CVE-2026-11940

High

Advisory

Published 23 Jun 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.8; base score, highest
EPSS: 0.007; 53rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 882; of 17,787 indexed, latest versions
Container images: 914; deployed by those charts
Fix available: 9 of 18; affected packages

tarfile extraction filter bypass allows escaping the destination directory

Carried by container images the latest versions of 882 of 17,787 indexed charts deploy, on 914 images.

Affected package	Affected versions	Fixed in	Images
python3.11deb	3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 more	no fix listed	180
python3.8deb	3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 more	no fix listed	100
python3.12deb	3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+11 more	no fix listed	87
python3.10deb	3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 more	no fix listed	80
python3apk	3.11.12-r1, 3.12.8-r1, 3.12.9-r0, 3.12.10-r0+7 more	3.12.14-r0, 3.14.7-r0	75
python3.13deb	3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.7-1ubuntu0.1	3.13.5-2+deb13u5	74
python2.7deb	2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 more	no fix listed	54
python3.6deb	3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 more	no fix listed	44
python3.5deb	3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9	no fix listed	25
python3.14deb	3.14.4-1, 3.14.4-1ubuntu0.1, 3.14.4-1ubuntu0.2	no fix listed	9
python3.4deb	3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7	no fix listed	7
python-3.14apk	3.14.2-r2, 3.14.4-r2, 3.14.6-r0	3.14.6-r3	6
pythonbitnami	3.11.11-0, 3.12.8-0, 3.13.5-1	3.10.21	3
python-3.13apk	3.13.7-r0, 3.13.10-r0, 3.13.12-r2	3.13.14-r2	3
python-3.12apk	3.12.0-r1, 3.12.9-r1	3.12.13-r10	2
python3rpm	3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+27 more	0:3.6.8-78.el8_10, 0:3.6.8-78.el8_10.rocky.0	135
python3.9rpm	3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+16 more	0:3.9.25-7.el9_8.3	61
python3.12rpm	3.12.5-2.el9_5.2, 3.12.13-2.el10_2.1, 3.12.13-3.el8_10, 3.12.13-3.el9_8.1	0:3.12.14-1.el8_10, 0:3.12.14-1.el9_8, 0:3.12.14-1.el10_2	5

OSV records: ALPINE-CVE-2026-11940 BIT-python-2026-11940 CGA-2877-fmjf-8j5q CGA-cr9q-h4v8-hfgp CGA-qmm2-954x-xmxr DEBIAN-CVE-2026-11940 RHSA-2026:54268 RHSA-2026:56219 RHSA-2026:58902 RHSA-2026:58971 RHSA-2026:59009 RLSA-2026:54268 RLSA-2026:56219 RLSA-2026:58902 UBUNTU-CVE-2026-11940
Also known as: BIT-libpython-2026-11940, BIT-python-min-2026-11940, CGA-5363-9r7r-rr55, CGA-p86c-g5pg-rvpw, CGA-w3m6-c9vj-wm85, PSF-2026-30, RHSA-2026:64806, RHSA-2026:64816

Charts affected

882 by stars

Chart

Latest

Affected images

Radar Score

syftopenmined

0.9.5

1 of 6 See more

syft openmined 0.9.5

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
openmined/syft-backend :0.9.5	b72f74a68b32	python-3.12@3.12.9-r1	3.12.13-r10

Open the chart page →

17,245

selenium3selenium3

1.2.4

1 of 1 See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
selenium/hub :3.141.59	02f251d48d5f	python3.8@3.8.10-0ubuntu1~20.04	no fix listed

Open the chart page →

11,782

zabbix-serveraekondratiev

1.0.6

1 of 4 See more

zabbix-server aekondratiev 1.0.6

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
zabbix/zabbix-web-nginx-pgsql :ubuntu-5.4.6	01de79c31391	python3.8@3.8.10-0ubuntu1~20.04.1	no fix listed

Open the chart page →

30,668

crowdatlassian-data-center

2.0.15

1 of 2 See more

crowd atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
atlassian/crowd :7.2.3	c81cc7d6bc9e	python3.12@3.12.3-1ubuntu0.16	no fix listed

Open the chart page →

1,415

wazuh-agentavisto

4.12.2

1 of 1 See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
ghcr.io/avistotelecom/docker-wazuh-agent :4.12.0	8766ba08bf1a	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

6,457

awx-operatorawx-operator-helm

3.2.1

1 of 2 See more

awx-operator awx-operator-helm 3.2.1

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
quay.io/ansible/awx-operator :2.19.1	7302e0c8e5a7	python3@3.6.8-56.el8_9.3	0:3.6.8-78.el8_10

Open the chart page →

9,868

codercoder

1.44.6

2 of 2 See more

coder coder 1.44.6

2 of the 2 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
coderenvs/coder-service :1.44.6	1deffc4670e6	python3@3.6.8-56.el8_9.3	0:3.6.8-78.el8_10
coderenvs/timescale :1.44.6	76fd37fe6830	python3@3.6.8-56.el8_9.3	0:3.6.8-78.el8_10

Open the chart page →

6,849

emqx-operatoremqx-operator

2.3.2

1 of 2 See more

emqx-operator emqx-operator 2.3.2

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
alpine/k8s :1.31.4	9c4976d47656	python3@3.12.8-r1	3.12.14-r0

Open the chart page →

4,531

hasurahasura-extra

3.0.1

1 of 1 See more

hasura hasura-extra 3.0.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
hasura/graphql-engine :v2.34.0-ce	0111b0204136	python3.10@3.10.6-1~22.04.2ubuntu1.1	no fix listed

Open the chart page →

4,903

jellyfinloeken-at-home

10.11.8

1 of 1 See more

jellyfin loeken-at-home 10.11.8

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
loeken/jellyfin :10.11.8	7efbc24e47b0	python3@3.12.13-r0	3.12.14-r0

Open the chart page →

883

meshery-operatormeshery

1.0.70

1 See more

meshery-operator meshery 1.0.70

1 container image this version deploys carries CVE-2026-11940.

Container image	Digest	Package	Fixed in
alpine/k8s :1.35.6	b7a12c5ddf26	python3@3.14.5-r1	3.14.7-r0

Open the chart page →

—

jira-softwaremox

2.7.1

1 of 3 See more

jira-software mox 2.7.1

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
atlassian/jira-software :9.7.2	64a75aa4ec4e	python3.12@3.12.3-1ubuntu0.5	no fix listed

Open the chart page →

8,636

nessienessie

0.108.4

1 of 1 See more

nessie nessie 0.108.4

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
ghcr.io/projectnessie/nessie :0.108.4	c0f42874c810	python3.9@3.9.25-7.el9_8.2	0:3.9.25-7.el9_8.3

Open the chart page →

204

passboltpassbolt

2.1.1

1 of 6 See more

passbolt passbolt 2.1.1

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
passbolt/passbolt :5.13.0-1-ce	af3a620902a0	python3.13@3.13.5-2+deb13u2	3.13.5-2+deb13u5

Open the chart page →

13,350

mssqlserver-2022simcube

1.2.3

1 of 1 See more

mssqlserver-2022 simcube 1.2.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
mcr.microsoft.com/mssql/server :2022-latest	ba4c8329f48f	python3.10@3.10.12-1~22.04.16	no fix listed

Open the chart page →

2,878

thehivestrangebee-helm

1.0.6

1 of 7 See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
bitnamilegacy/cassandra :4.1.7-debian-12-r3	2b7a217999a1	python@3.11.11-0	3.10.21

Open the chart page →

16,210

uffizzi-controlleruffizzi-controller

2.4.6

1 of 11 See more

uffizzi-controller uffizzi-controller 2.4.6

1 of the 11 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	python3.11@3.11.2-6	no fix listed

Open the chart page →

14,240

openvpn-asas-helm-chart

0.2.1

1 of 1 See more

openvpn-as as-helm-chart 0.2.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
openvpn/openvpn-as :latest	2253c10ec652	python3.12@3.12.3-1ubuntu0.15	no fix listed

Open the chart page →

2,668

bambooatlassian-data-center

2.0.15

1 of 2 See more

bamboo atlassian-data-center 2.0.15

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
atlassian/bamboo :12.1.11	4af4bb6c8d46	python3.12@3.12.3-1ubuntu0.16	no fix listed

Open the chart page →

2,031

fadicetic

0.3.1

1 of 25 See more

fadi cetic 0.3.1

1 of the 25 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
jupyterhub/k8s-hub :0.11.1	b6b4a1a34bf0	python3.8@3.8.5-1~20.04	no fix listed

Open the chart page →

52,919

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
datamate/seafile-professional :11.0.20	2dd66b722464	python3.10@3.10.12-1~22.04.11	no fix listed

Open the chart page →

27,267

geonode-k8sgeonode-k8s

2.0.0

2 of 10 See more

geonode-k8s geonode-k8s 2.0.0

2 of the 10 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
geonode/geoserver :2.28.4-latest	81b1d431b7e9	python3.10@3.10.12-1~22.04.15	no fix listed
geopython/pycsw :3.0.0-beta2	84662ea6b78b	python3.11@3.11.2-6+deb12u6	no fix listed

Open the chart page →

13,953

gitops-promotergitops-promoter

0.17.0

1 of 2 See more

gitops-promoter gitops-promoter 0.17.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
quay.io/argoprojlabs/gitops-promoter :v0.38.1	9c8a510dc25e	python3.13@3.13.5-2+deb13u4	3.13.5-2+deb13u5

Open the chart page →

2,814

glpiglpi-conteiner

0.1.0

1 of 3 See more

glpi glpi-conteiner 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
vdiogov/glpi-conteiner :latest	6945f84f0058	python3.11@3.11.2-6+deb12u2	no fix listed

Open the chart page →

12,170

karakeephelmforge

1.2.9

1 of 3 See more

karakeep helmforge 1.2.9

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
ghcr.io/browserless/chromium :v2.55.4	2ed0183564d7	python3.12@3.12.3-1ubuntu0.15	no fix listed

Open the chart page →

9,460

hertzbeathertzbeat

1.8.1

2 of 4 See more

hertzbeat hertzbeat 1.8.1

2 of the 4 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
apache/hertzbeat :1.8.0	75d48a62748f	python3.12@3.12.3-1ubuntu0.11	no fix listed
apache/hertzbeat-collector :1.8.0	a2bab1be574c	python3.12@3.12.3-1ubuntu0.11	no fix listed

Open the chart page →

14,000

kamu-api-serverkamu

0.89.0

1 of 1 See more

kamu-api-server kamu 0.89.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
ghcr.io/kamu-data/kamu-api-server :0.89.0	4ed7a896dd2b	python3.8@3.8.10-0ubuntu1~20.04.18	no fix listed

Open the chart page →

6,307

keycloak-operatorkeycloak-operator

0.0.4

1 of 1 See more

keycloak-operator keycloak-operator 0.0.4

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
quay.io/keycloak/keycloak-operator :20.0.2	b1710745fa64	python3@3.6.8-48.el8_7	0:3.6.8-78.el8_10

Open the chart page →

4,652

kubeflowkubeflow

1.6.2

2 of 45 See more

kubeflow kubeflow 1.6.2

2 of the 45 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
istio/proxyv2 :1.9.6	87a9db561d2e	python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed
library/python :3.7	eedf63967cdb	python3.11@3.11.2-6	no fix listed

Open the chart page →

96,941

testkubekubeshop

2.13.2

1 See more

testkube kubeshop 2.13.2

1 container image this version deploys carries CVE-2026-11940.

Container image	Digest	Package	Fixed in
kubeshop/bitnami-mongodb :8.3.8	d48b172d99d8	python3.12@3.12.3-1ubuntu0.15	no fix listed

Open the chart page →

—

topolvmtopolvm

17.2.0

1 of 1 See more

topolvm topolvm 17.2.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	python3.10@3.10.12-1~22.04.17	no fix listed

Open the chart page →

2,316

uffizzi-appuffizzi-app

1.3.0

1 of 14 See more

uffizzi-app uffizzi-app 1.3.0

1 of the 14 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
uffizzi/controller :latest	0344805f267b	python3.11@3.11.2-6	no fix listed

Open the chart page →

19,337

athens-proxyvolker-raschek

2.0.3

1 of 1 See more

athens-proxy volker-raschek 2.0.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
gomods/athens :v0.17.1	0f61d1e62359	python3@3.12.13-r0	3.12.14-r0

Open the chart page →

2,039

grafana-pdf-exporterwiremind

2.1.1

1 of 1 See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	python3.11@3.11.2-6	no fix listed

Open the chart page →

9,746

athens-proxyathens-charts

0.17.1

1 of 1 See more

athens-proxy athens-charts 0.17.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
gomods/athens :v0.18.1	97cc113b34b0	python3@3.12.13-r0	3.12.14-r0

Open the chart page →

1,298

openshift-consoleav1o-charts

0.3.6

1 of 1 See more

openshift-console av1o-charts 0.3.6

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-console :4.10.0	0bbe8b451fa3	python3@3.6.8-24.el8_2.2	0:3.6.8-78.el8_10

Open the chart page →

9,052

backup-zenbzen

0.1.4

1 of 1 See more

backup-zen bzen 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
rezachalak/bzen-mongo :1.0.0	34f694325191	python3.8@3.8.10-0ubuntu1~20.04.8	no fix listed

Open the chart page →

7,960

dumpscriptcloudscript

1.8.3

1 of 1 See more

dumpscript cloudscript 1.8.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
ghcr.io/cloudscript-technology/dumpscript :v0.0.42-alpine-edge	fce5b6fd161c	python3@3.14.3-r0	3.14.7-r0

Open the chart page →

2,125

codetogethercodetogether

1.4.25

1 of 1 See more

codetogether codetogether 1.4.25

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
codetogether/codetogether :latest	4348c8a38752	python3.9@3.9.18-3.el9_4.3	0:3.9.25-7.el9_8.3

Open the chart page →

7,450

convertigoconvertigo

8.4.3

1 of 5 See more

convertigo convertigo 8.4.3

1 of the 5 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
baserow/baserow :1.30.1	df0c42eb67e8	python3.11@3.11.2-6+deb12u4	no fix listed

Open the chart page →

17,404

cosmocosmo-platform

0.20.0

1 of 10 See more

cosmo cosmo-platform 0.20.0

1 of the 10 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	python3.11@3.11.2-6+deb12u5	no fix listed

Open the chart page →

28,839

dask-kubernetes-operatordask

2026.3.0

1 of 1 See more

dask-kubernetes-operator dask 2026.3.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
ghcr.io/dask/dask-kubernetes-operator :2026.3.0	3225d2bc6b3c	python3.13@3.13.5-2	3.13.5-2+deb13u5

Open the chart page →

9,316

zabbix-kubernetes-discoverydjerfy

1.4.20

1 of 1 See more

zabbix-kubernetes-discovery djerfy 1.4.20

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
ghcr.io/djerfy/zabbix-kubernetes-discovery :v1.4.20	7a50c07e7c69	python3.12@3.12.3-1ubuntu0.3	no fix listed

Open the chart page →

4,147

openshift-secured-appeximiait

0.5.0

1 of 1 See more

openshift-secured-app eximiait 0.5.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python3@3.6.8-47.el8_6.2	0:3.6.8-78.el8_10

Open the chart page →

12,042

openshift-secured-pgadmineximiait

0.2.0

1 of 2 See more

openshift-secured-pgadmin eximiait 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python3@3.6.8-47.el8_6.2	0:3.6.8-78.el8_10

Open the chart page →

14,546

openshift-secured-redisInsighteximiait

0.9.2

1 of 2 See more

openshift-secured-redisInsight eximiait 0.9.2

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
quay.io/openshift/origin-oauth-proxy :4.14	a7dff785d821	python3@3.6.8-47.el8_6.2	0:3.6.8-78.el8_10

Open the chart page →

13,874

healthchecksgabe565

0.17.0

1 of 1 See more

healthchecks gabe565 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
ghcr.io/linuxserver/healthchecks :version-v3.9	b5c6bfb00b03	python3@3.12.10-r0	3.12.14-r0

Open the chart page →

2,286

calibregeek-cookbook

5.4.2

1 of 1 See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
linuxserver/calibre :version-v5.21.0	a847b5b2d860	python2.7@2.7.17-1~18.04ubuntu1.6 python3.6@3.6.9-1~18.04ubuntu1.4	no fix listed no fix listed

Open the chart page →

22,773

frigategeek-cookbook

8.2.2

1 of 1 See more

frigate geek-cookbook 8.2.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
blakeblackshear/frigate :0.10.0-amd64	ae269270ad9e	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed

Open the chart page →

10,598

signal-cli-rest-apigeek-cookbook

1.2.2

1 of 1 See more

signal-cli-rest-api geek-cookbook 1.2.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container image	Digest	Package	Fixed in
bbernhard/signal-cli-rest-api :0.57	549ad08d7e14	python3.8@3.8.10-0ubuntu1~20.04.2	no fix listed

Open the chart page →

10,154

Container images carrying it

914 by charts deploying them

A fixed version is listed for 9 of the 18 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/openclaw/openclaw :2026.5.22	dcfd14877740	python3.11@3.11.2-6+deb12u7	no fix listed	1
ghcr.io/opencost/opencost-parquet-exporter :v0.2.1	ce85ef0ce665	python3.11@3.11.2-6+deb12u5	no fix listed	1
ghcr.io/openrelik/openrelik-worker-analyzer-config :latest	1269d3d8d2c2	python3.12@3.12.3-1ubuntu0.15	no fix listed	1
ghcr.io/openrelik/openrelik-worker-analyzer-logs :latest	b175cc61959a	python3.12@3.12.3-1ubuntu0.15	no fix listed	1
ghcr.io/openrelik/openrelik-worker-bulkextractor :latest	67498ee2e639	python3.12@3.12.3-1ubuntu0.15	no fix listed	1
ghcr.io/openrelik/openrelik-worker-containers :latest	a6d5abe94706	python3.12@3.12.3-1ubuntu0.15	no fix listed	1
ghcr.io/openrelik/openrelik-worker-extraction :latest	ec9fc5864cd5	python3.12@3.12.3-1ubuntu0.15	no fix listed	1
ghcr.io/openrelik/openrelik-worker-os-creds :latest	7fc7ec101f08	python3.12@3.12.3-1ubuntu0.15	no fix listed	1
ghcr.io/openrelik/openrelik-worker-plaso :latest	75537ea8c851	python3.12@3.12.3-1ubuntu0.15	no fix listed	1
ghcr.io/openrelik/openrelik-worker-timesketch :latest	4cb88b603cdc	python3.12@3.12.3-1ubuntu0.15	no fix listed	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	python2.7@2.7.18-1~20.04.1 python3.8@3.8.10-0ubuntu1~20.04.4	no fix listed no fix listed	1
ghcr.io/plausible/community-edition :v3.0.1	14c1afde21d6	python3@3.12.10-r0	3.12.14-r0	1
ghcr.io/projectnessie/nessie :0.92.1	9efe3c74d55f	python3.9@3.9.18-3.el9_4.1	0:3.9.25-7.el9_8.3	1
ghcr.io/projectnessie/nessie :0.108.4	c0f42874c810	python3.9@3.9.25-7.el9_8.2	0:3.9.25-7.el9_8.3	1
ghcr.io/runwhen-contrib/runwhen-local :0.12.0	533ce58c6e02	python3.13@3.13.5-2+deb13u4	3.13.5-2+deb13u5	1
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	python3.11@3.11.2-6+deb12u8	no fix listed	1
ghcr.io/sdr-enthusiasts/docker-flightradar24 :latest	917e53402d51	python3.13@3.13.5-2+deb13u4	3.13.5-2+deb13u5	1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui :0.2.1-5d668c1	ed07e7ca098d	python3.11@3.11.2-6+deb12u5	no fix listed	1
ghcr.io/seanmorley15/adventurelog-backend :v0.13.0	0250d9cb0d74	python3.13@3.13.5-2+deb13u4	3.13.5-2+deb13u5	1
ghcr.io/smarter-project/audio-client :v3.1.2	3c8375dc5487	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
ghcr.io/smarter-project/gstreamer :v1.0.2	5ecb16015aa8	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
ghcr.io/smarter-project/image-detector :v2.5.3	1dcca70c6446	python3.8@3.8.10-0ubuntu1~20.04.5	no fix listed	1
ghcr.io/stirling-tools/stirling-pdf :2.14.3	3b3670fce70b	python3.12@3.12.3-1ubuntu0.12	no fix listed	1
ghcr.io/streamingfast/firehose-core :v1.12.3	91fca773a63f	python3.12@3.12.3-1ubuntu0.9	no fix listed	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4	89969b78fb07	python3.12@3.12.3-1ubuntu0.7	no fix listed	1
ghcr.io/streamingfast/firehose-ethereum :v2.14.3	bf816072380e	python3.12@3.12.3-1ubuntu0.9	no fix listed	1
ghcr.io/streamingfast/firehose-ethereum :v2.12.4-geth	d7bdfa7b41da	python3.12@3.12.3-1ubuntu0.7	no fix listed	1
ghcr.io/streamingfast/go-ethereum :geth-v1.16.9-fh3.0	8e3cb38953a3	python3.12@3.12.3-1ubuntu0.10	no fix listed	1
ghcr.io/streamingfast/substreams-sink-kv :v2.3.0	26953ec68d5d	python3.8@3.8.10-0ubuntu1~20.04.13	no fix listed	1
ghcr.io/streamingfast/substreams-sink-noop :v1.4.0	d7c43c3135c6	python3.8@3.8.10-0ubuntu1~20.04.13	no fix listed	1
ghcr.io/streamvisor/streamvisor :4.1.4	0bc598b2ac9a	python3.12@3.12.3-1ubuntu0.13	no fix listed	1
ghcr.io/tarampampam/video-dl-bot :1.4.3	6daa2dc7556b	python3.13@3.13.5-2+deb13u4	3.13.5-2+deb13u5	1
ghcr.io/tarkyaio/tarka :0.4.1	e8d3f1512f06	python-3.14@3.14.4-r2	3.14.6-r3	1
ghcr.io/thoroslives/zilean :v3.10.1	bce6aca0f6ca	python3@3.11.12-r1	3.12.14-r0	1
ghcr.io/topolvm/pie :0.18.0	aa467443e407	python3.10@3.10.12-1~22.04.17	no fix listed	1
ghcr.io/topolvm/topolvm-with-sidecar :0.41.1	70548dbe0c6a	python3.10@3.10.12-1~22.04.17	no fix listed	1
ghcr.io/topolvm/topolvm-with-sidecar :0.35.0	b354978c440d	python3.10@3.10.12-1~22.04.6	no fix listed	1
ghcr.io/wgbh-mla/pbcore-util :pr-6	6e04659a3baa	python3.11@3.11.2-6+deb12u6	no fix listed	1
ghcr.io/wiremind/grafana-pdf-exporter :v1.7	dbaa8527bf4c	python3.11@3.11.2-6	no fix listed	1
ghcr.io/wittdennis/homeassistant-otbr :4.2.3	1b53b0b3488e	python3.13@3.13.5-2+deb13u4	3.13.5-2+deb13u5	1
ghcr.io/wizarrrr/wizarr :4.2.0-beta.3	d19d886d5090	python3.11@3.11.2-6	no fix listed	1
ghcr.io/wundergraph/cosmo/otelcollector :0.18.1	5a6fe78d4d15	python3.11@3.11.2-6+deb12u5	no fix listed	1
ghcr.io/zazukoians/qlever-server :v0.10.0	f10fd24b2290	python3.12@3.12.3-1ubuntu0.15	no fix listed	1
ghcr.io/zoriya/kyoo_autosync :4.7.1	fbba58ddb1a6	python3.11@3.11.2-6+deb12u4	no fix listed	1
ghcr.io/zoriya/kyoo_scanner :4.7.1	7dc0ee57b628	python3.11@3.11.2-6+deb12u4	no fix listed	1
mcr.microsoft.com/mssql/server :2017-latest	13221ac5f673	python2.7@2.7.17-1~18.04ubuntu1.11 python3.6@3.6.9-1~18.04ubuntu1.12	no fix listed no fix listed	1
mcr.microsoft.com/mssql/server :2019-CU16-ubuntu-20.04	49a57dc220b1	python3.8@3.8.10-0ubuntu1~20.04.4	no fix listed	1
mcr.microsoft.com/mssql/server :latest	4bab24f36c1e	python3.12@3.12.3-1ubuntu0.15	no fix listed	1
mcr.microsoft.com/mssql/server :2022-latest	ba4c8329f48f	python3.10@3.10.12-1~22.04.16	no fix listed	1
mcr.microsoft.com/mssql/server :2025-CU5-ubuntu-24.04	cee0f4db03b5	python3.12@3.12.3-1ubuntu0.13	no fix listed	1