StackRadar

CVE-2026-13573

Medium

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
187
of 17,781 indexed, latest versions
Container images
77
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 187 of 17,781 indexed charts deploy, on 77 images.

Affected packageAffected versionsFixed inImages
llvm-toolchain-19deb1:19.1.1-1ubuntu1~24.04.2, 1:19.1.4-1~deb12u1, 1:19.1.7-3+b1, 1:19.1.7-3~deb12u1no fix listed71
llvm-toolchain-21deb1:21.1.8-6ubuntu1no fix listed4
llvm-toolchain-18deb1:18.1.3-1ubuntu1no fix listed3
OSV records
DEBIAN-CVE-2026-13573UBUNTU-CVE-2026-13573

Charts affected

187 by stars
ChartLatestAffected imagesRadar Score
rag-apihajowielandVerified publisher1.0.01 of 1See more

rag-api hajowieland 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,683
hatchet-apihatchetOfficialVerified publisher0.18.01 of 4See more

hatchet-api hatchet 0.18.0

1 of the 4 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,666
hatchet-hahatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-ha hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

7,344
hatchet-stackhatchetOfficialVerified publisher0.18.01 of 8See more

hatchet-stack hatchet 0.18.0

1 of the 8 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

7,344
affinehelmforgeVerified publisher1.0.01 of 3See more

affine helmforge 1.0.0

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.6-pg16-bookwormccc6e83d6e35
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed

Open the chart page →

4,018
alfiohelmforgeVerified publisher1.2.121 of 3See more

alfio helmforge 1.2.12

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,091
automatischhelmforgeVerified publisher1.3.71 of 4See more

automatisch helmforge 1.3.7

1 of the 4 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,769
castopodhelmforgeVerified publisher1.2.71 of 3See more

castopod helmforge 1.2.7

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
castopod/castopod:1.15.54e4f0440520f
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

9,342
chiefonboardinghelmforgeVerified publisher1.1.141 of 3See more

chiefonboarding helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

10,849
ckanhelmforgeVerified publisher1.3.81 of 6See more

ckan helmforge 1.3.8

1 of the 6 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

9,920
dawarichhelmforgeVerified publisher1.0.01 of 4See more

dawarich helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
postgis/postgis:18-3.67e00e8c3539f
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,742
discount-bandithelmforgeVerified publisher2.0.81 of 3See more

discount-bandit helmforge 2.0.8

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
cybrarist/discount-bandit:v4.0.4e9e2447ac666
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

29,817
druidhelmforgeVerified publisher1.3.61 of 4See more

druid helmforge 1.3.6

1 of the 4 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

8,541
entehelmforgeVerified publisher1.0.21 of 4See more

ente helmforge 1.0.2

1 of the 4 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,201
hoppscotchhelmforgeVerified publisher1.1.111 of 2See more

hoppscotch helmforge 1.1.11

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,046
immichhelmforgeVerified publisher1.2.82 of 5See more

immich helmforge 1.2.8

2 of the 5 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
llvm-toolchain-19@1:19.1.4-1~deb12u1
no fix listed

Open the chart page →

11,042
listmonkhelmforgeVerified publisher1.1.141 of 3See more

listmonk helmforge 1.1.14

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,839
medikeephelmforgeVerified publisher2.0.01 of 3See more

medikeep helmforge 2.0.0

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

6,022
metabasehelmforgeVerified publisher1.2.281 of 3See more

metabase helmforge 1.2.28

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,793
middlewarehelmforgeVerified publisher1.2.61 of 4See more

middleware helmforge 1.2.6

1 of the 4 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

9,653
moodlehelmforgeVerified publisher1.1.01 of 2See more

moodle helmforge 1.1.0

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

6,103
netboxhelmforgeVerified publisher2.0.11 of 4See more

netbox helmforge 2.0.1

1 of the 4 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,243
opencuthelmforgeVerified publisher1.1.91 of 5See more

opencut helmforge 1.1.9

1 of the 5 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,726
reactive-resumehelmforgeVerified publisher1.0.01 of 4See more

reactive-resume helmforge 1.0.0

1 of the 4 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,025
ryothelmforgeVerified publisher1.0.01 of 2See more

ryot helmforge 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

6,012
strapihelmforgeVerified publisher2.3.141 of 3See more

strapi helmforge 2.3.14

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,061
supersethelmforgeVerified publisher1.3.61 of 5See more

superset helmforge 1.3.6

1 of the 5 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,714
twentyhelmforgeVerified publisher1.0.01 of 5See more

twenty helmforge 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,818
wallabaghelmforgeVerified publisher1.3.61 of 3See more

wallabag helmforge 1.3.6

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.6-trixie4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,762
paperlesshpVerified publisher0.1.11 of 5See more

paperless hp 0.1.1

1 of the 5 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.3467097317623a
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

26,612
metamcpicoretechVerified publisher0.3.101 of 2See more

metamcp icoretech 0.3.10

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
multicaicoretechVerified publisher0.4.421 of 5See more

multica icoretech 0.4.42

1 of the 5 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
pgvector/pgvector:pg17cf134a767f47
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed

Open the chart page →

2,722
tolgeeicoretechVerified publisher0.46.11 of 3See more

tolgee icoretech 0.46.1

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.369e8582b781c
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,744
k8s-dev-podk8s-dev-pod0.3.11 of 1See more

k8s-dev-pod k8s-dev-pod 0.3.1

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
llvm-toolchain-19@1:19.1.1-1ubuntu1~24.04.2
no fix listed

Open the chart page →

8,811
kbot-self-hostedkbot-self-hostedVerified publisher0.1.81 of 7See more

kbot-self-hosted kbot-self-hosted 0.1.8

1 of the 7 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
gotenberg/gotenberg:8.30206a6c708fc6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

32,509
kestra-starterkestraOfficialVerified publisher2.0.11 of 5See more

kestra-starter kestra 2.0.1

1 of the 5 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:17.5aadf2c0696f5
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,455
autopilotkrateo1.0.01 of 2See more

autopilot krateo 1.0.0

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
world-dbkronkltdVerified publisher0.1.01 of 1See more

world-db kronkltd 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
ghusta/postgres-world-db:latest879d0919fdcc
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,661
listmonklistmonk-chartVerified publisher2.0.11 of 2See more

listmonk listmonk-chart 2.0.1

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,067
tinymediamanagermedia-servarrVerified publisher1.6.21 of 2See more

tinymediamanager media-servarr 1.6.2

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

7,944
resource-servicemicroservices-learningVerified publisher1.5.01 of 2See more

resource-service microservices-learning 1.5.0

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,129
song-servicemicroservices-learningVerified publisher1.2.01 of 2See more

song-service microservices-learning 1.2.0

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,599
mini-blogmini-blog-helm0.1.01 of 3See more

mini-blog mini-blog-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

13,010
codimdmt1905027.2.21 of 3See more

codimd mt190502 7.2.2

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
commafeedmt1905028.2.01 of 3See more

commafeed mt190502 8.2.0

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,687
filestashmt1905024.0.01 of 1See more

filestash mt190502 4.0.0

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
machines/filestash:latest0b8fc005e52e
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,499
keycloakmt1905021.4.61 of 3See more

keycloak mt190502 1.4.6

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,901
memosmt1905027.3.21 of 3See more

memos mt190502 7.3.2

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,443
minifluxmt1905021.1.61 of 3See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,669
open-webuimt1905022.3.101 of 3See more

open-webui mt190502 2.3.10

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626

Container images carrying it

77 by charts deploying them

A fixed version is listed for 0 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
pgvector/pgvector:pg17cf134a767f47
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed
1
photoprism/photoprism:260728958642220223
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/kubelauncher/postgresql1a27e11e5925
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
llvm-toolchain-18@1:18.1.3-1ubuntu1
llvm-toolchain-19@1:19.1.1-1ubuntu1~24.04.2
no fix listed
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
llvm-toolchain-18@1:18.1.3-1ubuntu1
no fix listed
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
llvm-toolchain-18@1:18.1.3-1ubuntu1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.