StackRadar

CVE-2026-13018

Medium

Advisory

Published 28 Sept 2026In the index since 30 Sept 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.002
9th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
7
of 17,985 indexed, latest versions
Container images
6
deployed by those charts
Fix available
1 of 1
affected package

The matching OSV records carry no description.

Carried by container images the latest versions of 7 of 17,985 indexed charts deploy, on 6 images.

Affected packageAffected versionsFixed inImages
chromiumdeb137.0.7151.119-1~deb12u1, 139.0.7258.138-1~deb12u1, 141.0.7390.107-1~deb12u1, 142.0.7444.175-1~deb12u1+2 more147.0.7727.55-1~deb12u1, 147.0.7727.55-1~deb13u16
OSV records
DEBIAN-CVE-2026-13018

Charts affected

7 by stars
ChartLatestAffected imagesRadar Score
flaresolverrlib42Verified publisher2.0.01 of 1See more

flaresolverr lib42 2.0.0

1 of the 1 container images this version deploys carry CVE-2026-13018.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
chromium@139.0.7258.138-1~deb12u1
147.0.7727.55-1~deb12u1

Open the chart page →

38,290
uptime-kumasb-helm-charts0.4.01 of 1See more

uptime-kuma sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-13018.

Container imageDigestPackageFixed in
louislam/uptime-kuma:2.0.24c364ef96aad
chromium@141.0.7390.107-1~deb12u1
147.0.7727.55-1~deb12u1

Open the chart page →

42,418
platform-apiappscodeVerified publisher2026.9.111 of 3See more

platform-api appscode 2026.9.11

1 of the 3 container images this version deploys carry CVE-2026-13018.

Container imageDigestPackageFixed in
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
chromium@142.0.7444.175-1~deb13u1
147.0.7727.55-1~deb13u1

Open the chart page →

41,302
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-13018.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
chromium@146.0.7680.177-1~deb13u1
147.0.7727.55-1~deb13u1

Open the chart page →

36,205
flaresolverrkubernetes-homelab-helm-chartsVerified publisher0.1.21 of 1See more

flaresolverr kubernetes-homelab-helm-charts 0.1.2

1 of the 1 container images this version deploys carry CVE-2026-13018.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
chromium@142.0.7444.175-1~deb12u1
147.0.7727.55-1~deb12u1

Open the chart page →

36,807
linkdinglinkding0.2.31 of 1See more

linkding linkding 0.2.3

1 of the 1 container images this version deploys carry CVE-2026-13018.

Container imageDigestPackageFixed in
sissbruecker/linkding:1.41.0-plusa222fb777e1f
chromium@137.0.7151.119-1~deb12u1
147.0.7727.55-1~deb12u1

Open the chart page →

41,355
flaresolverrsudo-kraken-flaresolverrVerified publisher2.1.41 of 1See more

flaresolverr sudo-kraken-flaresolverr 2.1.4

1 of the 1 container images this version deploys carry CVE-2026-13018.

Container imageDigestPackageFixed in
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
chromium@142.0.7444.175-1~deb12u1
147.0.7727.55-1~deb12u1

Open the chart page →

36,807

Container images carrying it

6 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
ghcr.io/flaresolverr/flaresolverr:v3.4.67962759d99d7
chromium@142.0.7444.175-1~deb12u1
147.0.7727.55-1~deb12u1
2
gotenberg/gotenberg:8.30206a6c708fc6
chromium@146.0.7680.177-1~deb13u1
147.0.7727.55-1~deb13u1
1
louislam/uptime-kuma:2.0.24c364ef96aad
chromium@141.0.7390.107-1~deb12u1
147.0.7727.55-1~deb12u1
1
sissbruecker/linkding:1.41.0-plusa222fb777e1f
chromium@137.0.7151.119-1~deb12u1
147.0.7727.55-1~deb12u1
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
chromium@142.0.7444.175-1~deb13u1
147.0.7727.55-1~deb13u1
1
ghcr.io/flaresolverr/flaresolverr:v3.4.0ab535d1fef5d
chromium@139.0.7258.138-1~deb12u1
147.0.7727.55-1~deb12u1
1

syft 1.42.1 · advisories as of 3 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.