StackRadar

CVE-2026-12318

High

Advisory

Published 16 Jun 2026In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.3
base score, highest
EPSS
0.003
18th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
177
of 17,781 indexed, latest versions
Container images
155
deployed by those charts
Fix available
1 of 2
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 177 of 17,781 indexed charts deploy, on 155 images.

Affected packageAffected versionsFixed inImages
nssdeb2:3.17.1-0ubuntu0.14.04.1, 2:3.28.4-0ubuntu0.14.04.3, 2:3.28.4-0ubuntu0.16.04.3, 2:3.28.4-0ubuntu0.16.04.4+30 more2:3.87.1-1+deb12u3, 2:3.98-0ubuntu0.22.04.4, 2:3.98-1ubuntu0.2, 2:3.110-1+deb13u3+2 more155
mozjs68deb68.6.0-1ubuntu1no fix listed1
OSV records
DEBIAN-CVE-2026-12318UBUNTU-CVE-2026-12318
Also known as
USN-8481-1

Charts affected

177 by stars
ChartLatestAffected imagesRadar Score
uptime-kumauptime-kumaVerified publisher4.2.01 of 1See more

uptime-kuma uptime-kuma 4.2.0

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.0a8610b3b4c38
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u3

Open the chart page →

30,159
falcofalcosecurity9.1.01 of 3See more

falco falcosecurity 9.1.0

1 of the 3 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
falcosecurity/falco-driver-loader:0.44.17df783d5269a
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u3

Open the chart page →

5,227
zabbixzabbix-communityVerified publisher7.1.01 of 5See more

zabbix zabbix-community 7.1.0

1 of the 5 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-7.0.23915b3183e054
nss@2:3.98-1build1
2:3.98-1ubuntu0.2

Open the chart page →

13,664
openldap-stack-hahelm-openldapVerified publisher4.3.31 of 5See more

openldap-stack-ha helm-openldap 4.3.3

1 of the 5 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
jpgouin/openldap:2.6.9-fixbfdd0088c776
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u3

Open the chart page →

5,919
milvusmilvus4.0.311 of 5See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
apachepulsar/pulsar:2.8.2d538416d5afe
nss@2:3.49.1-1ubuntu1.6
no fix listed

Open the chart page →

32,259
wazuhwazuh-helm-morgovedVerified publisher2.0.71 of 5See more

wazuh wazuh-helm-morgoved 2.0.7

1 of the 5 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
kinseii/wazuh-agent:4.14.17160eb143728
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u3

Open the chart page →

11,384
zabbixcetic3.1.31 of 5See more

zabbix cetic 3.1.3

1 of the 5 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
zabbix/zabbix-web-service:ubuntu-6.0.8ee4baa872280
nss@2:3.68.2-0ubuntu1.1
2:3.98-0ubuntu0.22.04.4

Open the chart page →

33,725
openclawopenclaw-helmVerified publisher1.5.401 of 2See more

openclaw openclaw-helm 1.5.40

1 of the 2 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
chromedp/headless-shell:148.0.7778.97313ed7255ae1
nss@2:3.110-1+deb13u1
2:3.110-1+deb13u3

Open the chart page →

5,660
hdfsgaffer2.2.11 of 2See more

hdfs gaffer 2.2.1

1 of the 2 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
gchq/hdfs:3.3.35ec58edbb2db
nss@2:3.98-1build1
2:3.98-1ubuntu0.2

Open the chart page →

5,357
nautobotnautobotOfficialVerified publisher3.1.21 of 1See more

nautobot nautobot 3.1.2

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
networktocode/nautobot:3.0-py3.13ed484336b1ad
nss@2:3.110-1+deb13u1
2:3.110-1+deb13u3

Open the chart page →

4,332
puppetserverpuppetserver9.5.22 of 5See more

puppetserver puppetserver 9.5.2

2 of the 5 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
ghcr.io/voxpupuli/container-puppetdb:7.18.0-v1.5.0a56dfe91f5b1
nss@2:3.98-0ubuntu0.22.04.2
2:3.98-0ubuntu0.22.04.4
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
nss@2:3.98-0ubuntu0.22.04.2
2:3.98-0ubuntu0.22.04.4

Open the chart page →

14,184
selenium3selenium31.2.41 of 1See more

selenium3 selenium3 1.2.4

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
selenium/hub:3.141.5902f251d48d5f
nss@2:3.49.1-1ubuntu1.5
no fix listed

Open the chart page →

11,782
unifiunifiVerified publisher1.16.01 of 1See more

unifi unifi 1.16.0

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
jacobalberty/unifi:v10.0.162896c0ab82d33
nss@2:3.98-0ubuntu0.20.04.2
no fix listed

Open the chart page →

7,268
wazuh-agentavistoVerified publisher4.12.21 of 1See more

wazuh-agent avisto 4.12.2

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
ghcr.io/avistotelecom/docker-wazuh-agent:4.12.08766ba08bf1a
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u3

Open the chart page →

6,457
hadoopbigdata-chartsVerified publisher1.0.11 of 2See more

hadoop bigdata-charts 1.0.1

1 of the 2 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
5200710/hadoop:3.2.3-java8092d3088a5fb
nss@2:3.49.1-1ubuntu1.9
no fix listed

Open the chart page →

12,111
seafiledatamateVerified publisher0.6.01 of 6See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
datamate/seafile-professional:11.0.202dd66b722464
nss@2:3.98-0ubuntu0.22.04.2
2:3.98-0ubuntu0.22.04.4

Open the chart page →

27,267
mattermostphntom3.24.01 of 2See more

mattermost phntom 3.24.0

1 of the 2 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
nss@2:3.68.2-0ubuntu1.2
2:3.98-0ubuntu0.22.04.4

Open the chart page →

8,722
unifi-controllerqonstruktVerified publisher2.6.11 of 1See more

unifi-controller qonstrukt 2.6.1

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
linuxserver/unifi-controller:8.0.240ae315a3a456
nss@2:3.49.1-1ubuntu1.9
no fix listed

Open the chart page →

10,469
grafana-pdf-exporterwiremindVerified publisher2.1.11 of 1See more

grafana-pdf-exporter wiremind 2.1.1

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
nss@2:3.87.1-1
2:3.87.1-1+deb12u3

Open the chart page →

9,746
thingsboardcetic0.1.21 of 2See more

thingsboard cetic 0.1.2

1 of the 2 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
thingsboard/tb-postgres:latest2d17e4e36edc
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u3

Open the chart page →

5,235
calibregeek-cookbookVerified publisher5.4.21 of 1See more

calibre geek-cookbook 5.4.2

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
linuxserver/calibre:version-v5.21.0a847b5b2d860
nss@2:3.35-2ubuntu2.12
no fix listed

Open the chart page →

22,773
network-ups-toolsgeek-cookbookVerified publisher6.4.21 of 1See more

network-ups-tools geek-cookbook 6.4.2

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
ghcr.io/k8s-at-home/network-ups-tools:v2.7.4-2479-g86a32237cbd5d4cc1245
nss@2:3.49.1-1ubuntu1.5
no fix listed

Open the chart page →

13,950
unifigeek-cookbookVerified publisher5.1.31 of 1See more

unifi geek-cookbook 5.1.3

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
jacobalberty/unifi:v7.4.162b3edc809a3ff
nss@2:3.35-2ubuntu2.16
no fix listed

Open the chart page →

11,839
oesopsmxVerified publisher4.0.321 of 25See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
nss@2:3.28.4-0ubuntu0.16.04.6
no fix listed

Open the chart page →

107,811
nominatimrobjuz6.4.11 of 4See more

nominatim robjuz 6.4.1

1 of the 4 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
mediagis/nominatim:5.3.27923a8e67197
nss@2:3.98-1ubuntu0.1
2:3.98-1ubuntu0.2

Open the chart page →

8,690
browserless-chromesagikazarmarkVerified publisher0.0.51 of 1See more

browserless-chrome sagikazarmark 0.0.5

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
browserless/chrome:1.48.0-chrome-stablec81ae5585b47
nss@2:3.49.1-1ubuntu1.5
no fix listed

Open the chart page →

24,488
paperless-ngxadnoctemVerified publisher0.4.21 of 5See more

paperless-ngx adnoctem 0.4.2

1 of the 5 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
apache/tika:2.9.0.092d055a84e9e
nss@2:3.68.2-0ubuntu1.2
2:3.98-0ubuntu0.22.04.4

Open the chart page →

19,691
paperless-ngxalexmorbo-paperless-ngxVerified publisher0.2.01 of 2See more

paperless-ngx alexmorbo-paperless-ngx 0.2.0

1 of the 2 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.20.5665f2f5cc548
nss@2:3.110-1
2:3.110-1+deb13u3

Open the chart page →

12,037
anteonanteonVerified publisher2.6.41 of 13See more

anteon anteon 2.6.4

1 of the 13 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
ddosify/selfhosted_backend:3.2.93c11e3182652
nss@2:3.87.1-1
2:3.87.1-1+deb12u3

Open the chart page →

22,202
dltbrokerassist-iot-distributed-broker0.2.02 of 9See more

dltbroker assist-iot-distributed-broker 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
nss@2:3.28.4-0ubuntu0.16.04.3
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
nss@2:3.28.4-0ubuntu0.16.04.5
no fix listed

Open the chart page →

77,706
dltloggingassist-iot-logging-auditing0.2.02 of 9See more

dltlogging assist-iot-logging-auditing 0.2.0

2 of the 9 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
hyperledger/fabric-ca-tools:latest4ce6f43ded2e
nss@2:3.28.4-0ubuntu0.16.04.3
no fix listed
hyperledger/fabric-couchdb:0.4.15f6c724592abf
nss@2:3.28.4-0ubuntu0.16.04.5
no fix listed

Open the chart page →

77,687
tensorflow-notebookcloudnativeapp0.1.21 of 1See more

tensorflow-notebook cloudnativeapp 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
tensorflow/tensorflow:1.6.0-devel1e3172090703
nss@2:3.28.4-0ubuntu0.16.04.3
no fix listed

Open the chart page →

36,094
paperless-ngxcrystalnetVerified publisher0.2.221 of 3See more

paperless-ngx crystalnet 0.2.22

1 of the 3 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
ghcr.io/paperless-ngx/paperless-ngx:2.13.10642357c5dbd
nss@2:3.87.1-1
2:3.87.1-1+deb12u3

Open the chart page →

13,761
dbrepodbrepo1.13.31 of 25See more

dbrepo dbrepo 1.13.3

1 of the 25 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
bitnamilegacy/openldap:2.6.8-debian-12-r16e412c178ef9
nss@2:3.87.1-1
2:3.87.1-1+deb12u3

Open the chart page →

52,635
dragonfly-stackdragonflyVerified publisher0.1.21 of 7See more

dragonfly-stack dragonfly 0.1.2

1 of the 7 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
dragonflyoss/client:v0.1.82edf3e921f4e0
nss@2:3.87.1-1
2:3.87.1-1+deb12u3

Open the chart page →

18,376
games-on-whalesgeek-cookbookVerified publisher1.8.21 of 7See more

games-on-whales geek-cookbook 1.8.2

1 of the 7 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
ghcr.io/games-on-whales/retroarch:1.0.0103fbcec2314
nss@2:3.49.1-1ubuntu1.5
no fix listed

Open the chart page →

35,305
omada-controllergeek-cookbookVerified publisher4.4.21 of 1See more

omada-controller geek-cookbook 4.4.2

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
mbentley/omada-controller:4.3f4e682274bed
nss@2:3.35-2ubuntu2.16
no fix listed

Open the chart page →

11,553
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
library/kibana:7.17.3e2e2031c15be
nss@2:3.49.1-1ubuntu1.6
no fix listed

Open the chart page →

17,284
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u3

Open the chart page →

35,050
drillmagasin-drill0.9.01 of 3See more

drill magasin-drill 0.9.0

1 of the 3 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
merlos/zookeeper:3.9.3a38fc7e09ed7
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u3

Open the chart page →

5,734
photoprismmmontesVerified publisher0.14.01 of 1See more

photoprism mmontes 0.14.0

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
photoprism/photoprism:251130db16ee6b1ba3
nss@2:3.114-1
2:3.114-1ubuntu0.2

Open the chart page →

11,103
prowlerprowler-appVerified publisher0.0.91 of 5See more

prowler prowler-app 0.0.9

1 of the 5 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
prowlercloud/prowler-api:5.31.14f252d579be2
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u3

Open the chart page →

8,158
napcatredish101Verified publisher0.1.31 of 1See more

napcat redish101 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
mlikiowa/napcat-docker:latest1336a777f9a4
nss@2:3.98-0ubuntu0.22.04.2
2:3.98-0ubuntu0.22.04.4

Open the chart page →

7,405
fluent-bitromanow-helm-chartsVerified publisher1.7.31 of 1See more

fluent-bit romanow-helm-charts 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
fluent/fluent-bit:4.0-debuge76397ef3983
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u3

Open the chart page →

7,740
kibanaromanow-helm-chartsVerified publisher1.7.11 of 1See more

kibana romanow-helm-charts 1.7.1

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
library/kibana:7.17.8c5781ba340ef
nss@2:3.49.1-1ubuntu1.8
no fix listed

Open the chart page →

6,879
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u3

Open the chart page →

38,107
speckle-serverspeckleVerified publisher2.26.31 of 4See more

speckle-server speckle 2.26.3

1 of the 4 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
speckle/speckle-preview-service:2.26.3092384dba45d
nss@2:3.87.1-1+deb12u1
2:3.87.1-1+deb12u3

Open the chart page →

10,380
starwhalestarwhaleVerified publisher0.6.151 of 4See more

starwhale starwhale 0.6.15

1 of the 4 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
ghcr.io/star-whale/server:0.6.158368359c8dd0
nss@2:3.49.1-1ubuntu1.8
no fix listed

Open the chart page →

13,486
wavefront-adapter-for-istiowavefront0.1.41 of 2See more

wavefront-adapter-for-istio wavefront 0.1.4

1 of the 2 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
wavefronthq/proxy:9.2d1064d28f6eb
nss@2:3.35-2ubuntu2.11
no fix listed

Open the chart page →

15,970
kafka-devwikimedia0.2.01 of 1See more

kafka-dev wikimedia 0.2.0

1 of the 1 container images this version deploys carry CVE-2026-12318.

Container imageDigestPackageFixed in
wurstmeister/zookeeper:latest7a7fd44a7210
nss@2:3.17.1-0ubuntu0.14.04.1
no fix listed

Open the chart page →

41,427

Container images carrying it

155 by charts deploying them

A fixed version is listed for 1 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/voxpupuli/container-puppetserver:7.17.0-v1.5.0916746209ac5
nss@2:3.98-0ubuntu0.22.04.2
2:3.98-0ubuntu0.22.04.4
1
ghcr.io/voxpupuli/puppetserver:8.7.0-main63873f3f698e
nss@2:3.98-0ubuntu0.22.04.2
2:3.98-0ubuntu0.22.04.4
1
ghcr.io/wiremind/grafana-pdf-exporter:v1.7dbaa8527bf4c
nss@2:3.87.1-1
2:3.87.1-1+deb12u3
1
ghcr.io/yurymkomarov/docker/kubernetes-kiosk-chromium:0.1.27bff29dcec72
nss@2:3.87.1-1+deb12u2
2:3.87.1-1+deb12u3
1
quay.io/opsmxpublic/spin-sample-pipeline:v1.0.1c6a934439421
nss@2:3.28.4-0ubuntu0.16.04.6
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.