StackRadar

CVE-2026-13757

Medium

Advisory

Published 29 Jun 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.2
base score, highest
EPSS
0.001
4th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2,258
of 17,803 indexed, latest versions
Container images
2,270
deployed by those charts
Fix available
2 of 2
affected packages

Red Hat Security Advisory: p11-kit security update

Carried by container images the latest versions of 2,258 of 17,803 indexed charts deploy, on 2,270 images.

Affected packageAffected versionsFixed inImages
p11-kitdeb0.23.9-2, 0.23.9-2ubuntu0.1, 0.23.20-1build1, 0.23.20-1ubuntu0.1+8 more0.23.9-2ubuntu0.1+esm1, 0.23.20-1ubuntu0.1+esm1, 0.24.0-6ubuntu0.1, 0.25.3-4ubuntu2.2+1 more2,106
p11-kitrpm0.24.1-2.el9, 0.25.0-1.azl3, 0.25.3-2.el9, 0.25.3-3.el9_5+2 more0:0.26.4-1.el9_8, 0:0.26.4-1.el10_2, 0.26.5-1164
OSV records
DEBIAN-CVE-2026-13757RHSA-2026:49667RHSA-2026:49668RLSA-2026:49667RLSA-2026:49668UBUNTU-CVE-2026-13757AZL-91743ECHO-e3a5-7704-649f
Also known as
USN-8687-1

Charts affected

2,258 by stars
ChartLatestAffected imagesRadar Score
xlinexline0.0.11 of 1See more

xline xline 0.0.1

1 of the 1 container images this version deploys carry CVE-2026-13757.

Container imageDigestPackageFixed in
ghcr.io/liangyuanpeng/xline:latest3d2eceb44a3b
p11-kit@0.25.3-4ubuntu2
0.25.3-4ubuntu2.2

Open the chart page →

2,156
nginx-chartxxoznge-nginx0.1.01 of 1See more

nginx-chart xxoznge-nginx 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13757.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
p11-kit@0.25.5-3
no fix listed

Open the chart page →

1,879
my-nginx-appyasser-nginx-app0.1.01 of 1See more

my-nginx-app yasser-nginx-app 0.1.0

1 of the 1 container images this version deploys carry CVE-2026-13757.

Container imageDigestPackageFixed in
library/nginx:stabled5792f71a949
p11-kit@0.25.5-3
no fix listed

Open the chart page →

1,879
api-snapyoukadevVerified publisher0.1.11 of 1See more

api-snap youkadev 0.1.1

1 of the 1 container images this version deploys carry CVE-2026-13757.

Container imageDigestPackageFixed in
youkadev/api-snap:0.1.14db0f9428e67
p11-kit@0.24.1-2
no fix listed

Open the chart page →

2,710
changedetection-iozekker6Verified publisher1.101.01 of 1See more

changedetection-io zekker6 1.101.0

1 of the 1 container images this version deploys carry CVE-2026-13757.

Container imageDigestPackageFixed in
ghcr.io/dgtlmoon/changedetection.io:0.60.6eb4a9f718801
p11-kit@0.24.1-2
no fix listed

Open the chart page →

2,649
NEW_APPzekker6Verified publisher0.0.01 of 1See more

NEW_APP zekker6 0.0.0

1 of the 1 container images this version deploys carry CVE-2026-13757.

Container imageDigestPackageFixed in
library/nginx:latest05b8cb60c354
p11-kit@0.25.5-3
no fix listed

Open the chart page →

1,879
clickhousezloi-space1.2.02 of 3See more

clickhouse zloi-space 1.2.0

2 of the 3 container images this version deploys carry CVE-2026-13757.

Container imageDigestPackageFixed in
yandex/clickhouse-client:21.3863f94a0f607
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
yandex/clickhouse-server:21.3.204eccfffb01d7
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1

Open the chart page →

9,280
zoo-project-druzoo-projectOfficialVerified publisher0.10.41 of 6See more

zoo-project-dru zoo-project 0.10.4

1 of the 6 container images this version deploys carry CVE-2026-13757.

Container imageDigestPackageFixed in
zooproject/zoo-project:dru-19f3c4eed7c9ec9d1f0375bbe59f9d204a42bd3a9a507cb7e2dd
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1

Open the chart page →

7,949

Container images carrying it

2,270 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
penpotapp/mcp:2.17.284f3f07ead11
p11-kit@0.26.2-2
no fix listed
1
percona/percona-postgresql-operator:2.8.06cce2698d3f5
p11-kit@0.25.3-3.el9_5
0:0.26.4-1.el9_8
1
percona/percona-server-mongodb-operator:1.20.1d09453ce7886
p11-kit@0.25.3-3.el9_5
0:0.26.4-1.el9_8
1
percona/percona-server-mongodb-operator:1.23.0feaff989e253
p11-kit@0.26.2-1.el10
0:0.26.4-1.el10_2
1
percona/percona-server-mysql-operator:1.2.028bfc38c1d4b
p11-kit@0.26.2-1.el9
0:0.26.4-1.el9_8
1
percona/percona-xtradb-cluster-operator:1.14.03232ae01d0ff
p11-kit@0.24.1-2.el9
0:0.26.4-1.el9_8
1
percona/percona-xtradb-cluster-operator:1.20.0ac4d0995c71e
p11-kit@0.26.2-1.el9
0:0.26.4-1.el9_8
1
pgvector/pgvector:pg17cf134a767f47
p11-kit@0.24.1-2
no fix listed
1
phan2410/dummy-service:0.0.89c6ed6de26ca
p11-kit@0.24.1-2
no fix listed
1
phan2410/falcon-asgi-server:0.1.04a86d138832d
p11-kit@0.24.1-2
no fix listed
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
photoprism/photoprism:220629-jammy2954334adbda
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
photoprism/photoprism:260601650c6ad5a651
p11-kit@0.26.2-2
no fix listed
1
photoprism/photoprism:260728958642220223
p11-kit@0.26.2-2
no fix listed
1
photoprism/photoprism:251130db16ee6b1ba3
p11-kit@0.25.5-3ubuntu1
no fix listed
1
photoprism/photoprism:240711-cefc6fd632ca74
p11-kit@0.25.3-4ubuntu2
0.25.3-4ubuntu2.2
1
phpmyadmin/phpmyadmin:5.2.342a200db07b4
p11-kit@0.25.5-3
no fix listed
1
pk910/powfaucet:v2-stable3dcae6a62896
p11-kit@0.24.1-2
no fix listed
1
plantuml/plantuml-server:jetty-v1.2026.85f6f99ec2fc1
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
platform9community/admin-server:latestde3fa9b70df1
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
platform9community/api-gateway:latest40a4970de568
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
platform9community/customers-service:latest2089811e5cc6
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
platform9community/vets-service:latestd1165c94dfb3
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
platform9community/visits-service:latest8d11b50368c6
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
plexinc/pms-docker:1.25.4.5487-648a8f9f946ea59b96f2b
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
plexinc/pms-docker:1.43.3.10896-cb3ebc72d83a425ae9e13
p11-kit@0.25.3-4ubuntu2.1
0.25.3-4ubuntu2.2
1
pockost/matomo:5.13.07f5d293cbe4e
p11-kit@0.25.5-3
no fix listed
1
pococze/python-hello-elos:2.0.07a1aab425e51
p11-kit@0.24.1-2
no fix listed
1
polyaxon/polyaxon-api:2.17.0163707082036
p11-kit@0.25.5-3
no fix listed
1
polyaxon/polyaxon-streams:2.17.0a5fec70e757b
p11-kit@0.25.5-3
no fix listed
1
postgis/postgis:18-3.67e00e8c3539f
p11-kit@0.25.5-3
no fix listed
1
powerdns/pdns-recursor-54:5.4.533aadc74a8d6
p11-kit@0.25.5-3
no fix listed
1
pozetroninc/keydb:v6.0.1653ae64f29da8
p11-kit@0.23.9-2
0.23.9-2ubuntu0.1+esm1
1
praravind1801/helmimages:3.0.0f29d637b9ce1
p11-kit@0.24.1-2
no fix listed
1
prefecthq/prefect:2.20.4-python3.101df4b5b6238a
p11-kit@0.24.1-2
no fix listed
1
prefecthq/prefect:3.8.6-python3.11f518ebb9c353
p11-kit@0.25.5-3
no fix listed
1
pretix/standalone:2026.7.05df3b7aa852e
p11-kit@0.25.5-3
no fix listed
1
probely/farcaster-onprem-agent:v3741b34e8166f
p11-kit@0.24.1-2
no fix listed
1
prodrigestivill/postgres-backup-local:latestf70742ebe42b
p11-kit@0.25.5-3
no fix listed
1
project2team4/react:latest3ff031a08887
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
prom/cloudwatch-exporter:v0.16.071c2e988af06
p11-kit@0.25.3-4ubuntu2
0.25.3-4ubuntu2.2
1
promzeus/redis-sentinel-gateway:v182f6d56e280b
p11-kit@0.24.1-2
no fix listed
1
prowlercloud/prowler-api:5.31.14f252d579be2
p11-kit@0.24.1-2
no fix listed
1
proxysql/proxysql:3.0.8947a7abad45b
p11-kit@0.25.5-3
no fix listed
1
proxysql/proxysql:2.7.3a4d6c35c2949
p11-kit@0.24.1-2
no fix listed
1
pschichtel/mindustry-server:v145.1b543e9c2d371
p11-kit@0.24.0-6build1
0.24.0-6ubuntu0.1
1
psorab/elibrary:latest53b68896c4ce
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
ptthanh1511/freeradius-server:3.0.26-netdebug5741cbde85ab
p11-kit@0.23.20-1ubuntu0.1
0.23.20-1ubuntu0.1+esm1
1
puppet/puppet-agent:7.14.00b6fd9a6b7da
p11-kit@0.23.9-2ubuntu0.1
0.23.9-2ubuntu0.1+esm1
1
qdrant/qdrant:v1.7.45f2a56b95266
p11-kit@0.24.1-2
no fix listed
1

syft 1.42.1 · advisories as of 18 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.