CVE-2026-13573
MediumAdvisory
Published 29 Jun 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 4.8
- base score, highest
- EPSS
- 0.002
- 7th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 187
- of 17,781 indexed, latest versions
- Container images
- 77
- deployed by those charts
- Fix available
- None
- affected packages
The matching OSV records carry no description.
Carried by container images the latest versions of 187 of 17,781 indexed charts deploy, on 77 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| llvm-toolchain-19deb | 1:19.1.1-1ubuntu1~24.04.2, 1:19.1.4-1~deb12u1, 1:19.1.7-3+b1, 1:19.1.7-3~deb12u1 | no fix listed | 71 |
| llvm-toolchain-21deb | 1:21.1.8-6ubuntu1 | no fix listed | 4 |
| llvm-toolchain-18deb | 1:18.1.3-1ubuntu1 | no fix listed | 3 |
- OSV records
- DEBIAN-CVE-2026-13573UBUNTU-CVE-2026-13573
Charts affected
187 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| artifact-hubartifact-hubVerified publisher | 1.23.0 | 1 of 7See more | 10,755 |
| zabbixzabbix-communityVerified publisher | 7.1.0 | 1 of 5See more | 13,664 |
| keycloakcloudpirates-keycloakVerified publisher | 0.21.37 | 2 of 3See more | 4,382 |
| postgrescloudpirates-postgresVerified publisher | 0.20.5 | 1 of 1See more | 1,626 |
| zammadzammadOfficialVerified publisher | 18.0.5 | 1 of 5See more | 6,887 |
| penpotpenpotOfficialVerified publisher | 1.9.0 | 1 of 4See more | 4,314 |
| postgresgroundhog2k | 1.6.8 | 1 of 1See more | 1,626 |
| concourseconcourseVerified publisher | 20.3.0 | 1 of 2See more | 2,022 |
| openprojectopenproject-helm-chartsOfficialVerified publisher | 13.11.0 | 1 of 5See more | 19,926 |
| zabbixcetic | 3.1.3 | 1 of 5See more | 33,725 |
| gotenbergmaikumoriVerified publisher | 1.25.0 | 1 of 1See more | 9,683 |
| oneuptimeoneuptimeOfficialVerified publisher | 13.0.4 | 1 of 7See more | 11,192 |
| postgresqlkubelauncherVerified publisher | 0.4.3 | 1 of 1See more | 1,115 |
| hedgedocadfinisVerified publisher | 0.6.1 | 1 of 2See more | 2,938 |
| lakekeeperlakekeeperVerified publisher | 0.12.0 | 1 of 2See more | 1,918 |
| docmosthelmforgeVerified publisher | 1.2.11 | 1 of 4See more | 5,564 |
| photoprismandrenarchyVerified publisher | 8.15.0 | 1 of 1See more | 8,825 |
| postgresqlhelmforgeVerified publisher | 2.0.5 | 1 of 1See more | 1,626 |
| umamihelmforgeVerified publisher | 2.3.3 | 1 of 3See more | 2,027 |
| hertzbeathertzbeatOfficialVerified publisher | 1.8.1 | 1 of 4See more | 14,000 |
| thingsboardcetic | 0.1.2 | 1 of 2See more | 5,235 |
| clowardenclowarden | 0.2.3 | 1 of 4See more | 5,606 |
| crossviewcrossviewOfficialVerified publisher | 4.6.0 | 1 of 2See more | 1,791 |
| gitvotegitvoteVerified publisher | 1.5.0 | 1 of 6See more | 5,613 |
| netbirdhelmforgeVerified publisher | 1.0.10 | 1 of 4See more | 2,962 |
| coreinstill-aiOfficialVerified publisher | 0.1.75 | 1 of 15See more | 30,816 |
| observalobservalVerified publisher | 1.13.1 | 1 of 8See more | 5,828 |
| lldapself-hosters-by-nightVerified publisher | 0.5.2 | 1 of 2See more | 3,400 |
| pretixtechwolf12Verified publisher | 2026.7.0 | 1 of 3See more | 9,770 |
| crossplaneupbound-stable | 2.4.0-up.1 | 1 of 5See more | 1,626 |
| wgerwgerOfficialVerified publisher | 1.0.0 | 1 of 8See more | 8,491 |
| windmillwindmill | 4.0.262 | 1 of 3See more | 1,626 |
| paperless-ngxadnoctemVerified publisher | 0.4.2 | 1 of 5See more | 19,691 |
| hermes-agentankra-chartsVerified publisher | 0.3.1 | 1 of 1See more | 5,880 |
| aramid-indexerbiatec-repoVerified publisher | 3.9.0 | 1 of 5See more | 13,357 |
| self-hostbitwarden | 2.4.0 | 1 of 11See more | 5,190 |
| pgcagriekinVerified publisher | 2.1.0 | 1 of 2See more | 2,280 |
| pgvectorcagriekinVerified publisher | 2.1.0 | 2 of 3See more | 4,004 |
| cert-vaultcert-vaultOfficialVerified publisher | 2.12.0 | 1 of 7See more | 15,863 |
| mealiedeimosfr-charts | 1.0.15 | 1 of 1See more | 4,028 |
| kubedashdevopstalesOfficialVerified publisher | 4.0.0 | 1 of 8See more | 9,205 |
| dominodominoVerified publisher | 0.1.11 | 1 of 3See more | 8,823 |
| rstudiodsri-helm-charts | 0.1.28 | 1 of 1See more | 5,670 |
| ferriskeyferriskey | 0.7.2 | 1 of 3See more | 3,262 |
| valheimgeek-cookbookVerified publisher | 4.4.2 | 1 of 1See more | 4,879 |
| guacamolehelmforgeVerified publisher | 1.5.2 | 2 of 5See more | 8,716 |
| backendikusi-bk-chart | 1.0.3 | 1 of 3See more | 5,940 |
| odooimioVerified publisher | 3.0.2 | 1 of 3See more | 3,068 |
| immichimmich-helm | 0.3.0 | 2 of 4See more | 15,712 |
| kikplatekikplateVerified publisher | 0.22.0 | 1 of 3See more | 2,770 |
Container images carrying it
77 by charts deploying them
A fixed version is listed for 0 of the 3 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| library/ | 4ef4dbc939d6 | llvm-toolchain-19 | no fix listed | 68 |
| library/ | f1c3376c26f2 | llvm-toolchain-19 | no fix listed | 12 |
| library/ | 67f41722b7a8 | llvm-toolchain-19 | no fix listed | 10 |
| library/ | 156f0b253fd6 | llvm-toolchain-19 | no fix listed | 7 |
| library/ | 9b1d34adbce1 | llvm-toolchain-19 | no fix listed | 6 |
| library/ | a02db8cac496 | llvm-toolchain-19 | no fix listed | 6 |
| artifacthub/ | 4fd34fa635cc | llvm-toolchain-19 | no fix listed | 4 |
| library/ | 4689940c6838 | llvm-toolchain-19 | no fix listed | 4 |
| cagriekin/ | 99e17aa165df | llvm-toolchain-19 | no fix listed | 2 |
| gotenberg/ | 87c16b9f3642 | llvm-toolchain-19 | no fix listed | 2 |
| gotenberg/ | f29984bd1e22 | llvm-toolchain-19 | no fix listed | 2 |
| library/ | 051f7b7b3abd | llvm-toolchain-19 | no fix listed | 2 |
| library/ | 1090bc3a8ccf | llvm-toolchain-19 | no fix listed | 2 |
| library/ | 6f3e42ad37de | llvm-toolchain-19 | no fix listed | 2 |
| opencsghq/ | b98600564e07 | llvm-toolchain-19 | no fix listed | 2 |
| pgvector/ | 9d2e61c7352b | llvm-toolchain-19 | no fix listed | 2 |
| pgvector/ | ccc6e83d6e35 | llvm-toolchain-19 | no fix listed | 2 |
| ghcr.io/ | 82d0b161161d | llvm-toolchain-19 | no fix listed | 2 |
| ghcr.io/ | bcf63357191b | llvm-toolchain-19 | no fix listed | 2 |
| castopod/ | 4e4f0440520f | llvm-toolchain-19 | no fix listed | 1 |
| chocobozzz/ | 052712130691 | llvm-toolchain-19 | no fix listed | 1 |
| cybrarist/ | e9e2447ac666 | llvm-toolchain-19 | no fix listed | 1 |
| escaping/ | 87fa79255962 | llvm-toolchain-19 | no fix listed | 1 |
| ghusta/ | 879d0919fdcc | llvm-toolchain-19 | no fix listed | 1 |
| gotenberg/ | 206a6c708fc6 | llvm-toolchain-19 | no fix listed | 1 |
| gotenberg/ | 67097317623a | llvm-toolchain-19 | no fix listed | 1 |
| gotenberg/ | a40f92d7419a | llvm-toolchain-19 | no fix listed | 1 |
| instill/ | c4a393e601ed | llvm-toolchain-19 | no fix listed | 1 |
| library/ | 073e7c8b84e2 | llvm-toolchain-19 | no fix listed | 1 |
| library/ | 304ab8135187 | llvm-toolchain-19 | no fix listed | 1 |
| library/ | 3a82e1f56c8f | llvm-toolchain-19 | no fix listed | 1 |
| library/ | 468e1f126ca5 | llvm-toolchain-19 | no fix listed | 1 |
| library/ | 69e8582b781c | llvm-toolchain-19 | no fix listed | 1 |
| library/ | 6eb0add3b77c | llvm-toolchain-19 | no fix listed | 1 |
| library/ | 8ff36f3c6637 | llvm-toolchain-19 | no fix listed | 1 |
| library/ | a9abf4275f9e | llvm-toolchain-19 | no fix listed | 1 |
| library/ | aadf2c0696f5 | llvm-toolchain-19 | no fix listed | 1 |
| library/ | e8db9bd3e9e1 | llvm-toolchain-19 | no fix listed | 1 |
| library/ | eba8ddbdd837 | llvm-toolchain-19 | no fix listed | 1 |
| library/ | ebba4f4de37f | llvm-toolchain-19 | no fix listed | 1 |
| library/ | fbcea1bd13b6 | llvm-toolchain-19 | no fix listed | 1 |
| machines/ | 0b8fc005e52e | llvm-toolchain-19 | no fix listed | 1 |
| mathesar/ | 091757cb01fe | llvm-toolchain-19 | no fix listed | 1 |
| nousresearch/ | e0df6adebddf | llvm-toolchain-19 | no fix listed | 1 |
| onyxdotapp/ | 473fdffe4e67 | llvm-toolchain-19 | no fix listed | 1 |
| opencsghq/ | af7191a9cf8a | llvm-toolchain-19 | no fix listed | 1 |
| opencsghq/ | 47e22aa71870 | llvm-toolchain-19 | no fix listed | 1 |
| opencsghq/ | b4e849fcf94a | llvm-toolchain-19 | no fix listed | 1 |
| opencsghq/ | 42578c9d3ebd | llvm-toolchain-19 | no fix listed | 1 |
| penpotapp/ | 72a8061e8806 | llvm-toolchain-21 | no fix listed | 1 |