StackRadar

CVE-2026-13574

Medium

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
4.8
base score, highest
EPSS
0.002
7th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
187
of 17,781 indexed, latest versions
Container images
77
deployed by those charts
Fix available
None
affected packages

The matching OSV records carry no description.

Carried by container images the latest versions of 187 of 17,781 indexed charts deploy, on 77 images.

Affected packageAffected versionsFixed inImages
llvm-toolchain-19deb1:19.1.1-1ubuntu1~24.04.2, 1:19.1.4-1~deb12u1, 1:19.1.7-3+b1, 1:19.1.7-3~deb12u1no fix listed71
llvm-toolchain-21deb1:21.1.8-6ubuntu1no fix listed4
llvm-toolchain-18deb1:18.1.3-1ubuntu1no fix listed3
OSV records
DEBIAN-CVE-2026-13574UBUNTU-CVE-2026-13574

Charts affected

187 by stars
ChartLatestAffected imagesRadar Score
paperless-ngxmt1905027.6.141 of 4See more

paperless-ngx mt190502 7.6.14

1 of the 4 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

11,950
umamimt1905028.1.41 of 3See more

umami mt190502 8.1.4

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,016
vaultwardenmt1905027.3.41 of 3See more

vaultwarden mt190502 7.3.4

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,710
vikunjamt1905027.1.21 of 3See more

vikunja mt190502 7.1.2

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,968
devops-demomungari-development-charts1.0.41 of 4See more

devops-demo mungari-development-charts 1.0.4

1 of the 4 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

8,928
core-keeper-dedicatednerkho-helm-charts0.1.11 of 1See more

core-keeper-dedicated nerkho-helm-charts 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
escaping/core-keeper-dedicated:latest87fa79255962
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,891
file-system-ms-helm-chartnotesprojectchart0.1.01 of 2See more

file-system-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,875
keycloak-helm-chartnotesprojectchart0.1.01 of 2See more

keycloak-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
logic-ms-helm-chartnotesprojectchart0.1.01 of 2See more

logic-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

6,852
registration-ms-helm-chartnotesprojectchart0.1.01 of 2See more

registration-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,916
user-data-ms-helm-chartnotesprojectchart0.1.01 of 2See more

user-data-ms-helm-chart notesprojectchart 0.1.0

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,873
firecrawlobeoneVerified publisher3.0.11 of 5See more

firecrawl obeone 3.0.1

1 of the 5 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
ghcr.io/firecrawl/nuq-postgres:latestf9388bd25ae2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

9,995
lensoci-ai-incubations0.1.141 of 16See more

lens oci-ai-incubations 0.1.14

1 of the 16 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:134689940c6838
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

17,070
ontoserverontoserverVerified publisher0.5.21 of 2See more

ontoserver ontoserver 0.5.2

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:16f1c3376c26f2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
onyx-stackonyx0.3.11 of 12See more

onyx-stack onyx 0.3.1

1 of the 12 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
onyxdotapp/onyx-backend:latest473fdffe4e67
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

6,338
sohaopensohaVerified publisher0.1.91 of 2See more

soha opensoha 0.1.9

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,758
svc-postgrespostgres-fiap-lanches0.1.01 of 1See more

svc-postgres postgres-fiap-lanches 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
qantas-apiqantas-helm0.1.01 of 3See more

qantas-api qantas-helm 0.1.0

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
routehub-serverroutehub-helm1.0.11 of 3See more

routehub-server routehub-helm 1.0.1

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

6,890
postgresqlsb-helm-charts0.4.01 of 1See more

postgresql sb-helm-charts 0.4.0

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:16.11468e1f126ca5
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,374
postgresscalified-postgresVerified publisher18.4.01 of 1See more

postgres scalified-postgres 18.4.0

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:18.4a02db8cac496
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,661
photoprismschoolguys-helmcharts0.3.81 of 1See more

photoprism schoolguys-helmcharts 0.3.8

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
photoprism/photoprism:260601650c6ad5a651
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed

Open the chart page →

10,348
postgresself-hosters-by-nightVerified publisher0.14.31 of 1See more

postgres self-hosters-by-night 0.14.3

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:18.11090bc3a8ccf
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,374
hedgedocsi-gitops0.12.31 of 2See more

hedgedoc si-gitops 0.12.3

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:18.43a82e1f56c8f
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,638
postgresqlsignoz0.0.21 of 1See more

postgresql signoz 0.0.2

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:159b1d34adbce1
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
pgbouncersinextraVerified publisher0.17.01 of 1See more

pgbouncer sinextra 0.17.0

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
ghcr.io/sergelogvinov/pgbouncer:16.1518f1121ba0a4
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed

Open the chart page →

1,915
steadybit-agentsteadybit3.1.1612 of 6See more

steadybit-agent steadybit 3.1.161

2 of the 6 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
ghcr.io/steadybit/extension-container:v1.8.0dd31d4713ef6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
ghcr.io/steadybit/extension-host:v1.8.0a198ac7bc8c1
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,277
orchestratorsubstraVerified publisher8.8.01 of 3See more

orchestrator substra 8.8.0

1 of the 3 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

2,991
substra-backendsubstraVerified publisher26.15.31 of 7See more

substra-backend substra 26.15.3

1 of the 7 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

4,731
apptreenityVerified publisher0.1.531 of 2See more

app treenity 0.1.53

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,793
treenitytreenityVerified publisher0.1.31 of 4See more

treenity treenity 0.1.3

1 of the 4 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:14156f0b253fd6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,341
postgresappvoting-app-helm-charts-repoVerified publisher1.0.01 of 1See more

postgresapp voting-app-helm-charts-repo 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
voteappvoting-app-helm-charts-repoVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

8,262
postgresappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 1See more

postgresapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 1 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

1,626
voteappvoting-app-helm-charts-repo-cloudVerified publisher1.0.01 of 5See more

voteapp voting-app-helm-charts-repo-cloud 1.0.0

1 of the 5 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

8,262
aih-scannerwallarmVerified publisher2.7.111 of 2See more

aih-scanner wallarm 2.7.11

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
wallarm/aih-scanner:2.7.11f1cb26db1f5b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

3,911
wikiwikijs3.0.01 of 2See more

wiki wikijs 3.0.0

1 of the 2 container images this version deploys carry CVE-2026-13574.

Container imageDigestPackageFixed in
library/postgres:184ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed

Open the chart page →

5,459

Container images carrying it

77 by charts deploying them

A fixed version is listed for 0 of the 3 affected packages.

Container imageDigestPackageFixed inUsed by
library/postgres:18:18.6:18.6-trixie:latest4ef4dbc939d6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
68
library/postgres:16f1c3376c26f2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
12
library/postgres:1767f41722b7a8
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
10
library/postgres:14156f0b253fd6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
7
library/postgres:159b1d34adbce1
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
6
library/postgres:18.4a02db8cac496
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
6
artifacthub/postgres:latest4fd34fa635cc
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
4
library/postgres:134689940c6838
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
4
cagriekin/pg-ha:2.0.1-pg1899e17aa165df
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
2
gotenberg/gotenberg:8.36.087c16b9f3642
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
2
gotenberg/gotenberg:8:8.37.0f29984bd1e22
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
2
library/postgres:17-bookworm051f7b7b3abd
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
2
library/postgres:18.11090bc3a8ccf
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
2
library/postgres:18.06f3e42ad37de
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
2
opencsghq/postgres:15.19b98600564e07
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
2
pgvector/pgvector:0.8.5-pg18-trixie9d2e61c7352b
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
2
pgvector/pgvector:0.8.6-pg16-bookworm:pg16ccc6e83d6e35
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
llvm-toolchain-19@1:19.1.1-1ubuntu1~24.04.2
no fix listed
2
ghcr.io/immich-app/postgres:14-vectorchord0.4.3-pgvectors0.2.0bcf63357191b
llvm-toolchain-19@1:19.1.4-1~deb12u1
no fix listed
2
castopod/castopod:1.15.54e4f0440520f
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
chocobozzz/peertube:v8.1.5052712130691
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
cybrarist/discount-bandit:v4.0.4e9e2447ac666
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
escaping/core-keeper-dedicated:latest87fa79255962
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
ghusta/postgres-world-db:latest879d0919fdcc
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
gotenberg/gotenberg:8.30206a6c708fc6
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
gotenberg/gotenberg:8.3467097317623a
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
gotenberg/gotenberg:8-chromiuma40f92d7419a
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
instill/artifact-backend:b28766ac4a393e601ed
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
library/postgres:18.0073e7c8b84e2
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
library/postgres:17.4304ab8135187
llvm-toolchain-19@1:19.1.4-1~deb12u1
no fix listed
1
library/postgres:18.43a82e1f56c8f
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
library/postgres:16.11468e1f126ca5
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
library/postgres:18.369e8582b781c
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
library/postgres:15.186eb0add3b77c
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
library/postgres:18.48ff36f3c6637
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
library/postgres:18.3a9abf4275f9e
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
library/postgres:17.5aadf2c0696f5
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
library/postgres:15.18-bookworme8db9bd3e9e1
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
library/postgres:14.22eba8ddbdd837
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
library/postgres:17.10ebba4f4de37f
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
library/postgres:17.5-bookwormfbcea1bd13b6
llvm-toolchain-19@1:19.1.4-1~deb12u1
no fix listed
1
machines/filestash:latest0b8fc005e52e
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
mathesar/mathesar:0.12.0091757cb01fe
llvm-toolchain-19@1:19.1.7-3~deb12u1
no fix listed
1
nousresearch/hermes-agent:v2026.8.27e0df6adebddf
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
onyxdotapp/onyx-backend:latest473fdffe4e67
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
opencsghq/csgbot:v0.6.7-eeaf7191a9cf8a
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
opencsghq/label-studio:v2.5.047e22aa71870
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
opencsghq/label-studio:v2.4.0b4e849fcf94a
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
opencsghq/postgres:15.1842578c9d3ebd
llvm-toolchain-19@1:19.1.7-3+b1
no fix listed
1
penpotapp/exporter:2.17.272a8061e8806
llvm-toolchain-21@1:21.1.8-6ubuntu1
no fix listed
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.