StackRadar

CVE-2026-12345

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
122
of 17,957 indexed, latest versions
Container images
123
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 122 of 17,957 indexed charts deploy, on 123 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.2-6, 3.11.2-6+deb12u2, 3.11.2-6+deb12u3, 3.11.2-6+deb12u4+4 moreno fix listed72
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.5-2+deb13u5no fix listed51
OSV records
DEBIAN-CVE-2026-12345

Charts affected

122 by stars
ChartLatestAffected imagesRadar Score
static-siteethersphereVerified publisher0.73.11 of 2See more

static-site ethersphere 0.73.1

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
library/node:latestfa271c47a5d8
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

6,440
ferriscompanyferriscompany0.1.01 of 1See more

ferriscompany ferriscompany 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

11,469
facetflanksourceVerified publisher0.1.731 of 1See more

facet flanksource 0.1.73

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

23,036
gotenbergfmjstudios0.2.21 of 1See more

gotenberg fmjstudios 0.2.2

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.7.0437b9cd3c351
python3.11@3.11.2-6
no fix listed

Open the chart page →

10,094
fr24feederfnzv0.1.21 of 1See more

fr24feeder fnzv 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest3e0fbd0274eb
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

2,025
forgejoforgejo-captnbp-helm1.2.61 of 2See more

forgejo forgejo-captnbp-helm 1.2.6

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

2,045
frinx-machinefrinx-helm-charts11.0.01 of 26See more

frinx-machine frinx-helm-charts 11.0.0

1 of the 26 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
frinx/resource-manager:6.1.09cd0147a09bd
python3.11@3.11.2-6
no fix listed

Open the chart page →

44,552
resource-managerfrinx-helm-charts2.3.11 of 4See more

resource-manager frinx-helm-charts 2.3.1

1 of the 4 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
frinx/resource-manager:6.1.09cd0147a09bd
python3.11@3.11.2-6
no fix listed

Open the chart page →

9,840
genieacsgenieacsVerified publisher0.5.21 of 2See more

genieacs genieacs 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
drumsergio/genieacs:1.2.16.6ffbf8bd1340d
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

3,740
chiefonboardinghelmforgeVerified publisher1.1.151 of 3See more

chiefonboarding helmforge 1.1.15

1 of the 3 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

8,083
dawarichhelmforgeVerified publisher1.0.21 of 4See more

dawarich helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
freikin/dawarich:1.15.2e58334ca5697
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

11,187
hermes-agenthelmforgeVerified publisher1.0.11 of 1See more

hermes-agent helmforge 1.0.1

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
nousresearch/hermes-agent:v2026.9.24fca358f12efd
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

6,076
nextcloudhelmforgeVerified publisher2.0.01 of 3See more

nextcloud helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
library/nextcloud:35.0.1-apache276547e033df
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

6,392
paperlesshpVerified publisher0.1.21 of 5See more

paperless hp 0.1.2

1 of the 5 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
python3.13@3.13.5-2+deb13u2
no fix listed

Open the chart page →

29,775
ibexaibexaVerified publisher3.11.11 of 10See more

ibexa ibexa 3.11.1

1 of the 10 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
boky/postfix:4.4.0f3f247fd4252
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

6,399
intelowlintelowl-helm6.6.1-01-06-20261 of 5See more

intelowl intelowl-helm 6.6.1-01-06-2026

1 of the 5 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
intelowlproject/intelowl:v6.6.10b22e547ea6b
python3.11@3.11.2-6
no fix listed

Open the chart page →

19,668
inventreeinventreeOfficialVerified publisher0.4.301 of 2See more

inventree inventree 0.4.30

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
inventree/inventree:1.5.6b61e6a7534bf
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

5,613
tekton-git-listeneritsmethemojoVerified publisher0.1.11 of 1See more

tekton-git-listener itsmethemojo 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
library/buildpack-deps:scmd4850751e438
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

1,838
thehiveittrident-oss0.1.01 of 6See more

thehive ittrident-oss 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
library/cassandra:4.03a4876cc7f18
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

6,112
jupyterhub-chartk8s-jupyterhub0.1.01 of 1See more

jupyterhub-chart k8s-jupyterhub 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
truebyteinnovationllp/jupyterhub-k8s:5.5.06bf978b96279
python3.13@3.13.5-2+deb13u2
no fix listed

Open the chart page →

1,656
music-assistantkarljorgensen0.1.31 of 1See more

music-assistant karljorgensen 0.1.3

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

7,774
cdashkitwareVerified publisher0.20.01 of 3See more

cdash kitware 0.20.0

1 of the 3 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
kitware/cdash:v5.4.0da5abe941506
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

12,207
finops-database-handlerkrateo0.5.41 of 1See more

finops-database-handler krateo 0.5.4

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
python3.11@3.11.2-6
no fix listed

Open the chart page →

13,275
finops-webservice-api-mockkrateo0.1.01 of 1See more

finops-webservice-api-mock krateo 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
python3.11@3.11.2-6
no fix listed

Open the chart page →

13,504
oasgen-providerkrateo0.11.11 of 1See more

oasgen-provider krateo 0.11.1

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
ghcr.io/krateoplatformops/oasgen-provider:0.10.0656ec60c6407
python3.13@3.13.5-2
no fix listed

Open the chart page →

4,961
uptime-kumalbenicio-communityVerified publisher0.1.11 of 1See more

uptime-kuma lbenicio-community 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

36,169
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

40,743
uptime-kumaloeken-at-homeVerified publisher2.3.21 of 1See more

uptime-kuma loeken-at-home 2.3.2

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.3.29aeb4e51d038
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

36,169
apica-ascentlogiqai2.0.41 of 19See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
logiqai/flash:v3.10.265b996bc7bdc
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

17,394
mcp-homeassistantmcp-helmVerified publisher0.2.41 of 1See more

mcp-homeassistant mcp-helm 0.2.4

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
voska/hass-mcp:latest7142a431e2c5
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

11,314
mcp-kubernetesmcp-helmVerified publisher0.2.71 of 1See more

mcp-kubernetes mcp-helm 0.2.7

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
mcp/kubernetes:latest5ffbf7f0a8aa
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

6,120
mcpomcp-helmVerified publisher0.2.81 of 1See more

mcpo mcp-helm 0.2.8

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

4,927
tinymediamanagermedia-servarrVerified publisher1.6.41 of 2See more

tinymediamanager media-servarr 1.6.4

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.36f332431a2ae
python3.13@3.13.5-2
no fix listed

Open the chart page →

9,148
mediawikimediawiki0.4.11 of 1See more

mediawiki mediawiki 0.4.1

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
library/mediawiki:1.43.08b19e819f2e1
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

9,428
MINTmint8.0.21 of 15See more

MINT mint 8.0.2

1 of the 15 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
mintproject/model-catalog-fastapi:7dd88dc5bf1fe6a6d4703ea0a077afee45cb256102260d20a21f
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

118,714
uptime-kumancsaVerified publisher1.7.31 of 1See more

uptime-kuma ncsa 1.7.3

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.5c74379ac4509
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

32,727
registration-ms-front-helm-chartnotesprojectchart0.1.01 of 1See more

registration-ms-front-helm-chart notesprojectchart 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
vlebediantsev/registration-ms-front-app-host:latest54f69d116c50
python3.11@3.11.2-6
no fix listed

Open the chart page →

16,017
radiusp2p-avs0.1.01 of 1See more

radius p2p-avs 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
theradius/loggia:0.463ba348546ec
python3.11@3.11.2-6
no fix listed

Open the chart page →

13,076
ungatep2p-avs0.1.02 of 3See more

ungate p2p-avs 0.1.0

2 of the 3 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
xom4ekp2p/infini-route-attestators-public-mainnet-attester:latestd0e0aa238b02
python3.11@3.11.2-6+deb12u2
no fix listed
xom4ekp2p/infini-route-attestators-public-mainnet-avs-webapi:latest2745b5fd8785
python3.11@3.11.2-6+deb12u2
no fix listed

Open the chart page →

29,297
pod-birdspod-birds0.1.01 of 1See more

pod-birds pod-birds 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
teknas09/bird-pod:latest12a1fa85c4aa
python3.11@3.11.2-6
no fix listed

Open the chart page →

13,675
pyredispyredis-helm0.1.01 of 2See more

pyredis pyredis-helm 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
avinash263/pyredis263:latestaa2b8727f1a6
python3.11@3.11.2-6
no fix listed

Open the chart page →

15,111
wyoming-openwakewordqaoruVerified publisher0.1.01 of 1See more

wyoming-openwakeword qaoru 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
rhasspy/wyoming-openwakeword:2.1.052cb1168731a
python3.11@3.11.2-6+deb12u6
no fix listed

Open the chart page →

3,018
rada-platformrada-platform0.1.01 of 7See more

rada-platform rada-platform 0.1.0

1 of the 7 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
apache/airflow:2.10.2-python3.9ce90bdc3d2af
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

22,275
rawfile-localpvrawfile0.15.31 of 6See more

rawfile-localpv rawfile 0.15.3

1 of the 6 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
openebs/rawfile-localpv:v0.15.396fd7987ea79
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

3,056
esphomeretsamedocVerified publisher2026.2.51 of 1See more

esphome retsamedoc 2026.2.5

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
esphome/esphome:2024.3.09ab8cc88b28c
python3.11@3.11.2-6
no fix listed

Open the chart page →

7,779
uptime-kumarubxkubeVerified publisher1.2.11 of 1See more

uptime-kuma rubxkube 1.2.1

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.4.091e963bfda56
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

32,941
runwhen-localrunwhen-contribVerified publisher0.7.01 of 3See more

runwhen-local runwhen-contrib 0.7.0

1 of the 3 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
ghcr.io/runwhen-contrib/runwhen-local:0.12.32c1ec86675d4
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

3,580
transmissionryuunosukeds31.7.01 of 2See more

transmission ryuunosukeds3 1.7.0

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
library/python:3.9da5aee29682d
python3.13@3.13.5-2
no fix listed

Open the chart page →

10,492
safe-stacksafe-global0.1.01 of 9See more

safe-stack safe-global 0.1.0

1 of the 9 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
python3.11@3.11.2-6
no fix listed

Open the chart page →

20,302
safe-transaction-servicesafe-global0.1.01 of 6See more

safe-transaction-service safe-global 0.1.0

1 of the 6 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
gjeanmart/safe-ganache-node:latest926264c8f2d1
python3.11@3.11.2-6
no fix listed

Open the chart page →

16,987

Container images carrying it

123 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
ghcr.io/flanksource/facet:0.1.73a0323f4283e5
python3.11@3.11.2-6+deb12u8
no fix listed
1
ghcr.io/getsentry/snuba:26.7.210f8d164109b
python3.13@3.13.5-2+deb13u4
no fix listed
1
ghcr.io/htunn/ansible-inspec:0.2.12cd25a5cc3f1b
python3.13@3.13.5-2
no fix listed
1
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
python3.11@3.11.2-6+deb12u7
no fix listed
1
ghcr.io/krateoplatformops/finops-database-handler:0.5.32550427988e3
python3.11@3.11.2-6
no fix listed
1
ghcr.io/krateoplatformops/finops-webservice-api-mock:0.1.00877e9452d14
python3.11@3.11.2-6
no fix listed
1
ghcr.io/krateoplatformops/oasgen-provider:0.10.0656ec60c6407
python3.13@3.13.5-2
no fix listed
1
ghcr.io/libreconnect/ferriscompany:0.1.0-rc6ed86db9f0efe
python3.11@3.11.2-6+deb12u3
no fix listed
1
ghcr.io/lloesche/valheim-server:latestc885aa902faf
python3.13@3.13.5-2+deb13u5
no fix listed
1
ghcr.io/music-assistant/server:2.10.3885872224fa5
python3.13@3.13.5-2+deb13u4
no fix listed
1
ghcr.io/music-assistant/server:2.8.7eef3ee7810d0
python3.11@3.11.2-6+deb12u6
no fix listed
1
ghcr.io/nathanvaughn/webtrees:2.2.6034151b61a80
python3.13@3.13.5-2+deb13u2
no fix listed
1
ghcr.io/open-webui/mcpo:git-39b4867f06525afac6b
python3.11@3.11.2-6+deb12u6
no fix listed
1
ghcr.io/runwhen-contrib/runwhen-local:0.12.32c1ec86675d4
python3.13@3.13.5-2+deb13u5
no fix listed
1
ghcr.io/sdr-enthusiasts/docker-flightradar24:latest3e0fbd0274eb
python3.13@3.13.5-2+deb13u5
no fix listed
1
ghcr.io/sdwbgn/unitycatalog-helm/docker/unitycatalog-ui:0.2.1-5d668c1ed07e7ca098d
python3.11@3.11.2-6+deb12u5
no fix listed
1
ghcr.io/wgbh-mla/pbcore-util:pr-66e04659a3baa
python3.11@3.11.2-6+deb12u6
no fix listed
1
ghcr.io/wittdennis/homeassistant-otbr:4.2.5282f840612d9
python3.13@3.13.5-2+deb13u5
no fix listed
1
ghcr.io/wizarrrr/wizarr:4.2.0-beta.3d19d886d5090
python3.11@3.11.2-6
no fix listed
1
ghcr.io/wundergraph/cosmo/otelcollector:0.18.15a6fe78d4d15
python3.11@3.11.2-6+deb12u5
no fix listed
1
public.ecr.aws/g4a0y2u8/unifie-store:staging-19925a2057fabc948
python3.11@3.11.2-6
no fix listed
1
quay.io/argoprojlabs/gitops-promoter:v0.42.0105b74aaf5e9
python3.13@3.13.5-2+deb13u4
no fix listed
1
registry.k8s.io/sig-storage/nfsplugin:v4.11.0ce5b5ccd5eb0
python3.11@3.11.2-6+deb12u5
no fix listed
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.