CVE-2026-13204

High

Advisory

Published 22 Jul 2026In the index since 5 Sept 2026

Severity: High; worst across findings
CVSS: 7.5; base score, highest
EPSS: 0.005; 43rd percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 151; of 17,781 indexed, latest versions
Container images: 125; deployed by those charts
Fix available: 2 of 4; affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 151 of 17,781 indexed charts deploy, on 125 images.

Affected package	Affected versions	Fixed in	Images
bind9deb	1:9.10.3.dfsg.P4-8ubuntu1.6, 1:9.10.3.dfsg.P4-8ubuntu1.9, 1:9.10.3.dfsg.P4-8ubuntu1.10, 1:9.10.3.dfsg.P4-8ubuntu1.11+46 more	1:9.18.39-0ubuntu0.22.04.6, 1:9.18.39-0ubuntu0.24.04.7, 1:9.18.49-1~deb12u2, 1:9.20.24-1ubuntu0.3+1 more	111
bindapk	9.20.13-r0, 9.20.16-r0, 9.20.18-r0, 9.20.20-r0+3 more	9.20.26-r0	13
bind9-libsdeb	1:9.11.19+dfsg-2.1ubuntu3	no fix listed	1
isc-dhcpdeb	4.3.5-3ubuntu7.1	no fix listed	1

OSV records: ALPINE-CVE-2026-13204 DEBIAN-CVE-2026-13204 UBUNTU-CVE-2026-13204
Also known as: USN-8696-1

Charts affected

151 by stars

Chart

Latest

Affected images

Radar Score

longhornwenerme

1.2.3

1 of 2 See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry CVE-2026-13204.

Container image	Digest	Package	Fixed in
longhornio/longhorn-manager :v1.2.3	dca34321452c	bind9@1:9.16.1-0ubuntu2.9	no fix listed

Open the chart page →

15,230

Container images carrying it

125 by charts deploying them

A fixed version is listed for 2 of the 4 affected packages.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/k8s-at-home/apache-musicindex :v1.4.1-2	c9bd82dc5fda	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-at-home/bazarr :v1.0.3	fdb5501cdfb9	bind9@1:9.16.1-0ubuntu2.9	no fix listed	1
ghcr.io/k8s-at-home/jackett :v0.20.1316	3a4715b46aa2	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-at-home/lidarr :v1.0.0.2255	54ebc1f90963	bind9@1:9.16.1-0ubuntu2.8	no fix listed	1
ghcr.io/k8s-at-home/nzbget :v21.1	e5571acd10ce	bind9@1:9.18.1-1ubuntu1.1	1:9.18.39-0ubuntu0.22.04.6	1
ghcr.io/k8s-at-home/plex :v1.28.0.5999-97678ded3	ef756c7d784b	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-at-home/prowlarr :v0.3.0.1710	c863aa9875fa	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-at-home/qbittorrent :v4.4.2	61deadd1ec78	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-at-home/radarr :v4.1.0.6175	4273dfaf0295	bind9@1:9.18.1-1ubuntu1.1	1:9.18.39-0ubuntu0.22.04.6	1
ghcr.io/k8s-at-home/sonarr :v3.0.8.1507	0eb230e2381a	bind9@1:9.18.1-1ubuntu1.1	1:9.18.39-0ubuntu0.22.04.6	1
ghcr.io/k8s-at-home/tautulli :v2.7.7	4ea617c30397	bind9@1:9.16.1-0ubuntu2.8	no fix listed	1
ghcr.io/k8s-at-home/transmission :v3.00	6011182e3946	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-at-home/xteve :v2.2.0.200	292b3614670f	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/k8s-home-lab/wireguard :v1.0.20210914	779858b5e11d	bind9@1:9.16.1-0ubuntu2.15	no fix listed	1
ghcr.io/kore3lab/kore-board.terminal :v0.5.5	f52e66eff50b	bind9@1:9.11.3+dfsg-1ubuntu1.18	no fix listed	1
ghcr.io/kubeflow/spark-operator/controller :2.2.1	865ff4da5686	bind9@1:9.18.30-0ubuntu0.20.04.2	no fix listed	1
ghcr.io/luzilla/unbound :v0.12.0	4fd8da9dc13c	bind@9.20.22-r0	9.20.26-r0	1
ghcr.io/oznu/homebridge :2022-07-08	ff2af53897e7	bind9@1:9.16.1-0ubuntu2.10	no fix listed	1
ghcr.io/pixelfederation/unbound :1.24.2_0	fce820a03964	bind@9.20.20-r0	9.20.26-r0	1
ghcr.io/qubiva/qubiva :v0.3.2	cdf1e3329bfe	bind9@1:9.20.23-1~deb13u1	1:9.20.26-1~deb13u1	1
ghcr.io/samr037/node-debug-dashboard :0.3.0	c79b2e64a211	bind9@1:9.18.49-1~deb12u1	1:9.18.49-1~deb12u2	1
ghcr.io/voxpupuli/container-puppetdb :7.18.0-v1.5.0	a56dfe91f5b1	bind9@1:9.18.18-0ubuntu0.22.04.2	1:9.18.39-0ubuntu0.22.04.6	1
quay.io/jupyterhub/k8s-hub :4.3.5	113e372cf71b	bind9@1:9.18.47-1~deb12u1	1:9.18.49-1~deb12u2	1
quay.io/jupyterhub/k8s-hub :4.3.4	92f883d09270	bind9@1:9.18.47-1~deb12u1	1:9.18.49-1~deb12u2	1
quay.io/opsmxpublic/spin-sample-pipeline :v1.0.1	c6a934439421	bind9@1:9.10.3.dfsg.P4-8ubuntu1.18	no fix listed	1