StackRadar

CVE-2026-11940

High

Advisory

Published 23 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
888
of 17,787 indexed, latest versions
Container images
919
deployed by those charts
Fix available
9 of 18
affected packages

tarfile extraction filter bypass allows escaping the destination directory

Carried by container images the latest versions of 888 of 17,787 indexed charts deploy, on 919 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 moreno fix listed181
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 moreno fix listed100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3+12 moreno fix listed89
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 moreno fix listed80
python3apk3.11.12-r1, 3.12.8-r1, 3.12.9-r0, 3.12.10-r0+7 more3.12.14-r0, 3.14.7-r075
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.7-1ubuntu0.13.13.5-2+deb13u575
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 moreno fix listed54
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 moreno fix listed44
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9no fix listed25
python3.14deb3.14.4-1, 3.14.4-1ubuntu0.1, 3.14.4-1ubuntu0.2no fix listed9
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7no fix listed7
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r03.14.6-r36
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.213
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.14-r23
python-3.12apk3.12.0-r1, 3.12.9-r13.12.13-r102
python3rpm3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+27 more0:3.6.8-78.el8_10, 0:3.6.8-78.el8_10.rocky.0136
python3.9rpm3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+16 more0:3.9.25-7.el9_8.361
python3.12rpm3.12.5-2.el9_5.2, 3.12.13-2.el10_2.1, 3.12.13-3.el8_10, 3.12.13-3.el9_8.10:3.12.14-1.el8_10, 0:3.12.14-1.el9_8, 0:3.12.14-1.el10_25
OSV records
ALPINE-CVE-2026-11940BIT-python-2026-11940CGA-2877-fmjf-8j5qCGA-cr9q-h4v8-hfgpCGA-qmm2-954x-xmxrDEBIAN-CVE-2026-11940RHSA-2026:54268RHSA-2026:56219RHSA-2026:58902RHSA-2026:58971RHSA-2026:59009RLSA-2026:54268RLSA-2026:56219RLSA-2026:58902UBUNTU-CVE-2026-11940
Also known as
BIT-libpython-2026-11940, BIT-python-min-2026-11940, CGA-5363-9r7r-rr55, CGA-p86c-g5pg-rvpw, CGA-w3m6-c9vj-wm85, PSF-2026-30, RHSA-2026:64806, RHSA-2026:64816

Charts affected

888 by stars
ChartLatestAffected imagesRadar Score
videoaugmentationassist-iot-video-augmentation0.1.01 of 3See more

videoaugmentation assist-iot-video-augmentation 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
assistiot/video_augmentation:runner-cpu-lateste5ae539ce2cb
python3.8@3.8.10-0ubuntu1~20.04.7
no fix listed

Open the chart page →

13,986
astrotrekastria0.0.22 of 4See more

astrotrek astria 0.0.2

2 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg15-latesta8e3322e1cf9
python3.10@3.10.6-1~22.04.2ubuntu1
no fix listed
ghcr.io/astriaorg/astrotrek:0.1.05889bea38e56
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

31,807
bamboo-agentatlassian-data-centerVerified publisher2.0.151 of 1See more

bamboo-agent atlassian-data-center 2.0.15

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
atlassian/bamboo-agent-base:12.1.1151c2d7274eef
python3.12@3.12.3-1ubuntu0.16
no fix listed

Open the chart page →

1,628
nas-appsawesomeVerified publisher2.0.01 of 8See more

nas-apps awesome 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
wettyoss/wetty:latest7423b3d40ba2
python3@3.14.5-r0
3.14.7-r0

Open the chart page →

7,166
wyoming-piperbdclark-helm-chartsVerified publisher0.1.41 of 1See more

wyoming-piper bdclark-helm-charts 0.1.4

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
rhasspy/wyoming-piper:2.5.27d39aafac409
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5

Open the chart page →

1,176
algorand-participationbiatec-repoVerified publisher4.4.11 of 1See more

algorand-participation biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
scholtz2/algorand-participation-mainnet-extended:4.4.1-stable5aaa5d4ab8b8
python3.10@3.10.12-1~22.04.6
no fix listed

Open the chart page →

7,239
algorand-relaybiatec-repoVerified publisher4.4.11 of 1See more

algorand-relay biatec-repo 4.4.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
scholtz2/algorand-relay-mainnet:4.4.1-stablee9af7d8ff6bb
python3.12@3.12.3-1ubuntu0.8
no fix listed

Open the chart page →

5,108
mx-nodebicarus-labs0.1.01 of 1See more

mx-node bicarus-labs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
bicarus/elrond-rosetta:v1.3.50.0b1dab0721e1c
python3.8@3.8.10-0ubuntu1~20.04.6
no fix listed

Open the chart page →

8,004
huebigdata-chartsVerified publisher1.0.41 of 2See more

hue bigdata-charts 1.0.4

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
gethue/hue:4.10.05702b2c37ff9
python2.7@2.7.17-1~18.04ubuntu1.6
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
no fix listed

Open the chart page →

22,916
baserowblackbird-cloudVerified publisher1.0.171 of 6See more

baserow blackbird-cloud 1.0.17

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
baserow/backend:1.31.1e0b3c8130b91
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

10,171
colosseumbook-k8sinfra-v21.0.182 of 5See more

colosseum book-k8sinfra-v2 1.0.18

2 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
sysnet4admin/colosseum-cms:loge74b43c7f492
python3.11@3.11.2-6+deb12u6
no fix listed
sysnet4admin/colosseum-prm:log5802bfcd7fed
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

26,266
csi-driver-nfsbook-k8sinfra-v24.12.11 of 6See more

csi-driver-nfs book-k8sinfra-v2 4.12.1

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

6,063
jaegerbook-k8sinfra-v23.4.02 of 5See more

jaeger book-k8sinfra-v2 3.4.0

2 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
python3.10@3.10.12-1~22.04.3
no fix listed
library/cassandra:3.11.65aa8400b4b3b
python2.7@2.7.17-1~18.04ubuntu1.1
no fix listed

Open the chart page →

19,291
qbittorrentbrandan-schmitz-helm-chartsVerified publisher2.2.01 of 1See more

qbittorrent brandan-schmitz-helm-charts 2.2.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
linuxserver/qbittorrent:5.2.2dd24a5f3db32
python3@3.12.13-r0
3.12.14-r0

Open the chart page →

956
node-appbryopsida0.5.12 of 2See more

node-app bryopsida 0.5.1

2 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/node:ltsbe23f54a88d3
python3.11@3.11.2-6+deb12u8
no fix listed
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
python3.12@3.12.3-1ubuntu0.5
no fix listed

Open the chart page →

14,446
prometheus-puppetdb-sdcamptocamp38.0.21 of 2See more

prometheus-puppetdb-sd camptocamp3 8.0.2

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
puppet/puppet-agent:7.14.00b6fd9a6b7da
python3.6@3.6.9-1~18.04ubuntu1.6
no fix listed

Open the chart page →

6,158
tetragon-policy-buildercamptocamp30.1.11 of 1See more

tetragon-policy-builder camptocamp3 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/camptocamp/tetragon-policy-builder:master0e99f12bb040
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

10,318
apachecamptocamp-apache0.4.01 of 2See more

apache camptocamp-apache 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
camptocamp/mapserver:latestbf2e8e118c9b
python3.12@3.12.3-1ubuntu0.16
no fix listed

Open the chart page →

1,485
cassandra-clustercassandra-clusterVerified publisher0.1.01 of 1See more

cassandra-cluster cassandra-cluster 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/cassandra:3.11.10b095ff3248c6
python2.7@2.7.18-1~20.04.1
no fix listed

Open the chart page →

9,521
catalyst-agentscatalyst-agents0.1.301 of 18See more

catalyst-agents catalyst-agents 0.1.30

1 of the 18 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
alpine/k8s:1.32.3eec354133193
python3@3.12.9-r0
3.12.14-r0

Open the chart page →

14,865
opencvecfi20170.1.21 of 7See more

opencve cfi2017 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/cfi2017/opencve-scheduler:3.0.08d943799621b
python3.11@3.11.2-6+deb12u4
no fix listed

Open the chart page →

14,964
charon-relaycharonOfficialVerified publisher0.8.01 of 2See more

charon-relay charon 0.8.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
python3.13@3.13.5-2
3.13.5-2+deb13u5

Open the chart page →

4,409
dv-podcharonOfficialVerified publisher0.19.11 of 5See more

dv-pod charon 0.19.1

1 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
obolnetwork/charon:v1.10.0278c7e2897b6
python3.13@3.13.5-2
3.13.5-2+deb13u5

Open the chart page →

7,457
home-assistant-otbrcharts-derwitt-devVerified publisher2.1.31 of 1See more

home-assistant-otbr charts-derwitt-dev 2.1.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/wittdennis/homeassistant-otbr:4.2.31b53b0b3488e
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5

Open the chart page →

2,358
otbrcharts-derwitt-devVerified publisher0.2.01 of 1See more

otbr charts-derwitt-dev 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
openthread/otbr:latestf307f59f6432
python2.7@2.7.17-1~18.04ubuntu1.11
python3.6@3.6.9-1~18.04ubuntu1.12
no fix listed
no fix listed

Open the chart page →

12,804
opensipschetan-opensips0.1.01 of 1See more

opensips chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
chetangautamm/repo:Opensips_Buildb4b94155ff5a
python3.4@3.4.3-1ubuntu1~14.04.7
no fix listed

Open the chart page →

30,163
sippchetan-opensips0.1.01 of 1See more

sipp chetan-opensips 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
chetangautamm/repo:sipp.v3e7f7049e1544
python3.8@3.8.5-1~20.04
no fix listed

Open the chart page →

12,531
keycloak-mcp-serverchristianhuthVerified publisher1.2.01 of 1See more

keycloak-mcp-server christianhuth 1.2.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
quay.io/sshaaf/keycloak-mcp-server:0.4.0b7e9cba72f8a
python3.9@3.9.19-8.el9_5.1
0:3.9.25-7.el9_8.3

Open the chart page →

1,440
prometheus-pve-exporterchristianhuthVerified publisher2.10.01 of 1See more

prometheus-pve-exporter christianhuth 2.10.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
prompve/prometheus-pve-exporter:3.10.04867684c0a93
python3@3.14.5-r0
3.14.7-r0

Open the chart page →

349
arbitrumchronicleVerified publisher0.3.41 of 1See more

arbitrum chronicle 0.3.4

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

7,006
basechronicleVerified publisher0.0.81 of 1See more

base chronicle 0.0.8

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
python3.10@3.10.12-1~22.04.7
no fix listed

Open the chart page →

4,858
kamaji-etcdclastixVerified publisher0.17.01 of 4See more

kamaji-etcd clastix 0.17.0

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
cfssl/cfssl:latestc9018c2ddf0b
python3.11@3.11.2-6
no fix listed

Open the chart page →

12,021
kube-acp-stackcloudentity2.28.01 of 7See more

kube-acp-stack cloudentity 2.28.0

1 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
timescale/timescaledb-ha:pg17.2-ts2.18.2e8d0a9cc3db5
python3.10@3.10.12-1~22.04.9
no fix listed

Open the chart page →

20,936
daskcloudnativeapp2.2.11 of 2See more

dask cloudnativeapp 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
daskdev/dask-notebook:1.1.0052630f5ca04
python3.6@3.6.7-1~18.04
no fix listed

Open the chart page →

29,922
distributed-tensorflowcloudnativeapp0.1.11 of 1See more

distributed-tensorflow cloudnativeapp 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
cheyang/distributed-tf:1.6.046cc34755493
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed

Open the chart page →

36,132
ethereumcloudnativeapp1.0.01 of 3See more

ethereum cloudnativeapp 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
python2.7@2.7.12-1ubuntu0~16.04.2
no fix listed

Open the chart page →

27,434
guestbookcloudnativeapp0.2.01 of 3See more

guestbook cloudnativeapp 0.2.0

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
resouer/redis-slave:v2e2f198b49ba7
python2.7@2.7.6-8
python3.4@3.4.0-2ubuntu1
no fix listed
no fix listed

Open the chart page →

36,866
hlf-couchdbcloudnativeapp1.0.61 of 1See more

hlf-couchdb cloudnativeapp 1.0.6

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
hyperledger/fabric-couchdb:0.4.10c65891b6c237
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed

Open the chart page →

34,014
seleniumcloudnativeapp1.0.81 of 1See more

selenium cloudnativeapp 1.0.8

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
python3.8@3.8.10-0ubuntu1~20.04
no fix listed

Open the chart page →

11,831
webpagetest-agentcloudnativeapp0.2.01 of 1See more

webpagetest-agent cloudnativeapp 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
timothyclarke/wptagent:2018-01-2322c41e5ca7e2
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed

Open the chart page →

77,798
cp4d-deployercloud-native-toolkit1.0.01 of 1See more

cp4d-deployer cloud-native-toolkit 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
quay.io/cloudnativetoolkit/cloud-pak-deployer:latest13aaae779248
python3@3.6.8-51.el8_8.1
0:3.6.8-78.el8_10

Open the chart page →

25,152
developer-dashboardcloud-native-toolkit1.4.11 of 1See more

developer-dashboard cloud-native-toolkit 1.4.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
python3@3.6.8-23.el8
0:3.6.8-78.el8_10

Open the chart page →

25,454
cloudpremcloudprem0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad2 of 6See more

cloudprem cloudprem 0.0.0-build.00306ba7288bb8d46dd8c6190af79ef5b6fbdbad

2 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/formancehq/console-v3:v1.16.0c99e8ef2c545
python3@3.12.11-r0
3.12.14-r0
ghcr.io/formancehq/portal:v1.16.06efef5d19d56
python3@3.12.11-r0
3.12.14-r0

Open the chart page →

18,256
cloudlaunchcloudve0.6.01 of 5See more

cloudlaunch cloudve 0.6.0

1 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed

Open the chart page →

12,505
cloudlaunch-servercloudve0.2.01 of 5See more

cloudlaunch-server cloudve 0.2.0

1 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed

Open the chart page →

12,176
cloudlaunchservercloudve0.6.01 of 4See more

cloudlaunchserver cloudve 0.6.0

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
cloudve/cloudlaunch-server:latest4a3d7fae90bb
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed

Open the chart page →

11,640
galaxykubemancloudve2.10.11 of 7See more

galaxykubeman cloudve 2.10.1

1 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
galaxy/cloudman-server:lateste5c265fe9fcd
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed

Open the chart page →

16,117
galaxy-stablecloudve2.0.02 of 5See more

galaxy-stable cloudve 2.0.0

2 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
galaxy/galaxy-init:v18.010267bad550e6
python2.7@2.7.6-8ubuntu0.4
python3.4@3.4.3-1ubuntu1~14.04.6
no fix listed
no fix listed
galaxy/galaxy-stable:v18.018e577a626dfd
python2.7@2.7.6-8ubuntu0.4
python3.4@3.4.3-1ubuntu1~14.04.6
no fix listed
no fix listed

Open the chart page →

70,968
janisterminalcloudve0.1.01 of 2See more

janisterminal cloudve 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
cloudve/janis-terminal:latestaf56e77ca587
python3.6@3.6.9-1~18.04ubuntu1
no fix listed

Open the chart page →

14,285
pulsarcloudve0.2.01 of 2See more

pulsar cloudve 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

5,994

Container images carrying it

919 by charts deploying them

A fixed version is listed for 9 of the 18 affected packages.

Container imageDigestPackageFixed inUsed by
quay.io/fiware/tmforum-resource-function-activation:1.18.062a5acb63fd1
python3@3.6.8-70.el8_10
0:3.6.8-78.el8_10
1
quay.io/fiware/tmforum-resource-inventory:1.18.0553b4a47730b
python3@3.6.8-70.el8_10
0:3.6.8-78.el8_10
1
quay.io/fiware/tmforum-resource-order-management:1.18.0dd1778ad6203
python3@3.6.8-70.el8_10
0:3.6.8-78.el8_10
1
quay.io/fiware/tmforum-service-catalog:1.18.074b0fad9e155
python3@3.6.8-70.el8_10
0:3.6.8-78.el8_10
1
quay.io/fiware/tmforum-service-inventory:1.18.04be54e8cb5c0
python3@3.6.8-70.el8_10
0:3.6.8-78.el8_10
1
quay.io/fiware/tmforum-service-order-management:1.18.0d2091785d544
python3@3.6.8-70.el8_10
0:3.6.8-78.el8_10
1
quay.io/fiware/tmforum-software-management:1.18.01b74a2f7ba67
python3@3.6.8-70.el8_10
0:3.6.8-78.el8_10
1
quay.io/fiware/tmforum-usage-management:1.18.042f190c42926
python3@3.6.8-70.el8_10
0:3.6.8-78.el8_10
1
quay.io/fiware/trusted-issuers-list:0.9.13c886ce5c056
python3.9@3.9.21-2.el9_6.1
0:3.9.25-7.el9_8.3
1
quay.io/fiware/trusted-issuers-registry:0.11.1a8a9ec461034
python3@3.6.8-45.el8
0:3.6.8-78.el8_10
1
quay.io/flomesh/flomesh-console-ubi8:0.70.0-30ce6938ff6709
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
1
quay.io/flomesh/pipy-repo-ubi8:0.70.0-469912fdf6c183
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
1
quay.io/flomesh/pipy-ubi8:0.50.0-8824352dca6672
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
1
quay.io/flomesh/pipy-ubi8:0.70.0-4635d87a381432
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
1
quay.io/galexrt/dellhw_exporter:v2.0.0-rc.18a1361fa38c1
python3.9@3.9.18-3.el9_4.5
0:3.9.25-7.el9_8.3
1
quay.io/galexrt/dellhw_exporter:v2.0.0b3a5806d73b5
python3.9@3.9.25-3.el9_7.1
0:3.9.25-7.el9_8.3
1
quay.io/hpestorage/filex-csi-driver:2.6.4b7f960bbf472
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3
1
quay.io/ibmgaragecloud/developer-dashboard:v1.4.47a4b9fedc724
python3@3.6.8-23.el8
0:3.6.8-78.el8_10
1
quay.io/keycloak/keycloak:14.0.03029dc0f1d38
python3@3.6.8-37.el8
0:3.6.8-78.el8_10
1
quay.io/keycloak/keycloak:20.0.18830f76112b6
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
1
quay.io/keycloak/keycloak:20.0.3b8f2a453a17a
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
1
quay.io/keycloak/keycloak-operator:20.0.2b1710745fa64
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
1
quay.io/kubev2v/forklift-operator:release-2.1268657c36c086
python3.12@3.12.13-3.el9_8.1
0:3.12.14-1.el9_8
1
quay.io/maximilianopizarro/custom-rhcl-console:dns-prober-v0.1.21a592ee6651a
python3.9@3.9.25-7.el9_8.2
0:3.9.25-7.el9_8.3
1
quay.io/maximilianopizarro/custom-rhcl-console:v0.1.270bb0cabd653
python3.9@3.9.25-7.el9_8.2
0:3.9.25-7.el9_8.3
1
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3
1
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3
1
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
1
quay.io/maximilianopizarro/neuroface-backend:latestcba71dc08c8a
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
1
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
python3.9@3.9.25-2.el9_7
0:3.9.25-7.el9_8.3
1
quay.io/maximilianopizarro/neuroface-frontend:latestdcf24040cc77
python3.9@3.9.25-2.el9_7
0:3.9.25-7.el9_8.3
1
quay.io/maximilianopizarro/nfl-wallet-webapp:1.0.13fead5702be7
python3@3.6.8-74.el8_10
0:3.6.8-78.el8_10
1
quay.io/maximilianopizarro/openshift-integration-operator:v0.8.2d6fc43ac802e
python3.9@3.9.21-1.el9_5
0:3.9.25-7.el9_8.3
1
quay.io/maximilianopizarro/showroom-docs-mcp:latest1a6eff92827a
python3.9@3.9.21-1.el9_5
0:3.9.25-7.el9_8.3
1
quay.io/maximilianopizarro/workshop-pipelines:lateste383ba3e0966
python3@3.6.8-41.el8
0:3.6.8-78.el8_10
1
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
python3.9@3.9.25-3.el9_7
0:3.9.25-7.el9_8.3
1
quay.io/ongres/kubectl:v1.25.16-build-6.5304dada9e4503
python3.12@3.12.13-3.el8_10
0:3.12.14-1.el8_10
1
quay.io/openshift/origin-cli:4.66722d5041b47
python3@3.6.8-24.el8_2
0:3.6.8-78.el8_10
1
quay.io/openshift/origin-console:4.10.00bbe8b451fa3
python3@3.6.8-24.el8_2.2
0:3.6.8-78.el8_10
1
quay.io/openshift/origin-jenkins-agent-base:latestc241c971aef8
python3@3.6.8-47.el8_6.4
0:3.6.8-78.el8_10
1
quay.io/opsmxpublic/rabbitmq:4.2-management3408107e5cc4
python3.12@3.12.3-1ubuntu0.9
no fix listed
1
quay.io/opsmxpublic/ubi8-gate:isd-spin-2025.10.01-5c720954-2025112608102b3554029737
python3@3.6.8-71.el8_10
0:3.6.8-78.el8_10
1
quay.io/opsmxpublic/ubi8-oes-audit-client:isd-spin-2025.10.01-cb1bfce-20251126103732a5b1887eab
python3@3.6.8-71.el8_10
0:3.6.8-78.el8_10
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
python3@3.6.8-71.el8_10
0:3.6.8-78.el8_10
1
quay.io/opsmxpublic/ubi8-oes-db:v3.0.089ee6493af89
python3@3.6.8-38.el8_4
0:3.6.8-78.el8_10
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
python3@3.6.8-71.el8_10
0:3.6.8-78.el8_10
1
quay.io/opsmxpublic/ubi8-oes-ui:isd-spin-2025.10.01-e6f6f01-2025121006405d934bb66884
python3@3.6.8-71.el8_10
0:3.6.8-78.el8_10
1
quay.io/ortelius/ms-compitem-crud:main-v10.0.1566-gf3f81597b7f49eec76
python-3.14@3.14.2-r2
3.14.6-r3
1
quay.io/ortelius/ms-dep-pkg-r:main-v10.0.1705-g21b3dc8a4150e94a45
python-3.14@3.14.2-r2
3.14.6-r3
1
quay.io/ortelius/ms-textfile-crud:main-v10.0.1635-g5076aaf5c4c8adfc82
python-3.14@3.14.2-r2
3.14.6-r3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.