntu-6.4-latest0e5f69c4c54e
python3.12@3.12.3-1ubuntu0.4
no fix listed
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-5.4.601de79c31391
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-7.0.237d4d58086515
python3.12@3.12.3-1ubuntu0.11
no fix listed
1
zabbix/zabbix-web-nginx-pgsql:ubuntu-6.0.899e9a090b516
python3.10@3.10.4-3ubuntu0.1
no fix listed
1
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
python3.10@3.10.12-1~22.04.16
no fix listed
1
gcr.io/istio-release/pilot:release-1.0-latest-daily5ea7b7f3632a
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
1
gcr.io/istio-release/proxyv2:release-1.0-latest-daily8f9ff98fdbef
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
1
gcr.io/kubecost1/kubecost-modeling:v0.1.24a2259b098b13
python3.12@3.12.5-2.el9_5.2
0:3.12.14-1.el9_8
1
gcr.io/kubecost1/kubecost-modeling:v0.1.22a461dc5cb96a
python3.9@3.9.21-1.el9_5
0:3.9.25-7.el9_8.3
1
gcr.io/ml-pipeline/metadata-writer:2.3.09bcfd2abc361
python3.11@3.11.2-6+deb12u3
no fix listed
1
ghcr.io/alexanderwanyoike/the0/runtime:1.14.7459010a02aff
python3.12@3.12.3-1ubuntu0.16
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.