StackRadar

CVE-2026-11940

High

Advisory

Published 23 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.8
base score, highest
EPSS
0.007
53rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
888
of 17,787 indexed, latest versions
Container images
919
deployed by those charts
Fix available
9 of 18
affected packages

tarfile extraction filter bypass allows escaping the destination directory

Carried by container images the latest versions of 888 of 17,787 indexed charts deploy, on 919 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.0~rc1-1~22.04, 3.11.0~rc1-1~22.04.1, 3.11.2-6, 3.11.2-6+deb12u2+6 moreno fix listed181
python3.8deb3.8.5-1~20.04, 3.8.5-1~20.04.2, 3.8.5-1~20.04.3, 3.8.10-0ubuntu1~20.04+11 moreno fix listed100
python3.12deb3.12.3-1, 3.12.3-1ubuntu0.1, 3.12.3-1ubuntu0.2, 3.12.3-1ubuntu0.3+12 moreno fix listed89
python3.10deb3.10.4-3, 3.10.4-3ubuntu0.1, 3.10.6-1~22.04, 3.10.6-1~22.04.1+16 moreno fix listed80
python3apk3.11.12-r1, 3.12.8-r1, 3.12.9-r0, 3.12.10-r0+7 more3.12.14-r0, 3.14.7-r075
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.7-1ubuntu0.13.13.5-2+deb13u575
python2.7deb2.7.6-8, 2.7.6-8ubuntu0.4, 2.7.12-1ubuntu0~16.04.2, 2.7.12-1ubuntu0~16.04.3+12 moreno fix listed54
python3.6deb3.6.6-1~18.04, 3.6.7-1~18.04, 3.6.9-1~18.04, 3.6.9-1~18.04ubuntu1+7 moreno fix listed44
python3.5deb3.5.2-2ubuntu0~16.04.1, 3.5.2-2ubuntu0~16.04.4, 3.5.2-2ubuntu0~16.04.5, 3.5.2-2ubuntu0~16.04.9no fix listed25
python3.14deb3.14.4-1, 3.14.4-1ubuntu0.1, 3.14.4-1ubuntu0.2no fix listed9
python3.4deb3.4.0-2ubuntu1, 3.4.3-1ubuntu1~14.04.5, 3.4.3-1ubuntu1~14.04.6, 3.4.3-1ubuntu1~14.04.7no fix listed7
python-3.14apk3.14.2-r2, 3.14.4-r2, 3.14.6-r03.14.6-r36
pythonbitnami3.11.11-0, 3.12.8-0, 3.13.5-13.10.213
python-3.13apk3.13.7-r0, 3.13.10-r0, 3.13.12-r23.13.14-r23
python-3.12apk3.12.0-r1, 3.12.9-r13.12.13-r102
python3rpm3.6.8-15.1.el8, 3.6.8-23.el8, 3.6.8-24.el8_2, 3.6.8-24.el8_2.2+27 more0:3.6.8-78.el8_10, 0:3.6.8-78.el8_10.rocky.0136
python3.9rpm3.9.16-1.el9, 3.9.16-1.el9_2.1, 3.9.16-1.el9_2.2, 3.9.18-1.el9_3.1+16 more0:3.9.25-7.el9_8.361
python3.12rpm3.12.5-2.el9_5.2, 3.12.13-2.el10_2.1, 3.12.13-3.el8_10, 3.12.13-3.el9_8.10:3.12.14-1.el8_10, 0:3.12.14-1.el9_8, 0:3.12.14-1.el10_25
OSV records
ALPINE-CVE-2026-11940BIT-python-2026-11940CGA-2877-fmjf-8j5qCGA-cr9q-h4v8-hfgpCGA-qmm2-954x-xmxrDEBIAN-CVE-2026-11940RHSA-2026:54268RHSA-2026:56219RHSA-2026:58902RHSA-2026:58971RHSA-2026:59009RLSA-2026:54268RLSA-2026:56219RLSA-2026:58902UBUNTU-CVE-2026-11940
Also known as
BIT-libpython-2026-11940, BIT-python-min-2026-11940, CGA-5363-9r7r-rr55, CGA-p86c-g5pg-rvpw, CGA-w3m6-c9vj-wm85, PSF-2026-30, RHSA-2026:64806, RHSA-2026:64816

Charts affected

888 by stars
ChartLatestAffected imagesRadar Score
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.4.159bc7aa60fe7
python3.13@3.13.5-2
3.13.5-2+deb13u5

Open the chart page →

10,898
countlyhelmforgeVerified publisher1.2.61 of 3See more

countly helmforge 1.2.6

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
countly/countly-server:25.05.4e3c238248f99
python2.7@2.7.18-1~20.04.4
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed
no fix listed

Open the chart page →

18,923
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u5

Open the chart page →

29,852
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
middlewareeng/middleware:0.3.1747d880812f1
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

9,704
minecrafthelmforgeVerified publisher1.5.31 of 1See more

minecraft helmforge 1.5.3

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
itzg/minecraft-server:2026.9.04e29d14082d9
python3.12@3.12.3-1ubuntu0.16
no fix listed

Open the chart page →

4,702
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
netboxcommunity/netbox:v4.6.10-5.0.291b823a05cb5
python3.14@3.14.4-1ubuntu0.1
no fix listed

Open the chart page →

4,321
nextcloudhelmforgeVerified publisher1.0.01 of 3See more

nextcloud helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/nextcloud:34.0.4-apachede4ad9389386
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5

Open the chart page →

7,041
uptime-kumahelmforgeVerified publisher1.5.121 of 1See more

uptime-kuma helmforge 1.5.12

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.33e24e96c89ef
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

30,106
myapphelmingapp0.1.01 of 1See more

myapp helmingapp 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
muhammedgamal/fp23:latest74b4cd69b6fa
python3.11@3.11.2-6
no fix listed

Open the chart page →

11,441
openbashelm-openbasVerified publisher1.8.141 of 7See more

openbas helm-openbas 1.8.14

1 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
openbas/caldera-server:5.1.0a277796d9724
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

25,099
svacerhelm-svacer0.6.01 of 1See more

svacer helm-svacer 0.6.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ispras/svacer:11-2-042aa9fa9f189
python3.10@3.10.12-1~22.04.10
no fix listed

Open the chart page →

6,076
nominatimheywood8-helm-chartsVerified publisher3.10.81 of 3See more

nominatim heywood8-helm-charts 3.10.8

1 of the 3 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
mediagis/nominatim:4.2d0eae7b51374
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

14,350
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
python3.13@3.13.5-2+deb13u2
3.13.5-2+deb13u5

Open the chart page →

26,579
hammerspace-csihscsi1.2.81 of 6See more

hammerspace-csi hscsi 1.2.8

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
hammerspaceinc/csi-plugin:v1.2.8-rc2395bee4504fc
python3.9@3.9.21-2.el9_6.1
0:3.9.25-7.el9_8.3

Open the chart page →

4,440
httpbin2022httpbin2022Verified publisher0.1.11 of 1See more

httpbin2022 httpbin2022 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
mshanley80/httpbin2022:latest5b189a70c0fb
python3.8@3.8.10-0ubuntu1~20.04.6
no fix listed

Open the chart page →

8,732
eoloplanthttpd-eoloplant0.1.02 of 7See more

eoloplant httpd-eoloplant 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
library/rabbitmq:3.9-management8a279e9396a8
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

32,336
nexus3huangchengwu-helm-chart0.1.01 of 1See more

nexus3 huangchengwu-helm-chart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
sonatype/nexus3:3.53.04bd975493104
python3@3.6.8-48.el8_7.1
0:3.6.8-78.el8_10

Open the chart page →

4,462
hydrahydraVerified publisher0.9.51 of 2See more

hydra hydra 0.9.5

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

9,038
isolated-vmhydraVerified publisher0.9.41 of 1See more

isolated-vm hydra 0.9.4

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/smarter-project/hydra/isolated-vm:main4457b79b24cd
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

7,749
hyperglance-helmhyperglance-helmVerified publisher10.0.53 of 6See more

hyperglance-helm hyperglance-helm 10.0.5

3 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
hyperglance/init:wildfly467ad8491bc3
python3.10@3.10.12-1~22.04.15
no fix listed
hyperglance/init:postgres9fd5faf1fe80
python3.10@3.10.12-1~22.04.15
no fix listed
hyperglance/init:apacheb2f8c6d52623
python3.10@3.10.12-1~22.04.15
no fix listed

Open the chart page →

11,171
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

5,770
ibm-microclimateibm-charts0.1.01 of 8See more

ibm-microclimate ibm-charts 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ibmcom/microclimate-theia:lateste17bdccc5030
python2.7@2.7.12-1ubuntu0~16.04.2
no fix listed

Open the chart page →

57,728
ibm-object-storage-pluginibm-charts1.1.52 of 2See more

ibm-object-storage-plugin ibm-charts 1.1.5

2 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
python3@3.6.8-23.el8
0:3.6.8-78.el8_10
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
python3@3.6.8-23.el8
0:3.6.8-78.el8_10

Open the chart page →

12,460
ibm-skydive-devibm-charts1.1.21 of 1See more

ibm-skydive-dev ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ibmcom/skydive:0.22.0395e60cc6e3d
python2.7@2.7.15~rc1-1ubuntu0.1
no fix listed

Open the chart page →

12,632
ibm-swift-sampleibm-charts1.1.21 of 1See more

ibm-swift-sample ibm-charts 1.1.2

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ibmcom/icp-swift-sample:latestb5d8c6714dbc
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed

Open the chart page →

25,184
ibm-ws-dyn-agent-devibm-charts1.0.01 of 1See more

ibm-ws-dyn-agent-dev ibm-charts 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed

Open the chart page →

19,309
browserlessicoretechVerified publisher0.16.61 of 1See more

browserless icoretech 0.16.6

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/browserless/chromium:v2.56.7b1ba7b054af2
python3.12@3.12.3-1ubuntu0.17
no fix listed

Open the chart page →

2,002
iframelyiframelyVerified publisher2.3.51 of 1See more

iframely iframely 2.3.5

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
registry.gitlab.com/xrow-public/helm-iframely/iframely:2.3.5fcf07d5ff7e2
python3.9@3.9.25-3.el9_7.2
0:3.9.25-7.el9_8.3

Open the chart page →

3,181
eoloserverihuertas2021-vmartinp2021-helm0.1.02 of 7See more

eoloserver ihuertas2021-vmartinp2021-helm 0.1.0

2 of the 7 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
codeurjc/server:v1.0310bea5b1ee7
python3@3.6.8-48.el8_7
0:3.6.8-78.el8_10
library/rabbitmq:3.9-management8a279e9396a8
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

27,812
bluesky-pdsijmacd1.0.01 of 2See more

bluesky-pds ijmacd 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
arunvelsriram/utils:latest655ad18fd8d6
python3.12@3.12.3-1ubuntu0.7
no fix listed

Open the chart page →

9,032
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
jupyterhub/k8s-hub:1.2.0e4770285aaf7
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed

Open the chart page →

37,844
ilum-unity-catalogilumVerified publisher0.1.01 of 4See more

ilum-unity-catalog ilum 0.1.0

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
unitycatalog/unitycatalog-ui:main-aadc6fc3a688197b218
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

11,838
plausible-analyticsimioVerified publisher0.4.21 of 5See more

plausible-analytics imio 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/plausible/community-edition:v3.0.114c1afde21d6
python3@3.12.10-r0
3.12.14-r0

Open the chart page →

10,152
kore-boardimprowisedVerified publisher0.5.81 of 4See more

kore-board improwised 0.5.8

1 of the 4 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/kore3lab/kore-board.terminal:v0.5.5f52e66eff50b
python3.6@3.6.9-1~18.04ubuntu1.9
no fix listed

Open the chart page →

16,226
cloudshellinseefrlab4.3.01 of 2See more

cloudshell inseefrlab 4.3.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
inseefrlab/shelly:cloudshell31f04ca7436b
python3.10@3.10.12-1~22.04.3
no fix listed

Open the chart page →

10,542
gmaintelVerified publisher0.1.01 of 1See more

gma intel 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed

Open the chart page →

7,697
itm-servicesintelVerified publisher2.0.01 of 8See more

itm-services intel 2.0.0

1 of the 8 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
python3.8@3.8.10-0ubuntu1~20.04.4
no fix listed

Open the chart page →

18,137
map5gintelVerified publisher1.0.01 of 1See more

map5g intel 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
smartedge/generic-multi-access-network-virtualization:1.04cd63c22ce36
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed

Open the chart page →

7,697
multimodal-data-visualizationintelVerified publisher3.0.01 of 2See more

multimodal-data-visualization intel 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
intel/multimodal-data-visualization-streaming:3.01a89327e499b
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed

Open the chart page →

11,123
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
python3.11@3.11.2-6
no fix listed

Open the chart page →

16,558
inventreeinventreeOfficialVerified publisher0.4.281 of 2See more

inventree inventree 0.4.28

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
inventree/inventree:1.5.4a946ec09da3e
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5

Open the chart page →

5,757
daveit-at-mOfficialVerified publisher0.2.157 of 11See more

dave it-at-m 0.2.15

7 of the 11 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/dave-admin-portal/dave-adminportal:10.0.0cbff8141302f
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
ghcr.io/it-at-m/dave-backend/dave-backend:10.0.0f66413e62afc
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
ghcr.io/it-at-m/dave-document-storage/dave-document-storage:10.0.09c7fc07330c9
python3.9@3.9.23-2.el9
0:3.9.25-7.el9_8.3
ghcr.io/it-at-m/dave-eai/dave-eai:10.0.0fd93e0d125b3
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
ghcr.io/it-at-m/dave-frontend/dave-frontend:10.0.0a49fdb8d6f1b
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
ghcr.io/it-at-m/dave-geodata-eai/dave-geodata-eai:10.0.06a3fe3136856
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3
ghcr.io/it-at-m/dave-selfservice-portal/dave-selfserviceportal:10.0.0d352df1b94b6
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3

Open the chart page →

15,245
kf-app-eaiit-at-mOfficialVerified publisher0.1.71 of 1See more

kf-app-eai it-at-m 0.1.7

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/kf-app-eai:1.0.65de339b3d537
python3.9@3.9.21-2.el9_6.2
0:3.9.25-7.el9_8.3

Open the chart page →

1,965
wjh-rechnerit-at-mOfficialVerified publisher1.0.41 of 1See more

wjh-rechner it-at-m 1.0.4

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/wjh-rechner:1.0.0bc70cdb5a01a
python3.9@3.9.18-1.el9_3.1
0:3.9.25-7.el9_8.3

Open the chart page →

3,487
zammad-ldap-syncit-at-mVerified publisher0.6.51 of 1See more

zammad-ldap-sync it-at-m 0.6.5

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/it-at-m/zammad-ldap-sync:dev10de22c8cbce
python3.9@3.9.25-7.el9_8
0:3.9.25-7.el9_8.3

Open the chart page →

1,364
tekton-git-listeneritsmethemojoVerified publisher0.1.11 of 1See more

tekton-git-listener itsmethemojo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/buildpack-deps:scmac978b783657
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5

Open the chart page →

2,178
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
library/cassandra:4.0093ee8ee5eb2
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

6,037
opencloudjacobcolvinVerified publisher0.2.31 of 13See more

opencloud jacobcolvin 0.2.3

1 of the 13 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
apache/tika:2.9.2.1-fullae0b86d3c4d0
python3.12@3.12.3-1
no fix listed

Open the chart page →

45,392
deconzjanip81-helm-chartsVerified publisher0.1.11 of 1See more

deconz janip81-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.29.2062de2362641
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

10,816
jasperjasperVerified publisher1.0.2031 of 2See more

jasper jasper 1.0.203

1 of the 2 container images this version deploys carry CVE-2026-11940.

Container imageDigestPackageFixed in
ghcr.io/cjmalloy/jasper:v1.3.282726a947bb65b
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

9,148

Container images carrying it

919 by charts deploying them

A fixed version is listed for 9 of the 18 affected packages.

Container imageDigestPackageFixed inUsed by
hyperledger/fabric-couchdb:0.4.10c65891b6c237
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
1
ibmcom/ibmcloud-object-storage-driver:1.8.16c796a4c693b4
python3@3.6.8-23.el8
0:3.6.8-78.el8_10
1
ibmcom/ibmcloud-object-storage-plugin:1.8.169c73804b37a3
python3@3.6.8-23.el8
0:3.6.8-78.el8_10
1
ibmcom/ibm-enterprise-mongodb-ppc64le:4.4d28bf361327a
python3@3.6.8-31.el8
0:3.6.8-78.el8_10
1
ibmcom/ibm-workload-scheduler-agent-dynamic-dev:9.4.0.047e4dc1e27cdf
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
1
ibmcom/icp-swift-sample:latestb5d8c6714dbc
python2.7@2.7.12-1ubuntu0~16.04.3
python3.5@3.5.2-2ubuntu0~16.04.4
no fix listed
no fix listed
1
ibmcom/microclimate-theia:lateste17bdccc5030
python2.7@2.7.12-1ubuntu0~16.04.2
no fix listed
1
ibmcom/skydive:0.22.0395e60cc6e3d
python2.7@2.7.15~rc1-1ubuntu0.1
no fix listed
1
ildarmukhametzyanov/priceapp:0.115d23720a3ee
python3.11@3.11.2-6
no fix listed
1
inseefrlab/shelly:cloudshell31f04ca7436b
python3.10@3.10.12-1~22.04.3
no fix listed
1
instill/artifact-backend:b28766ac4a393e601ed
python3.13@3.13.5-2
3.13.5-2+deb13u5
1
instill/mgmt-backend:d0933d4ebe12f77a3f9
python3.13@3.13.5-2
3.13.5-2+deb13u5
1
instill/model-backend:611f0f2e980125e5ba5
python3.13@3.13.5-2
3.13.5-2+deb13u5
1
intel/dlstreamer-pipeline-server:2022.1.1-ubuntu20aa8f5483a2ef
python3.8@3.8.10-0ubuntu1~20.04.4
no fix listed
1
intel/multimodal-data-visualization-streaming:3.01a89327e499b
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
python3.11@3.11.2-6
no fix listed
1
inventree/inventree:1.5.4a946ec09da3e
python3.13@3.13.5-2+deb13u4
3.13.5-2+deb13u5
1
iofog/router:2.0.17260cf861479
python2.7@2.7.17-1~18.04ubuntu1.1
no fix listed
1
iomesh/csi-driver:v2.8.01a151f602451
python3.10@3.10.12-1~22.04.4
no fix listed
1
iomesh/csi-driver:v2.7.25d3f9bf9240b
python3.10@3.10.12-1~22.04.3
no fix listed
1
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
python3.8@3.8.10-0ubuntu1~20.04.2
no fix listed
1
ispras/svacer:11-2-042aa9fa9f189
python3.10@3.10.12-1~22.04.10
no fix listed
1
istio/install-cni:1.10.32232f365aed6
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
1
istio/node-agent-k8s:1.2.9268ab879ea51
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
1
istio/operator:1.10.3655eefa11c84
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
1
istio/pilot:1.10.0294ca55bd1cc
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
1
istio/pilot:1.2.9c09319753454
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
1
istio/pilot:1.10.3e7e110a421c2
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
1
istio/proxyv2:1.2.90c78be035e98
python3.5@3.5.2-2ubuntu0~16.04.5
no fix listed
1
istio/proxyv2:1.9.687a9db561d2e
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
1
istio/proxyv2:1.10.088c6c693e67a
python3.6@3.6.9-1~18.04ubuntu1.4
no fix listed
1
itzg/bungeecord:latest1c59f9631f3b
python3.14@3.14.4-1ubuntu0.1
no fix listed
1
itzg/minecraft-server:2026.9.04e29d14082d9
python3.12@3.12.3-1ubuntu0.16
no fix listed
1
itzg/minecraft-server:latest8672e335dbef
python3.12@3.12.3-1ubuntu0.16
no fix listed
1
jaedb/iris:latest048cfbf58d57
python3.11@3.11.2-6+deb12u5
no fix listed
1
jakowenko/double-take:1.6.0b858bac9e32a
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed
1
jeboehm/mailserver-web:5.0.929da13edf5aa8
python3@3.12.11-r0
3.12.14-r0
1
jedi132000/nextapp:latestdc2a81e92f23
python3.8@3.8.10-0ubuntu1~20.04.5
no fix listed
1
jmferrer/azure-devops-agent:latest030f68ec6998
python3.5@3.5.2-2ubuntu0~16.04.9
no fix listed
1
jordan/icinga2:latestf75025fe8ea8
python3.11@3.11.2-6+deb12u7
no fix listed
1
josh5/unmanic:0.2.64d49c4816260
python3.10@3.10.12-1~22.04.3
no fix listed
1
juicedata/juicefs-csi-driver:v0.32.595008ba63318
python3.11@3.11.2-6+deb12u8
no fix listed
1
jupyterhub/jupyterhub:5.4.63974ba945e65
python3.12@3.12.3-1ubuntu0.13
no fix listed
1
jupyterhub/k8s-hub:0.11.1b6b4a1a34bf0
python3.8@3.8.5-1~20.04
no fix listed
1
jupyterhub/k8s-hub:1.2.0e4770285aaf7
python3.8@3.8.10-0ubuntu1~20.04.1
no fix listed
1
kenchrcum/fluxcd-helm-upgrader:0.7.7c326e28a8f5f
python3@3.12.13-r0
3.12.14-r0
1
kenchrcum/grafana-dashboard-converter:0.3.105310497aea3f
python3@3.12.12-r0
3.12.14-r0
1
kennethreitz/httpbin:latest599fe5e50731
python3.6@3.6.6-1~18.04
no fix listed
1
kfirfer/phppgadmin:7.13.0-22efb4a5d74a3
python3.8@3.8.10-0ubuntu1~20.04.6
no fix listed
1
kinseii/wazuh-agent:4.14.17160eb143728
python3.11@3.11.2-6+deb12u6
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.