StackRadar

CVE-2026-11940

High

Advisory

Published 23 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
888
of 17,787 indexed, latest versions
Container images
919
deployed by those charts
Fix available
9 of 18
affected packages

tarfile extraction filter bypass allows escaping the destination directory

Carried by container images the latest versions of 888 of 17,787 indexed charts deploy, on 919 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 moreno fix listed181
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 moreno fix listed100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3+12 moreno fix listed89
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 moreno fix listed80
python3apk3.11.12-r1, 3.12.8-r1, 3.12.9-r0, 3.12.10-r0+7 more3.12.14-r0, 3.14.7-r075
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.7-1ubuntu0.13.13.5-2+deb13u575
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 moreno fix listed54
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 moreno fix listed44
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9no fix listed25
python3.14deb3.14.4-1, 3.14.4-1ubuntu0.1, 3.14.4-1ubuntu0.2no fix listed9
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7no fix listed7
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r03.14.6-r36
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.213
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.14-r23
python-3.12apk3.12.0-r1, 3.12.9-r13.12.13-r102
python3rpm3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+27 more0:3.6.8-78.el8_10, 0:3.6.8-78.el8_10.rocky.0136
python3.9rpm3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+16 more0:3.9.25-7.el9_8.361
python3.12rpm3.12.5-2.el9_5.2, 3.12.13-2.el10_2.1, 3.12.13-3.el8_10, 3.12.13-3.el9_8.10:3.12.14-1.el8_10, 0:3.12.14-1.el9_8, 0:3.12.14-1.el10_25
OSV records
ALPINE-CVE-2026-11940BIT-python-2026-11940CGA-2877-fmjf-8j5qCGA-cr9q-h4v8-hfgpCGA-qmm2-954x-xmxrDEBIAN-CVE-2026-11940RHSA-2026:54268RHSA-2026:56219RHSA-2026:58902RHSA-2026:58971RHSA-2026:59009RLSA-2026:54268RLSA-2026:56219RLSA-2026:58902UBUNTU-CVE-2026-11940
Also known as
BIT-libpython-2026-11940, BIT-python-min-2026-11940, CGA-5363-9r7r-rr55, CGA-p86c-g5pg-rvpw, CGA-w3m6-c9vj-wm85, PSF-2026-30, RHSA-2026:64806, RHSA-2026:64816

Charts affected

888 by stars
ChartLatestAffected imagesRadar Score
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
python3.13@3.13.5-2
3.13.5-2+deb13u5

Open the chart page →

10,898
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
python2.7@2.7.18-1~20.04.4
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed
no fix listed

Open the chart page →

18,923
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u5

Open the chart page →

29,852
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

9,704
minecrafthelmforgeVerified publisher1.5.31 of 1See more

minecraft helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.04e29d14082d9
python3.12@3.12.3-1ubuntu0.16
no fix listed

Open the chart page →

4,702
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
python3.14@3.14.4-1ubuntu0.1
no fix listed

Open the chart page →

4,321
nextcloudhelmforgeVerified publisher1.0.01 of 3See more

nextcloud helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/nextcloud:34.0.4-apachede4ad9389386
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5

Open the chart page →

7,041
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

30,106
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
python3.11@3.11.2-6
no fix listed

Open the chart page →

11,441
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

25,099
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
python3.10@3.10.12-1~22.04.10
no fix listed

Open the chart page →

6,076
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

14,350
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u5

Open the chart page →

26,579
hammerspace-csihscsi1.2.81 of 6See more

hammerspace-csi hscsi 1.2.8

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
python3.9@3.9.21-2.el9_6.1
0:3.9.25-7.el9_8.3

Open the chart page →

4,440
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
python3.8@3.8.10-0ubuntu1~20.04.6
no fix listed

Open the chart page →

8,732
eoloplanthttpd-eoloplant0.1.02 of 7See more

eoloplant httpd-eoloplant 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
library/rabbitmq:3.9-management8a279e9396a8
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

32,336
nexus3huangchengwu-helm-chart0.1.01 of 1See more

nexus3 huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
sonatype/nexus3:3.53.04bd975493104
python3@3.6.8-48.el8_7.1
0:3.6.8-78.el8_10

Open the chart page →

4,462
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

9,038
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

7,749
hyperglance-helmhyperglance-helmVerified publisher10.0.53 of 6See more

hyperglance-helm hyperglance-helm 10.0.5

3 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
hyperglance/init:wildfly467ad8491bc3
python3.10@3.10.12-1~22.04.15
no fix listed
hyperglance/init:postgres9fd5faf1fe80
python3.10@3.10.12-1~22.04.15
no fix listed
hyperglance/init:apacheb2f8c6d52623
python3.10@3.10.12-1~22.04.15
no fix listed

Open the chart page →

11,171
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

5,770
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
python2.7@2.7.12-1ubuntu0~16.04.2
no fix listed

Open the chart page →

57,728
ibm-object-storage-pluginibm-charts1.1.52 of 2See more

ibm-object-storage-plugin ibm-charts 1.1.5

2 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
python3@3.6.8-23.el8
0:3.6.8-78.el8_10
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
python3@3.6.8-23.el8
0:3.6.8-78.el8_10

Open the chart page →

12,460
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
python2.7@2.7.15~rc1-1ubuntu0.1
no fix listed

Open the chart page →

12,632
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed

Open the chart page →

25,184
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed

Open the chart page →

19,309
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
python3.12@3.12.3-1ubuntu0.17
no fix listed

Open the chart page →

2,002
iframelyiframelyVerified publisher2.3.51 of 1See more

iframely iframely 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
python3.9@3.9.25-3.el9_7.2
0:3.9.25-7.el9_8.3

Open the chart page →

3,181
eoloserverihuertas2021-vmartinp2021-helm0.1.02 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
library/rabbitmq:3.9-management8a279e9396a8
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

27,812
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
python3.12@3.12.3-1ubuntu0.7
no fix listed

Open the chart page →

9,032
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed

Open the chart page →

37,844
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

11,838
plausible-analyticsimioVerified publisher0.4.21 of 5See more

plausible-analytics imio 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
python3@3.12.10-r0
3.12.14-r0

Open the chart page →

10,152
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
python3.6@3.6.9-1~18.04ubuntu1.9
no fix listed

Open the chart page →

16,226
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

10,542
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed

Open the chart page →

7,697
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
python3.8@3.8.10-0ubuntu1~20.04.4
no fix listed

Open the chart page →

18,137
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed

Open the chart page →

7,697
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed

Open the chart page →

11,123
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
python3.11@3.11.2-6
no fix listed

Open the chart page →

16,558
inventreeinventreeOfficialVerified publisher0.4.281 of 2See more

inventree inventree 0.4.28

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5

Open the chart page →

5,757
daveit-at-mOfficialVerified publisher0.2.157 of 11See more

dave it-at-m 0.2.15

7 of the 11 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/dave-admin-portal/dave-adminportal:10.0.0cbff8141302f
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
ghcr.io/it-at-m/dave-backend/dave-backend:10.0.0f66413e62afc
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
ghcr.io/it-at-m/dave-document-storage/dave-document-storage:10.0.09c7fc07330c9
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3
ghcr.io/it-at-m/dave-eai/dave-eai:10.0.0fd93e0d125b3
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
ghcr.io/it-at-m/dave-frontend/dave-frontend:10.0.0a49fdb8d6f1b
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
ghcr.io/it-at-m/dave-geodata-eai/dave-geodata-eai:10.0.06a3fe3136856
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
ghcr.io/it-at-m/dave-selfservice-portal/dave-selfserviceportal:10.0.0d352df1b94b6
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3

Open the chart page →

15,245
kf-app-eaiit-at-mOfficialVerified publisher0.1.71 of 1See more

kf-app-eai it-at-m 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/kf-app-eai:1.0.65de339b3d537
python3.9@3.9.21-2.el9_6.2
0:3.9.25-7.el9_8.3

Open the chart page →

1,965
wjh-rechnerit-at-mOfficialVerified publisher1.0.41 of 1See more

wjh-rechner it-at-m 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
python3.9@3.9.18-1.el9_3.1
0:3.9.25-7.el9_8.3

Open the chart page →

3,487
zammad-ldap-syncit-at-mVerified publisher0.6.51 of 1See more

zammad-ldap-sync it-at-m 0.6.5

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/zammad-ldap-sync:dev10de22c8cbce
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3

Open the chart page →

1,364
tekton-git-listeneritsmethemojoVerified publisher0.1.11 of 1See more

tekton-git-listener itsmethemojo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/buildpack-deps:scmac978b783657
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5

Open the chart page →

2,178
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/cassandra:4.0093ee8ee5eb2
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

6,037
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
python3.12@3.12.3-1
no fix listed

Open the chart page →

45,392
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

10,816
jasperjasperVerified publisher1.0.2031 of 2See more

jasper jasper 1.0.203

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

9,148

Container images carrying it

919 by charts deploying them

A fixed version is listed for 9 of the 18 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/antoniolago/vaultwarden-kubernetes-secrets:0.0.0-main13e267ad7d94
python3.12@3.12.3-1ubuntu0.10
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
python3.13@3.13.5-2
3.13.5-2+deb13u5
1
ghcr.io/appuio/maxscale-docker:6.4.613a01be102b0
python3@3.6.8-48.el8_7.1.rocky.0
0:3.6.8-78.el8_10.rocky.0
1
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
python3@3.12.13-r0
3.12.14-r0
1
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
python3.11@3.11.2-6+deb12u3
no fix listed
1
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
python3.11@3.11.2-6+deb12u6
no fix listed
1
ghcr.io/base/node-reth:v1.1.18eb6e492fe3c
python3.12@3.12.3-1ubuntu0.13
no fix listed
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
python3.10@3.10.12-1~22.04.7
no fix listed
1
ghcr.io/berriai/litellm-database:litellm_stable_release_branch-v1.75.5-stableab63d26a8a2c
python-3.13@3.13.7-r0
3.13.14-r2
1
ghcr.io/beslovas/duckdb-ui:1.3.272f35584026d
python3.11@3.11.2-6+deb12u6
no fix listed
1
ghcr.io/brittonhayes/arma-reforger:latest6fde1edc0983
python3.8@3.8.10-0ubuntu1~20.04.6
no fix listed
1
ghcr.io/browserless/chrome:v2.56.7d600eac6283f
python3.12@3.12.3-1ubuntu0.17
no fix listed
1
ghcr.io/browserless/chromium:v2.55.42ed0183564d7
python3.12@3.12.3-1ubuntu0.15
no fix listed
1
ghcr.io/browserless/chromium:v2.43.0853e6f105b51
python3.12@3.12.3-1ubuntu0.12
no fix listed
1
ghcr.io/buanet/iobroker:v9.1.2ca7dc7362968
python3.11@3.11.2-6+deb12u2
no fix listed
1
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
python3.11@3.11.2-6+deb12u5
no fix listed
1
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
python3.11@3.11.2-6+deb12u4
no fix listed
1
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
python3.11@3.11.2-6+deb12u8
no fix listed
1
ghcr.io/cleanuparr/cleanuparr:2.10.5c7cd53ad559a
python3.12@3.12.3-1ubuntu0.15
no fix listed
1
ghcr.io/cloudscript-technology/dumpscript:v0.0.42-alpine-edgefce5b6fd161c
python3@3.14.3-r0
3.14.7-r0
1
ghcr.io/cohdi/composable-dra-driver:v0.2.28c05f7366981
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u5
1
ghcr.io/cosmo-tech/cosmotech-copilot-api:latesta2be95de450c
python3.13@3.13.5-2
3.13.5-2+deb13u5
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
python3.11@3.11.2-6+deb12u5
no fix listed
1
ghcr.io/ctron/streamsheets-base:2.4.00cf25ed621e2
python3@3.6.8-37.el8
0:3.6.8-78.el8_10
1
ghcr.io/ctron/streamsheets-gateway:2.4.00635f17c9d2c
python3@3.6.8-37.el8
0:3.6.8-78.el8_10
1
ghcr.io/ctron/streamsheets-service-graphs:2.4.0e34964e336c1
python3@3.6.8-37.el8
0:3.6.8-78.el8_10
1
ghcr.io/ctron/streamsheets-service-machines:2.4.00c5a3398d1e4
python3@3.6.8-37.el8
0:3.6.8-78.el8_10
1
ghcr.io/ctron/streamsheets-service-streams:2.4.08ba040e79ca0
python3@3.6.8-37.el8
0:3.6.8-78.el8_10
1
ghcr.io/danny-avila/librechat:v0.7.87fe76551a78e
python3@3.12.10-r0
3.12.14-r0
1
ghcr.io/dask/dask-kubernetes-operator:2026.3.03225d2bc6b3c
python3.13@3.13.5-2
3.13.5-2+deb13u5
1
ghcr.io/developmentseed/titiler:0.22.48ac53eb38393
python@3.12.8-0
3.10.21
1
ghcr.io/devhatro/clamav-api:1.0.2ff0cd9db78d3
python3@3.12.9-r0
3.12.14-r0
1
ghcr.io/devops-ia/cp-schema-registry:8.1.1-msk-iam-auth2.3.530d1a445acc7
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3
1
ghcr.io/dfir-iris/iriswebapp_app:v2.4.26e59ebde55709
python3.13@3.13.5-2
3.13.5-2+deb13u5
1
ghcr.io/djerfy/zabbix-kubernetes-discovery:v1.4.207a50c07e7c69
python3.12@3.12.3-1ubuntu0.3
no fix listed
1
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
python3.11@3.11.2-6
no fix listed
1
ghcr.io/edgelesssys/coordinator:v0.5.0bcd5b8d4c45c
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
python3.11@3.11.2-6+deb12u6
no fix listed
1
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
python3@3.12.11-r0
3.12.14-r0
1
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
python3@3.12.11-r0
3.12.14-r0
1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5
1
ghcr.io/graphprotocol/availability-oracle:sha-28312fd472a25038957
python3.11@3.11.2-6+deb12u2
no fix listed
1
ghcr.io/grycap/im:latest06a16d4f279f
python3.12@3.12.3-1ubuntu0.8
no fix listed
1
ghcr.io/haveagitgat/tdarr:2.00.18.23fbe4c29d14c
python2.7@2.7.18-1~20.04.1
python3.8@3.8.10-0ubuntu1~20.04.4
no fix listed
no fix listed
1
ghcr.io/hotio/qbittorrent:release-5.2.007198d49e5b4
python3@3.12.13-r0
3.12.14-r0
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
python3.13@3.13.5-2
3.13.5-2+deb13u5
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
python3.11@3.11.2-6+deb12u7
no fix listed
1
ghcr.io/it-at-m/dave-admin-portal/dave-adminportal:10.0.0cbff8141302f
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
1
ghcr.io/it-at-m/dave-backend/dave-backend:10.0.0f66413e62afc
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
1
ghcr.io/it-at-m/dave-document-storage/dave-document-storage:10.0.09c7fc07330c9
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.