StackRadar

CVE-2026-13573

Medium

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
187
of 17,781 indexed, latest versions
Container images
77
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 187 of 17,781 indexed charts deploy, on 77 images.

Affected packageAffected versionsFixed inImages
llvm-toolchain-19deb1:19.1.1-1ubuntu1~24.04.2, 1:19.1.4-1~deb12u1, 1:19.1.7-3+b1, 1:19.1.7-3~deb12u1no fix listed71
llvm-toolchain-21deb1:21.1.8-6ubuntu1no fix listed4
llvm-toolchain-18deb1:18.1.3-1ubuntu1no fix listed3
OSV records
DEBIAN-CVE-2026-13573UBUNTU-CVE-2026-13573

Charts affected

187 by stars
ChartLatestAffected imagesRadar Score
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

11,950
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,016
vaultwardenmt1905027.3.41 of 3See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,710
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,968
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

8,928
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,891
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,875
keycloak-helm-chartnotesprojectchart0.1.01 of 2See more

keycloak-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

6,852
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,916
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,873
firecrawlobeoneVerified publisher3.0.11 of 5See more

firecrawl obeone 3.0.1

1 of the 5 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

9,995
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

17,070
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest473fdffe4e67
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

6,338
sohaopensohaVerified publisher0.1.91 of 2See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,758
svc-postgrespostgres-fiap-lanches0.1.01 of 1See more

svc-postgres postgres-fiap-lanches 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
qantas-apiqantas-helm0.1.01 of 3See more

qantas-api qantas-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

6,890
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,374
postgresscalified-postgresVerified publisher18.4.01 of 1See more

postgres scalified-postgres 18.4.0

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,661
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed

Open the chart page →

10,348
postgresself-hosters-by-nightVerified publisher0.14.31 of 1See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,374
hedgedocsi-gitops0.12.31 of 2See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:18.43a82e1f56c8f
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,638
postgresqlsignoz0.0.21 of 1See more

postgresql signoz 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
pgbouncersinextraVerified publisher0.17.01 of 1See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed

Open the chart page →

1,915
steadybit-agentsteadybit3.1.1612 of 6See more

steadybit-agent steadybit 3.1.161

2 of the 6 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,277
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,991
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,731
apptreenityVerified publisher0.1.531 of 2See more

app treenity 0.1.53

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,793
treenitytreenityVerified publisher0.1.31 of 4See more

treenity treenity 0.1.3

1 of the 4 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,341
postgresappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

postgresapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

8,262
postgresappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

postgresapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

8,262
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,911
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-13573.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,459

Container images carrying it

77 by charts deploying them

A fixed version is listed for 0 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
pgvector/pgvector:pg17cf134a767f47
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed
1
photoprism/photoprism:260728958642220223
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/argonix-io/argonix-api:1.0.068e17a8aaa40
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/kubelauncher/postgresql1a27e11e5925
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
llvm-toolchain-18@1:18.1.3-1ubuntu1
llvm-toolchain-19@1:19.1.1-1ubuntu1~24.04.2
no fix listed
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
llvm-toolchain-18@1:18.1.3-1ubuntu1
no fix listed
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
llvm-toolchain-18@1:18.1.3-1ubuntu1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.