StackRadar

CVE-2026-12345

Medium

Advisory

Published 29 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
5.9
base score, highest
EPSS
—
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
122
of 17,957 indexed, latest versions
Container images
123
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 122 of 17,957 indexed charts deploy, on 123 images.

Affected packageAffected versionsFixed inImages
python3.11deb3.11.2-6, 3.11.2-6+deb12u2, 3.11.2-6+deb12u3, 3.11.2-6+deb12u4+4 moreno fix listed72
python3.13deb3.13.5-2, 3.13.5-2+deb13u2, 3.13.5-2+deb13u4, 3.13.5-2+deb13u5no fix listed51
OSV records
DEBIAN-CVE-2026-12345

Charts affected

122 by stars
ChartLatestAffected imagesRadar Score
speedtestsantisbon0.1.01 of 3See more

speedtest santisbon 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
santisbon/speedtest:latest8ee3a1697227
python3.11@3.11.2-6
no fix listed

Open the chart page →

13,193
nextcloudsb-helm-charts0.4.01 of 2See more

nextcloud sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
library/nextcloud:31.0.10-apacheb7faa1653c39
python3.13@3.13.5-2
no fix listed

Open the chart page →

10,476
wordpresssb-helm-charts0.4.01 of 2See more

wordpress sb-helm-charts 0.4.0

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
library/wordpress:6.4.3-apache8ae66efb09a2
python3.11@3.11.2-6
no fix listed

Open the chart page →

14,338
otterwikischmitzis0.1.01 of 1See more

otterwiki schmitzis 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
redimp/otterwiki:2d87a26b98d1a
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

3,204
uptime-kumaschoenwald1.0.101 of 1See more

uptime-kuma schoenwald 1.0.10

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.5.4917318f9d7be
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

32,738
backendsignalen4.25.01 of 4See more

backend signalen 4.25.0

1 of the 4 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
signalen/backend:2.50.1826bb090bc4e4
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

11,542
deconzsmall-hack0.1.01 of 1See more

deconz small-hack 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
deconzcommunity/deconz:2.26.123c86008d73f
python3.11@3.11.2-6
no fix listed

Open the chart page →

13,807
spacecapybara-chartspacecapy1.0.491 of 2See more

spacecapybara-chart spacecapy 1.0.49

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
sashafefler/spacecapybara_app:latestf96d7804c0ca
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

12,651
servicexssl-hep1.8.610 of 16See more

servicex ssl-hep 1.8.6

10 of the 16 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
library/python:3.104379c343a93c
python3.13@3.13.5-2+deb13u5
no fix listed
sslhep/servicex_app:v1.8.6c935e123030d
python3.13@3.13.5-2+deb13u5
no fix listed
sslhep/servicex_code_gen_atlas_xaod:v1.8.67827e689caa5
python3.13@3.13.5-2+deb13u5
no fix listed
sslhep/servicex_code_gen_func_adl_uproot:v1.8.62d6843be2d8d
python3.13@3.13.5-2+deb13u5
no fix listed
sslhep/servicex_code_gen_python:v1.8.696805be717ff
python3.13@3.13.5-2+deb13u5
no fix listed
sslhep/servicex_code_gen_raw_uproot:v1.8.61494a81a474b
python3.13@3.13.5-2+deb13u5
no fix listed
sslhep/servicex_code_gen_topcp:v1.8.6f7faf8c6c3e4
python3.13@3.13.5-2+deb13u5
no fix listed
sslhep/servicex-did-finder-atlasopenmagic:v1.8.6bd738c952e72
python3.13@3.13.5-2+deb13u5
no fix listed
sslhep/servicex-did-finder-cernopendata:v1.8.623a80e40ab18
python3.13@3.13.5-2+deb13u5
no fix listed
sslhep/servicex-did-finder-xrootd:v1.8.69a9fb17458f1
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

57,809
stakefishstakefish0.1.01 of 8See more

stakefish stakefish 0.1.0

1 of the 8 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
thongngo3301/stakefish:latesta341af5976e3
python3.11@3.11.2-6
no fix listed

Open the chart page →

20,965
ssv-nodestakewise2.2.01 of 2See more

ssv-node stakewise 2.2.0

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
python3.11@3.11.2-6+deb12u5
no fix listed

Open the chart page →

7,309
surogate-hubsurogate-hubVerified publisher2.1.51 of 1See more

surogate-hub surogate-hub 2.1.5

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
ghcr.io/invergent-ai/surogate-hub:latest6d4106724d56
python3.11@3.11.2-6+deb12u7
no fix listed

Open the chart page →

3,734
cronjobt3n0.1.01 of 1See more

cronjob t3n 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
library/python:3.8d41127070014
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

11,943
supabaseteochenglim0.1.22 of 13See more

supabase teochenglim 0.1.2

2 of the 13 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
supabase/realtime:latest7a6d995635f7
python3.13@3.13.5-2+deb13u4
no fix listed
supabase/studio:latestfdb56cfa1705
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

9,633
codetranstest-opea1.0.01 of 5See more

codetrans test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
opea/codetrans-ui:1.03ef121f34610
python3.11@3.11.2-6
no fix listed

Open the chart page →

30,231
docsumtest-opea1.0.01 of 5See more

docsum test-opea 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
opea/docsum-ui:1.07f854e9bffaf
python3.11@3.11.2-6
no fix listed

Open the chart page →

30,712
speecht5test-opea1.0.01 of 1See more

speecht5 test-opea 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
opea/speecht5:1.0249afad3d268
python3.11@3.11.2-6+deb12u3
no fix listed

Open the chart page →

10,277
vaultwardenvaultwarden-helmVerified publisher1.2.71 of 2See more

vaultwarden vaultwarden-helm 1.2.7

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
python3.13@3.13.5-2+deb13u4
no fix listed

Open the chart page →

2,045
aih-scannerwallarmVerified publisher2.9.01 of 2See more

aih-scanner wallarm 2.9.0

1 of the 2 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.9.0b39795d50e83
python3.13@3.13.5-2+deb13u5
no fix listed

Open the chart page →

3,118
juicefs-csi-driverwener0.33.01 of 5See more

juicefs-csi-driver wener 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

9,591
juicefs-csi-driverwenerme0.33.01 of 5See more

juicefs-csi-driver wenerme 0.33.0

1 of the 5 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

9,591
sockpuppetbrowserzekker6Verified publisher0.1.01 of 1See more

sockpuppetbrowser zekker6 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-12345.

Container imageDigestPackageFixed in
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
python3.11@3.11.2-6+deb12u8
no fix listed

Open the chart page →

4,916

Container images carrying it

123 by charts deploying them

A fixed version is listed for 0 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
library/node:lts64af3819f927
python3.11@3.11.2-6+deb12u8
no fix listed
3
freikin/dawarich:1.15.2e58334ca5697
python3.13@3.13.5-2+deb13u5
no fix listed
2
frinx/resource-manager:6.1.09cd0147a09bd
python3.11@3.11.2-6
no fix listed
2
gjeanmart/safe-ganache-node:latest926264c8f2d1
python3.11@3.11.2-6
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
python3.13@3.13.5-2+deb13u4
no fix listed
2
juicedata/juicefs-csi-driver:v0.33.0f918e7331c05
python3.11@3.11.2-6+deb12u8
no fix listed
2
louislam/uptime-kuma:2.5.4917318f9d7be
python3.11@3.11.2-6+deb12u7
no fix listed
2
louislam/uptime-kuma:2.3.29aeb4e51d038
python3.11@3.11.2-6+deb12u6
no fix listed
2
louislam/uptime-kuma:2.5.5c74379ac4509
python3.11@3.11.2-6+deb12u7
no fix listed
2
nousresearch/hermes-agent:v2026.9.24fca358f12efd
python3.13@3.13.5-2+deb13u4
no fix listed
2
ghcr.io/cloudnative-pg/postgresql:18.4-system-trixie42708a75345b
python3.13@3.13.5-2+deb13u4
no fix listed
2
aapjeisbaas/wp-frankenphp:v0.2.26b261abc7fb0
python3.13@3.13.5-2+deb13u2
no fix listed
1
agentarea/agentarea-mcp-runner:latestbe4a11f799b2
python3.11@3.11.2-6+deb12u8
no fix listed
1
apache/airflow:2.10.2-python3.9ce90bdc3d2af
python3.11@3.11.2-6+deb12u3
no fix listed
1
assistiot/smart-orchestrator_mcs:latest7d6a0d534c7f
python3.11@3.11.2-6
no fix listed
1
assistiot/smart-orchestrator_scheduler:latest38b003e55ff3
python3.11@3.11.2-6
no fix listed
1
assistiot/smart-orchestrator_scheduler_mc:latestb1dbe4d62a03
python3.11@3.11.2-6
no fix listed
1
avinash263/pyredis263:latestaa2b8727f1a6
python3.11@3.11.2-6
no fix listed
1
bloxstaking/ssv-node:v2.2.0bf6d7d2fdc93
python3.11@3.11.2-6+deb12u5
no fix listed
1
boky/postfix:4.4.0f3f247fd4252
python3.11@3.11.2-6+deb12u5
no fix listed
1
cccs/assemblyline-rust:4.7.4.stable21871423aa4655
python3.11@3.11.2-6+deb12u8
no fix listed
1
chiefonboarding/chiefonboarding:v2.5.0d0964135ea82
python3.13@3.13.5-2+deb13u4
no fix listed
1
codedesignplus/ms-emails-grpc:latest4fc116f5e879
python3.11@3.11.2-6+deb12u8
no fix listed
1
codedesignplus/ms-emails-rest:latest7629e746a5b3
python3.11@3.11.2-6+deb12u8
no fix listed
1
cznic/knot-resolver:v6.4.24ad2e1894b78
python3.13@3.13.5-2+deb13u5
no fix listed
1
deconzcommunity/deconz:2.26.123c86008d73f
python3.11@3.11.2-6
no fix listed
1
deimosfr/dnsmasq-k8s:1.4.1284c4040fc6d
python3.13@3.13.5-2
no fix listed
1
dgtlmoon/sockpuppetbrowser:latest1d8f72d2ce20
python3.11@3.11.2-6+deb12u8
no fix listed
1
dragonflyoss/client:v1.5.59fe2a1d6206f
python3.11@3.11.2-6+deb12u8
no fix listed
1
drumsergio/genieacs:1.2.16.6ffbf8bd1340d
python3.11@3.11.2-6+deb12u7
no fix listed
1
esphome/esphome:2024.3.09ab8cc88b28c
python3.11@3.11.2-6
no fix listed
1
esphome/esphome:2024.12.2b2c6322700ac
python3.11@3.11.2-6+deb12u4
no fix listed
1
firefart/requesttracker:5.0.40d6249906d8c
python3.11@3.11.2-6
no fix listed
1
galaxy/pulsar-kubernetes:0.15.7e50a890e24c9
python3.11@3.11.2-6+deb12u5
no fix listed
1
glpi/glpi:latest7b50172cdb7d
python3.13@3.13.5-2+deb13u5
no fix listed
1
google/cloud-sdk:slimcfca8415b7ce
python3.13@3.13.5-2+deb13u5
no fix listed
1
gotenberg/gotenberg:8.7.0437b9cd3c351
python3.11@3.11.2-6
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
python3.13@3.13.5-2+deb13u2
no fix listed
1
gotenberg/gotenberg:8.0.1cf0b9a7ca3cf
python3.11@3.11.2-6
no fix listed
1
intelowlproject/intelowl:v6.6.10b22e547ea6b
python3.11@3.11.2-6
no fix listed
1
inventree/inventree:1.5.6b61e6a7534bf
python3.13@3.13.5-2+deb13u5
no fix listed
1
kitware/cdash:v5.4.0da5abe941506
python3.13@3.13.5-2+deb13u5
no fix listed
1
library/buildpack-deps:scmd4850751e438
python3.13@3.13.5-2+deb13u5
no fix listed
1
library/cassandra:4.03a4876cc7f18
python3.11@3.11.2-6+deb12u8
no fix listed
1
library/golang:latest3680233e3204
python3.13@3.13.5-2+deb13u5
no fix listed
1
library/mediawiki:1.43.08b19e819f2e1
python3.11@3.11.2-6+deb12u5
no fix listed
1
library/nextcloud:35.0.1-apache276547e033df
python3.13@3.13.5-2+deb13u5
no fix listed
1
library/nextcloud:35.0.0:35.0.0-apache3e9f6eaa5dc8
python3.13@3.13.5-2+deb13u5
no fix listed
1
library/nextcloud:34.0.4-apachea5ace30c695a
python3.13@3.13.5-2+deb13u5
no fix listed
1
library/nextcloud:31.0.10-apacheb7faa1653c39
python3.13@3.13.5-2
no fix listed
1

syft 1.42.1 · advisories as of 30 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.