StackRadar

CVE-2026-13574

Medium

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
189
of 17,787 indexed, latest versions
Container images
78
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 189 of 17,787 indexed charts deploy, on 78 images.

Affected packageAffected versionsFixed inImages
llvm-toolchain-19deb1:19.1.1-1ubuntu1~24.04.2, 1:19.1.4-1~deb12u1, 1:19.1.7-3+b1, 1:19.1.7-3~deb12u1no fix listed72
llvm-toolchain-21deb1:21.1.8-6ubuntu1no fix listed4
llvm-toolchain-18deb1:18.1.3-1ubuntu1no fix listed3
OSV records
DEBIAN-CVE-2026-13574UBUNTU-CVE-2026-13574

Charts affected

189 by stars
ChartLatestAffected imagesRadar Score
minifluxmt1905021.1.61 of 3See more

miniflux mt190502 1.1.6

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,681
open-webuimt1905022.3.101 of 3See more

open-webui mt190502 2.3.10

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,638
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

11,860
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,030
vaultwardenmt1905027.3.41 of 3See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,701
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,980
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

8,946
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,804
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,887
keycloak-helm-chartnotesprojectchart0.1.01 of 2See more

keycloak-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,638
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

6,864
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,928
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,885
firecrawlobeoneVerified publisher3.0.31 of 5See more

firecrawl obeone 3.0.3

1 of the 5 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

9,895
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

17,085
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,638
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest473fdffe4e67
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

6,252
sohaopensohaVerified publisher0.1.91 of 2See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,770
svc-postgrespostgres-fiap-lanches0.1.01 of 1See more

svc-postgres postgres-fiap-lanches 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,638
qantas-apiqantas-helm0.1.01 of 3See more

qantas-api qantas-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,638
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

6,940
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,345
postgresscalified-postgresVerified publisher18.4.01 of 1See more

postgres scalified-postgres 18.4.0

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,673
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed

Open the chart page →

10,429
postgresself-hosters-by-nightVerified publisher0.14.31 of 1See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,386
hedgedocsi-gitops0.12.31 of 2See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:18.43a82e1f56c8f
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,610
postgresqlsignoz0.0.21 of 1See more

postgresql signoz 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,638
pgbouncersinextraVerified publisher0.17.01 of 1See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed

Open the chart page →

1,815
steadybit-agentsteadybit3.1.1622 of 6See more

steadybit-agent steadybit 3.1.162

2 of the 6 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,120
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,003
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,782
apptreenityVerified publisher0.1.531 of 2See more

app treenity 0.1.53

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,806
treenitytreenityVerified publisher0.1.31 of 4See more

treenity treenity 0.1.3

1 of the 4 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,354
postgresappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

postgresapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,638
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

8,287
postgresappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

postgresapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,638
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

8,287
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,906
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,472

Container images carrying it

78 by charts deploying them

A fixed version is listed for 0 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
penpotapp/exporter:2.17.272a8061e8806
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed
1
pgvector/pgvector:pg17cf134a767f47
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
photoprism/photoprism:260601650c6ad5a651
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed
1
photoprism/photoprism:260728958642220223
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
thingsboard/tb-postgres:latest2d17e4e36edc
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
tinymediamanager/tinymediamanager:5.3.22b34dc85099e
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
wallarm/aih-scanner:2.7.11f1cb26db1f5b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/appscode/gotenberg:8.25f9104080d9a7
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/argonix-io/argonix-api:1.0.0cb5f24732197
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/danny-avila/librechat-rag-api-dev-lite:latestf9f34c8ed688
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/flanksource/postgres:17.6-497383cebcf66281fc1
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
ghcr.io/immich-app/immich-server:v3.1.0b434cb9287ee
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/immich-app/immich-server:v2.3.1f8d06a32b1b2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/kubelauncher/postgresql1a27e11e5925
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed
1
ghcr.io/lloesche/valheim-server:latest20fde516ce31
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/maastrichtu-ids/rstudio:latest981aa4c109e1
llvm-toolchain-18@1:18.1.3-1ubuntu1
llvm-toolchain-19@1:19.1.1-1ubuntu1~24.04.2
no fix listed
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.24.00b08ac3a9f0a
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/mealie-recipes/mealie:v3.25.16066c29eca95
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
ghcr.io/sergelogvinov/postgresql:16.15fafb72e98f22
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
mcr.microsoft.com/mssql/server:latest4bab24f36c1e
llvm-toolchain-18@1:18.1.3-1ubuntu1
no fix listed
1
mcr.microsoft.com/mssql/server:2025-CU5-ubuntu-24.04cee0f4db03b5
llvm-toolchain-18@1:18.1.3-1ubuntu1
no fix listed
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.