StackRadar

CVE-2026-11940

High

Advisory

Published 23 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
882
of 17,787 indexed, latest versions
Container images
914
deployed by those charts
Fix available
9 of 18
affected packages

tarfile extraction filter bypass allows escaping the destination directory

Carried by container images the latest versions of 882 of 17,787 indexed charts deploy, on 914 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 moreno fix listed180
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 moreno fix listed100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3, 3.12.3-1ubuntu0.4+11 moreno fix listed87
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 moreno fix listed80
python3apk3.11.12-r1, 3.12.8-r1, 3.12.9-r0, 3.12.10-r0+7 more3.12.14-r0, 3.14.7-r075
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.7-1ubuntu0.13.13.5-2+deb13u574
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 moreno fix listed54
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 moreno fix listed44
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9no fix listed25
python3.14deb3.14.4-1, 3.14.4-1ubuntu0.1, 3.14.4-1ubuntu0.2no fix listed9
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7no fix listed7
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r03.14.6-r36
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.213
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.14-r23
python-3.12apk3.12.0-r1, 3.12.9-r13.12.13-r102
python3rpm3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+27 more0:3.6.8-78.el8_10, 0:3.6.8-78.el8_10.rocky.0135
python3.9rpm3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+16 more0:3.9.25-7.el9_8.361
python3.12rpm3.12.5-2.el9_5.2, 3.12.13-2.el10_2.1, 3.12.13-3.el8_10, 3.12.13-3.el9_8.10:3.12.14-1.el8_10, 0:3.12.14-1.el9_8, 0:3.12.14-1.el10_25
OSV records
ALPINE-CVE-2026-11940BIT-python-2026-11940CGA-2877-fmjf-8j5qCGA-cr9q-h4v8-hfgpCGA-qmm2-954x-xmxrDEBIAN-CVE-2026-11940RHSA-2026:54268RHSA-2026:56219RHSA-2026:58902RHSA-2026:58971RHSA-2026:59009RLSA-2026:54268RLSA-2026:56219RLSA-2026:58902UBUNTU-CVE-2026-11940
Also known as
BIT-libpython-2026-11940, BIT-python-min-2026-11940, CGA-5363-9r7r-rr55, CGA-p86c-g5pg-rvpw, CGA-w3m6-c9vj-wm85, PSF-2026-30, RHSA-2026:64806, RHSA-2026:64816

Charts affected

882 by stars
ChartLatestAffected imagesRadar Score
nightingalelogic3579Verified publisher0.3.11 of 6See more

nightingale logic3579 0.3.1

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
flashcatcloud/categraf:latest42e6ab16472e
python3.12@3.12.3-1ubuntu0.12
no fix listed

Open the chart page →

8,938
login-test-backendlogin-test-backend0.1.01 of 2See more

login-test-backend login-test-backend 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
aboogie/login_test_backend:new9c41a4483ac8
python3.11@3.11.2-6+deb12u2
no fix listed

Open the chart page →

6,506
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

23,613
lsdisklsdiskVerified publisher2.0.71 of 4See more

lsdisk lsdisk 2.0.7

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

5,025
nublado2lsst-sqre0.8.51 of 2See more

nublado2 lsst-sqre 0.8.5

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
lsstsqre/nublado2:2.0.1b75bf8aaafa4
python2.7@2.7.18-1~20.04.1
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed
no fix listed

Open the chart page →

17,779
elastictranscoderluiscajl0.46.02 of 4See more

elastictranscoder luiscajl 0.46.0

2 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
elastictranscoder/transcoder:627e21dcb4a0327029e6
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed

Open the chart page →

58,160
magistralamagistrala-devopsVerified publisher0.16.21 of 42See more

magistrala magistrala-devops 0.16.2

1 of the 42 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
jaegertracing/jaeger-cassandra-schema:1.53.0d48d6dab2c65
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

24,400
docker-mailservermailserverVerified publisher0.2.651 of 9See more

docker-mailserver mailserver 0.2.65

1 of the 9 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
jeboehm/mailserver-web:5.0.929da13edf5aa8
python3@3.12.11-r0
3.12.14-r0

Open the chart page →

10,897
mauticmautic-chartVerified publisher1.0.21 of 3See more

mautic mautic-chart 1.0.2

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
mautic/mautic:7-apacheeb8cc73d97e1
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

8,303
eoloplantmca-eoloplaner0.1.01 of 7See more

eoloplant mca-eoloplaner 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/rabbitmq:3.9-management8a279e9396a8
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

29,588
backstagemcwarmanVerified publisher0.10.101 of 2See more

backstage mcwarman 0.10.10

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/mcwarman/backstage-sample-app/backend:main07aba09a594f
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

9,668
cleanuparrmedia-servarrVerified publisher0.18.01 of 1See more

cleanuparr media-servarr 0.18.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/cleanuparr/cleanuparr:2.10.5c7cd53ad559a
python3.12@3.12.3-1ubuntu0.15
no fix listed

Open the chart page →

1,789
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
python3.13@3.13.5-2
3.13.5-2+deb13u5

Open the chart page →

7,944
localpathprovisionermesosphere-stable0.1.21 of 1See more

localpathprovisioner mesosphere-stable 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
rancher/local-path-provisioner:v0.0.5e66f32d19eb9
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed

Open the chart page →

17,942
miot-calendarmicroboxlabs0.1.01 of 1See more

miot-calendar microboxlabs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-calendar:latest-jvm7157cdc0bf5b
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3

Open the chart page →

1,937
miot-modulithmicroboxlabs0.6.01 of 1See more

miot-modulith microboxlabs 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-srv:latest5796553b41ae
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3

Open the chart page →

1,414
modulariotmicroboxlabs0.9.01 of 4See more

modulariot microboxlabs 0.9.0

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/microboxlabs/miot-srv:latest4ec11d229028
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3

Open the chart page →

2,256
microcks-operatormicrocksVerified publisher0.0.111 of 1See more

microcks-operator microcks 0.0.11

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
quay.io/microcks/microcks-operator:0.0.1196d1054d4a61
python3.9@3.9.25-3.el9_7
0:3.9.25-7.el9_8.3

Open the chart page →

1,261
alluremidokura-communityVerified publisher0.1.31 of 2See more

allure midokura-community 0.1.3

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
frankescobar/allure-docker-service:2.19.0cafa03b94dac
python3.6@3.6.9-1~18.04ubuntu1.8
no fix listed

Open the chart page →

12,847
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
beyzkaya/blog-backend:v1.0.112a6a3d1c5f9
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

13,010
minio-operatorminio-operator4.3.71 of 2See more

minio-operator minio-operator 4.3.7

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
minio/operator:v4.3.754393e03f3b2
python3@3.6.8-41.el8
0:3.6.8-78.el8_10

Open the chart page →

6,085
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

43,341
cockroachdb-operatormmontesVerified publisher0.1.01 of 1See more

cockroachdb-operator mmontes 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
cockroachdb/cockroach-operator:v2.1.0983312754620
python3@3.6.8-37.el8
0:3.6.8-78.el8_10

Open the chart page →

7,775
user-manager-mongodbmoreillonVerified publisher0.6.21 of 4See more

user-manager-mongodb moreillon 0.6.2

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
moreillon/user-manager-mongoose:v5.0.1d2ee0423b797
python3.11@3.11.2-6
no fix listed

Open the chart page →

25,704
user-manager-neo4jmoreillonVerified publisher0.9.71 of 6See more

user-manager-neo4j moreillon 0.9.7

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
moreillon/user-manager:v5.0.2e1c9bfab5c16
python3.11@3.11.2-6
no fix listed

Open the chart page →

30,363
chirpstackmosquitto-helm-chart0.5.01 of 8See more

chirpstack mosquitto-helm-chart 0.5.0

1 of the 8 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.9.0d056c89b7131
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed

Open the chart page →

25,933
pulsarmosquitto-helm-chart0.2.01 of 1See more

pulsar mosquitto-helm-chart 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.10.03b262ab7a7d9
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed

Open the chart page →

15,675
crowdmoxVerified publisher2.4.31 of 3See more

crowd mox 2.4.3

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
atlassian/crowd:5.2.2ebf761c7d437
python3.12@3.12.3-1ubuntu0.16
no fix listed

Open the chart page →

5,663
radicalemt1905024.1.11 of 1See more

radicale mt190502 4.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
tomsquest/docker-radicale:3.6.1.0a594c624c5a6
python3@3.12.12-r0
3.12.14-r0

Open the chart page →

1,546
mum-discord-botmum-discord-botVerified publisher0.3.71 of 1See more

mum-discord-bot mum-discord-bot 0.3.7

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/drewburr-labs/mum-discord-bot:3.1.26e82914e1051
python3.11@3.11.2-6
no fix listed

Open the chart page →

13,686
szurubooru-servermy0nVerified publisher0.2.51 of 3See more

szurubooru-server my0n 0.2.5

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
szurubooru/server:2.5accf2ad9fbc3
python3@3.12.13-r0
3.12.14-r0

Open the chart page →

1,043
my-app-namemy-app-name0.0.21 of 1See more

my-app-name my-app-name 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
viniciusfcf/gitops-quarkus-app-jvm:latestbba8ee1b5cd5
python3@3.6.8-41.el8
0:3.6.8-78.el8_10

Open the chart page →

9,149
Practica_4_helmmy-heml-appVerified publisher0.1.02 of 7See more

Practica_4_helm my-heml-app 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
library/rabbitmq:3.9-management8a279e9396a8
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

27,721
myweatherhelmmyweather1.3.112 of 7See more

myweatherhelm myweather 1.3.11

2 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/rabbitmq:3-managemente582c0bc7766
python3.12@3.12.3-1ubuntu0.9
no fix listed
mcr.microsoft.com/mssql/server:2017-latestfbf79e0fea59
python2.7@2.7.17-1~18.04ubuntu1.11
python3.6@3.6.9-1~18.04ubuntu1.12
no fix listed
no fix listed

Open the chart page →

17,929
smilencsaVerified publisher1.1.07 of 23See more

smile ncsa 1.1.0

7 of the 23 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
socialmediamacroscope/autophrase:0.1.570fb11d4f531
python3.8@3.8.10-0ubuntu1~20.04.8
no fix listed
socialmediamacroscope/collect_reddit_comment:0.1.219d3d26d53ee
python3.6@3.6.9-1~18.04ubuntu1.12
no fix listed
socialmediamacroscope/histogram:0.1.26418f9bdb4d2
python3.11@3.11.2-6
no fix listed
socialmediamacroscope/image_crawler:0.1.2f508216be63c
python3.6@3.6.9-1~18.04ubuntu1.12
no fix listed
socialmediamacroscope/network_analysis:0.1.3b351c21422e6
python3.11@3.11.2-6
no fix listed
socialmediamacroscope/preprocessing:0.1.3ca863306314b
python3.11@3.11.2-6
no fix listed
socialmediamacroscope/topic_modeling:0.1.3fa490acac2f8
python3.11@3.11.2-6
no fix listed

Open the chart page →

109,294
uptime-kumancsaVerified publisher1.7.21 of 1See more

uptime-kuma ncsa 1.7.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

30,028
neuralbank-stackneuralbank-stack0.1.02 of 4See more

neuralbank-stack neuralbank-stack 0.1.0

2 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/neuralbank-backend:latesta53899fcfc01
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3
quay.io/maximilianopizarro/neuralbank-frontend:latest5f4572ef6d6f
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3

Open the chart page →

5,191
neurofaceneurofaceVerified publisher1.4.23 of 3See more

neuroface neuroface 1.4.2

3 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
openvino/model_server:2025.2.11e7cd1d70cc1
python3.12@3.12.3-1ubuntu0.7
no fix listed
quay.io/maximilianopizarro/neuroface-backend:v1.4.13194d46df0f9
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
quay.io/maximilianopizarro/neuroface-frontend:v1.4.1841b70cd1424
python3.9@3.9.25-2.el9_7
0:3.9.25-7.el9_8.3

Open the chart page →

7,310
nexus-tasksnexus-tasks2.0.01 of 5See more

nexus-tasks nexus-tasks 2.0.0

1 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/ashvinbambhaniya/nexus-tasks-frontend:2.0.0fcbab3a24880
python3@3.12.13-r0
3.12.14-r0

Open the chart page →

3,798
nfl-walletnfl-walletVerified publisher0.1.31 of 4See more

nfl-wallet nfl-wallet 0.1.3

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
quay.io/maximilianopizarro/nfl-wallet-webapp:1.0.13fead5702be7
python3@3.6.8-74.el8_10
0:3.6.8-78.el8_10

Open the chart page →

13,041
node-appnode-app-lili1.0.01 of 1See more

node-app node-app-lili 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
laly9999/node-app:1dd0e503913e1
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

10,218
node-debug-dashboardnode-debug-dashboardVerified publisher0.3.21 of 1See more

node-debug-dashboard node-debug-dashboard 0.3.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/samr037/node-debug-dashboard:0.3.0c79b2e64a211
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

6,854
firehose-corenodeifyVerified publisher1.2.61 of 2See more

firehose-core nodeify 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-core:v1.12.391fca773a63f
python3.12@3.12.3-1ubuntu0.9
no fix listed

Open the chart page →

6,455
firehose-ethereumnodeifyVerified publisher1.7.11 of 2See more

firehose-ethereum nodeify 1.7.1

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/go-ethereum:geth-v1.16.9-fh3.08e3cb38953a3
python3.12@3.12.3-1ubuntu0.10
no fix listed

Open the chart page →

5,565
substreams-tier-2nodeifyVerified publisher1.1.31 of 1See more

substreams-tier-2 nodeify 1.1.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/streamingfast/firehose-ethereum:v2.14.3bf816072380e
python3.12@3.12.3-1ubuntu0.9
no fix listed

Open the chart page →

4,674
nominatimnominatim-chart1.3.01 of 3See more

nominatim nominatim-chart 1.3.0

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
mediagis/nominatim:3.7c15e941485ef
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed

Open the chart page →

22,658
notes-admin-front-helm-chartnotesprojectchart0.1.01 of 1See more

notes-admin-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
vlebediantsev/notes-admin-front:latest007c6670ff48
python3.11@3.11.2-6
no fix listed

Open the chart page →

15,132
notes-project-fromt-helm-chartnotesprojectchart0.1.01 of 1See more

notes-project-fromt-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
vlebediantsev/notes-project-front:latest945675fd2636
python3.11@3.11.2-6
no fix listed

Open the chart page →

15,206
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
python3.11@3.11.2-6
no fix listed

Open the chart page →

15,187
zookeeper-helm-chartnotesprojectchart0.1.01 of 1See more

zookeeper-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
python2.7@2.7.6-8
python3.4@3.4.0-2ubuntu1
no fix listed
no fix listed

Open the chart page →

41,427

Container images carrying it

914 by charts deploying them

A fixed version is listed for 9 of the 18 affected packages.

Container imageDigestPackageFixed inUsed by
confluentinc/cp-kafka:7.6.683dbca3efd2a
python3@3.6.8-69.el8_10
0:3.6.8-78.el8_10
1
confluentinc/cp-kafka:7.8.0-3-ubi8adc392d28a1e
python3@3.6.8-69.el8_10
0:3.6.8-78.el8_10
1
confluentinc/cp-kafka:7.4.4c0224a1adf7a
python3@3.6.8-56.el8_9
0:3.6.8-78.el8_10
1
confluentinc/cp-kafka:7.5.1dc9b972db002
python3@3.6.8-51.el8_8.1
0:3.6.8-78.el8_10
1
confluentinc/cp-kafka-connect:6.1.04bc70a83ca6f
python3@3.6.8-31.el8
0:3.6.8-78.el8_10
1
confluentinc/cp-kafka-rest:6.1.0b0b7aa26254a
python3@3.6.8-31.el8
0:3.6.8-78.el8_10
1
confluentinc/cp-ksqldb-server:7.6.08ec46c27982f
python3@3.6.8-56.el8_9.3
0:3.6.8-78.el8_10
1
confluentinc/cp-ksqldb-server:6.1.0ee403d5b9090
python3@3.6.8-31.el8
0:3.6.8-78.el8_10
1
confluentinc/cp-schema-registry:6.1.0b651d4b6185a
python3@3.6.8-31.el8
0:3.6.8-78.el8_10
1
confluentinc/cp-schema-registry:latestf0cfd047a839
python3.9@3.9.25-7.el9_8.2
0:3.9.25-7.el9_8.3
1
confluentinc/cp-zookeeper:7.5.10bec03c1f3ce
python3@3.6.8-51.el8_8.1
0:3.6.8-78.el8_10
1
confluentinc/cp-zookeeper:7.8.0-3-ubi85ca5f3269814
python3@3.6.8-69.el8_10
0:3.6.8-78.el8_10
1
confluentinc/cp-zookeeper:6.1.078c190f4472c
python3@3.6.8-31.el8
0:3.6.8-78.el8_10
1
copyparty/ac:1.19.200a0a8605062c
python3@3.12.12-r0
3.12.14-r0
1
countly/countly-server:25.05.4e3c238248f99
python2.7@2.7.18-1~20.04.4
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed
no fix listed
1
ctron/hawkbit-operator:0.1.48fdea8f76499
python3@3.6.8-23.el8
0:3.6.8-78.el8_10
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u5
1
cznic/knot-resolver:v6.4.2fe71c5214fdc
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5
1
danialnabiyan1382/lsdisk:v2.0.8f96a7ebf1f42
python3.11@3.11.2-6+deb12u6
no fix listed
1
dariomader/twampy:v0.0.2d2f4a8c5e690
python-3.12@3.12.0-r1
3.12.13-r10
1
daskdev/dask-notebook:1.1.0052630f5ca04
python3.6@3.6.7-1~18.04
no fix listed
1
datamate/seafile-professional:11.0.202dd66b722464
python3.10@3.10.12-1~22.04.11
no fix listed
1
deconzcommunity/deconz:2.29.2062de2362641
python3.11@3.11.2-6+deb12u5
no fix listed
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
python3.13@3.13.5-2
3.13.5-2+deb13u5
1
dellemc/csm-application-mobility-controller:v0.1.0148ada9060a9
python3@3.6.8-47.el8_6
0:3.6.8-78.el8_10
1
digitalist/matomo:5.12.0bc4aeeaea769
python3@3.14.5-r0
3.14.7-r0
1
docuseal/docuseal:2.4.17493fd7f6728
python3@3.12.12-r0
3.12.14-r0
1
dongjiang1989/lxcfs:v6.0.34bf9ae391948
python3.8@3.8.10-0ubuntu1~20.04.18
no fix listed
1
dpage/pgadmin4:9.252cb72a9e3da
python3@3.12.9-r0
3.12.14-r0
1
dragonflyoss/client:v1.5.4a1b52779c4dd
python3.11@3.11.2-6+deb12u8
no fix listed
1
dragonflyoss/client:v0.1.82edf3e921f4e0
python3.11@3.11.2-6
no fix listed
1
drumsergio/genieacs:1.2.16.028244054e1bf
python3.11@3.11.2-6+deb12u6
no fix listed
1
dserio83/velero-api:0.3.16b3d9115fee2
python3.11@3.11.2-6+deb12u6
no fix listed
1
eclipseaerios/iota-messages-api:lateste7f5ba0bc64d
python3.13@3.13.5-2
3.13.5-2+deb13u5
1
eftechcombr/glpi:php-fpm-12.0.0-rc1f3d0ed01709e
python3@3.12.12-r0
3.12.14-r0
1
elastictranscoder/transcoder:627e21dcb4a0327029e6
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
1
elastictranscoder/transcoder-handler:627e21dc5b75d19e2733
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
1
elautoestopista/aeneabot:4.2.1125ba620d528
python3@3.12.12-r0
3.12.14-r0
1
electriccoinco/lightwalletd:v0.5.42ae3a551e111
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5
1
esphome/esphome:2024.3.09ab8cc88b28c
python3.11@3.11.2-6
no fix listed
1
esphome/esphome:2024.12.2b2c6322700ac
python3.11@3.11.2-6+deb12u4
no fix listed
1
esphome/esphome:2025.3.0def8b6e4f517
python3.11@3.11.2-6+deb12u5
no fix listed
1
ethereumex/eth-stats-dashboard:v0.0.1a7603aa8df4c
python2.7@2.7.12-1ubuntu0~16.04.2
no fix listed
1
ethpandaops/assertoor:latest1efa2fba6711
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u5
1
extrim/perlite:1.5.99cb7eb5598b6
python3@3.12.9-r0
3.12.14-r0
1
felipecs8/app-db-connection-test:v129e06c9c6385
python3.11@3.11.2-6+deb12u4
no fix listed
1
firefart/requesttracker:5.0.40d6249906d8c
python3.11@3.11.2-6
no fix listed
1
fiware/biz-ecosystem-charging-backend:11.7.029456835bb2c
python3.8@3.8.10-0ubuntu1~20.04.18
no fix listed
1
fiware/biz-ecosystem-logic-proxy:11.20.3d551a13e8278
python3.11@3.11.2-6+deb12u6
no fix listed
1
fiware/mintaka:0.7.092a3c5cf43c0
python3@3.6.8-45.el8
0:3.6.8-78.el8_10
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.